last executing test programs: 6m3.596634911s ago: executing program 0 (id=1251): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x0, 0x0}, 0x8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x208000, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a100000400100000080"], 0x4c}, 0x1, 0x0, 0x0, 0x30000805}, 0x0) unshare(0x42000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, 0x0, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e24, 0x10001, @rand_addr=' \x01\x00', 0x80000001}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400010026bd7000fddbdf250a4022c8", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r10 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$F2FS_IOC_DEFRAGMENT(r10, 0xb703, 0x0) 6m1.331963831s ago: executing program 4 (id=1252): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x20, 0x0, 0xe, 0x4, @empty, @mcast1, 0x10, 0xa0, 0x2, 0x2}}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2400c0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a00), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, r3, 0xfffffffffffffe14, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000c40000000000000011010000186b00001000000000000000010001003516f8ffffffffff8520000001000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000015535ae4b70300004000000085000000060000009500000000000000183500000200000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x10001, 0x0, 0x0, 0x41100, 0x1, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000000240)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xf991, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400)=[{0x3, 0x1, 0xa, 0x7}], 0x10, 0xfffffeff}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2000000000000000, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000aa104000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000efffffff0000000000000000000000000000002dce00"], 0x50) 6m0.706776003s ago: executing program 4 (id=1253): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_io_uring_setup(0x911, &(0x7f0000000180)={0x0, 0x6c6b, 0x1, 0x2, 0xf6, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006100)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1071) 6m0.320458724s ago: executing program 0 (id=1255): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) semget$private(0x0, 0x4000000009, 0x0) clock_adjtime(0x3, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x201, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x9, 0x5, 0x0, 0xe43c, 0xd, 0x3, 0x800000000}) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 5m59.966902804s ago: executing program 3 (id=1259): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x42, 0x0, @fd_index=0x9, 0x2, 0x0, 0x7fd, 0x0, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 5m59.040436652s ago: executing program 0 (id=1261): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x401c000}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000400)={0x3, 0x0, 0x5, 0x8}, 0x10) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000200", 0x41d) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800ed000015d500000000000008000188c1180018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207d9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000000000000b70000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="14fd06cfb0c1"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5m59.011765333s ago: executing program 3 (id=1262): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x80, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x7, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xfffffffb, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffdf, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 5m57.786033109s ago: executing program 4 (id=1265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="060000000de68724dea183a6b29f0dca5a37e7127e49d0c9c800276568060636e9e6ab1c6111a2556236924ab338f8752bdab97677b46b195adbef999dd629a433cd4521d2a3b3df77b9a56826c5c0afdbbfdaea8defa8a935ac21d19101", @ANYRES16=r2, @ANYBLOB="eb7a2bbd7000fcdbdf2521000000050020000100000009001f0070687931000000000c0005000202aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = epoll_create1(0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000480)={0x68000005}) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r8, 0x8, 0xd, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4044) ioperm(0x6, 0x1, 0x400) timer_create(0x0, &(0x7f00000009c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @remote, @val={@void}, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast, {[@timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}, 0x0) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, "bb67a153cd0e3e4a1aac449e5ad88b56923d9dfe", "b1030600000000000000000000007a7f6a40d100"}) 5m57.641835759s ago: executing program 0 (id=1267): syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) 5m57.512540682s ago: executing program 4 (id=1268): r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000007c0)=""/77, 0x24, 0x1000003, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x26, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x10) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, r6, 0x2, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x1000000, 0x0, 0x20000800}, 0x800) syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4400, 0x0) socket$unix(0x1, 0x1, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r10, 0x80487436, &(0x7f0000000040)="1d07be73f6fa17bef7bff4ed2ff35ddce40837cd59af66b88989eab03aa0473a73b634a944ac31f9bc225188f629a6e4d784cacf702f82628c") r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "4e4106", 0x8, 0x3a, 0x1, @remote, @empty, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x8001}}}}}}, 0x0) mq_open(&(0x7f0000000140)='/dev/hidraw#\x00', 0x41, 0x1e0, &(0x7f0000000440)={0xffffffffffffffff, 0x8, 0x1, 0x80}) socket$kcm(0x10, 0x2, 0x0) 5m57.329761298s ago: executing program 4 (id=1269): syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) 5m57.236517445s ago: executing program 3 (id=1270): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24008014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 5m56.100922224s ago: executing program 1 (id=1272): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) bind(r1, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x4, {0xa, 0x4e22, 0xfffffff8, @mcast1, 0x1}}}, 0x80) r5 = socket$inet6(0xa, 0x400000000001, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x4, 0x8, 0xe761, 0x3, 0x65c000000000000, 0x9}, &(0x7f00000000c0)={0x8, 0x4, 0xdc84, 0x1ff, 0x6, 0x3, 0x1000, 0x3d5}, &(0x7f0000000100)={0x80, 0x1, 0x6, 0x7fff, 0x8, 0x8, 0x8, 0x4}, &(0x7f0000000180), &(0x7f0000000240)={&(0x7f0000000200)={[0x6ec8]}, 0x8}) getpeername$unix(r1, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r0, 0x0, 0x0, 0x80800) 5m55.871672367s ago: executing program 1 (id=1273): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x42, 0x0, @fd_index=0x9, 0x2, 0x0, 0x7fd, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 5m54.850097973s ago: executing program 1 (id=1274): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0xcf4a, 0x4cc, 0x6, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x13, &(0x7f0000002240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850017002d0000009500"/152], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x600882) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000140)={0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r5, @ANYBLOB="01002cbd0800fbdbdf250179"], 0x34}}, 0x4) 5m54.114553881s ago: executing program 2 (id=1275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x328, &(0x7f0000000000)={0x0, 0x6fa9, 0x10000, 0x3}, &(0x7f0000000080), &(0x7f0000000340)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000fd3f1400e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000894d", @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f0000000180)}, 0x20) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={0x0}) write$vga_arbiter(r1, &(0x7f0000000180)=@unlock_all, 0xb) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000180), 0x0}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000077c0)=[{{&(0x7f0000000980)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1400009a4c0051cc1a4100000b0000000000000800000000"], 0x18}}], 0x1, 0x0) 5m53.764033127s ago: executing program 3 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x780, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 5m53.116144957s ago: executing program 1 (id=1277): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r0 = syz_clone(0x210300, 0x0, 0xfe09, 0x0, 0x0, &(0x7f0000001180)="8c") ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000395000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x4000, 0x0, 0x2}) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000395000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x4000, 0x0, 0x2}) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @broadcast}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (async) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x8, 0xc}, 0x58) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$unix(r5, &(0x7f0000000800), &(0x7f0000000100)=0x6e, 0x800) (async) accept4$unix(r5, &(0x7f0000000800), &(0x7f0000000100)=0x6e, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001040)=ANY=[], 0xfe33) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) 5m52.838211256s ago: executing program 2 (id=1278): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) prlimit64(r1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x2001, 0x0) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f00000002c0)) 5m52.708110016s ago: executing program 3 (id=1279): syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x60}}}}}}}}, 0x0) 5m52.03144295s ago: executing program 4 (id=1280): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}}, 0x0) r2 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x60b, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x103d, 0x8, 0x401, 0x483}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010700000000fcdbdf", @ANYRES32=r7, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) write(r8, &(0x7f0000000080)="effc976dbe09b594caf60f05e24fcfd6fb4a6a95a02d2882a75104df861249e720d122bece157adc9d4b0a8d9df71837160fb30400448a411d66beb7298778d64e3021214b213e31bfc228ef65211937c82a01e032793cf6338460bebb0f171b7264445a72190b2e814d466e4e4268b93249c3150fdd01ee4bceda7fd35e4bac78456b7a8bfd6b6bff1ee7ef469ea926ad285caee0f6edb7ca9f62582f3d5e87b793d07e0826603f62f676298f247123a30962ee", 0xb4) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000740)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m51.987852152s ago: executing program 0 (id=1281): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) mlock(&(0x7f0000143000/0x2000)=nil, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$isdn(0x22, 0x3, 0x26) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0xffffffffffffffff}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$dri(0x0, 0x1, 0x400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) socket$isdn(0x22, 0x3, 0x11) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f00000034c0)={{0x1, 0x0, 0x80, {0x2, 0x2, 0x2}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a65822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5d09cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd2f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92db1fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b91fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf3afae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b789c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152cac51a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b7fedfc583fc702a88ef70dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c386717037348de10420616f0cd22ae000000000000000015cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089d51e0f59d80070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb37021aa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb000065905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e080030243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81b1c0dc73332b7d71cb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8103e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd40406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766be1e4aad5cfce8255b78af2b9ec65bc83a9c7d12cd63b82cd2b506fd4061d1a16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e02d09c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e485542991d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b56201000000000000544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c9fc0524cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd4cfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) 5m51.869879466s ago: executing program 2 (id=1282): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x34, 0x12, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 5m51.868079218s ago: executing program 3 (id=1283): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) inotify_init() socket(0x80000000000000a, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x2b, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r7, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40084146, &(0x7f0000000040)=0x6bbf) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 5m51.152162389s ago: executing program 1 (id=1284): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000950}, 0x40) socket$phonet(0x23, 0x2, 0x1) socket(0x21, 0x80000, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) io_getevents(0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/94, 0x5e}], 0x1, 0x4, 0x8) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3}) 5m50.961523555s ago: executing program 2 (id=1285): fallocate(0xffffffffffffffff, 0x79, 0x0, 0xfffffffffffffff7) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x84) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0xe, @pix_mp={0x7, 0x0, 0x62649a9c, 0x4, 0x3, [{0xffffffff, 0x1}, {0x0, 0x3}, {0x37}, {0xc15, 0x3}, {0x2, 0x2}, {0xff, 0x7}, {0xa27, 0xff}, {0x5, 0x7}], 0x10, 0xfd, 0x8, 0x1, 0x7}}) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x20040, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x5b9a6063, 0xa, 0x4, 0x70000, 0x1000, {0x77359400}, {0x2, 0xc, 0x5a, 0x8, 0x4, 0x1, "a8414add"}, 0x7, 0x4, {}, 0xb, 0x0, 0xffffffffffffffff}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) poll(&(0x7f0000000280)=[{r1, 0x380}, {r2}, {r3}, {r0, 0x6138}, {r4, 0x1000}], 0x5, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0xa0000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@access_any}, {@msize={'msize', 0x3d, 0x200}}], [{@appraise}, {@subj_type={'subj_type', 0x3d, '\xc6-\xf0)$'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@audit}, {@dont_hash}]}}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000500)=@multiplanar_overlay={0x7, 0x8, 0x4, 0x40, 0x5, {r5, r6/1000+10000}, {0x5, 0x8, 0x7, 0x5, 0x5, 0x80, "5e369dae"}, 0x5, 0x3, {&(0x7f0000000480)=[{0x9, 0x5, {0x2}, 0xfa}, {0x8, 0x0, {0xffff}, 0x5}]}, 0x7, 0x0, r1}) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000580), &(0x7f00000005c0)=0xc) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000600)=0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x6, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000880)={r7, r8, r9, 0x8, 0x8, 0x4, 0xd17, 0x5, 0x8, 0x8, 0x1, 0x3}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x40100, 0x0) ioctl$VT_RESIZE(r10, 0x5609, &(0x7f0000000900)={0x5271, 0xf598, 0xd3}) fanotify_mark(r2, 0x2, 0x40000000, r2, &(0x7f0000000940)='./file0\x00') r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x68, r11, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) bind$802154_dgram(r2, &(0x7f0000000b00)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) writev(r3, &(0x7f0000002c40)=[{&(0x7f0000000b40)="da18c11ef4f230eaf16244a8b9181d1288a445f1c2d97f928c9a09bc4797f6119382b3c4a5c78d9cac6352656f85964e13b421265fe1dec50cf81e39f454c01a180557586ebf0303ab00edb1354fe703841df8a6e1f22da18f22fb36a4519fb179b792c5c29ed7c0f5689a40daf4a87307a2370bbbd9604c14e3e93f88a09262beb07d7cdeb4fe1a51aced8affd7fc5c4d6bb58493e307b123dafaf2", 0x9c}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="3dd5ace90a36446403681fa8fba33328a41ad1d3bd7bd499c36335b2", 0x1c}], 0x4) lseek(r0, 0x5f, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002d00)={'syztnl1\x00', &(0x7f0000002c80)={'erspan0\x00', 0x0, 0x1, 0x80, 0x8, 0x5, {{0xb, 0x4, 0x2, 0x1, 0x2c, 0x64, 0x0, 0xf, 0x4, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x17, 0x2a, [@multicast1, @rand_addr=0x64010100, @broadcast, @loopback, @empty]}]}}}}}) 5m50.713679528s ago: executing program 2 (id=1286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x109000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x490, 0x0, 0xffffffff}]}) 5m50.695503199s ago: executing program 1 (id=1287): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x10004, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x50) 5m50.650524021s ago: executing program 0 (id=1288): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x46040, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x5, 0x13, "d08568a9cc4c6ff610cf418dadb807ff863d6748416b911b756ef63adba4ee31a1329400a2e324b2fe826749b8788dd01cfbc1d48e345b960551c2c980931000", "12e7b779c9a6ea6dd8d5dc9bccf1bfeb6677e39c1188e50ae158ff2de344c4aaf5f0a207b3aa2dc8228777862f03c813bdc4f2edaa72d17f04e5305c10127f23", "d029cd6a618efe04eb1117ed9976272cddf028f82d2422ea911f5b29ee9fbe47", [0x7, 0x3]}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0xfffffffd, 0x40004, "ec2cc06b967f7c0127f3b3967512a051957c4f09560deecb", {0x80000001, 0xc}, 0xf4f1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x24040004) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES16], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) read$snapshot(r6, 0x0, 0xffffffbf) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 5m50.36418829s ago: executing program 2 (id=1289): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async, rerun: 32) socket(0x40000000015, 0x5, 0x0) (rerun: 32) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) (async) listen(r3, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090186dd6000195800103afffc000000000000000000000000000000ff02000000000000000000000000000186009078007f67d918bf110a3f000000"], 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) (async, rerun: 32) r4 = syz_create_resource$binfmt(0x0) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) (async) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000600), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002240)=""/102400, 0x19000) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 5m33.770741465s ago: executing program 32 (id=1288): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x46040, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x5, 0x13, "d08568a9cc4c6ff610cf418dadb807ff863d6748416b911b756ef63adba4ee31a1329400a2e324b2fe826749b8788dd01cfbc1d48e345b960551c2c980931000", "12e7b779c9a6ea6dd8d5dc9bccf1bfeb6677e39c1188e50ae158ff2de344c4aaf5f0a207b3aa2dc8228777862f03c813bdc4f2edaa72d17f04e5305c10127f23", "d029cd6a618efe04eb1117ed9976272cddf028f82d2422ea911f5b29ee9fbe47", [0x7, 0x3]}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0xfffffffd, 0x40004, "ec2cc06b967f7c0127f3b3967512a051957c4f09560deecb", {0x80000001, 0xc}, 0xf4f1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x24040004) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES16], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) read$snapshot(r6, 0x0, 0xffffffbf) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 5m33.558509218s ago: executing program 33 (id=1287): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x10004, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x50) 5m33.462322877s ago: executing program 34 (id=1289): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async, rerun: 32) socket(0x40000000015, 0x5, 0x0) (rerun: 32) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) (async) listen(r3, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090186dd6000195800103afffc000000000000000000000000000000ff02000000000000000000000000000186009078007f67d918bf110a3f000000"], 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) (async, rerun: 32) r4 = syz_create_resource$binfmt(0x0) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) (async) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000600), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002240)=""/102400, 0x19000) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 5m33.386682468s ago: executing program 35 (id=1283): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) inotify_init() socket(0x80000000000000a, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x2b, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r7, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40084146, &(0x7f0000000040)=0x6bbf) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 5m33.311120957s ago: executing program 36 (id=1280): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}}, 0x0) r2 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x60b, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x103d, 0x8, 0x401, 0x483}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010700000000fcdbdf", @ANYRES32=r7, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) write(r8, &(0x7f0000000080)="effc976dbe09b594caf60f05e24fcfd6fb4a6a95a02d2882a75104df861249e720d122bece157adc9d4b0a8d9df71837160fb30400448a411d66beb7298778d64e3021214b213e31bfc228ef65211937c82a01e032793cf6338460bebb0f171b7264445a72190b2e814d466e4e4268b93249c3150fdd01ee4bceda7fd35e4bac78456b7a8bfd6b6bff1ee7ef469ea926ad285caee0f6edb7ca9f62582f3d5e87b793d07e0826603f62f676298f247123a30962ee", 0xb4) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000740)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.681333434s ago: executing program 8 (id=1955): creat(&(0x7f0000000540)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r2, 0x7) listen(r1, 0x7) 16.327841669s ago: executing program 8 (id=1957): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0}, 0x0) prlimit64(r6, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = geteuid() r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x1095, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r9, r10, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={r6, r7, r10}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='afs_protocol_error\x00', r0, 0x0, 0xd}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x4, 0xfcc0, 0x41, 0x0, 0x0) 15.726371774s ago: executing program 7 (id=1959): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf"]) bind$tipc(r3, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) dup3(r7, r3, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb, 0x0, 0x7}}}}}]}}]}}, 0x0) 14.731029869s ago: executing program 8 (id=1960): socket$netlink(0x10, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000006c40)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 14.359241446s ago: executing program 5 (id=1961): syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xbc, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000140)=0x4bc, 0x4) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x6, 0x3, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b60900000000003e4c30a5107b7b9aa6d8694be1422b107d99b978000010169a87617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r2, 0x118, 0x1, 0x0, &(0x7f00000003c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRES32=0x1, @ANYBLOB="00001900"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000240)={r6, 0x6, 0x7}, 0x8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '&'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14.16386707s ago: executing program 8 (id=1962): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = getpgrp(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000380)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x2, 0x9]) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x800, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) landlock_restrict_self(r5, 0x5) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r7}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 12.184461667s ago: executing program 8 (id=1963): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = getpgrp(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000380)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x2, 0x9]) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x800, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgget$private(0x0, 0x5bd) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 12.178118317s ago: executing program 7 (id=1964): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x328, &(0x7f0000000000)={0x0, 0x6fa9, 0x10000, 0x3}, &(0x7f0000000080), &(0x7f0000000340)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000fd3f1400e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000894d", @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000180)}, 0x20) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={0x0}) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000180), 0x0}, 0x20) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f00000077c0)=[{{&(0x7f0000000980)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1400009a4c0051cc1a4100000b0000000000000800000000"], 0x18}}], 0x1, 0x0) 11.262906651s ago: executing program 5 (id=1966): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) stat(&(0x7f0000000340)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_emit_vhci(0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_emit_vhci(&(0x7f0000003140)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740), 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r4, &(0x7f0000000680)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x42, 0x0, @fd_index=0x9, 0x2, 0x0, 0x7fd, 0x0, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 11.144634089s ago: executing program 7 (id=1967): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0) connect(r0, &(0x7f0000000000)=@x25, 0x80) 10.874567534s ago: executing program 9 (id=1968): syz_emit_vhci(&(0x7f0000000540)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7e}, "b7589b18874b069848bd6407ad4d1d9f04ae584d534479543e25c1297c4f0d6871be6d5fd7e09bae582480ff2cb3df5d8ff1bf6b8b3766703d8527babc37b0096a08117d0525042beabb1ec52a17ab3cb0aa17a6136547a670dbdb685bc436f1e63098009a366b714d8dcbefd8dbde57d0f98cd0df4ae09067020236c66a"}, 0x82) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000400007012bbd700001000000047c000008004280040007000c0001800600060080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x2000040) 10.283924553s ago: executing program 7 (id=1969): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0xfffffe1a) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000001040), 0x95, 0x200) fsopen(&(0x7f0000000240)='ceph\x00', 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30002801) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001540), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000001680)={0x58, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xfd2761e1ed5081c5}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x24008010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001b700)=""/102392, 0x18ff8) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) dup3(r8, r7, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000013c0)={0x4, &(0x7f0000001340)=[{0xbc2, 0xa1, &(0x7f0000001080)="b32e8ebc516aabedf5e324cbfa93032da742395ad0a800802bcd81a2e45fbfb50b2e2efaa096bf340c8eac56a525efec89ff8efb98855310b802593b3a55376824c9cf9ffcdf3ffea26f6177089ff3da7c561d4fab7a85fea9d81ec0be2dd203ee9723a009c0928a897adb49bcd06aa1970fb5a5d8729829e6e9e2fbfbde71d0cb3c300c460a721ec5e72be9aa1f2a097a2976700005bb186380f613820f4576e1", 0x1, 0x1}, {0x1, 0xf3, &(0x7f0000001140)="d12326b49927d9bf86ebcb9e0db13ed097b0dfad6ad357962ce8832e1b01ad9aee0bba7a2734156505cd8384a400d969d86900342089aaff504faaf7cefc5ddd47490ad9d40e916903c1107d81818bb8cb4eb2367cc00d387777149718d1e121415fd186eed434d99d696f1db7a4c86098b879744f595e10a3bc333ad8ee16c51a4d7babc8191d60ee8ebf44369b289043f0528b019a73752e2d767e9c3a414cb3c97f7357d41b441c1ef1cb628410606293c851da73f3e9bfc4a0f16304d77f2631018d4e3d44cfcf2dc769078d39ae7beddd7a142c8ea6862cbc80b91b93c398b556b1ec7b06b639777a4bc8793e6bc71548", 0x1}, {0xfffffff9, 0x96, &(0x7f0000001240)="23830fdbb372fa8f8716842d6098efae92f1151ce6cc676d022a740eaaa65481a8b4aa62554b2927ce604aac6c19d413dee40a981de999d337f41bb935873a28ae6663c039eea370e9f9dca6047a0d8d00ffb0734e8843ddf713c29c69eac08ab6e17d79e9373e894fe4e1313a9ea09bd407ea16180253108cf8f93456e70c93a74d75455e3daa5a72cd0edf69743f1636f3c88e66b5", 0x1, 0x1}, {0x76, 0x9, &(0x7f0000001300)="04332a614cb83f1217", 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000014c0)={&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001440)=""/121, 0x79}) 10.171113865s ago: executing program 9 (id=1970): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) stat(&(0x7f0000000340)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_emit_vhci(0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_emit_vhci(&(0x7f0000003140)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r4, &(0x7f0000000680)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x42, 0x0, @fd_index=0x9, 0x2, 0x0, 0x7fd, 0x0, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 10.05196431s ago: executing program 7 (id=1971): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_io_uring_setup(0xde8, &(0x7f0000000140)={0x0, 0x9a29, 0x800, 0x13, 0x358}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') socket(0x1d, 0x2, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbc, 0xfe, 0x38, 0x8, 0x93a, 0x50f, 0x243a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0xd0, 0x2, 0x0, 0x8, 0xd6, 0x99, 0x6}}]}}]}}, 0x0) 10.027952011s ago: executing program 5 (id=1972): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0xfffffe1a) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000001040), 0x95, 0x200) fsopen(&(0x7f0000000240)='ceph\x00', 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30002801) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001540), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000001680)={0x48, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xfd2761e1ed5081c5}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x24008010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001b700)=""/102392, 0x18ff8) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) dup3(r8, r7, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000013c0)={0x4, &(0x7f0000001340)=[{0xbc2, 0xa1, &(0x7f0000001080)="b32e8ebc516aabedf5e324cbfa93032da742395ad0a800802bcd81a2e45fbfb50b2e2efaa096bf340c8eac56a525efec89ff8efb98855310b802593b3a55376824c9cf9ffcdf3ffea26f6177089ff3da7c561d4fab7a85fea9d81ec0be2dd203ee9723a009c0928a897adb49bcd06aa1970fb5a5d8729829e6e9e2fbfbde71d0cb3c300c460a721ec5e72be9aa1f2a097a2976700005bb186380f613820f4576e1", 0x1, 0x1}, {0x1, 0xf3, &(0x7f0000001140)="d12326b49927d9bf86ebcb9e0db13ed097b0dfad6ad357962ce8832e1b01ad9aee0bba7a2734156505cd8384a400d969d86900342089aaff504faaf7cefc5ddd47490ad9d40e916903c1107d81818bb8cb4eb2367cc00d387777149718d1e121415fd186eed434d99d696f1db7a4c86098b879744f595e10a3bc333ad8ee16c51a4d7babc8191d60ee8ebf44369b289043f0528b019a73752e2d767e9c3a414cb3c97f7357d41b441c1ef1cb628410606293c851da73f3e9bfc4a0f16304d77f2631018d4e3d44cfcf2dc769078d39ae7beddd7a142c8ea6862cbc80b91b93c398b556b1ec7b06b639777a4bc8793e6bc71548", 0x1}, {0xfffffff9, 0x96, &(0x7f0000001240)="23830fdbb372fa8f8716842d6098efae92f1151ce6cc676d022a740eaaa65481a8b4aa62554b2927ce604aac6c19d413dee40a981de999d337f41bb935873a28ae6663c039eea370e9f9dca6047a0d8d00ffb0734e8843ddf713c29c69eac08ab6e17d79e9373e894fe4e1313a9ea09bd407ea16180253108cf8f93456e70c93a74d75455e3daa5a72cd0edf69743f1636f3c88e66b5", 0x1, 0x1}, {0x76, 0x9, &(0x7f0000001300)="04332a614cb83f1217", 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000014c0)={&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001440)=""/121, 0x79}) 9.895337973s ago: executing program 6 (id=1973): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b", 0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0x40000000}, 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x3f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 8.863834115s ago: executing program 9 (id=1974): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004000070127bd7000f6dbdf25037c00500400c2800c00018008000300", @ANYRES32, @ANYBLOB="040008"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 8.257657434s ago: executing program 5 (id=1975): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf"]) bind$tipc(r3, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) dup3(r7, r3, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb, 0x0, 0x7}}}}}]}}]}}, 0x0) 7.78465949s ago: executing program 6 (id=1976): syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xbc, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000140)=0x4bc, 0x4) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x6, 0x3, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b60900000000003e4c30a5107b7b9aa6d8694be1422b107d99b978000010169a87617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r2, 0x118, 0x1, 0x0, &(0x7f00000003c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRES32=0x1, @ANYBLOB="00001900"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x6, 0x7}, 0x8) process_vm_readv(r1, &(0x7f0000000040)=[{0x0}, {&(0x7f00000007c0)=""/65, 0x41}, {&(0x7f0000000840)=""/99, 0x63}, {&(0x7f00000008c0)=""/160, 0xa0}], 0x4, &(0x7f00000000c0)=[{&(0x7f0000000980)=""/74, 0x4a}], 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '&'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.55365346s ago: executing program 9 (id=1977): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x401c000}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000400)={0x3, 0x0, 0x5, 0x8}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000200", 0x41d) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800ed000015d500000000000008000188c1180018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207d9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000000000000b70000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="14fd06cfb0c1"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.416624999s ago: executing program 7 (id=1978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1, 0x400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0], 0x0, 0x10, 0x10000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r2, 0x0, 0x8000000}, 0x27) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) r4 = getpid() r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r4}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff2b, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000abe000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00008a7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x203, 0xc4}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r8 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r8, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4004) 3.844403551s ago: executing program 6 (id=1979): r0 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xf, 0x1}, 0x4, 0xe0, &(0x7f0000000280)="43ee5bae9a9d3762517439c454088025a4afeca1b8533ed393866113a62dbe436e8606db6da7a74aec44189fd55de9331fd3367cae00b4ed3b81cb6d43cfc7cf5bb184586d2a9bcf2157f2c7f07310c312e3e91e81d15c38f8c0ea7d5c7cb2de08513664563ad9f8c85cdbd08dffe6b48de20eff6c0622c802e949ef312d1efd0a28307682b869c369e509ef766159ff5a367dbdb2985d62a2", 0x99, 0x3, 0xfffff801, 0x0, 0x6, 0x1, &(0x7f0000000180)="2f9c3e469bb5987961ab8ba4b9b86007bb84314dde4e0f172d9ffb8d8401a1da7c8a9a17a3acfe1374cb5a66377024e91607bc06aa28c8fd01b7afc9651203111ec7e6d744b05492d51e0edac36a3b6eb25a22c8fe7dfcbe9b5b6e5d93be24e2e180"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r9, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 3.814580084s ago: executing program 8 (id=1980): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf"]) bind$tipc(r3, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb, 0x0, 0x7}}}}}]}}]}}, 0x0) 3.743272043s ago: executing program 5 (id=1981): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = getpgrp(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000380)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x2, 0x9]) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x800, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) landlock_restrict_self(r5, 0x5) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 3.547712564s ago: executing program 9 (id=1982): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) stat(&(0x7f0000000340)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_emit_vhci(0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_emit_vhci(&(0x7f0000003140)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740), 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r4, &(0x7f0000000680)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x42, 0x0, @fd_index=0x9, 0x2, 0x0, 0x7fd, 0x0, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.996497831s ago: executing program 6 (id=1983): socket$netlink(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0xc, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffb, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) close(0xffffffffffffffff) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x81) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8200, 0x0) ioctl$TCSETSW(r2, 0x5403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r5}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 1.994884681s ago: executing program 5 (id=1984): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) getdents64(r0, &(0x7f0000001f00)=""/4093, 0xffd) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r1, r1) setpgid(0x0, r1) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r3 = io_uring_setup(0x66a1, &(0x7f0000002140)={0x0, 0xaf15, 0x20, 0x2, 0x1000392}) close(r3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x20000805) listen(r4, 0x0) accept(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8002}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000000)=""/29, 0x1d, 0x0, &(0x7f0000000180)=""/234, 0xea}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 963.31675ms ago: executing program 6 (id=1985): r0 = syz_io_uring_setup(0x911, &(0x7f0000000180)={0x0, 0x6c6b, 0x1, 0x2, 0xf6}, &(0x7f00000000c0), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f00006d1000/0x2000)=nil, 0x2000, 0x3000006, 0x4110810, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006100)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1071) 241.639672ms ago: executing program 9 (id=1986): r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000035c0)=@base={0xe, 0x4, 0x8, 0x7, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/214, 0xd6}], 0x1, &(0x7f0000000440)=""/59, 0x3b}, 0xfffffff8}, {{&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000600)=""/103, 0x67}], 0x2, &(0x7f0000000780)=""/195, 0xc3}, 0x2}, {{&(0x7f00000006c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/99, 0x63}, {&(0x7f0000001a00)=""/106, 0x6a}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/88, 0x58}], 0x6, &(0x7f0000002b80)=""/4, 0x4}, 0x969e}, {{&(0x7f0000002bc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002c40)=""/36, 0x24}, {&(0x7f0000002c80)=""/66, 0x42}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/245, 0xf5}], 0x4}, 0x101}, {{&(0x7f0000002f40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002fc0)=""/90, 0x5a}], 0x1, &(0x7f0000003080)=""/8, 0x8}, 0x1}, {{&(0x7f00000030c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003140)=""/58, 0x3a}, {&(0x7f0000003180)=""/201, 0xc9}, {&(0x7f0000003280)=""/243, 0xf3}], 0x3}, 0x4}], 0x6, 0x40, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xa, @pix={0x7, 0x3, 0x59565955, 0x7, 0x800000c0, 0x4, 0x2, 0x3, 0x0, 0x8, 0x3, 0x3}}) syz_usb_connect(0x0, 0x8c6, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1c0a}}]}) 0s ago: executing program 6 (id=1987): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="e950d200449c04a77d33a2da27ea95b265a4d3d7b289ad15554293f7a81ab9aae1971e6638af4462cab700626ef5ae738e9b9d1c2901f8001b3991f90b8baf45d77d816420523a88a146f6f5e73d41b8f5bd1d17a2b0fd6e32b36bff82244170b8b672074b99c1eaafc01b9905c6a5c6441e4c1f13137a6a4a4d7f8cf8d3db09296cb029ba8262452f3da2982b321912efdd9451074164395278756bb2f7e9", @ANYRES16=0x0, @ANYBLOB="040029bd7000fcdbdf2517000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40081) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4008041}, 0xb80) dup(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x4, 0x10000, @value=r5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000004c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000e280)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 3.545634][T11315] udevd[11315]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 704.920728][T11556] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 704.984539][ T30] audit: type=1400 audit(1767303822.432:1643): avc: denied { read } for pid=12942 comm="syz.5.1528" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 705.070695][ T30] audit: type=1400 audit(1767303822.502:1644): avc: denied { setopt } for pid=12947 comm="syz.6.1530" laddr=fe80::10 lport=38320 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 705.123355][T11556] usb 8-1: Using ep0 maxpacket: 16 [ 705.148152][T11556] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.177262][T11556] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.198726][T11556] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 705.218217][T11556] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.240540][T11556] usb 8-1: config 0 descriptor?? [ 705.290856][T11772] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 705.444238][T11772] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 705.468986][T11772] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x86 has invalid maxpacket 13102, setting to 64 [ 705.495439][T11772] usb 7-1: config 0 interface 0 has no altsetting 0 [ 705.519947][T11772] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 705.532165][T11772] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 705.641168][T11772] usb 7-1: Product: syz [ 705.645989][T11772] usb 7-1: Manufacturer: syz [ 705.656671][T11772] usb 7-1: SerialNumber: syz [ 705.668631][T11556] corsair 0003:1B1C:1B02.0015: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.7-1/input0 [ 705.687661][T11772] usb 7-1: config 0 descriptor?? [ 705.759674][T11772] usb 7-1: selecting invalid altsetting 0 [ 705.866204][T11556] corsair 0003:1B1C:1B02.0015: Read invalid backlight brightness: d4. [ 705.912247][T11772] usb 7-1: USB disconnect, device number 8 [ 706.075253][T11556] usb 8-1: USB disconnect, device number 8 [ 706.537147][T12981] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 706.549570][T12981] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 706.579143][T12981] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 706.590501][T12981] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 706.608461][T12981] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 706.619422][T12981] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 706.679964][T12981] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 706.689732][T12981] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 706.699383][T12981] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 706.734112][ T30] audit: type=1400 audit(1767303823.922:1645): avc: denied { name_bind } for pid=12975 comm="syz.8.1532" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 706.976060][ T30] audit: type=1800 audit(1767303824.422:1646): pid=12991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1534" name="bus" dev="overlay" ino=119 res=0 errno=0 [ 707.008169][T12991] bridge2: entered promiscuous mode [ 707.180757][ T10] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 707.435775][ T10] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 707.552863][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.660249][ T10] usb 10-1: Product: syz [ 707.715432][ T10] usb 10-1: Manufacturer: syz [ 707.769626][ T10] usb 10-1: SerialNumber: syz [ 707.797973][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 707.811229][ T10] usb 10-1: config 0 descriptor?? [ 707.863163][T11334] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 707.871770][T11334] Bluetooth: Wrong link type (-22) [ 708.360957][T11556] usb 10-1: USB disconnect, device number 17 [ 708.425886][T11316] udevd[11316]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 708.704212][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 708.737145][ T30] audit: type=1400 audit(1767303826.182:1647): avc: denied { map } for pid=13018 comm="syz.7.1539" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 708.787593][T12987] netlink: 'syz.9.1533': attribute type 1 has an invalid length. [ 708.944944][T13021] create_pit_timer: 8 callbacks suppressed [ 708.944961][T13021] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 708.969360][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1533'. [ 708.981759][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 709.002235][T12987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 709.128301][T13024] bond1: (slave veth5): Enslaving as an active interface with a down link [ 709.146874][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1533'. [ 709.200170][T12987] bond1: (slave dummy0): making interface the new active one [ 709.200710][T11662] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 709.229651][T12987] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 709.319558][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 709.372795][T11662] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 709.384726][T11662] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 709.418720][T11662] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 709.443584][T11662] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 709.460071][ T30] audit: type=1400 audit(1767303826.902:1648): avc: denied { setopt } for pid=13042 comm="syz.6.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 709.469350][T11662] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 709.579205][ T30] audit: type=1400 audit(1767303826.932:1649): avc: denied { bind } for pid=13042 comm="syz.6.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 709.644261][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.666308][T11662] usb 9-1: Manufacturer: syz [ 709.841552][ T30] audit: type=1400 audit(1767303826.932:1650): avc: denied { getopt } for pid=13042 comm="syz.6.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 710.047819][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.052018][T11662] usb 9-1: config 0 descriptor?? [ 710.071067][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 710.080300][T13028] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 710.086557][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 710.133402][T11662] igorplugusb 9-1:0.0: endpoint incorrect [ 710.144484][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.228434][ T10] usb 8-1: config 0 descriptor?? [ 710.708262][T12987] bond1 (unregistering): (slave veth5): Releasing active interface [ 710.968443][ T10] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xe [ 710.971397][T12987] bond1 (unregistering): (slave dummy0): Releasing active interface [ 711.057949][T12987] bond1 (unregistering): Released all slaves [ 711.285534][ T10] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 711.301347][ T10] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 711.317179][ T10] usb 8-1: USB disconnect, device number 9 [ 711.497644][T13057] fido_id[13057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 711.522123][ T30] audit: type=1400 audit(1767303828.962:1651): avc: denied { wake_alarm } for pid=13060 comm="syz.5.1545" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 711.607475][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1545'. [ 711.627702][ T30] audit: type=1400 audit(1767303829.052:1652): avc: denied { write } for pid=13060 comm="syz.5.1545" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 711.988055][T13072] overlay: Unknown parameter '/' [ 711.993687][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 712.001307][ T30] audit: type=1400 audit(1767303829.432:1653): avc: denied { ioctl } for pid=13064 comm="syz.9.1546" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x4110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 712.134364][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 712.171239][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 712.179892][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 712.192508][ T10] usb 6-1: config 0 has no interface number 0 [ 712.416954][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 712.447132][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 712.472087][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.514621][ T976] usb 9-1: USB disconnect, device number 11 [ 712.679562][ T10] usb 6-1: config 0 descriptor?? [ 712.691200][ T10] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 713.701099][ T5826] Bluetooth: hci7: command 0x0406 tx timeout [ 713.709794][T11335] Bluetooth: hci9: command 0x0406 tx timeout [ 713.716492][T11331] Bluetooth: hci6: command 0x0406 tx timeout [ 713.725735][T11331] Bluetooth: hci8: command 0x0406 tx timeout [ 714.168439][T13103] FAT-fs (loop13): unable to read boot sector [ 714.198639][ T30] audit: type=1400 audit(1767303831.582:1654): avc: denied { create } for pid=13096 comm="syz.6.1551" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 714.515177][ T30] audit: type=1400 audit(1767303831.602:1655): avc: denied { mounton } for pid=13096 comm="syz.6.1551" path="/20/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 714.587330][ T5887] usb 6-1: USB disconnect, device number 16 [ 714.777495][ T30] audit: type=1400 audit(1767303832.222:1656): avc: denied { unlink } for pid=12186 comm="syz-executor" name="file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 714.783114][T13111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 714.974506][T13105] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1552'. [ 714.989642][T13105] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 715.021644][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 715.197731][ T6228] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 715.487608][ T6228] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 715.520698][ T6228] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.528908][ T6228] usb 10-1: Product: syz [ 715.569071][ T6228] usb 10-1: Manufacturer: syz [ 715.585759][ T6228] usb 10-1: SerialNumber: syz [ 715.617640][ T6228] usb 10-1: config 0 descriptor?? [ 715.918951][T13137] bridge3: entered promiscuous mode [ 716.048823][ T30] audit: type=1800 audit(1767303833.322:1657): pid=13137 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1559" name="bus" dev="overlay" ino=357 res=0 errno=0 [ 716.508248][ T6228] usb 10-1: USB disconnect, device number 18 [ 716.532340][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 716.762191][T13116] netlink: 'syz.9.1554': attribute type 1 has an invalid length. [ 716.829617][T11316] udevd[11316]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 716.992244][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1554'. [ 716.996399][T13116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 717.545409][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1554'. [ 717.564131][T13143] bond1: (slave veth7): Enslaving as an active interface with a down link [ 717.614309][T13116] bond1: (slave dummy0): making interface the new active one [ 717.640255][T13116] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 717.734575][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 718.040720][T11556] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 718.104471][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 718.401357][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 718.416293][T11556] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 718.416669][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 718.443805][T11556] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 718.459307][ T10] usb 8-1: config 0 has no interface number 0 [ 718.468765][T11556] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 718.489566][ T10] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.492231][T11556] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 718.511795][T13143] bond1 (unregistering): (slave veth7): Releasing active interface [ 718.523218][T13143] bond1 (unregistering): (slave dummy0): Releasing active interface [ 718.532331][T11556] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 718.545949][ T10] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 718.552752][T11556] usb 9-1: Manufacturer: syz [ 718.575119][T13143] bond1 (unregistering): Released all slaves [ 718.583708][T11556] usb 9-1: config 0 descriptor?? [ 718.589309][T13157] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 718.605784][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.615958][T11556] igorplugusb 9-1:0.0: endpoint incorrect [ 718.658068][ T10] usb 8-1: config 0 descriptor?? [ 718.693085][ T10] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 718.717729][T11334] Bluetooth: hci6: unexpected event for opcode 0x5de4 [ 718.729774][T11334] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 719.416587][T13190] bridge4: entered promiscuous mode [ 720.219014][ T6390] usb 8-1: USB disconnect, device number 10 [ 721.065742][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 721.885996][ T30] audit: type=1400 audit(1767303839.332:1658): avc: denied { read } for pid=13214 comm="syz.6.1576" path="socket:[42689]" dev="sockfs" ino=42689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 722.133998][T11334] Bluetooth: hci7: unexpected event for opcode 0x5de4 [ 722.146217][T11334] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 722.630142][T11328] Bluetooth: hci6: unexpected event for opcode 0x5de4 [ 722.647666][T11328] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 723.196482][T11556] usb 9-1: USB disconnect, device number 12 [ 723.309977][T13251] netlink: 320 bytes leftover after parsing attributes in process `syz.7.1574'. [ 723.450323][T13252] random: crng reseeded on system resumption [ 723.453078][ T30] audit: type=1400 audit(1767303840.892:1659): avc: denied { append } for pid=13246 comm="syz.5.1581" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 723.530283][ T30] audit: type=1400 audit(1767303840.972:1660): avc: denied { ioctl } for pid=13246 comm="syz.5.1581" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 723.673442][T13256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.676901][ T30] audit: type=1400 audit(1767303840.992:1661): avc: denied { ioctl } for pid=13246 comm="syz.5.1581" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 724.102705][ T30] audit: type=1400 audit(1767303841.552:1662): avc: denied { name_connect } for pid=13272 comm="syz.6.1588" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 724.260881][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 724.283398][ T30] audit: type=1326 audit(1767303841.572:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.8.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c218f749 code=0x7ffc0000 [ 724.325974][ T30] audit: type=1326 audit(1767303841.572:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.8.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c218f749 code=0x7ffc0000 [ 724.740100][T13284] netlink: zone id is out of range [ 724.745461][T13284] netlink: zone id is out of range [ 724.752285][T13284] netlink: zone id is out of range [ 724.757520][T13284] netlink: zone id is out of range [ 724.762738][T13284] netlink: zone id is out of range [ 724.767937][T13284] netlink: zone id is out of range [ 724.773683][T13284] netlink: zone id is out of range [ 724.780926][T13284] netlink: zone id is out of range [ 724.786140][T13284] netlink: zone id is out of range [ 724.796990][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 724.803920][ T30] audit: type=1326 audit(1767303841.582:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.8.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f52c218f749 code=0x7ffc0000 [ 724.827879][ T30] audit: type=1326 audit(1767303841.582:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.8.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c218f749 code=0x7ffc0000 [ 724.857665][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 724.896673][ T9] usb 6-1: config 0 has no interface number 0 [ 725.140680][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 725.176039][ T30] audit: type=1326 audit(1767303841.592:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.8.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f52c218f749 code=0x7ffc0000 [ 725.199793][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 725.213772][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.234911][ T9] usb 6-1: config 0 descriptor?? [ 725.312526][ T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 725.596028][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 726.140819][ T976] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 726.256125][ T9] usb 6-1: USB disconnect, device number 17 [ 726.303195][T13308] 9p: Bad value for 'rfdno' [ 726.398198][ T976] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.434539][ T976] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 726.460913][ T976] usb 7-1: config 0 interface 0 has no altsetting 0 [ 726.467567][ T976] usb 7-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 726.481126][ T5887] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 726.527676][ T976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.530791][T11601] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 726.555024][ T976] usb 7-1: config 0 descriptor?? [ 727.605004][T11601] usb 8-1: config 6 has an invalid interface number: 28 but max is 0 [ 727.616853][ T5887] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 727.625350][T11601] usb 8-1: config 6 has no interface number 0 [ 727.635819][ T5887] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 727.693922][T11601] usb 8-1: config 6 interface 28 has no altsetting 0 [ 727.707244][ T5887] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 727.745170][ T5887] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 727.758967][T11601] usb 8-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=44.74 [ 727.779978][ T5887] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 727.793770][T11601] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.806295][ T5887] usb 9-1: Manufacturer: syz [ 727.815356][T11601] usb 8-1: Product: syz [ 727.827828][ T5887] usb 9-1: config 0 descriptor?? [ 727.839605][T11601] usb 8-1: Manufacturer: syz [ 727.855857][T11601] usb 8-1: SerialNumber: syz [ 727.861831][T13306] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 727.890418][ T5887] igorplugusb 9-1:0.0: endpoint incorrect [ 728.219248][T11662] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 728.500806][T11662] usb 10-1: Using ep0 maxpacket: 32 [ 728.507061][T11601] usb 8-1: USB disconnect, device number 11 [ 728.521605][T11662] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 728.535046][T11662] usb 10-1: config 0 has no interface number 0 [ 728.547515][T11662] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.558890][T11662] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.576427][ T976] usbhid 7-1:0.0: can't add hid device: -71 [ 728.585505][T11662] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 728.594851][ T976] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 728.651664][T11662] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.685369][ T976] usb 7-1: USB disconnect, device number 9 [ 728.705488][T11662] usb 10-1: config 0 descriptor?? [ 728.987015][T13351] bridge3: entered promiscuous mode [ 729.132032][ T6228] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 729.442512][ T6228] usb 6-1: Using ep0 maxpacket: 32 [ 729.479113][T11662] uclogic 0003:28BD:0094.0017: pen parameters not found [ 729.523869][ T6228] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 729.559191][T11662] uclogic 0003:28BD:0094.0017: interface is invalid, ignoring [ 729.621134][ T6228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.759026][T11662] usb 10-1: USB disconnect, device number 19 [ 729.816696][ T6228] usb 6-1: config 0 descriptor?? [ 729.842791][T11416] udevd[11416]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 729.855256][ T6390] usb 9-1: USB disconnect, device number 13 [ 729.866715][ T6228] as10x_usb: device has been detected [ 730.686637][ T6228] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 730.708818][ T6228] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 730.780218][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 730.780235][ T30] audit: type=1400 audit(1767303848.222:1701): avc: denied { firmware_load } for pid=6228 comm="kworker/1:9" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 730.783280][ T6228] as10x_usb: error during firmware upload part1 [ 730.825772][ T6228] Registered device nBox DVB-T Dongle [ 731.099038][T13369] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 731.110938][T13369] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 731.118581][T13369] vhci_hcd vhci_hcd.0: Device attached [ 731.351132][ T976] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 731.381689][ T6390] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 731.400864][ T6228] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 731.410691][ T976] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 731.443546][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 731.603629][ T6390] usb 8-1: config 0 has an invalid interface number: 3 but max is 0 [ 731.635401][ T6390] usb 8-1: config 0 has no interface number 0 [ 731.647944][ T6228] usb 9-1: config 0 has no interfaces? [ 731.662157][ T6228] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 731.684365][ T6390] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 731.724497][ T6228] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.735071][ T6390] usb 8-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 731.781481][ T6228] usb 9-1: config 0 descriptor?? [ 731.790536][ T6390] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.833406][ T30] audit: type=1400 audit(1767303849.282:1702): avc: denied { getopt } for pid=13382 comm="syz.6.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 731.892471][ T30] audit: type=1400 audit(1767303849.302:1703): avc: denied { listen } for pid=13382 comm="syz.6.1609" laddr=172.20.20.38 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 731.897135][ T6390] usb 8-1: config 0 descriptor?? [ 731.931753][ T6228] usb 6-1: USB disconnect, device number 18 [ 731.939766][T13387] 9p: Unknown uid 00000000004294967295 [ 732.044857][T13368] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 732.050546][ T6228] Unregistered device nBox DVB-T Dongle [ 732.102148][ T6228] as10x_usb: device has been disconnected [ 732.107381][T11328] Bluetooth: hci6: unexpected event for opcode 0x5de4 [ 732.109951][ T6390] hub 8-1:0.3: bad descriptor, ignoring hub [ 732.136581][T11328] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 732.526553][ T6390] hub 8-1:0.3: probe with driver hub failed with error -5 [ 732.546839][T13368] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 732.553387][T13368] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 732.594124][T13368] vhci_hcd vhci_hcd.0: Device attached [ 732.626882][ T6390] sierra 8-1:0.3: Sierra USB modem converter detected [ 732.751008][T13393] vhci_hcd: connection closed [ 732.757351][ T5956] vhci_hcd vhci_hcd.7: stop threads [ 732.789914][ T6390] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 732.800306][ T5956] vhci_hcd vhci_hcd.7: release socket [ 732.823453][ T5956] vhci_hcd vhci_hcd.7: disconnect device [ 732.865578][ T6390] usb 8-1: USB disconnect, device number 12 [ 732.880915][ T6228] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 732.903831][ T6390] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 732.912895][ T6228] usb 47-1: enqueue for inactive port 0 [ 732.936595][ T6390] sierra 8-1:0.3: device disconnected [ 732.982762][ T6228] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 733.798232][ T5894] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 733.854388][ T6390] usb 9-1: USB disconnect, device number 14 [ 733.861249][T13372] vhci_hcd: connection reset by peer [ 733.983614][ T7439] vhci_hcd vhci_hcd.8: stop threads [ 733.990876][ T7439] vhci_hcd vhci_hcd.8: release socket [ 734.009397][ T7439] vhci_hcd vhci_hcd.8: disconnect device [ 734.016577][ T5894] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.065092][ T5894] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 734.152398][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 734.169432][ T5894] usb 6-1: config 0 interface 0 has no altsetting 0 [ 734.181217][ T5894] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 734.215997][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.261893][T11328] Bluetooth: hci9: unexpected event for opcode 0x5de4 [ 734.268891][T11328] Bluetooth: hci9: ACL packet for unknown connection handle 200 [ 734.284901][ T5894] usb 6-1: config 0 descriptor?? [ 734.787205][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 735.211958][T13432] usb usb5: usbfs: process 13432 (syz.7.1615) did not claim interface 0 before use [ 735.650360][ T6228] IPVS: starting estimator thread 0... [ 735.671657][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 735.750689][T11772] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 735.760183][T13436] IPVS: using max 33 ests per chain, 79200 per kthread [ 735.846360][ T9] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 735.864662][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 736.012962][T11772] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.031747][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 736.031749][T11772] usb 8-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 736.031780][T11772] usb 8-1: config 0 interface 0 has no altsetting 0 [ 736.043330][ T9] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 736.071161][ T9] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 736.079487][ T9] usb 9-1: Manufacturer: syz [ 736.561215][ T9] usb 9-1: config 0 descriptor?? [ 736.569227][T13430] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 736.578750][ T5894] usbhid 6-1:0.0: can't add hid device: -71 [ 736.599184][ T9] igorplugusb 9-1:0.0: endpoint incorrect [ 736.630737][T11772] usb 8-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 736.639974][T11772] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.643081][ T5894] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 736.658955][T11772] usb 8-1: config 0 descriptor?? [ 736.680758][ T976] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 736.810921][ T5894] usb 6-1: USB disconnect, device number 19 [ 737.600516][T11328] Bluetooth: hci0: unexpected event for opcode 0x5de4 [ 737.611445][T11328] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 737.622394][T11328] Bluetooth: Wrong link type (-22) [ 738.141163][T11772] usbhid 8-1:0.0: can't add hid device: -71 [ 738.150291][T11772] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 738.293287][T11772] usb 8-1: USB disconnect, device number 13 [ 738.320222][ T9] usb 9-1: USB disconnect, device number 15 [ 738.337980][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 738.521438][T13466] net_ratelimit: 9 callbacks suppressed [ 738.521455][T13466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.981449][T13472] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 738.988012][T13472] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 738.997379][T13472] vhci_hcd vhci_hcd.0: Device attached [ 739.224976][ T6390] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 739.390275][ T6390] usb 47-1: new full-speed USB device number 5 using vhci_hcd [ 739.398639][T11772] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 740.769029][T13497] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 740.780796][T13494] veth0_to_team: entered promiscuous mode [ 740.818568][T11772] usb 8-1: config 0 has no interfaces? [ 740.869477][T11772] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 740.900080][T11772] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.174625][T11772] usb 8-1: config 0 descriptor?? [ 741.462814][ T5894] usb 8-1: USB disconnect, device number 14 [ 741.600507][ T30] audit: type=1400 audit(1767303858.992:1704): avc: denied { mounton } for pid=13500 comm="syz.5.1632" path="/80/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 741.623358][T13474] vhci_hcd: connection reset by peer [ 741.630839][ T3926] vhci_hcd vhci_hcd.7: stop threads [ 741.636064][ T3926] vhci_hcd vhci_hcd.7: release socket [ 741.691436][ T3926] vhci_hcd vhci_hcd.7: disconnect device [ 741.736795][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 741.779413][T13501] ./file0: Can't open blockdev [ 741.784011][T11328] Bluetooth: hci8: unexpected event for opcode 0x5de4 [ 741.802972][T11328] Bluetooth: hci8: ACL packet for unknown connection handle 200 [ 741.912692][ T976] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 742.145829][ T976] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 742.190687][ T976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.210693][ T976] usb 9-1: Product: syz [ 742.219044][ T976] usb 9-1: Manufacturer: syz [ 742.229205][ T976] usb 9-1: SerialNumber: syz [ 742.333609][ T976] usb 9-1: config 0 descriptor?? [ 742.455974][ T30] audit: type=1800 audit(1767303859.902:1705): pid=13522 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.1634" name="bus" dev="overlay" ino=404 res=0 errno=0 [ 742.639498][T13523] bridge1: entered promiscuous mode [ 742.867667][T13503] netlink: 'syz.8.1631': attribute type 1 has an invalid length. [ 743.202545][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1631'. [ 743.231335][ T976] usb 9-1: USB disconnect, device number 16 [ 743.319235][T11316] udevd[11316]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.329018][T13503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 743.344291][T11315] udevd[11315]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 743.372350][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1631'. [ 743.401198][T11328] Bluetooth: hci8: unexpected event for opcode 0x5de4 [ 743.409774][T11328] Bluetooth: hci8: ACL packet for unknown connection handle 200 [ 743.725093][ T30] audit: type=1400 audit(1767303861.172:1706): avc: denied { ioctl } for pid=13538 comm="syz.9.1637" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 743.807019][T13509] bond2: (slave veth3): Enslaving as an active interface with a down link [ 743.824111][T13535] bond2: (slave dummy0): making interface the new active one [ 744.095546][T13535] dummy0: entered promiscuous mode [ 744.114506][T13535] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 744.165688][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 744.580968][ T6390] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 744.640408][T13503] bond2 (unregistering): (slave veth3): Releasing active interface [ 744.650489][T13503] bond2 (unregistering): (slave dummy0): Releasing active interface [ 744.660093][T13503] bond2 (unregistering): Released all slaves [ 744.676509][T13546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.801055][ T5894] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 744.828088][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 745.092811][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 745.476345][T13581] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 745.482893][T13581] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 745.504292][T13581] vhci_hcd vhci_hcd.0: Device attached [ 745.642558][ T5894] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 745.652011][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.660121][ T5894] usb 6-1: Product: syz [ 745.664819][ T5894] usb 6-1: Manufacturer: syz [ 745.669425][ T5894] usb 6-1: SerialNumber: syz [ 745.817033][ T5894] usb 6-1: config 0 descriptor?? [ 745.881001][ T9] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 745.910697][ T6390] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 746.015392][ T6390] usb 47-1: device descriptor read/64, error -110 [ 746.197230][ T5894] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 746.209201][ T9] usb 8-1: config 0 has no interfaces? [ 746.216175][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 746.225319][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.600926][T13595] usb usb5: usbfs: process 13595 (syz.9.1645) did not claim interface 0 before use [ 746.615884][ T6390] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 747.036502][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.043121][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.145334][ T9] usb 8-1: config 0 descriptor?? [ 747.320735][ T6390] usb 47-1: new full-speed USB device number 6 using vhci_hcd [ 747.371023][ T6228] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 747.545914][ T6228] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.607282][ T6228] usb 10-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 747.712410][ T6228] usb 10-1: config 0 interface 0 has no altsetting 0 [ 747.751321][ T6228] usb 10-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 747.758201][ T30] audit: type=1400 audit(1767303865.182:1707): avc: denied { getopt } for pid=13602 comm="syz.6.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.950102][ T6228] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.033672][ T6228] usb 10-1: config 0 descriptor?? [ 748.400718][T13582] vhci_hcd: connection reset by peer [ 748.450891][ T9] usb 8-1: USB disconnect, device number 15 [ 748.458660][ T7064] vhci_hcd vhci_hcd.7: stop threads [ 748.467403][ T7064] vhci_hcd vhci_hcd.7: release socket [ 748.480326][ T7064] vhci_hcd vhci_hcd.7: disconnect device [ 748.513015][ T5894] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 748.533112][ T5894] usb 6-1: USB disconnect, device number 20 [ 748.944214][ T30] audit: type=1400 audit(1767303866.392:1708): avc: denied { create } for pid=13620 comm="syz.6.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 748.951751][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 749.171180][ T9] libceph: connect (1)[c::]:6789 error -101 [ 749.177299][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 749.328196][ T6228] usbhid 10-1:0.0: can't add hid device: -71 [ 749.340396][ T6228] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 749.416251][T13634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.432399][ T6228] usb 10-1: USB disconnect, device number 20 [ 749.455259][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 749.462650][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 749.475826][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 749.665952][T13624] ceph: No mds server is up or the cluster is laggy [ 749.734566][ T9] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 749.764363][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 749.802196][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 749.849088][ T9] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 749.871965][ T9] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 749.890100][ T9] usb 8-1: Manufacturer: syz [ 749.918585][ T9] usb 8-1: config 0 descriptor?? [ 750.895983][T13631] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 750.916548][ T9] igorplugusb 8-1:0.0: endpoint incorrect [ 752.047202][ T9] usb 8-1: USB disconnect, device number 16 [ 752.116850][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 752.175492][T13652] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 752.970838][ T6390] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 756.135434][T13678] usb usb5: usbfs: process 13678 (syz.8.1662) did not claim interface 0 before use [ 756.636955][T11328] Bluetooth: hci6: unexpected event for opcode 0x5de4 [ 756.645174][T11328] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 756.818450][ T976] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 756.894840][T13683] Bluetooth: MGMT ver 1.23 [ 756.982955][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 757.055763][ T976] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.190190][ T976] usb 9-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 757.214740][ T976] usb 9-1: config 0 interface 0 has no altsetting 0 [ 757.221529][ T976] usb 9-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 757.230922][ T976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.269214][ T976] usb 9-1: config 0 descriptor?? [ 757.357312][T13690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 757.737148][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 758.132162][ T6228] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 758.383775][ T6228] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.408690][ T6228] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 758.438413][T13703] usb usb5: usbfs: process 13703 (syz.9.1661) did not claim interface 0 before use [ 758.769830][ T6228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 758.785914][ T6228] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 758.795504][ T6228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.856717][ T976] usbhid 9-1:0.0: can't add hid device: -71 [ 758.880745][T12737] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 758.888530][ T976] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 758.900897][ T6228] usb 6-1: config 0 descriptor?? [ 758.942500][ T976] usb 9-1: USB disconnect, device number 17 [ 759.093197][T12737] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.115137][T13713] evm: overlay not supported [ 759.122707][T12737] usb 10-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 759.155365][T12737] usb 10-1: config 0 interface 0 has no altsetting 0 [ 759.180997][T12737] usb 10-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 759.228617][T12737] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.237964][ T30] audit: type=1400 audit(1767303876.682:1709): avc: denied { watch } for pid=13701 comm="syz.7.1666" path="/70/bus/file1" dev="overlay" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 759.270745][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 759.276670][T12737] usb 10-1: config 0 descriptor?? [ 759.325010][ T30] audit: type=1400 audit(1767303876.682:1710): avc: denied { watch_sb watch_reads } for pid=13701 comm="syz.7.1666" path="/70/bus/file1" dev="overlay" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 759.443538][ T9] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 759.456291][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 760.898792][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 761.052401][ T6228] usbhid 6-1:0.0: can't add hid device: -71 [ 761.058837][ T6228] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 761.066846][T12737] usbhid 10-1:0.0: can't add hid device: -71 [ 761.070041][ T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 761.091390][T12737] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 761.127261][ T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 761.138917][T12737] usb 10-1: USB disconnect, device number 21 [ 761.154492][ T6228] usb 6-1: USB disconnect, device number 21 [ 761.182616][ T9] usb 7-1: Manufacturer: syz [ 761.232831][ T9] usb 7-1: config 0 descriptor?? [ 761.238274][T13709] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 761.275443][ T9] igorplugusb 7-1:0.0: endpoint incorrect [ 761.953947][ T6228] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 762.640685][ T6228] usb 6-1: Using ep0 maxpacket: 8 [ 762.648017][ T6228] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 762.657649][ T6228] usb 6-1: config 0 has no interface number 0 [ 762.669621][ T6228] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 762.690304][ T6228] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 762.743210][ T6228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.782648][ T6228] usb 6-1: config 0 descriptor?? [ 762.830347][T11328] Bluetooth: hci7: unexpected event for opcode 0x5de4 [ 762.837646][T11328] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 762.850336][ T6228] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 763.289659][ T6228] usb 7-1: USB disconnect, device number 10 [ 763.955660][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 764.095149][ T6228] usb 6-1: USB disconnect, device number 22 [ 764.538834][ T30] audit: type=1400 audit(1767303881.982:1711): avc: denied { ioctl } for pid=13758 comm="syz.5.1681" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 764.590805][ T6228] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 765.633436][ T6228] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 765.642414][T13759] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 765.648951][T13759] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 765.656509][ T6228] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 765.789842][ T6228] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 765.801348][ T6228] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 765.811351][ T6228] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 765.819716][ T6228] usb 8-1: Manufacturer: syz [ 765.833344][ T6228] usb 8-1: config 0 descriptor?? [ 765.841848][T13759] vhci_hcd vhci_hcd.0: Device attached [ 766.331911][T13753] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 766.362810][T13759] ipt_REJECT: TCP_RESET invalid for non-tcp [ 766.655164][ T6228] igorplugusb 8-1:0.0: endpoint incorrect [ 766.700741][ T6390] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 766.712071][T13764] vhci_hcd: connection closed [ 766.712300][ T6087] vhci_hcd vhci_hcd.5: stop threads [ 766.748903][ T6087] vhci_hcd vhci_hcd.5: release socket [ 766.754963][ T9] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 767.723235][ T6087] vhci_hcd vhci_hcd.5: disconnect device [ 767.872205][ T9] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.900639][ T9] usb 10-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 767.943402][ T5887] usb 8-1: USB disconnect, device number 17 [ 767.973285][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 767.980015][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 768.036169][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.077691][ T9] usb 10-1: config 0 descriptor?? [ 768.085604][T11315] udevd[11315]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 768.233998][T13778] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 769.970850][ T5887] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 770.160747][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 770.190157][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.223065][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.259390][ T5887] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 770.284140][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.312773][ T5887] usb 6-1: config 0 descriptor?? [ 770.632920][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 770.639054][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 770.679674][ T9] usb 10-1: USB disconnect, device number 22 [ 770.747384][T11328] Bluetooth: hci7: unexpected event for opcode 0x5de4 [ 770.785512][T11328] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 771.098373][ T5887] corsair 0003:1B1C:1B02.0018: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 771.124818][ T5887] corsair 0003:1B1C:1B02.0018: Read invalid backlight brightness: d4. [ 771.270565][T11328] Bluetooth: hci9: unexpected event for opcode 0x5de4 [ 771.277576][T11328] Bluetooth: hci9: ACL packet for unknown connection handle 200 [ 771.581759][ T5887] usb 6-1: USB disconnect, device number 23 [ 771.756930][T13794] fido_id[13794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 771.821224][ T6390] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 771.853751][T13803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 772.840989][T13811] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 772.847503][T13811] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 772.855006][T13811] vhci_hcd vhci_hcd.0: Device attached [ 774.040771][ T6390] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 774.052030][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 774.070683][ T5887] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 774.120748][ T6390] usb 49-1: new full-speed USB device number 3 using vhci_hcd [ 774.139332][T13821] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 774.915430][ T5887] usb 9-1: device descriptor read/64, error -71 [ 774.960730][T11662] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 775.153590][T11662] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 775.180890][ T5887] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 775.201482][T11662] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 775.211872][T11662] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 775.230829][T11662] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 775.258983][T11662] usb 10-1: SerialNumber: syz [ 775.330672][ T5887] usb 9-1: device descriptor read/64, error -71 [ 775.380389][T13812] vhci_hcd: connection reset by peer [ 775.511294][ T6205] vhci_hcd vhci_hcd.8: stop threads [ 775.516525][ T6205] vhci_hcd vhci_hcd.8: release socket [ 775.532250][ T5887] usb usb9-port1: attempt power cycle [ 775.560766][ T6205] vhci_hcd vhci_hcd.8: disconnect device [ 775.636435][ T30] audit: type=1400 audit(1767303893.082:1712): avc: denied { read write } for pid=13815 comm="syz.9.1695" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 776.142088][T13830] bridge5: entered promiscuous mode [ 776.512597][T11328] Bluetooth: hci9: unexpected event for opcode 0x5de4 [ 776.520301][T11328] Bluetooth: hci9: ACL packet for unknown connection handle 200 [ 776.652375][ T30] audit: type=1400 audit(1767303893.082:1713): avc: denied { open } for pid=13815 comm="syz.9.1695" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 776.689259][ T30] audit: type=1400 audit(1767303893.112:1714): avc: denied { ioctl } for pid=13815 comm="syz.9.1695" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 777.095714][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 777.213243][T11662] usb 10-1: 0:2 : does not exist [ 777.225799][T11662] usb 10-1: USB disconnect, device number 23 [ 777.250052][T11328] Bluetooth: hci7: unexpected event for opcode 0x5de4 [ 777.358412][T11328] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 777.465551][T13840] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 777.472081][T13840] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 777.479625][T13840] vhci_hcd vhci_hcd.0: Device attached [ 777.801153][ T5887] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 777.810832][T11328] Bluetooth: hci9: unexpected event for opcode 0x5de4 [ 777.817708][T11328] Bluetooth: hci9: ACL packet for unknown connection handle 200 [ 777.857713][ T9] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 778.029565][T13849] usb usb5: usbfs: process 13849 (syz.5.1700) did not claim interface 0 before use [ 778.443341][ T9] usb 47-1: new full-speed USB device number 7 using vhci_hcd [ 778.490798][ T5887] usb 8-1: config 0 has no interfaces? [ 778.511417][ T5887] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=30.22 [ 778.651694][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.665740][ T5887] usb 8-1: config 0 descriptor?? [ 778.711458][T11313] udevd[11313]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.790747][ T5894] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 778.945698][ T5894] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.970678][ T5894] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 778.987304][ T5894] usb 6-1: config 0 interface 0 has no altsetting 0 [ 778.999845][T11328] Bluetooth: hci9: SCO packet for unknown connection handle 201 [ 779.004880][ T5894] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 779.023530][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.044825][ T5894] usb 6-1: config 0 descriptor?? [ 779.050447][T13856] tipc: Enabling of bearer rejected, failed to enable media [ 779.079491][T13856] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1704'. [ 779.176029][T12737] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 779.194779][T12737] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 779.230975][T11662] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 779.261768][ T6390] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 779.882750][T11662] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 779.892168][T11662] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 779.972496][T11662] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 780.015155][T11662] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 780.025548][T11662] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 780.035848][T11662] usb 10-1: Manufacturer: syz [ 780.113938][T11662] usb 10-1: config 0 descriptor?? [ 780.134525][T13857] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 780.799308][ T5894] usbhid 6-1:0.0: can't add hid device: -71 [ 780.805659][ T5894] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 780.815923][ T5894] usb 6-1: USB disconnect, device number 24 [ 780.878316][T11662] igorplugusb 10-1:0.0: endpoint incorrect [ 780.950028][ T5887] usb 8-1: USB disconnect, device number 18 [ 780.983381][T13841] vhci_hcd: connection reset by peer [ 781.021548][ T6087] vhci_hcd vhci_hcd.7: stop threads [ 781.036231][ T6087] vhci_hcd vhci_hcd.7: release socket [ 781.080905][ T6087] vhci_hcd vhci_hcd.7: disconnect device [ 781.815800][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 782.164022][T13879] bridge6: entered promiscuous mode [ 782.876784][ T5887] usb 10-1: USB disconnect, device number 24 [ 783.386109][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 783.440069][ T30] audit: type=1400 audit(1767303900.882:1715): avc: denied { create } for pid=13887 comm="syz.6.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 784.051252][T13889] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1715'. [ 784.060233][T13889] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 784.074276][ T9] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 784.083932][T13894] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 784.090478][T13894] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 784.097976][T13894] vhci_hcd vhci_hcd.0: Device attached [ 784.145092][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 785.300755][T13905] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1708'. [ 785.318177][T13905] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1708'. [ 785.340721][ T976] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 785.410746][ T6228] usb 10-1: new low-speed USB device number 25 using dummy_hcd [ 785.421009][ T976] usb 51-1: new full-speed USB device number 3 using vhci_hcd [ 786.610835][T13895] vhci_hcd: connection reset by peer [ 786.670830][ T34] vhci_hcd vhci_hcd.9: stop threads [ 786.676083][ T34] vhci_hcd vhci_hcd.9: release socket [ 786.755349][ T34] vhci_hcd vhci_hcd.9: disconnect device [ 786.820871][T11328] Bluetooth: hci7: unexpected event for opcode 0x5de4 [ 786.829129][T11328] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 786.900348][ T6228] usb 10-1: device not accepting address 25, error -71 [ 787.340809][ T9] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 787.371102][T13919] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 787.377625][T13919] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 787.385073][T13919] vhci_hcd vhci_hcd.0: Device attached [ 787.611011][ T6390] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 787.656022][ T9] usb 7-1: config 0 has no interfaces? [ 787.663121][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 787.679782][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.720754][ T6390] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 787.802117][T13927] bridge7: entered promiscuous mode [ 788.557266][ T9] usb 7-1: config 0 descriptor?? [ 789.329248][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 789.710286][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 789.831152][T13920] vhci_hcd: connection reset by peer [ 789.867541][ T9] usb 7-1: USB disconnect, device number 11 [ 789.880744][ T7439] vhci_hcd vhci_hcd.6: stop threads [ 789.885991][ T7439] vhci_hcd vhci_hcd.6: release socket [ 789.970815][ T7439] vhci_hcd vhci_hcd.6: disconnect device [ 790.018083][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 790.034237][T11328] Bluetooth: hci0: unexpected event for opcode 0x5de4 [ 790.041441][T11328] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 790.047967][T11328] Bluetooth: Wrong link type (-22) [ 790.057615][T11328] Bluetooth: hci0: link tx timeout [ 790.062941][T11328] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 790.313066][T13945] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 790.593745][ T976] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 790.717603][T11328] Bluetooth: hci9: unexpected event for opcode 0x5de4 [ 790.725836][T11328] Bluetooth: hci9: ACL packet for unknown connection handle 200 [ 791.091589][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 791.371182][T13966] bridge2: entered promiscuous mode [ 791.400720][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 791.620791][ T43] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 791.821043][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 791.880465][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.987550][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.080076][ T43] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 792.110053][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.150086][ T43] usb 8-1: config 0 descriptor?? [ 792.162959][T11328] Bluetooth: hci0: command 0x0406 tx timeout [ 792.385524][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 792.475858][ T9] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 792.520760][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.540656][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 792.571061][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 792.580128][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.620679][ T9] usb 7-1: Product: syz [ 792.644746][ T9] usb 7-1: Manufacturer: syz [ 792.649474][ T9] usb 7-1: SerialNumber: syz [ 793.089397][ T43] corsair 0003:1B1C:1B02.001A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.7-1/input0 [ 793.100892][ T6390] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 793.262164][ T43] corsair 0003:1B1C:1B02.001A: Failed to get K90 initial state (error -71). [ 793.272872][T13983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 793.341868][ T43] usb 8-1: USB disconnect, device number 19 [ 793.486646][ T9] usb 7-1: 0:2 : does not exist [ 793.971053][T13988] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 793.977609][T13988] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 793.985170][T13988] vhci_hcd vhci_hcd.0: Device attached [ 794.171433][ T6228] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 794.250739][ T976] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 794.263776][ T6228] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 794.298384][T13995] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 794.432064][ T976] usb 6-1: config 0 has no interfaces? [ 794.488872][ T976] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 794.522103][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 794.546348][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.651150][ T5894] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 795.749723][ T9] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 795.787266][ T976] usb 6-1: config 0 descriptor?? [ 795.822260][ T9] usb 7-1: USB disconnect, device number 12 [ 795.900816][ T5894] usb 9-1: Using ep0 maxpacket: 8 [ 795.937176][ T5894] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 795.966290][ T5894] usb 9-1: config 0 has no interface number 0 [ 795.980571][ T5894] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 796.010674][ T5894] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 796.030705][ T5894] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 796.044260][ T5894] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 59256, setting to 1024 [ 796.057244][ T5894] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 796.072295][ T5894] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 796.090235][ T5894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.110683][ T5894] usb 9-1: config 0 descriptor?? [ 796.119620][T13995] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 796.134357][ T5894] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 796.148423][T11334] Bluetooth: hci7: unexpected event for opcode 0x5de4 [ 796.165666][T11334] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 796.586006][ T976] usb 9-1: USB disconnect, device number 21 [ 796.636945][ T976] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 796.649479][T14004] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 797.451822][T13990] vhci_hcd: connection reset by peer [ 797.487206][ T7463] vhci_hcd vhci_hcd.5: stop threads [ 797.500825][ T7463] vhci_hcd vhci_hcd.5: release socket [ 797.506333][ T7463] vhci_hcd vhci_hcd.5: disconnect device [ 797.589200][T11662] usb 6-1: USB disconnect, device number 25 [ 798.255300][T14015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.469149][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 799.503864][ T6228] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 801.813372][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 803.578031][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 803.741581][ T30] audit: type=1800 audit(1767303921.192:1716): pid=14047 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1758" name="bus" dev="overlay" ino=565 res=0 errno=0 [ 803.750795][T11334] Bluetooth: hci0: unexpected event for opcode 0x5de4 [ 803.999976][T11334] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 804.182437][T14052] bridge2: entered promiscuous mode [ 804.224914][T14054] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 804.231462][T14054] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 804.239197][T14054] vhci_hcd vhci_hcd.0: Device attached [ 804.524432][ T43] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 804.647609][ T5894] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 804.721143][ T5894] usb 47-1: new full-speed USB device number 8 using vhci_hcd [ 804.844233][ T43] usb 8-1: config 0 has no interfaces? [ 804.849751][ T43] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 806.287754][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.321732][ T43] usb 8-1: config 0 descriptor?? [ 806.460633][ T30] audit: type=1400 audit(1767303923.892:1717): avc: denied { create } for pid=14065 comm="syz.9.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 806.520789][ T30] audit: type=1400 audit(1767303923.892:1718): avc: denied { connect } for pid=14065 comm="syz.9.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 806.549761][ T30] audit: type=1400 audit(1767303923.892:1719): avc: denied { write } for pid=14065 comm="syz.9.1753" lport=5310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 807.630702][T14055] vhci_hcd: connection reset by peer [ 807.686888][T11662] usb 8-1: USB disconnect, device number 20 [ 807.709366][ T3809] vhci_hcd vhci_hcd.7: stop threads [ 807.751260][ T3809] vhci_hcd vhci_hcd.7: release socket [ 808.811213][ T3809] vhci_hcd vhci_hcd.7: disconnect device [ 808.815631][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.823813][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.878413][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 809.254068][T14083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 809.310813][ T9] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 809.543271][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 809.598758][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.618300][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.669908][ T9] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 809.900811][ T5894] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 809.919038][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.026040][T14088] fuse: Bad value for 'fd' [ 810.134511][ T9] usb 10-1: config 0 descriptor?? [ 810.476235][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 810.558882][ T9] corsair 0003:1B1C:1B02.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.9-1/input0 [ 810.789761][ T9] corsair 0003:1B1C:1B02.001B: Read invalid backlight brightness: d4. [ 811.201100][T11662] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 811.243646][ T9] usb 10-1: USB disconnect, device number 27 [ 811.330732][T14104] bridge3: entered promiscuous mode [ 811.392726][T11662] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.423758][T11662] usb 8-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 811.456444][T11662] usb 8-1: config 0 interface 0 has no altsetting 0 [ 811.469756][T11662] usb 8-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 811.485344][T11662] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.865492][T11662] usb 8-1: config 0 descriptor?? [ 813.550526][T14116] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 813.557076][T14116] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 813.564588][T14116] vhci_hcd vhci_hcd.0: Device attached [ 813.628420][T11662] usbhid 8-1:0.0: can't add hid device: -71 [ 813.650939][T11662] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 813.674291][T11662] usb 8-1: USB disconnect, device number 21 [ 813.719404][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 813.747857][T11334] Bluetooth: hci8: unexpected event for opcode 0x5de4 [ 813.757980][T11334] Bluetooth: hci8: ACL packet for unknown connection handle 200 [ 813.790779][ T43] usb 10-1: new low-speed USB device number 28 using dummy_hcd [ 813.810844][ T6390] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 815.045152][T14123] vhci_hcd: connection closed [ 815.054449][ T3926] vhci_hcd vhci_hcd.9: stop threads [ 815.080095][ T6390] usb 51-1: new full-speed USB device number 4 using vhci_hcd [ 815.135124][ T3926] vhci_hcd vhci_hcd.9: release socket [ 815.154157][ T3926] vhci_hcd vhci_hcd.9: disconnect device [ 815.285976][ T30] audit: type=1800 audit(1767303932.732:1720): pid=14135 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.1782" name="bus" dev="overlay" ino=599 res=0 errno=0 [ 815.408424][T14135] bridge3: entered promiscuous mode [ 815.911136][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 816.053481][T11416] udevd[11416]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 816.108412][T14142] bridge3: entered promiscuous mode [ 816.187770][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 816.208333][ T9] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 816.250665][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 816.289004][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 816.331634][ T9] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 816.350724][ T9] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 816.373583][ T9] usb 9-1: Manufacturer: syz [ 816.392375][ T9] usb 9-1: config 0 descriptor?? [ 816.398055][ T30] audit: type=1400 audit(1767303933.842:1721): avc: denied { watch watch_reads } for pid=14147 comm="syz.6.1789" path="pipe:[38467]" dev="pipefs" ino=38467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 816.439934][T14137] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 816.449928][ T9] igorplugusb 9-1:0.0: endpoint incorrect [ 816.610703][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 817.464805][ T30] audit: type=1400 audit(1767303934.312:1722): avc: denied { write } for pid=14147 comm="syz.6.1789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 818.518130][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 818.664978][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.676224][ T5887] usb 9-1: USB disconnect, device number 22 [ 818.704505][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.738973][ T9] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 818.766190][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.893399][T11334] Bluetooth: hci6: unexpected event for opcode 0x5de4 [ 818.900252][T11334] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 818.952498][ T9] usb 8-1: config 0 descriptor?? [ 819.077401][T14167] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 819.083955][T14167] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 819.091621][T14167] vhci_hcd vhci_hcd.0: Device attached [ 819.554910][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 819.583514][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 819.595110][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 819.605884][T11600] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 819.623805][T11334] Bluetooth: hci8: unexpected event for opcode 0x5de4 [ 819.631055][ T9] usb 8-1: USB disconnect, device number 22 [ 819.662384][ T5887] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 819.670720][T11600] usb 49-1: new full-speed USB device number 4 using vhci_hcd [ 819.681890][T11334] Bluetooth: hci8: ACL packet for unknown connection handle 200 [ 819.939270][ T5887] usb 9-1: config 0 has no interfaces? [ 820.051360][ T5887] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 820.131696][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.164847][ T5887] usb 9-1: config 0 descriptor?? [ 820.230730][ T6390] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 820.278241][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 822.048712][ T5887] usb 9-1: USB disconnect, device number 23 [ 822.060679][T14169] vhci_hcd: connection reset by peer [ 822.066953][ T6087] vhci_hcd vhci_hcd.8: stop threads [ 822.086285][ T6087] vhci_hcd vhci_hcd.8: release socket [ 822.132805][ T6087] vhci_hcd vhci_hcd.8: disconnect device [ 822.210735][T14189] binder: 14178:14189 ioctl c0306201 0 returned -14 [ 822.283817][T14194] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 822.290429][T14194] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 822.298055][T14194] vhci_hcd vhci_hcd.0: Device attached [ 822.581250][ T9] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 822.646394][T14197] bridge4: entered promiscuous mode [ 822.670811][ T5887] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 822.742752][ T9] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 822.958465][ T5887] usb 7-1: config 0 has no interfaces? [ 823.012840][ T5887] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 823.110668][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.132479][ T5887] usb 7-1: config 0 descriptor?? [ 823.465370][ T5887] usb 7-1: USB disconnect, device number 13 [ 823.472227][T14195] vhci_hcd: connection reset by peer [ 823.481809][ T13] vhci_hcd vhci_hcd.6: stop threads [ 823.506116][ T13] vhci_hcd vhci_hcd.6: release socket [ 823.583649][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 824.009809][T14207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 824.116841][ T5894] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 824.342511][ T5894] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.365153][ T5894] usb 10-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 824.447921][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 824.448134][ T5894] usb 10-1: config 0 interface 0 has no altsetting 0 [ 824.862226][ T5894] usb 10-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 824.876046][ T5887] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 824.890830][ T5894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.921317][T14216] bridge4: entered promiscuous mode [ 824.929643][ T5894] usb 10-1: config 0 descriptor?? [ 824.940953][T11600] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 825.003895][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 825.043577][T11334] Bluetooth: hci8: unexpected event for opcode 0x5de4 [ 825.051044][ T5887] usb 9-1: Using ep0 maxpacket: 16 [ 825.136852][T11334] Bluetooth: hci8: ACL packet for unknown connection handle 200 [ 825.138919][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.150714][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.186045][T11334] Bluetooth: hci0: unexpected event for opcode 0x5de4 [ 825.193802][T11334] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 825.193920][ T5887] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 825.662334][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.773151][ T5887] usb 9-1: config 0 descriptor?? [ 826.006266][T14231] fuse: Bad value for 'rootmode' [ 826.031323][T14230] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 826.166193][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 826.303443][ T5894] usbhid 10-1:0.0: can't add hid device: -71 [ 826.309737][ T5894] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 826.331316][ T5894] usb 10-1: USB disconnect, device number 29 [ 826.346760][T11662] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 826.355052][T11334] Bluetooth: hci6: unexpected event for opcode 0x5de4 [ 826.362585][T11334] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 826.530791][T11662] usb 7-1: Using ep0 maxpacket: 8 [ 826.536175][ T5887] corsair 0003:1B1C:1B02.001C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.8-1/input0 [ 826.557621][T11662] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 826.557644][ T5887] corsair 0003:1B1C:1B02.001C: Read invalid backlight brightness: d4. [ 826.589225][T11662] usb 7-1: config 0 has no interface number 0 [ 826.590960][T11601] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 826.650490][T11662] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 826.664366][T11334] Bluetooth: hci7: unexpected event for opcode 0x5de4 [ 826.672147][T11334] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 826.684781][T11662] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 826.696630][T11662] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 826.710723][T11662] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 59256, setting to 1024 [ 826.722906][T11662] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 826.736439][T11662] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 826.747338][T11662] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.860671][T11601] usb 8-1: Using ep0 maxpacket: 16 [ 826.895757][T11662] usb 7-1: config 0 descriptor?? [ 826.895860][T11601] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.905531][T14230] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 827.213904][T11601] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.240706][T11601] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 827.270266][T11601] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.270448][T11662] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 827.283174][T11601] usb 8-1: config 0 descriptor?? [ 827.290842][ T976] usb 9-1: USB disconnect, device number 24 [ 827.427191][T11334] Bluetooth: hci7: unexpected event for opcode 0x5de4 [ 827.435508][T11334] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 827.908675][T14249] bridge8: entered promiscuous mode [ 827.946878][ T9] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 828.224071][T11601] corsair 0003:1B1C:1B02.001D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.7-1/input0 [ 828.448435][T11601] corsair 0003:1B1C:1B02.001D: Failed to get K90 initial state (error -71). [ 828.513296][T11601] usb 8-1: USB disconnect, device number 23 [ 828.552568][ T976] usb 7-1: USB disconnect, device number 14 [ 828.572854][ T976] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 828.615178][T14252] fido_id[14252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 828.804087][T14257] binder: 14250:14257 ioctl c0306201 0 returned -14 [ 828.887788][T14261] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 828.894425][T14261] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 828.902543][T14261] vhci_hcd vhci_hcd.0: Device attached [ 829.316579][T14259] bridge9: entered promiscuous mode [ 829.340813][ T976] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 829.381990][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 829.410735][ T976] usb 51-1: new full-speed USB device number 5 using vhci_hcd [ 829.462654][ T6390] usb 10-1: new low-speed USB device number 30 using dummy_hcd [ 830.743621][T14283] tipc: Enabling of bearer rejected, failed to enable media [ 830.881172][ T6390] usb 10-1: config 0 has no interfaces? [ 830.886763][ T6390] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 830.952511][ T6390] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.014469][ T6390] usb 10-1: config 0 descriptor?? [ 831.015164][T14283] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1820'. [ 831.118686][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 831.140301][T11334] Bluetooth: hci8: unexpected event for opcode 0x5de4 [ 831.148412][T11334] Bluetooth: hci8: ACL packet for unknown connection handle 200 [ 831.636430][T11334] Bluetooth: hci0: unexpected event for opcode 0x5de4 [ 831.729909][T11334] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 831.828438][T14286] fuse: Bad value for 'rootmode' [ 833.076948][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 833.094831][ T9] usb 10-1: USB disconnect, device number 30 [ 833.101950][T14263] vhci_hcd: connection reset by peer [ 833.110735][ T1160] vhci_hcd vhci_hcd.9: stop threads [ 833.131577][ T1160] vhci_hcd vhci_hcd.9: release socket [ 833.159319][ T1160] vhci_hcd vhci_hcd.9: disconnect device [ 833.286440][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 833.415110][T11334] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 833.887161][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 835.280703][ T976] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 835.379708][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 836.077532][T14329] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1835'. [ 836.090821][T11601] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 836.101728][T14329] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1835'. [ 836.260661][T11601] usb 8-1: Using ep0 maxpacket: 16 [ 836.272933][T11601] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.310724][T11601] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.345720][T11601] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 836.400698][T11601] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.422300][T11601] usb 8-1: config 0 descriptor?? [ 837.006928][T11601] corsair 0003:1B1C:1B02.001E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.7-1/input0 [ 837.116153][T14339] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 838.242646][T11601] corsair 0003:1B1C:1B02.001E: Failed to get K90 initial state (error -71). [ 838.266487][T11601] usb 8-1: USB disconnect, device number 24 [ 841.281093][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 841.380814][T11334] Bluetooth: hci8: unexpected event for opcode 0x5de4 [ 841.389872][T11334] Bluetooth: hci8: ACL packet for unknown connection handle 200 [ 842.220021][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 843.583474][T14374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.001642][T14380] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 844.008281][T14380] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 844.015903][T14380] vhci_hcd vhci_hcd.0: Device attached [ 844.320728][T11601] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 844.372191][ T5887] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 845.546720][ T5887] usb 49-1: new full-speed USB device number 5 using vhci_hcd [ 845.590714][T14381] vhci_hcd: connection reset by peer [ 845.610312][T11601] usb 9-1: device descriptor read/all, error -71 [ 845.696782][ T145] vhci_hcd vhci_hcd.8: stop threads [ 845.724879][ T145] vhci_hcd vhci_hcd.8: release socket [ 845.749514][ T145] vhci_hcd vhci_hcd.8: disconnect device [ 846.293850][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 846.472086][ T6390] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 847.010844][T14402] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 847.017407][T14402] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 847.025552][T14402] vhci_hcd vhci_hcd.0: Device attached [ 847.061901][ T6390] usb 7-1: Using ep0 maxpacket: 16 [ 847.220721][T11601] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 847.227261][ T6390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.238690][ T6390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.248511][ T6390] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 847.257593][ T6390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.271521][ T9] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 847.271617][ T6390] usb 7-1: config 0 descriptor?? [ 847.280691][T11601] usb 47-1: new full-speed USB device number 9 using vhci_hcd [ 847.782224][ T9] usb 8-1: config 0 has no interfaces? [ 847.787722][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 847.803722][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.822769][ T9] usb 8-1: config 0 descriptor?? [ 847.830777][T11662] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 848.020453][T11662] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.063993][ T6390] corsair 0003:1B1C:1B02.001F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 848.091673][T11662] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 848.112903][T11662] usb 6-1: config 0 interface 0 has no altsetting 0 [ 848.157308][T11662] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 848.245696][ T6390] corsair 0003:1B1C:1B02.001F: Failed to get K90 initial state (error -71). [ 848.283812][T11662] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.348124][T11662] usb 6-1: config 0 descriptor?? [ 848.363824][ T6390] usb 7-1: USB disconnect, device number 15 [ 848.478084][T14416] fido_id[14416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 849.940717][T14404] vhci_hcd: connection reset by peer [ 850.010146][ T6625] vhci_hcd vhci_hcd.7: stop threads [ 850.015828][ T43] usb 8-1: USB disconnect, device number 25 [ 850.061473][ T6625] vhci_hcd vhci_hcd.7: release socket [ 850.102268][ T6625] vhci_hcd vhci_hcd.7: disconnect device [ 850.137928][T11662] usbhid 6-1:0.0: can't add hid device: -71 [ 850.146242][T11662] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 850.156788][T11662] usb 6-1: USB disconnect, device number 26 [ 850.160383][T11315] udevd[11315]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 851.358046][ T5887] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 851.487734][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 851.687964][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 852.473873][T11334] Bluetooth: hci9: SCO packet for unknown connection handle 200 [ 852.507179][T14444] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 852.521380][T14444] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 852.528908][T14444] vhci_hcd vhci_hcd.0: Device attached [ 852.681029][ T9] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 852.741144][ T5894] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 852.851991][T11601] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 852.858659][ T5887] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 852.866569][ T5894] usb 45-1: new full-speed USB device number 4 using vhci_hcd [ 853.141974][ T9] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.175644][ T5887] usb 7-1: config 0 has no interfaces? [ 853.205990][ T5887] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 853.240658][ T9] usb 8-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 853.253659][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.285475][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 853.306821][ T5887] usb 7-1: config 0 descriptor?? [ 853.333852][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 853.369264][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.417015][ T9] usb 8-1: config 0 descriptor?? [ 853.724919][T14455] usb usb5: usbfs: process 14455 (syz.9.1859) did not claim interface 0 before use [ 854.410733][ T43] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 854.419219][T14457] bridge10: entered promiscuous mode [ 854.572689][ T43] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.647933][T11601] usb 7-1: USB disconnect, device number 16 [ 854.660215][T14445] vhci_hcd: connection reset by peer [ 854.682444][ T6625] vhci_hcd vhci_hcd.6: stop threads [ 854.699057][ T43] usb 10-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 854.715537][ T6625] vhci_hcd vhci_hcd.6: release socket [ 854.730728][ T6625] vhci_hcd vhci_hcd.6: disconnect device [ 854.738449][ T43] usb 10-1: config 0 interface 0 has no altsetting 0 [ 854.745351][ T43] usb 10-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 854.754671][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.773796][ T43] usb 10-1: config 0 descriptor?? [ 854.879869][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 854.887889][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 854.899965][ T9] usb 8-1: USB disconnect, device number 26 [ 855.077509][T11315] udevd[11315]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 855.245270][T14465] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 855.251815][T14465] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 855.259616][T14465] vhci_hcd vhci_hcd.0: Device attached [ 855.333496][T11334] Bluetooth: hci8: unexpected event for opcode 0x5de4 [ 855.342992][T11334] Bluetooth: hci8: ACL packet for unknown connection handle 200 [ 855.706071][T11601] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 855.912502][T11601] usb 7-1: config 0 has no interfaces? [ 855.936424][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 855.940996][T11334] Bluetooth: hci8: unexpected event for opcode 0x5de4 [ 855.947740][T11601] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 855.993583][T11334] Bluetooth: hci8: ACL packet for unknown connection handle 200 [ 855.999392][T11601] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.368934][T11601] usb 7-1: config 0 descriptor?? [ 856.469474][ T43] usbhid 10-1:0.0: can't add hid device: -71 [ 856.481082][ T43] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 856.498065][ T43] usb 10-1: USB disconnect, device number 31 [ 857.586389][T11334] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 857.725794][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 858.710677][T14468] vhci_hcd: connection reset by peer [ 858.728731][ T8709] vhci_hcd vhci_hcd.6: stop threads [ 858.739149][T11662] usb 7-1: USB disconnect, device number 17 [ 858.745145][ T8709] vhci_hcd vhci_hcd.6: release socket [ 858.754375][ T8709] vhci_hcd vhci_hcd.6: disconnect device [ 859.015922][ T5894] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 860.531157][ T6228] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 860.693666][ T6228] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.715087][ T6228] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 860.743235][ T6228] usb 7-1: config 0 interface 0 has no altsetting 0 [ 860.757184][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 860.758326][ T6228] usb 7-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 860.789982][ T6228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.803050][ T6228] usb 7-1: config 0 descriptor?? [ 860.875141][ T30] audit: type=1400 audit(1767303978.322:1723): avc: denied { connect } for pid=14507 comm="syz.9.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 860.928748][T14513] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1880'. [ 861.315184][ T30] audit: type=1800 audit(1767303978.602:1724): pid=14517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1885" name="bus" dev="overlay" ino=710 res=0 errno=0 [ 861.471068][ T43] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 861.954601][T14517] bridge5: entered promiscuous mode [ 862.132052][ T43] usb 10-1: Using ep0 maxpacket: 8 [ 862.567032][T11416] udevd[11416]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 862.588443][ T6228] usbhid 7-1:0.0: can't add hid device: -71 [ 862.610855][ T43] usb 10-1: config 2 has an invalid interface number: 208 but max is 0 [ 862.709881][ T6228] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 862.718421][ T43] usb 10-1: config 2 has no interface number 0 [ 862.725067][ T43] usb 10-1: config 2 interface 208 has no altsetting 0 [ 862.734413][ T6228] usb 7-1: USB disconnect, device number 18 [ 862.844970][T14523] usb usb5: usbfs: process 14523 (syz.5.1887) did not claim interface 0 before use [ 863.243726][ T43] usb 10-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=24.3a [ 863.271177][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.302516][ T43] usb 10-1: Product: syz [ 863.327945][ T43] usb 10-1: Manufacturer: syz [ 863.354352][ T43] usb 10-1: SerialNumber: syz [ 863.450666][ T6228] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 863.622647][ T6228] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.724969][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 863.738064][ T6228] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 863.761327][ T5894] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 863.782750][ T6228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 863.790314][ T6228] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 863.908177][T11662] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 864.123589][T14539] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 864.130108][T14539] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 864.138623][T14539] vhci_hcd vhci_hcd.0: Device attached [ 864.164989][ T6228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.182317][ T6228] usb 6-1: config 0 descriptor?? [ 864.280743][ T976] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 864.295131][ T5894] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 864.309998][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.320781][T12737] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 864.330572][T11662] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 864.340717][T11662] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.349478][T11662] usb 9-1: Product: syz [ 864.349483][ T5894] usb 7-1: Product: syz [ 864.349500][ T5894] usb 7-1: Manufacturer: syz [ 864.376996][T11662] usb 9-1: Manufacturer: syz [ 864.382166][T11662] usb 9-1: SerialNumber: syz [ 864.382437][ T5894] usb 7-1: SerialNumber: syz [ 864.391836][T12737] usb 47-1: new full-speed USB device number 10 using vhci_hcd [ 864.413969][T11662] usb 9-1: config 0 descriptor?? [ 864.427973][ T5894] usb 7-1: config 0 descriptor?? [ 864.442663][ T976] usb 8-1: config 0 has no interfaces? [ 864.448337][ T976] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 864.459599][ T976] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.473653][ T976] usb 8-1: config 0 descriptor?? [ 864.676509][ T43] gspca_main: mars-2.14.0 probing 093a:050f [ 864.707804][ T43] usb 10-1: USB disconnect, device number 32 [ 864.766699][ T976] usb 7-1: USB disconnect, device number 19 [ 864.808079][T11662] usb 9-1: USB disconnect, device number 27 [ 864.971121][T14532] netlink: 'syz.6.1890': attribute type 1 has an invalid length. [ 865.019870][T14534] netlink: 'syz.8.1891': attribute type 1 has an invalid length. [ 865.108666][T14532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 865.134294][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1890'. [ 865.162137][T14548] bond1: (slave veth3): Enslaving as an active interface with a down link [ 865.178833][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1891'. [ 865.210384][T14534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 865.227971][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1890'. [ 865.245738][T14535] bond2: (slave veth5): Enslaving as an active interface with a down link [ 865.269152][T14532] bond1: (slave dummy0): making interface the new active one [ 865.285517][T14532] dummy0: entered promiscuous mode [ 865.291860][T14532] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 865.317059][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1891'. [ 865.395583][ T30] audit: type=1800 audit(1767303982.842:1725): pid=14555 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.1895" name="bus" dev="overlay" ino=709 res=0 errno=0 [ 865.538892][T14532] bond1 (unregistering): (slave veth3): Releasing active interface [ 865.551728][T14532] bond1 (unregistering): (slave dummy0): Releasing active interface [ 865.563377][T14532] bond1 (unregistering): Released all slaves [ 865.583054][T14535] bond2: (slave dummy0): making interface the new active one [ 865.591937][T14535] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 865.607215][T14555] bridge4: entered promiscuous mode [ 865.695795][ T6228] usbhid 6-1:0.0: can't add hid device: -71 [ 865.710861][ T6228] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 866.834642][ T6228] usb 6-1: USB disconnect, device number 27 [ 866.850230][T14540] vhci_hcd: connection reset by peer [ 866.896263][ T5937] vhci_hcd vhci_hcd.7: stop threads [ 866.909028][ T5894] usb 8-1: USB disconnect, device number 27 [ 866.951052][ T5937] vhci_hcd vhci_hcd.7: release socket [ 866.957290][ T5937] vhci_hcd vhci_hcd.7: disconnect device [ 866.977717][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 867.123542][T11601] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 867.380909][T11601] usb 10-1: device descriptor read/64, error -71 [ 867.711061][T11601] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 867.718322][T14553] bond2 (unregistering): (slave veth5): Releasing active interface [ 867.728821][T14553] bond2 (unregistering): (slave dummy0): Releasing active interface [ 867.782792][T14553] bond2 (unregistering): Released all slaves [ 867.850690][T11601] usb 10-1: device descriptor read/64, error -71 [ 867.905193][T14576] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 868.896720][T11601] usb usb10-port1: attempt power cycle [ 869.082222][T14570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1899'. [ 869.266025][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 869.280730][T11601] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 869.341371][T11601] usb 10-1: device descriptor read/8, error -71 [ 869.576998][T12737] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 869.582429][T11601] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 869.630713][ T6228] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 869.631401][T11601] usb 10-1: device descriptor read/8, error -71 [ 869.780709][ T6228] usb 7-1: Using ep0 maxpacket: 8 [ 869.794462][T11601] usb usb10-port1: unable to enumerate USB device [ 869.929689][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.938076][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.963567][ T6228] usb 7-1: config 2 has an invalid interface number: 208 but max is 0 [ 869.978275][ T6228] usb 7-1: config 2 has no interface number 0 [ 869.995349][ T6228] usb 7-1: config 2 interface 208 has no altsetting 0 [ 870.037704][ T6228] usb 7-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=24.3a [ 870.146388][ T6228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.154971][T14585] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1903'. [ 870.164313][ T6228] usb 7-1: Product: syz [ 870.168491][ T6228] usb 7-1: Manufacturer: syz [ 870.175006][ T6228] usb 7-1: SerialNumber: syz [ 870.326145][T11334] Bluetooth: hci9: unexpected event for opcode 0x5de4 [ 870.352171][T11334] Bluetooth: hci9: ACL packet for unknown connection handle 200 [ 872.635779][T14605] bridge6: entered promiscuous mode [ 872.692302][ T30] audit: type=1800 audit(1767303990.062:1726): pid=14605 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1907" name="bus" dev="overlay" ino=750 res=0 errno=0 [ 872.780753][ T6228] usb 7-1: can't set config #2, error -71 [ 872.850436][ T6228] usb 7-1: USB disconnect, device number 20 [ 873.249005][T14610] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 873.255558][T14610] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 873.263555][T14610] vhci_hcd vhci_hcd.0: Device attached [ 874.760813][T12737] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 874.810717][T11601] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 874.850729][T12737] usb 45-1: new full-speed USB device number 5 using vhci_hcd [ 875.066399][T11601] usb 7-1: config 0 has no interfaces? [ 875.526943][T11601] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 875.575698][T11601] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.623839][T11601] usb 7-1: config 0 descriptor?? [ 875.879682][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 876.081533][T14621] tipc: Enabling of bearer rejected, failed to enable media [ 876.181414][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 876.270013][T11334] Bluetooth: hci8: unexpected event for opcode 0x5de4 [ 876.278139][T11334] Bluetooth: hci8: ACL packet for unknown connection handle 200 [ 876.715354][T14629] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 877.561801][T11601] usb 7-1: USB disconnect, device number 21 [ 877.717733][T14611] vhci_hcd: connection reset by peer [ 877.774860][ T5937] vhci_hcd vhci_hcd.6: stop threads [ 877.781667][ T5937] vhci_hcd vhci_hcd.6: release socket [ 877.788895][ T5937] vhci_hcd vhci_hcd.6: disconnect device [ 878.354953][T11334] Bluetooth: hci7: unexpected event for opcode 0x5de4 [ 878.362521][T11334] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 880.017536][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 880.060921][T12737] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 882.110836][T12737] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 882.275871][T11334] Bluetooth: hci0: unexpected event for opcode 0x5de4 [ 882.285822][T11334] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 882.456544][T12737] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.619209][T12737] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 882.687323][T12737] usb 6-1: config 0 interface 0 has no altsetting 0 [ 882.753458][T12737] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 882.780724][T12737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.811787][T12737] usb 6-1: config 0 descriptor?? [ 884.566008][T14677] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 884.572559][T14677] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 884.587364][T14677] vhci_hcd vhci_hcd.0: Device attached [ 884.793825][ T5894] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 884.950731][T11601] usb 10-1: new low-speed USB device number 37 using dummy_hcd [ 884.971133][ T5894] usb 51-1: new full-speed USB device number 6 using vhci_hcd [ 885.132894][T11601] usb 10-1: config 0 has no interfaces? [ 885.144003][T11601] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 885.172000][T11601] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.249867][T12737] usbhid 6-1:0.0: can't add hid device: -71 [ 885.272373][T11601] usb 10-1: config 0 descriptor?? [ 885.278252][T12737] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 885.305580][T12737] usb 6-1: USB disconnect, device number 28 [ 885.353212][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 887.247721][T14692] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 887.377615][T14678] vhci_hcd: connection reset by peer [ 887.414434][ T976] usb 10-1: USB disconnect, device number 37 [ 887.433344][ T6205] vhci_hcd vhci_hcd.9: stop threads [ 887.451840][ T6205] vhci_hcd vhci_hcd.9: release socket [ 887.478241][ T6205] vhci_hcd vhci_hcd.9: disconnect device [ 887.835547][T12737] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 887.954794][T11334] Bluetooth: hci7: unexpected event for opcode 0x5de4 [ 887.967393][T11334] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 888.091134][T12737] usb 7-1: Using ep0 maxpacket: 8 [ 888.160257][T12737] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 888.227756][T12737] usb 7-1: config 0 has no interface number 0 [ 888.309920][T12737] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 888.406215][T12737] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 888.516276][T12737] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 888.631162][T12737] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 888.674875][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 888.741097][T12737] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 888.750147][T12737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.765926][T12737] usb 7-1: config 0 descriptor?? [ 889.791922][T12737] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 890.027118][T12737] usb 7-1: USB disconnect, device number 22 [ 890.070893][T12737] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 890.150775][ T5894] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 890.171433][T14716] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1922'. [ 892.004823][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 892.570800][T12737] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 892.583004][T14736] tipc: Enabling of bearer rejected, failed to enable media [ 892.635775][T14730] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000' [ 892.749134][T12737] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.770366][T12737] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 892.814152][T12737] usb 6-1: config 0 interface 0 has no altsetting 0 [ 892.911385][T12737] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 892.940665][T12737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.982267][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 893.001693][T12737] usb 6-1: config 0 descriptor?? [ 893.231327][ T976] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 893.751123][ T976] usb 9-1: Using ep0 maxpacket: 16 [ 893.766645][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 893.784112][T11334] Bluetooth: hci8: unexpected event for opcode 0x5de4 [ 893.794115][T11334] Bluetooth: hci8: ACL packet for unknown connection handle 200 [ 893.932287][ T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.968321][ T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.980418][ T976] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 893.990725][ T976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.039999][ T976] usb 9-1: config 0 descriptor?? [ 894.460510][T14754] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 894.472223][T14754] Cannot find add_set index 0 as target [ 894.550258][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 897.496791][T12737] usbhid 6-1:0.0: can't add hid device: -71 [ 897.540732][T12737] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 897.577436][T12737] usb 6-1: USB disconnect, device number 29 [ 897.634572][ T976] usbhid 9-1:0.0: can't add hid device: -71 [ 897.670343][ T976] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 897.706766][ T976] usb 9-1: USB disconnect, device number 28 [ 899.290671][ T6228] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 899.492690][ T6228] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.551374][ T6228] usb 9-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 899.560449][ T6228] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.631214][ T6228] usb 9-1: config 0 descriptor?? [ 901.195891][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 902.163239][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 902.307878][T14790] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1950'. [ 902.430103][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 902.594327][T11334] Bluetooth: hci8: SCO packet for unknown connection handle 200 [ 902.700697][T12737] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 903.221093][T12737] usb 6-1: Using ep0 maxpacket: 8 [ 903.302728][T12737] usb 6-1: config 2 has an invalid interface number: 208 but max is 0 [ 903.379457][T12737] usb 6-1: config 2 has no interface number 0 [ 903.427075][T12737] usb 6-1: config 2 interface 208 has no altsetting 0 [ 903.444718][T12737] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=24.3a [ 903.570780][T12737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.657125][ T6228] usbhid 9-1:0.0: can't add hid device: -71 [ 903.673891][T12737] usb 6-1: Product: syz [ 903.685370][ T6228] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 903.697074][T12737] usb 6-1: Manufacturer: syz [ 903.719516][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 903.736243][T12737] usb 6-1: SerialNumber: syz [ 903.931529][T14803] tipc: Enabling of bearer rejected, failed to enable media [ 903.960881][ T6228] usb 9-1: USB disconnect, device number 29 [ 904.020812][T14805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 904.634188][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 905.721177][ T5894] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 905.882437][ T5894] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.923126][ T5894] usb 8-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 905.971604][T12737] gspca_main: mars-2.14.0 probing 093a:050f [ 906.065440][ T5894] usb 8-1: config 0 interface 0 has no altsetting 0 [ 906.090033][ T5894] usb 8-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 906.140278][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.204599][ T5894] usb 8-1: config 0 descriptor?? [ 906.435516][T12737] usb 6-1: USB disconnect, device number 30 [ 906.870989][T11328] Bluetooth: hci1: command 0x1003 tx timeout [ 906.878394][T11334] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 908.138246][ T5894] usbhid 8-1:0.0: can't add hid device: -71 [ 908.144330][ T5894] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 908.156777][ T5894] usb 8-1: USB disconnect, device number 28 [ 908.267447][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 909.280833][T11334] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 909.645216][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 909.852162][ T30] audit: type=1400 audit(1767304027.302:1727): avc: denied { connect } for pid=14844 comm="syz.7.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 910.057758][T14848] tipc: Enabling of bearer rejected, failed to enable media [ 910.098124][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 910.109935][T14850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 910.319162][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 910.368748][T11334] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 910.996361][T14859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 911.224177][T14864] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1971'. [ 912.231215][ T5894] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 912.980823][T12737] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 913.090655][ T5894] usb 8-1: Using ep0 maxpacket: 8 [ 913.255237][ T5894] usb 8-1: config 2 has an invalid interface number: 208 but max is 0 [ 913.279338][ T5894] usb 8-1: config 2 has no interface number 0 [ 913.369569][T12737] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.786118][ T5894] usb 8-1: config 2 interface 208 has no altsetting 0 [ 913.801115][T12737] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 913.832860][T12737] usb 6-1: config 0 interface 0 has no altsetting 0 [ 913.875069][ T30] audit: type=1800 audit(1767304031.322:1728): pid=14879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.1977" name="bus" dev="overlay" ino=826 res=0 errno=0 [ 913.952514][T12737] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 914.035645][T12737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.056096][T14880] bridge5: entered promiscuous mode [ 914.240809][T12737] usb 6-1: config 0 descriptor?? [ 914.892913][ T5894] usb 8-1: string descriptor 0 read error: -71 [ 914.899212][ T5894] usb 8-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=24.3a [ 914.909520][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.920274][ T5894] usb 8-1: can't set config #2, error -71 [ 914.927874][ T5894] usb 8-1: USB disconnect, device number 29 [ 915.056084][T11316] udevd[11316]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 916.562503][T12737] usbhid 6-1:0.0: can't add hid device: -71 [ 916.568518][T12737] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 916.578092][T12737] usb 6-1: USB disconnect, device number 31 [ 918.705474][T11334] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 920.540963][ T5894] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 920.730862][ T5894] usb 10-1: device descriptor read/64, error -71 [ 920.835492][T14925] usb usb5: usbfs: process 14925 (syz.8.1980) did not claim interface 0 before use [ 920.955946][ T30] audit: type=1400 audit(1767304038.402:1729): avc: denied { mount } for pid=14920 comm="syz.5.1984" name="/" dev="autofs" ino=48664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 920.965213][T14923] [ 920.980780][T14923] ====================================================== [ 920.987768][T14923] WARNING: possible circular locking dependency detected [ 920.994754][T14923] syzkaller #0 Tainted: G L [ 921.000696][T14923] ------------------------------------------------------ [ 921.007685][T14923] syz.5.1984/14923 is trying to acquire lock: [ 921.013718][T14923] ffff88805b8fd468 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0 [ 921.022737][T14923] [ 921.022737][T14923] but task is already holding lock: [ 921.030068][T14923] ffff888025c08948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 921.039771][T14923] [ 921.039771][T14923] which lock already depends on the new lock. [ 921.039771][T14923] [ 921.050141][T14923] [ 921.050141][T14923] the existing dependency chain (in reverse order) is: [ 921.059124][T14923] [ 921.059124][T14923] -> #3 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 921.066819][T14923] __mutex_lock+0x1aa/0x1ca0 [ 921.071905][T14923] autofs_notify_daemon+0x4a6/0xd60 [ 921.077598][T14923] autofs_wait+0x10f3/0x1ac0 [ 921.082677][T14923] autofs_mount_wait+0x132/0x3c0 [ 921.088105][T14923] autofs_d_automount+0x4b2/0x960 [ 921.093624][T14923] __traverse_mounts+0x1b9/0x830 [ 921.099059][T14923] step_into_slowpath+0x772/0xf50 [ 921.104575][T14923] path_lookupat+0x627/0xc40 [ 921.109653][T14923] filename_lookup+0x224/0x5f0 [ 921.114909][T14923] kern_path+0x35/0x50 [ 921.119483][T14923] lookup_bdev+0xd8/0x280 [ 921.124917][T14923] resume_store+0x1d6/0x490 [ 921.129919][T14923] kobj_attr_store+0x58/0x80 [ 921.135003][T14923] sysfs_kf_write+0xf2/0x150 [ 921.140430][T14923] kernfs_fop_write_iter+0x3af/0x570 [ 921.146208][T14923] vfs_write+0x7d3/0x11d0 [ 921.151030][T14923] ksys_write+0x12a/0x250 [ 921.155854][T14923] do_syscall_64+0xcd/0xf80 [ 921.160854][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.167237][T14923] [ 921.167237][T14923] -> #2 (&of->mutex){+.+.}-{4:4}: [ 921.174407][T14923] __mutex_lock+0x1aa/0x1ca0 [ 921.179491][T14923] kernfs_seq_start+0x4f/0x2a0 [ 921.184749][T14923] seq_read_iter+0x2c1/0x12d0 [ 921.189918][T14923] kernfs_fop_read_iter+0x46c/0x610 [ 921.195610][T14923] copy_splice_read+0x618/0xc20 [ 921.200954][T14923] do_splice_read+0x285/0x370 [ 921.206122][T14923] splice_direct_to_actor+0x2a1/0xa30 [ 921.211987][T14923] do_splice_direct+0x174/0x240 [ 921.217331][T14923] do_sendfile+0xb06/0xe50 [ 921.222244][T14923] __x64_sys_sendfile64+0x1d8/0x220 [ 921.227961][T14923] do_syscall_64+0xcd/0xf80 [ 921.232965][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.239351][T14923] [ 921.239351][T14923] -> #1 (&p->lock){+.+.}-{4:4}: [ 921.246353][T14923] __mutex_lock+0x1aa/0x1ca0 [ 921.251441][T14923] seq_read_iter+0xe1/0x12d0 [ 921.256529][T14923] kernfs_fop_read_iter+0x46c/0x610 [ 921.262230][T14923] copy_splice_read+0x618/0xc20 [ 921.267589][T14923] do_splice_read+0x285/0x370 [ 921.272761][T14923] splice_file_to_pipe+0x109/0x120 [ 921.278368][T14923] do_sendfile+0x400/0xe50 [ 921.283274][T14923] __x64_sys_sendfile64+0x1d8/0x220 [ 921.288964][T14923] do_syscall_64+0xcd/0xf80 [ 921.293959][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.300351][T14923] [ 921.300351][T14923] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 921.307699][T14923] __lock_acquire+0x1669/0x2890 [ 921.313041][T14923] lock_acquire+0x179/0x330 [ 921.318033][T14923] __mutex_lock+0x1aa/0x1ca0 [ 921.323118][T14923] anon_pipe_write+0x15d/0x1bd0 [ 921.328462][T14923] __kernel_write_iter+0x720/0xb10 [ 921.334066][T14923] __kernel_write+0xf5/0x140 [ 921.339146][T14923] autofs_notify_daemon+0x4db/0xd60 [ 921.344835][T14923] autofs_wait+0x10f3/0x1ac0 [ 921.349914][T14923] autofs_mount_wait+0x132/0x3c0 [ 921.355339][T14923] autofs_d_automount+0x4b2/0x960 [ 921.360863][T14923] __traverse_mounts+0x1b9/0x830 [ 921.366298][T14923] step_into_slowpath+0x772/0xf50 [ 921.371812][T14923] path_lookupat+0x627/0xc40 [ 921.376891][T14923] filename_lookup+0x224/0x5f0 [ 921.382146][T14923] kern_path+0x35/0x50 [ 921.386704][T14923] lookup_bdev+0xd8/0x280 [ 921.391526][T14923] resume_store+0x1d6/0x490 [ 921.396524][T14923] kobj_attr_store+0x58/0x80 [ 921.401608][T14923] sysfs_kf_write+0xf2/0x150 [ 921.406685][T14923] kernfs_fop_write_iter+0x3af/0x570 [ 921.412462][T14923] vfs_write+0x7d3/0x11d0 [ 921.417282][T14923] ksys_write+0x12a/0x250 [ 921.422104][T14923] do_syscall_64+0xcd/0xf80 [ 921.427099][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.433482][T14923] [ 921.433482][T14923] other info that might help us debug this: [ 921.433482][T14923] [ 921.443675][T14923] Chain exists of: [ 921.443675][T14923] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 921.443675][T14923] [ 921.456060][T14923] Possible unsafe locking scenario: [ 921.456060][T14923] [ 921.463483][T14923] CPU0 CPU1 [ 921.468816][T14923] ---- ---- [ 921.474151][T14923] lock(&sbi->pipe_mutex); [ 921.478624][T14923] lock(&of->mutex); [ 921.485094][T14923] lock(&sbi->pipe_mutex); [ 921.492083][T14923] lock(&pipe->mutex); [ 921.496207][T14923] [ 921.496207][T14923] *** DEADLOCK *** [ 921.496207][T14923] [ 921.504318][T14923] 5 locks held by syz.5.1984/14923: [ 921.509479][T14923] #0: ffff8880358a3438 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 921.518495][T14923] #1: ffff888035bc4420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 921.527430][T14923] #2: ffff888042f74088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 921.537145][T14923] #3: ffff888141efc4b8 (kn->active#71){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 921.547120][T14923] #4: ffff888025c08948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 921.557262][T14923] [ 921.557262][T14923] stack backtrace: [ 921.563125][T14923] CPU: 0 UID: 0 PID: 14923 Comm: syz.5.1984 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.563143][T14923] Tainted: [L]=SOFTLOCKUP [ 921.563147][T14923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 921.563154][T14923] Call Trace: [ 921.563158][T14923] [ 921.563164][T14923] dump_stack_lvl+0x116/0x1f0 [ 921.563182][T14923] print_circular_bug+0x275/0x340 [ 921.563196][T14923] check_noncircular+0x146/0x160 [ 921.563209][T14923] __lock_acquire+0x1669/0x2890 [ 921.563223][T14923] ? __kasan_check_byte+0x13/0x50 [ 921.563238][T14923] lock_acquire+0x179/0x330 [ 921.563250][T14923] ? anon_pipe_write+0x15d/0x1bd0 [ 921.563266][T14923] ? __pfx___might_resched+0x10/0x10 [ 921.563276][T14923] ? rcu_is_watching+0x12/0xc0 [ 921.563288][T14923] __mutex_lock+0x1aa/0x1ca0 [ 921.563302][T14923] ? anon_pipe_write+0x15d/0x1bd0 [ 921.563315][T14923] ? is_bpf_text_address+0x94/0x1a0 [ 921.563328][T14923] ? kernel_text_address+0x8d/0x100 [ 921.563342][T14923] ? anon_pipe_write+0x15d/0x1bd0 [ 921.563356][T14923] ? unwind_get_return_address+0x59/0xa0 [ 921.563371][T14923] ? __bfs+0x148/0x290 [ 921.563380][T14923] ? __pfx___mutex_lock+0x10/0x10 [ 921.563394][T14923] ? check_irq_usage+0xe8/0xbc0 [ 921.563409][T14923] ? anon_pipe_write+0x15d/0x1bd0 [ 921.563422][T14923] anon_pipe_write+0x15d/0x1bd0 [ 921.563438][T14923] ? lockdep_unlock+0x64/0xd0 [ 921.563454][T14923] ? __lock_acquire+0x12c2/0x2890 [ 921.563466][T14923] ? __pfx_anon_pipe_write+0x10/0x10 [ 921.563482][T14923] ? lock_acquire+0x179/0x330 [ 921.563495][T14923] ? __pfx_anon_pipe_write+0x10/0x10 [ 921.563508][T14923] __kernel_write_iter+0x720/0xb10 [ 921.563523][T14923] ? __pfx___kernel_write_iter+0x10/0x10 [ 921.563536][T14923] ? __mutex_lock+0x27b/0x1ca0 [ 921.563549][T14923] ? __kernel_text_address+0xd/0x40 [ 921.563563][T14923] ? autofs_notify_daemon+0x45a/0xd60 [ 921.563577][T14923] __kernel_write+0xf5/0x140 [ 921.563590][T14923] ? __pfx___kernel_write+0x10/0x10 [ 921.563602][T14923] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 921.563620][T14923] autofs_notify_daemon+0x4db/0xd60 [ 921.563636][T14923] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 921.563648][T14923] ? kernfs_fop_write_iter+0x3af/0x570 [ 921.563664][T14923] ? vfs_write+0x7d3/0x11d0 [ 921.563676][T14923] ? ksys_write+0x12a/0x250 [ 921.563694][T14923] ? lockdep_init_map_type+0x5c/0x270 [ 921.563706][T14923] ? lockdep_init_map_type+0x5c/0x270 [ 921.563720][T14923] autofs_wait+0x10f3/0x1ac0 [ 921.563733][T14923] ? __pfx_autofs_wait+0x10/0x10 [ 921.563744][T14923] ? __pfx_path_check_mount+0x10/0x10 [ 921.563755][T14923] ? find_held_lock+0x2b/0x80 [ 921.563770][T14923] ? path_has_submounts+0xcf/0x120 [ 921.563783][T14923] ? do_raw_spin_unlock+0x172/0x230 [ 921.563797][T14923] ? find_held_lock+0x2b/0x80 [ 921.563813][T14923] autofs_mount_wait+0x132/0x3c0 [ 921.563825][T14923] autofs_d_automount+0x4b2/0x960 [ 921.563837][T14923] __traverse_mounts+0x1b9/0x830 [ 921.563855][T14923] step_into_slowpath+0x772/0xf50 [ 921.563868][T14923] ? __up_read+0x2d1/0x700 [ 921.563881][T14923] ? __pfx_step_into_slowpath+0x10/0x10 [ 921.563894][T14923] ? __lookup_slow+0x430/0x460 [ 921.563906][T14923] path_lookupat+0x627/0xc40 [ 921.563919][T14923] filename_lookup+0x224/0x5f0 [ 921.563933][T14923] ? __pfx_filename_lookup+0x10/0x10 [ 921.563950][T14923] ? getname_kernel+0x52/0x370 [ 921.563966][T14923] ? __asan_memcpy+0x3c/0x60 [ 921.563978][T14923] kern_path+0x35/0x50 [ 921.563990][T14923] lookup_bdev+0xd8/0x280 [ 921.564005][T14923] ? __pfx_lookup_bdev+0x10/0x10 [ 921.564018][T14923] ? __asan_memcpy+0x3c/0x60 [ 921.564029][T14923] resume_store+0x1d6/0x490 [ 921.564044][T14923] ? __pfx_resume_store+0x10/0x10 [ 921.564061][T14923] ? find_held_lock+0x2b/0x80 [ 921.564077][T14923] ? __pfx_resume_store+0x10/0x10 [ 921.564091][T14923] kobj_attr_store+0x58/0x80 [ 921.564104][T14923] ? __pfx_kobj_attr_store+0x10/0x10 [ 921.564117][T14923] sysfs_kf_write+0xf2/0x150 [ 921.564128][T14923] kernfs_fop_write_iter+0x3af/0x570 [ 921.564144][T14923] ? __pfx_sysfs_kf_write+0x10/0x10 [ 921.564155][T14923] vfs_write+0x7d3/0x11d0 [ 921.564167][T14923] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 921.564184][T14923] ? __pfx_vfs_write+0x10/0x10 [ 921.564201][T14923] ksys_write+0x12a/0x250 [ 921.564214][T14923] ? __pfx_ksys_write+0x10/0x10 [ 921.564228][T14923] do_syscall_64+0xcd/0xf80 [ 921.564242][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.564253][T14923] RIP: 0033:0x7f31e818f749 [ 921.564263][T14923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.564275][T14923] RSP: 002b:00007f31e90ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 921.564285][T14923] RAX: ffffffffffffffda RBX: 00007f31e83e5fa0 RCX: 00007f31e818f749 [ 921.564292][T14923] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000006 [ 921.564299][T14923] RBP: 00007f31e8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 921.564306][T14923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.564312][T14923] R13: 00007f31e83e6038 R14: 00007f31e83e5fa0 R15: 00007ffd8bec6ae8 [ 921.564323][T14923] [ 922.095289][T14915] fuse: Bad value for 'fd' [ 922.231653][T11601] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 922.239457][ T5894] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 922.285490][ T30] audit: type=1400 audit(1767304039.732:1730): avc: denied { write } for pid=14920 comm="syz.5.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 922.305787][ T30] audit: type=1400 audit(1767304039.732:1731): avc: denied { listen } for pid=14920 comm="syz.5.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 922.326480][ T30] audit: type=1400 audit(1767304039.732:1732): avc: denied { accept } for pid=14920 comm="syz.5.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 922.380720][ T5894] usb 10-1: device descriptor read/64, error -71 [ 922.399997][T11313] udevd[11313]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 922.422445][T11601] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.432537][T11601] usb 9-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 922.445408][T11601] usb 9-1: config 0 interface 0 has no altsetting 0 [ 922.452043][T11601] usb 9-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 922.461141][T11601] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.470221][T11601] usb 9-1: config 0 descriptor?? [ 922.470402][T14923] PM: Image not found (code -22) [ 922.490801][ T5894] usb usb10-port1: attempt power cycle [ 922.499122][ T30] audit: type=1400 audit(1767304039.942:1733): avc: denied { unmount } for pid=11324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 922.840702][ T5894] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 922.861210][ T5894] usb 10-1: device descriptor read/8, error -71 [ 923.110828][ T5894] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 923.131139][ T5894] usb 10-1: device descriptor read/8, error -71 [ 923.241905][ T5894] usb usb10-port1: unable to enumerate USB device [ 923.695736][T11601] usbhid 9-1:0.0: can't add hid device: -71 [ 923.707233][T11601] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 923.722486][T11601] usb 9-1: USB disconnect, device number 30