last executing test programs: 4m2.15063955s ago: executing program 3 (id=4): syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x7323, 0x0, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000240)={r6, r7, 0x0, 0x0, 0x4}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r8, 0x7a6, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_GET_STATS(r9, 0x80f86406, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005000)={0x0, 0x0, 0x0}, 0x0) 4m0.749667002s ago: executing program 3 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='>', 0x1, 0x20004891, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) listen(0xffffffffffffffff, 0xda8d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000500)={0xec56, 0x9, 0x0, 0xd, 0x7, 0xe}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) 3m57.896757953s ago: executing program 3 (id=11): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb45, 0x100000000, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r6, 0x1000000, 0x0) pipe2$9p(&(0x7f0000000140), 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYRES32=r7], 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 3m42.382820995s ago: executing program 32 (id=11): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb45, 0x100000000, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r6, 0x1000000, 0x0) pipe2$9p(&(0x7f0000000140), 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYRES32=r7], 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 1m59.878059273s ago: executing program 5 (id=378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:tty_device_t:s0\x00', 0x22, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r2 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r2, 0xffff) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x3, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="001165"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000009c0)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00'/10, @ANYRES8]) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x39}, {@in=@rand_addr=0x64010122, 0x4d2, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0xfffffffffffffffc, 0x0, 0xb, 0x5, 0xfffffffffffffffc, 0x0, 0x1, 0xc}, {0xffffffffffffffff, 0x7fff, 0x0, 0xadb7}, {0x1005, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xb0}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd2d, 0x70bd2b, 0x70bd05, 0x5}}]}, 0x154}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_usb_connect$uac1(0x5, 0xc2, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)) socket$nl_crypto(0x10, 0x3, 0x15) 1m56.395713912s ago: executing program 5 (id=395): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket(0x16, 0xa, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xcc, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x7fffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x13}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040010}, 0x44040084) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$inet_tcp(0x2, 0x1, 0x0) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) setreuid(0xee00, 0xee00) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 1m55.50450833s ago: executing program 5 (id=396): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000404000000000081000100000095000000003675ba"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9c, '\x00', r1}, 0x50) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) 1m54.412323475s ago: executing program 5 (id=400): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r1 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) (rerun: 64) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r2, &(0x7f0000010140)={0x2020}, 0x2036) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') (async, rerun: 64) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x2, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r3, &(0x7f0000002140)=""/4096, 0x1000) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000003700)=@newspdinfo={0x14, 0x24, 0x103, 0x70bd2b, 0x25dfdbfb, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4068000}, 0x80) (async) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) 1m53.978401861s ago: executing program 5 (id=402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000080), 0x5005) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r3, &(0x7f00000024c0)=""/209, 0xfd36, 0x698) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000f80)={0x1000, 0x1, 0x8004, 0x8, 0x81, 0x63, 0x6, 0xff, r5}, &(0x7f0000000fc0)=0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0x7735c792a89731aa, 0x0, &(0x7f00000001c0)) getrlimit(0x6, &(0x7f0000000100)) 1m52.704040565s ago: executing program 5 (id=408): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) dup(r4) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x10) (async) 1m37.518923517s ago: executing program 33 (id=408): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) dup(r4) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x10) (async) 13.3190405s ago: executing program 0 (id=792): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x22, 0x12, {0x12, 0x24, "f7803425584c93bc6200c7528c9689ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 11.482530862s ago: executing program 0 (id=801): r0 = socket$inet(0x2, 0x6, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1eb140, 0x0) timer_create(0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0xc000) sendmmsg$inet6(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001b40)={0xa, 0x4e21, 0x80003, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x60bc}, 0x1c, 0x0}}], 0x2, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000d4c000/0x3000)=nil, 0x3000, &(0x7f00000002c0)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3a\x05!\x9a\x8b\xeb\xcew\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\x9b\x7f\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l\xb7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\x00R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\n\x04\x00\x00\x00\x00\x00\x00\x00\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd821\x9e\v4Q\xc6{\xa0\xf7\xcd\x82 6zL\xeeqG\t~\xafP(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xcd\xefx\x0f\xf5\x85M\x14\xbb\xab1)\x8e%\xb7\x89\x17/@\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000d4c000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%pK \x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x6, 0x800000000, 0x45b, 0x0, 0x0, 0x4, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x5], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) flock(0xffffffffffffffff, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setfsuid(0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 9.78059583s ago: executing program 0 (id=810): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt_cache\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x4c) fanotify_mark(0xffffffffffffffff, 0x0, 0x1019, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="1000000000000026000000000000", 0x0, 0xb03, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0000faffff11010034001280110001006272696467651f736c617665000000001c0005808e0021000000000006e6eae8ffffffff07002290a51a188d09b2f7ade4ac44cf93154587556c5538cef7b05ab2725b1ce62440517acb1c98e56c0170589e0608e66995c108ac7d9e153f09a5d5bfafe45924f21453e2499ae5bc43c2cdc08a2fbe05cc8461002d8b813e600e8b2ea287f93bcbac67db463b7298844ae03e9e3cf1e3d2865b14f0484548de5514d27f849db11b530346a1c777f550e043884fabca8703d3032bd3dbb71349d71edb1d2dd245318c70f6d4964906581613a576d2125b"], 0x54}}, 0x0) recvfrom$packet(r0, &(0x7f0000000300)=""/6, 0x6, 0x12020, &(0x7f0000000340)={0x11, 0x8, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x280, 0x384, 0xf0, 0x600, 0x3, 0xff, 0x20, 0x1, {0x0, 0x6}, {0xfffffff9, 0xfd, 0x1}, {0xfffffffe, 0x3, 0x1}, {0x280e}, 0x2, 0x10, 0x1, 0x8000, 0x0, 0x16e, 0x4, 0xd2, 0x80000000, 0x6, 0x8, 0x2, 0x10, 0x200, 0x3, 0xb}) 9.089481781s ago: executing program 0 (id=814): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xba, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x9, "5395"}, @global=@item_012={0x1, 0x1, 0x1, "12"}]}}, 0x0}, 0x0) 8.360113389s ago: executing program 4 (id=819): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x3a6207d9d3577d3d, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000300)=0x9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_TRIM(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3f6, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x20000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvfrom$packet(r4, 0x0, 0x0, 0x40, 0x0, 0x0) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getdents64(r1, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2a00000006000000000000000000000001000000000000000000000200200000010000000200000000081275f567f592440df5bb5518d125b37a0b78dfe6b92d2f75e2c77bcb1d3266fa52d590d5af00b4a719047286cb38f982d727389e136dc23c67228522b4372591598933eaf43ae50ba789338e39cd7cf642dc00"], 0x2a) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 6.223994074s ago: executing program 2 (id=823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) socket$tipc(0x1e, 0x5, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) recvmmsg(r1, &(0x7f0000004540)=[{{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000004680)=""/117, 0x75}, {&(0x7f0000000380)=""/34, 0x22}], 0x2, &(0x7f0000000540)=""/125, 0x7d}, 0x92d}, {{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000000640)=""/9, 0x9}, {&(0x7f0000000740)=""/226, 0xe2}, {&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000840)=""/35, 0x23}, {&(0x7f0000000880)=""/246, 0xf6}], 0x6, &(0x7f0000000a00)=""/104, 0x68}, 0xbdc9}, {{&(0x7f0000000a80)=@isdn, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b00)=""/55, 0x37}, {&(0x7f0000000b40)=""/73, 0x49}, {&(0x7f0000000bc0)=""/104, 0x68}], 0x3, &(0x7f0000003100)=""/4096, 0x1000}, 0xb}, {{&(0x7f0000000c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000000e00)=""/180, 0xb4}, {&(0x7f0000000ec0)=""/114, 0x72}, {&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000004100)=""/185, 0xb9}], 0x5, &(0x7f00000041c0)=""/105, 0x69}, 0x3}, {{&(0x7f0000004240)=@ax25={{}, [@default, @netrom, @bcast, @netrom, @remote, @rose, @rose, @bcast]}, 0x80, &(0x7f00000044c0)=[{&(0x7f00000042c0)=""/49, 0x31}, {&(0x7f0000004300)=""/245, 0xf5}, {&(0x7f0000004400)=""/157, 0x9d}], 0x3, &(0x7f0000004500)=""/9, 0x9}, 0x8}], 0x5, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x88, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "9d4a44", 0x52, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x0, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8, [0x926c, 0x9, 0x3e]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0xdd86, 0x88be, 0x3, {{0xc, 0x1, 0x4, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0xfffffffffffffd2d, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x1f6, 0x7, 0x8, 0x3}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async, rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000340)=0x8) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f00000003c0)={0x0}) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f00000000c0)=0x1ff, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x7, 0x4) (async) r5 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$clear(0x7, r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x34}}, 0x0) 6.180477671s ago: executing program 0 (id=824): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="00016c99453e04"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000480)={0x0, 0x1, 0x2, "0f00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000680)={0x0, 0x14, 0x28, "2382c88fe2e181524cb6144bb6d76fb1623d191476057d61a6e92236aeae5b399f7a4e85327018d9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.176804358s ago: executing program 4 (id=825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040120c05000000000000010902240001000050b109040010010300030009210101020122030009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x0, 0x8, 0x4, {0x4, 0x5, "00f4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x2, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r4}], &(0x7f00000000c0)='syzkaller\x00', 0x80000000, 0xe9, &(0x7f0000000240)=""/233, 0x40f00, 0x1, '\x00', r5, @fallback=0x2f, r6, 0x8, &(0x7f0000000400)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x7}, 0x10, r7, r2, 0x1, &(0x7f0000000780)=[r1], &(0x7f0000000800)=[{0x3, 0x2, 0xa}], 0x10, 0x9}, 0x94) 6.104632182s ago: executing program 2 (id=826): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fcntl$notify(r0, 0x402, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.58498491s ago: executing program 4 (id=830): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socketpair(0x1, 0x1, 0x20000000, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r2 = socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$bt_hci(r2, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x0, {}, 0xf0000, 0x8, 0x0, {0x0, r7}}) syz_io_uring_submit(0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="cefed22ea79f7b96abb5e0757fca384d4b90bc5d0d5b47d1307c36cb9da3181e732cdce4471fcc9b59ae35404fb15851c28218c5548eaff6142e75e5b877a01bde4308fd8a2d3088dd75f510cd50bea2d527a8eeb2e4ee949c875da787ec2b74fc8ed54a8526e3fe407448bb31395b8dc0c49f442a11127c895bb1437f0f0ed19ec19bdfb145447b5419bc4c0b6569cc52ec383c"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000040), 0x10) 5.480294941s ago: executing program 2 (id=831): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000380)=0x7fffffff, 0xff) landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x4}, 0x18, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0xe, 0x40100) syz_fuse_handle_req(r1, &(0x7f0000000640)="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", 0x2000, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000002700)={0x18, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)={0x18, 0x0, 0x20c, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x26020480) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80a02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) r7 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x1854, 0x0, 0xffffffff}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r7, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r10 = socket(0x10, 0x80002, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r11, &(0x7f0000000480)=""/4081, 0x103a) getdents64(r11, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYBLOB="d98d0ec18f5cb110ec439b20e85efb1968d09f24ad711c4f19a0488ac2d5d0ebee3d3cebbb188d3d48c5e42ea9effb6283b7ccc91cf5876916106e45285c51959b4cf20b107024f54bf786a1bc0dc1d965b20a32bd46b48e66cdc5192863fd48493fbcbe308bae71aa9a3d2bb107aab5d7efd73501674833c82c1f4082", @ANYBLOB="0000a3959dd659b4bdf01a800800028004000500080000003e12000008f20600000000000800000000000000eaf89ce1d70a62a4c7f32103207e248354f7ad5ab21d717bd66be4ebea34668b2976705b6351e474f7a0f5abf8a3ea6125ccc0c6b105bf473060551792a4a199112fa97eab6977405a91fb56c694a2b2ce0c58b22ac077755d61316548326b4d46cf3c0ba77c462c2e02052f366b"], 0x44}}, 0x0) 4.30096782s ago: executing program 2 (id=836): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f50c", 0x2}], 0x1}}], 0x1, 0x8011) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000280), 0x8, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000002c0)={{0xffffffffffffffff, 0x0, 0x40, 0x3, 0xfffffe01}, 0x1ff, 0xfffffffeffffffff, 0x9}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xf}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) shutdown(r0, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/4096, 0x1000, 0x2, 0x19}, @fda={0x66646185, 0x1, 0x1, 0x27}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}}, @exit_looper], 0x3c, 0x0, &(0x7f0000000140)="5fab407d741716ac5efbbcc7459be6446529a3b2465e512f534082f845329839dec371c8883d364aed79fceb7befd0a702df16f419507efb49634262"}) 3.824251119s ago: executing program 2 (id=837): r0 = fanotify_init(0x0, 0x400) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r1, 0x0, 0x0, 0x2) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="000302000000020385"]}, 0x0) syz_usb_control_io(r2, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00030400000004036653ff225426"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r3, 0x4, 0xc00) writev(r3, &(0x7f0000000200), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.612373518s ago: executing program 6 (id=840): r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r0, 0x2, 0x12, 0x0) semop(r0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0xe65b}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) r1 = semget$private(0x0, 0x0, 0xc1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x700000000000000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0xffffffffffffffff, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000280)=0x40000002) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000000c0)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100001c, 0x8012, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r9}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 3.056434209s ago: executing program 0 (id=844): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x4, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000005980), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000059c0)={0x8a7, 0x3ff, 0x1, {0xb, @raw_data="f5dad94e209c4139f20b8b1accc99e7a88e9c520a5193f1bfbe03631635275bf21d833d0d423d105e7e68f9aa8b94da694259a10a4cf2c87ad0fd168cfa6697f650502d608baeb6a0923f4bef2290f6805f2c7a9f371677abc2a4af7c1721e48c83b408937369fbd36e0b630b2702e56c63520f1c4745ca70516a00615e469898b3e2a14a656db3dbff44a5571ac943a5d361e64ee43e2b08a0c840f8e32a0a917c57a497ae01189a8f2f146cbb932a101eebdf26d4b9fbd6b40f051a7f2807fbedf92c7bb7a28fc"}, 0x3}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x489c}, 0x3c) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="81e46af20326be0341184addee129fdcd4b7f31093fe204757a99c7b0644f19703d5e5741f16703ed34726bb8672bf40de298aa4b82e104908d7a4b9faa5ef4896cb158b522cba7a6695f3f0929c9b7a0892a0ef428e5d6e521c86e7bc6e8df47910c65b313efa0493968d7675fa19f84bca9b1e5e0759e87f196d7006e8e41540e4acda4545b235a4d622080010212d3d9be1e5caf9a0334eb0616f3474bccf8baa1f1a94a5f342f2787feba3a059ccb84f4fee1ce9f917671e74971c6c97c269b62b79e1820c0456b09dbada1ec918c131279a2444a6a75e693b4bef20db74cf8347017f65e984a7674a12f7d809ec0bad5a8b3149", @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf250d0000000c00098008000100030000006c0004801300010062726f6164636173742d6c696e6b0000540007800800020010000000080004000700000008000400050000000800020005000000080001000f0000000800010008000000080003000100000008000300fdffffff080002000700000008000300ceffffff50000480040007800900010073797a30000000000900010073797a30000000002400078008000100050000000800040001ffffff080001001500000008000100010000000900010073797a31000000000c00098008000200010001008c0006804200040067636d28616573290000000000000000000000000000000000000000000000001a0000003a7b53f78702c23e67e98de7f38d71bcae87fa8677dc105a626e00003c00040067636d286165732900000000000000000000000000000000000000000000000014000000c71317ad028a54ed5649a8195e53b4459fdc206b0400020004000500"], 0x174}, 0x1, 0x0, 0x0, 0x20000020}, 0x88001) 2.546565578s ago: executing program 4 (id=845): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) (async) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = socket(0x1d, 0x2, 0x6) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, &(0x7f0000000200)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, 0x0, 0x0) (async) bind$can_j1939(r3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) (async) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15234343460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x28, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x12, "29eeb5cdf8a52351b67001c3f021e3f5"}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x28, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x12, "29eeb5cdf8a52351b67001c3f021e3f5"}]}}}}}}}}, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) (async) ioctl$VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 2.293904204s ago: executing program 1 (id=846): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002b00)=[{{&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}]}}}], 0x18}}], 0x1, 0x20000890) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x2}, 0x8) socket$unix(0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) 2.148331105s ago: executing program 6 (id=847): r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x47ffffa, 0x20c02) setreuid(0x0, 0xee00) (async) setreuid(0x0, 0xee00) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) (async) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) (async) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.145964846s ago: executing program 1 (id=848): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) (async) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000019880)=""/102380, 0x18fec}, {0x0}, {&(0x7f0000000e40)=""/190, 0xbe}, {&(0x7f00000000c0)=""/259, 0x103}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000000300)=""/232, 0xe8}, {&(0x7f0000001380)=""/212, 0xd4}], 0x7, 0x3, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) (async, rerun: 64) shutdown(r0, 0x0) (async, rerun: 64) r3 = getpid() setpriority(0x2, r3, 0xd) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000000780)=ANY=[@ANYRES16, @ANYBLOB="de550ea5771e093988417a92cd6848f32c808593b61f85d699185eb3e9d4c18d0d5e459b5d9f03afe700bb8ddaed3a3ef7d7cb3ee4a4a53177089dec4de89b2ae83441e7e32f225cd8e7cc0ee72e50eef306918a57290401919c73f2c794545e64444477f3f7411ac885ff0f8298da034a4a71beecf850cce44e8fd8253740192a86e2a86b6e9ddaf95b", @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0xfffffdd5, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x9}, 0x10}, 0x94) 2.116789504s ago: executing program 6 (id=849): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0xd, 0x4, 0x4, 0x40200, r0, 0x5, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) pread64(r2, &(0x7f0000000100)=""/32, 0x20, 0x7) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1d}, @NL80211_ATTR_SSID={0xd, 0x34, @random="7e87d46be73ca06ca4"}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000280)) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x8, 0x3) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @var={0x3, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x30, 0x0, 0x61]}}, &(0x7f0000000380)=""/113, 0x39, 0x71, 0x0, 0x40}, 0x28) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000440), &(0x7f0000000480)=0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x4e24, @local}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xca7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20044000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000640)={0x0, 0x2}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000006c0)={r6, 0xff}, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000700)={0x0, 0xfffffffffffffffb, 0x0, [0x1, 0x6, 0x7, 0x2, 0x4864d55e], [0x2, 0x4, 0x2, 0x4, 0x100000000, 0x8000000000000001, 0x8, 0x2, 0x5, 0x8001, 0x821c, 0xffffffff, 0x2523, 0x9, 0x1, 0x4588, 0x9, 0x7, 0x6, 0x0, 0x100000001, 0x4, 0xa64156d, 0x9c52, 0x100, 0xd, 0x3, 0x3, 0x81, 0x1, 0x5, 0x7, 0x7, 0x9, 0x9, 0x6, 0x8, 0x2, 0x1, 0x800, 0x4, 0x5, 0x80000001, 0x5, 0x7ff, 0x1, 0x1, 0x2, 0xf, 0x0, 0x7fffffff, 0x5, 0x2, 0x3, 0xf61d, 0x1000, 0x744a800, 0xffffffffe9efbc9d, 0x200, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x7fff, 0xffffffffffffe42d, 0x1, 0x80, 0xfffffffffffffffd, 0x2, 0x7, 0x952, 0x4, 0xfc11, 0x1, 0x10001, 0x5, 0xad4c, 0x4, 0x7, 0x1, 0xb, 0x10001, 0xffff, 0x1, 0x8, 0xe, 0x1, 0x65, 0xfffffffffffffff9, 0x8, 0x3, 0x8, 0x5, 0x10000, 0x7, 0x1ff, 0x9, 0x4, 0x3, 0x5, 0x77df, 0x800, 0xf400, 0x7, 0x3a25, 0x7, 0x4, 0x869, 0x9, 0x1, 0x8cbc, 0x8000000000000001, 0x5, 0xffffffffffffffff, 0xe5, 0x9, 0x67f, 0x4, 0x4, 0x80000001, 0x2]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000b40)={0x0, 0xf07f, 0x1, [0x7, 0x4, 0x8, 0x9, 0x5], [0x8, 0xfffffffffffff956, 0x10, 0x5, 0x7, 0xfffffffffffffffb, 0x0, 0x6, 0x0, 0x7, 0x800, 0x0, 0x4, 0x7, 0x8000000000000001, 0x9, 0x5, 0x8, 0x4, 0x100, 0x2, 0x80000001, 0xffffffff, 0x101, 0xddf9, 0x5, 0x8000000000000000, 0x100, 0x3, 0xffffffffffffffff, 0x9, 0x6, 0x3, 0x100000001, 0xffffffff, 0xa, 0xd0, 0xf684, 0x5, 0x7, 0x100000000, 0x2, 0x5, 0xf, 0x2, 0x9, 0x856f, 0x3, 0xa, 0xcf, 0x5, 0x7, 0x3, 0x8000, 0x3ff, 0x8, 0x5, 0x10001, 0x9, 0x0, 0x3, 0x7f, 0xfffffffffffffff3, 0x10001, 0x4, 0x3, 0x81, 0x8f5, 0x7, 0x7, 0x7, 0x4bac, 0xd9, 0x10001, 0x2, 0x8000, 0xe29, 0xe69, 0x1, 0x178c, 0xfff, 0x5, 0x0, 0x3, 0x7, 0x7, 0x7, 0x1, 0x0, 0x3, 0x9, 0x8001, 0x7, 0x6, 0x1, 0x1, 0x8, 0x5, 0x0, 0x99, 0xcae, 0x2, 0x9, 0x3, 0x3, 0x5, 0xfffffffffffffffc, 0x8, 0x5, 0x401, 0x2a2, 0x8, 0xa8, 0x57b819dc000000, 0xb, 0x6, 0x3, 0xe, 0x15, 0x3d, 0x6]}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000f80)={0x0, 0x3, {0x6, @usage=0x2, 0x0, 0x5, 0x9, 0x9, 0x4, 0x3, 0x1c, @struct={0x8, 0x2}, 0x4, 0x3, [0x3, 0x4, 0xc490, 0x4, 0x7, 0x6]}, {0x6, @struct={0x80000001, 0x5}, r7, 0x7ff, 0xb, 0xffffffffffff8c49, 0x6, 0x10, 0x4b9, @usage=0x10, 0x6, 0x800, [0x9, 0x7, 0x3, 0x2, 0xfffffffeffffffff, 0x6]}, {0x6, @struct={0x80000000, 0x3ff}, r8, 0x2, 0x2, 0x3, 0x6, 0x7, 0x10, @usage=0x2, 0x100, 0xe, [0x4, 0x2ca, 0x1, 0x4, 0x80000001, 0x1]}, {0x5, 0xfffffffffffffff8, 0x2}}) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000001380)=0x6, 0x4) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000013c0)={0x9, "c071738ac1bba1383739def25cdda3a0b3c402ed17e73a28b116543a80c53b14", 0x1}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001400)={r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0xc) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001440)=[{{0x3, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x3, 0x1}, {0x2, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x2, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1}}], 0x50) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000014c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)) getpeername$l2tp(r0, &(0x7f0000001580)={0x2, 0x0, @broadcast}, &(0x7f00000015c0)=0x10) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0xd552) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001640)=@generic={&(0x7f0000001600)='./file0\x00', r2}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001680)={r0, r2}, 0xc) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x38, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x11}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0x48080) ioctl$SIOCNRDECOBS(r0, 0x89e2) 2.016978293s ago: executing program 1 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000340), 0x12) chdir(&(0x7f00000004c0)='./file0/../file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) open_tree(r6, &(0x7f0000000280)='./file0\x00', 0x80800) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x100800000000f7) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'caif0\x00', 0x1}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r6, 0x24, 0x0, @void}, 0x10) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') openat$cgroup_ro(r6, &(0x7f0000000480)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) 1.968139276s ago: executing program 6 (id=851): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000003280)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f00000005c0)=""/217, 0xd9}], 0x2, &(0x7f0000000440)=""/142, 0x8e}, 0x10000}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000000180)=""/57, 0x39}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000880)=""/112, 0x70}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/119, 0x77}, {&(0x7f0000001980)=""/70, 0x46}, {&(0x7f0000001a00)=""/88, 0x58}, {&(0x7f00000003c0)=""/6, 0x6}], 0xa, &(0x7f0000001b40)=""/84, 0x54}}, {{&(0x7f0000001bc0)=@phonet, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c40)=""/191, 0xbf}, {&(0x7f0000001d00)=""/214, 0xd6}, {&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000001f00)=""/99, 0x63}], 0x4, &(0x7f0000001fc0)=""/168, 0xa8}, 0x10fa}, {{&(0x7f0000002080)=@tipc, 0x80, &(0x7f0000002240)=[{&(0x7f0000002100)=""/21, 0x15}, {&(0x7f0000002140)=""/230, 0xe6}], 0x2, &(0x7f0000002280)=""/4096, 0x1000}, 0x68}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x2, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000f30000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000858000/0x2000)=nil) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x891018, 0x0) mmap(&(0x7f0000fb3000/0x3000)=nil, 0x3000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000fb3000/0x3000)=nil, 0x3000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r3, &(0x7f00000000c0), 0x300, 0x0, 0x0) (async) pwritev(r3, &(0x7f00000000c0), 0x300, 0x0, 0x0) 1.941771902s ago: executing program 4 (id=852): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=@tcp6=r3, 0x1}, 0x20) syz_emit_ethernet(0xc2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) lsetxattr$security_ima(&(0x7f0000000180)='\x00', &(0x7f00000001c0), 0x0, 0x14, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r5, @ANYBLOB="ffffffff0a000200e1"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x200000c0) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000080)={[{@dyn}, {@flock_openafs}]}) socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=@tcp6=r3, 0x1}, 0x20) (async) syz_emit_ethernet(0xc2, 0x0, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) lsetxattr$security_ima(&(0x7f0000000180)='\x00', &(0x7f00000001c0), 0x0, 0x14, 0x3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r5, @ANYBLOB="ffffffff0a000200e1"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x200000c0) (async) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000080)={[{@dyn}, {@flock_openafs}]}) (async) 1.39695049s ago: executing program 6 (id=853): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x0, 0x5, 0x21, {0x21, 0xd, "69bef0534c808fcc8941d4f4be4b71af2a3222c9de4153486cf7204b8ccb72"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "79a429fc390fcd98aadb293a37be860bdcba84804d7a2c8a"}}, &(0x7f00000004c0)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x10, 0xff, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x74, "fe6c57811506fb858cbf4ae7bf1569b5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xfb, 0x6, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x9, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0xf6, 0x6}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x65, 0x4, 0x6, 0x3, "4a5d824c", "aa032ffd"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x10, 0x0, 0x3, 0xfc, 0x4, 0x6}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB="400354000000f61a64b9c5c73a6d3dad21cec59af9249b8a63af0044ade7c2868673e48fa7e5498c08231aba31ca971f207a3a395ea0d005db813dcc87eb5d4ad0a9fb3ef41f740884e934bbba4a7d324b106f"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0x4f}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x1000, 0x8, [0xf0]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "a893"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000840)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, 'PN'}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x93}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f5f, 0xfffffffd, 0xc4, 0xe23, 0x1, 0x1, 0x8002, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff2}, {0x10, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c8f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1e00, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r11 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6, &(0x7f0000000000)=0x80) setsockopt$sock_linger(r11, 0x1, 0xd, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') read$FUSE(r12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 1.28284234s ago: executing program 1 (id=854): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r7, @ANYBLOB="8dbe874e6484abc67e35c8f32aac50d79f2cc9dad5abb362a82fd51b203f790060bc1c52effeb71266e10e9e28649ee475454f086309689c11866bf090f878a14cc013bdc8e8f834c3bc52b4d0432bcb92c2636611053aa5fa2ab95f59cc40fdcdf572de6af984f79b2d6998180d15bf0b7d441251aad48c5ae0dacb86927cd3ef6a4293eaa308145c4514d2c637487eec", @ANYRES64=r1, @ANYRESDEC=r3, @ANYRES32=0x0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) uname(&(0x7f0000000080)=""/209) write$binfmt_format(r5, &(0x7f0000000100)='0\x00', 0x2) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE(r9, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x1, 0x3, 0x8}}, 0x120) r10 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x7c278b9c2e2a6129, 0xfffffffd, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000380)={0x4}) io_uring_enter(r10, 0x2def, 0x4000, 0x0, 0x0, 0x0) write$UHID_DESTROY(r9, &(0x7f0000000200), 0x4) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="00050403c900310757f0759e87fb0457d6e75beea53b2be07aa872c57596ddba9a293be5d2f33e1c7e79fa1dd885e8d4933892080c22aa5f01d3ac305f29ae91eca4c6048deeb7acb6138e78288421d7e0dc92321f6f3d88675ccbe2159e2ad24d0492f6dfa9900621fdfe470b7cd28c668af2e8e93d2074fb26cc9ae3dd8f5e6b2fd7c2b77eafbcecf405919dd851d07bd61067827503657654e105a75fdf7578bc148a9c978c493d8e"], 0x7) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r13, 0x0, 0x4}, 0x18) 431.030278ms ago: executing program 2 (id=855): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xe4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$FIONREAD(r1, 0x541b, 0xfffffffffffffffe) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r2, 0x0, 0x0, 0x44800, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000200)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x84}}, 0x24) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r5, &(0x7f0000000180)=@name, &(0x7f00000002c0)=0x10, 0x800) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000005a0c00078005001500000000000500010006000000050005000a00000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0) 234.440747ms ago: executing program 1 (id=856): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x40c100) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) close(r0) (async) close(r0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x8000000000000000, 0x40080) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x2) (async) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x2) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000100)={{0x1, 0x1, 0x6, 0x3, 0xffff, 0x9}, 0x1, [0x200, 0x5c, 0x2, 0x0, 0x3, 0x7, 0x3, 0x2, 0x0, 0x2, 0x48000, 0x8, 0x560e, 0x2, 0x4, 0x1, 0xe144, 0x2, 0x7, 0x401, 0x8, 0x1, 0xc, 0x5, 0x3, 0x77, 0x4, 0x8, 0x885b, 0xffff, 0x6, 0xb0, 0x5d8b, 0x2, 0x9, 0x1, 0x6, 0xd2f, 0x4, 0x8, 0x0, 0x7f, 0x2, 0x88b, 0x1, 0xfe000000, 0xdb0, 0x1, 0x7, 0x8, 0x8, 0x3ff, 0x5, 0x121, 0x598d, 0x3338, 0x7, 0xfffffffc, 0xffffffc0, 0x4, 0x1, 0xfffffffd, 0x9, 0x7f, 0x136, 0x4, 0x1, 0xd, 0x3, 0x0, 0x7, 0x4, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1000, 0x5dd, 0x8, 0x0, 0x7, 0x1, 0x400, 0xffff, 0x8, 0x4, 0x7, 0x7, 0x1, 0x9, 0x7fffffff, 0xffffffff, 0x3, 0x5, 0x0, 0x9, 0x10001, 0x40, 0x3, 0x732dcf64, 0x100, 0x9, 0x46, 0x6, 0x3, 0x2, 0x4, 0xf, 0x4, 0x3, 0x40, 0x65f6, 0xfffffff9, 0x6, 0x0, 0x1000, 0x50d, 0x7fffffff, 0x7, 0x8, 0x1ff, 0x2, 0x200, 0x40, 0x1000, 0x0, 0x3, 0x7eb0, 0x5, 0x0, 0x10, 0x3, 0x5, 0x1, 0x7, 0x0, 0x0, 0x7ff, 0x9, 0xf, 0x401, 0x0, 0x7fff, 0x40, 0x5, 0xfffffffe, 0x647, 0xf78d, 0x6, 0x5, 0x8be, 0xe199, 0x81, 0x3, 0x8, 0x1, 0xa12c, 0x4, 0x8, 0x9ed5, 0x4, 0x8, 0x2, 0x9, 0x1, 0x3, 0x10, 0x1ff, 0x18000, 0x4, 0x1ff, 0x80000000, 0x1, 0x7f, 0x6, 0x4, 0x376, 0x101, 0x6, 0xfffffffa, 0x3ff, 0x5, 0x7, 0x6f, 0xba0, 0x8, 0xfff, 0x1000, 0x0, 0x4, 0x8, 0x8, 0x7, 0x7, 0x0, 0x8, 0x1b0e, 0x7, 0x8000, 0xf, 0x7, 0xfff, 0x1, 0x401, 0xc, 0x6, 0x6, 0x400, 0x2, 0xe7, 0x4, 0x5, 0x7fffffff, 0x0, 0x3, 0xaa, 0x4, 0x3, 0xfffffffe, 0x80, 0x1, 0x6, 0x8, 0x2dc, 0xff, 0x8e, 0x10000, 0xfdb, 0x10000, 0x9, 0x8000, 0x4, 0xe3b, 0x80, 0x3, 0x0, 0xfffffe01, 0x7, 0x0, 0x1, 0x8, 0xe1e, 0x2, 0x1000, 0x7, 0xf, 0x8000, 0x4, 0x3, 0x4, 0xfffffffc, 0x6, 0xd997, 0x82c, 0x5, 0x7, 0x4, 0x5, 0xffffff3a, 0x1, 0x0, 0x647, 0x3, 0x7, 0x9eab, 0x7, 0x3b, 0x2, 0x4, 0x4, 0x8, 0xb, 0x0, 0x334b, 0x761, 0xffff, 0xb, 0x3ff, 0x400, 0x8001, 0x8, 0x2, 0x4, 0x8, 0x8, 0x7, 0x200, 0x2, 0x6c3e8019, 0x40, 0x6, 0x2, 0x664, 0x7, 0x5, 0x9, 0x0, 0x8000, 0xc, 0xb, 0x1, 0x8, 0xfffffffe, 0xb718, 0xffff, 0x8ad, 0x6, 0x7f, 0x40, 0x21c, 0x5, 0x1, 0xcbf3, 0x0, 0x7eee, 0x2, 0x9, 0xfff, 0x2, 0x4, 0x9, 0x3, 0x7, 0x7, 0x0, 0xeb97, 0x3, 0x7ff, 0x1, 0xcf28, 0x54, 0x4, 0x7, 0x2, 0xffffffff, 0x9, 0x6, 0xffff7fff, 0x9, 0x5, 0x9, 0xffffffff, 0xfffffffc, 0xffffffff, 0x80, 0x200, 0x378d, 0x8da4, 0x4, 0x3a, 0xfff, 0x5, 0xffffffff, 0x1, 0x3, 0x6, 0xff, 0x81, 0x9, 0xffff, 0xe, 0x7, 0x4, 0xdf99, 0x4, 0x8, 0x1, 0x2, 0x8, 0x0, 0x9, 0x255560c7, 0x2, 0x0, 0x61d3, 0x7, 0x1, 0x1c2, 0x40, 0x7f, 0x1, 0x1, 0x3, 0x7, 0x7, 0x4, 0x9, 0x1c000, 0x4, 0xcf1, 0x0, 0xb0c1, 0x1, 0x5e, 0x9, 0x378, 0xeb, 0x75, 0x0, 0xcae, 0x95, 0x8000, 0xca4, 0x6665, 0x81, 0x6, 0x10001, 0x5, 0x8, 0x8000, 0x6, 0xfffffffd, 0x4, 0x42, 0xa76, 0x80, 0x80000000, 0x7, 0xfffffe00, 0x5, 0x1, 0x3, 0x5, 0x0, 0xe6, 0x0, 0x0, 0xa, 0x8, 0x6, 0x6a, 0x4, 0x0, 0x6, 0xa5, 0x1, 0xd0, 0x4, 0x6, 0x4, 0x8001, 0x3, 0x2, 0x7, 0x4, 0x10, 0x401, 0x7, 0x8, 0x10000, 0x2e000000, 0x1000, 0x9, 0x1, 0xbea3, 0x0, 0x4, 0xa, 0x10001, 0x2, 0x1000, 0xab, 0x100, 0xc9e9, 0x8, 0x7, 0x40000, 0x4, 0xfffffff0, 0x40, 0x56e8, 0x7, 0x4, 0x7, 0x7f, 0x6, 0x3, 0xe, 0x7, 0x3, 0x625b, 0xfb50, 0x1, 0x7, 0x9, 0xe7da, 0x8, 0xfffffff8, 0xcf4, 0x3, 0x7, 0xa62d, 0x10000, 0x9, 0xfc, 0x2bb, 0xdf, 0x4, 0x245, 0x2, 0x8, 0xdcc, 0x5, 0x7, 0x2, 0x6, 0x10000, 0x0, 0xfffffffe, 0x2, 0x2, 0x4, 0x401, 0x400, 0x1, 0x8001, 0x4, 0x2acb, 0x1, 0x2, 0x3, 0x2, 0x1e9, 0x8a8, 0x3, 0x0, 0x7fff, 0x7, 0x7ff, 0xb, 0x5, 0xd, 0x8, 0x7, 0xffffc964, 0x7, 0xfffffffd, 0x3, 0x0, 0x6, 0x310, 0x4, 0xffffffff, 0x1, 0x23f, 0xd, 0x1000, 0xffffffff, 0xffffffff, 0x6, 0x6, 0x0, 0x800, 0x2, 0x4, 0x6, 0x200, 0xefca, 0x3, 0x7aee, 0x8, 0x8, 0x5, 0xf7, 0xa72, 0x80000001, 0xcca, 0x1, 0x0, 0x7, 0x6, 0x5, 0xe, 0x6, 0x7, 0x8000, 0x3, 0x4, 0x40, 0x8, 0x10000, 0xd, 0x73a6, 0x3, 0x6, 0xc, 0x7f, 0x0, 0x9, 0x1, 0x6, 0x101, 0x8, 0x64, 0x8, 0xfffffff7, 0x1, 0x4, 0x5, 0x6, 0x7, 0xbf09, 0x80000000, 0x8be8, 0x10001, 0x0, 0xe, 0x4, 0x8, 0xfffffffb, 0x7, 0x10, 0xc81, 0x96, 0x15b, 0x0, 0x8, 0xb9, 0x0, 0x11, 0xfffffff7, 0xffff8001, 0x1800, 0x5, 0x5, 0x5, 0xffffff80, 0x6, 0x8, 0x0, 0x8001, 0x80000001, 0x9, 0x1, 0xc, 0x5, 0x3fff8, 0x2, 0x4, 0x2, 0x8, 0x6, 0x3, 0x7, 0x161, 0x1, 0x6, 0x2, 0x5, 0x4, 0x4, 0x7, 0x65, 0x3, 0x2, 0x0, 0x9, 0x5, 0x4, 0xa, 0x7fff, 0x6, 0x419, 0x6, 0xb74, 0x8, 0xffffffff, 0x4, 0x9, 0x1, 0x5, 0x2, 0x6, 0x7f, 0x9, 0x3, 0x1, 0x0, 0x7, 0x0, 0xffffff50, 0xffffffff, 0xf, 0x3, 0x6, 0x1, 0x2, 0x3, 0x5, 0x9e36, 0x6000, 0x7, 0x6ee97ded, 0x7, 0x8000, 0xa7f, 0x5, 0x0, 0x9, 0x0, 0x6, 0x3, 0x2, 0x7, 0x1, 0x9, 0x89, 0x7, 0x9, 0x5, 0x7fffffff, 0x6, 0x5, 0x7, 0x0, 0x80000000, 0xb774, 0x3ff, 0x2, 0x605, 0x3, 0xfffffffe, 0x2, 0x467, 0x1, 0x2, 0x80000001, 0x7ff, 0xff, 0xb, 0x3, 0x7, 0x6, 0x2, 0xf5d8, 0x0, 0xffffffff, 0x0, 0x101, 0x5, 0x9, 0x3, 0x7, 0x4dcb, 0x400, 0x3, 0x1, 0x9, 0xffff5307, 0x21360, 0x9, 0x2, 0x5, 0x1, 0xffff, 0x3, 0x1, 0x2a, 0x9, 0x3, 0xff, 0x5, 0x6, 0x0, 0x7, 0x9, 0x7cce, 0x6, 0x6, 0x1, 0x1, 0x200, 0xffffff7f, 0x6, 0xaa0d, 0x18000, 0xf, 0x4, 0x4, 0xfff, 0x7fffffff, 0x9, 0xfffff801, 0x9, 0x8000, 0xc312, 0x90ec, 0x7f, 0x3, 0x8, 0xfffffffb, 0x5, 0x6, 0x7, 0x1b, 0x3, 0x7ff, 0x9, 0x9, 0xffffff80, 0xffff, 0x77, 0x8000, 0x7, 0x4, 0x0, 0xffc0, 0xfffffff7, 0x2, 0x9, 0x8, 0x4, 0x4, 0xc, 0x7, 0x9, 0x7, 0x9, 0x0, 0x9, 0x80000001, 0x7fff, 0xbd7, 0x7, 0x5, 0x8, 0x11eecd0a, 0xe458, 0x4, 0x57b7, 0x8, 0xd418, 0x0, 0xffffffff, 0x65, 0x2, 0x9, 0x0, 0x1, 0xcb, 0x8, 0x554, 0x9, 0x6, 0x7, 0x0, 0x4, 0xf0, 0x6571e38b, 0x5, 0x1, 0x2, 0x3, 0x7, 0xdb, 0x4, 0x1ff, 0x5, 0x101, 0x8, 0x8000, 0x9, 0x8001, 0x6, 0x2, 0x10, 0x200, 0x4, 0x2, 0x10001, 0x4, 0x5, 0x1, 0x10001, 0xd47, 0x7, 0xfff, 0x4, 0x0, 0x7, 0x83c, 0x6, 0x101, 0x9, 0x7fff, 0x1e, 0x100, 0x40000000, 0xda8, 0x2, 0x7, 0x6, 0xbb62, 0x9, 0x2, 0xffff, 0xea20, 0x10000, 0x5, 0x3b05786f, 0x3, 0x4, 0x400, 0x800, 0x2, 0x5, 0x5, 0x5, 0x6912, 0x5, 0x9, 0x59, 0x9, 0x502, 0xa8b8, 0x7387, 0x101, 0x1, 0x3, 0x8, 0xa4, 0x0, 0x8, 0x644, 0x5, 0x8, 0x4, 0x2, 0x41, 0x2, 0x45, 0x2, 0x5, 0x4, 0x49, 0x6a, 0x4, 0x5, 0x7, 0x5, 0xa, 0x38f0f9a0, 0xc, 0xff, 0x6, 0x6091, 0x8, 0x3, 0x3, 0x6, 0x7, 0x1, 0xd135, 0x0, 0x2, 0x5, 0x5, 0x2, 0x0, 0x40, 0x2c6, 0x7, 0x8000, 0x8, 0x0, 0x7ff, 0x4, 0x1, 0x2, 0x2, 0x0, 0x1, 0xa6, 0x1, 0x3, 0x8, 0x4, 0x8, 0xfffffffe, 0x10, 0x4, 0x9a, 0x100, 0xcb, 0xa0000, 0x4, 0x1, 0x15e01890, 0x4, 0x33, 0x8, 0x1, 0x80, 0x4, 0x3, 0x3ff, 0x3, 0x7, 0x1, 0x400, 0x4, 0x1, 0x4, 0xffffffff, 0x100, 0xeb5, 0xffff0000, 0x3cd4, 0x9, 0x5, 0x59f3, 0x401, 0x4, 0x0, 0x1, 0x2, 0x3, 0x4, 0x5, 0x5cbd, 0x0, 0x1, 0x3]}) r3 = syz_open_dev$sg(&(0x7f0000001140), 0x2, 0x620000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001180)={0x0, 0x1452}, &(0x7f00000011c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001200)={r4, @in6={{0xa, 0x4e21, 0x5d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}}, &(0x7f00000012c0)=0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001200)={r4, @in6={{0xa, 0x4e21, 0x5d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}}, &(0x7f00000012c0)=0x84) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001300), 0x48082, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x128, r6, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0x3a}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x6, 0xfa, "3dbf"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x101}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "9c80a0d99cf0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "bbb84d9bd6a82c0c1d5544a1"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xdd}, @NL80211_ATTR_FILS_ERP_RRK={0x3d, 0xfc, "81cd7e2e2a1d99c2f227e097e8ab0c01d6da7dcf0bdf58efcc54b34b99947c02161e17c68e5929985d0ccda86b8f15863de948c12140e76020"}, @NL80211_ATTR_FILS_ERP_REALM={0x7b, 0xfa, "c537b277efa7a6a6894bdc95e3616284a32a9252e597cfd60861a5ec0006ff8f4cb1fb5dd449875c76dcf7de0b8e6436d99765284d97a56e24ae5f65ce55e5adaadd504088c5c8ab3a09f3b8e2bf339363a4a9b188b34abc6050b9416ffdc5e9ac9ca64794ea5a1fb6bd1c453882a20c0c59ed1fc681c2"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}]]}, 0x128}, 0x1, 0x0, 0x0, 0x4080}, 0x844) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000001580)) socket$inet6(0xa, 0x80000, 0x9) (async) socket$inet6(0xa, 0x80000, 0x9) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001600), r5) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x2c, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x2c}}, 0x4050) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x2c, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x2c}}, 0x4050) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000001900)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001740)={0x154, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_MARK={0x8}, @CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20004005}, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001c00)={&(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_tracing={0x1a, 0x25, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0x2, 0x9, 0xfffffffffffffff0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4af8}, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7fffffff}, @map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x200}, @ldst={0x1, 0x0, 0x2, 0x8, 0x2, 0x50, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xac9}]}, &(0x7f0000001a80)='GPL\x00', 0x10, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1a, r5, 0x8, &(0x7f0000001ac0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001b00)={0x4, 0x5, 0xffff1c65, 0xc}, 0x10, 0x171b2, 0xffffffffffffffff, 0x4, &(0x7f0000001c40)=[r8, r5, r5, r9, r5], &(0x7f0000001c80)=[{0x4, 0x4, 0x1, 0x6}, {0x3, 0x5, 0xf, 0xc}, {0x2, 0x4, 0x7, 0x9}, {0x5, 0x2, 0x8, 0x8}], 0x10, 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000001d80)={r4, 0x8, 0xf}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000001d80)={r4, 0x8, 0xf}, 0x8) close(r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001dc0), r9) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000001dc0), r9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001ec0)={'syztnl2\x00', &(0x7f0000001e40)={'tunl0\x00', 0x0, 0x7800, 0x1, 0x10000, 0x9, {{0x11, 0x4, 0x2, 0x1b, 0x44, 0x68, 0x0, 0x8, 0x2d, 0x0, @loopback, @multicast2, {[@end, @ssrr={0x89, 0x7, 0x98, [@local]}, @timestamp={0x44, 0x24, 0xf3, 0x0, 0xc, [0xbc, 0x2, 0xffffffff, 0x90, 0x6, 0x8, 0x0, 0xb5]}, @noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001ec0)={'syztnl2\x00', &(0x7f0000001e40)={'tunl0\x00', 0x0, 0x7800, 0x1, 0x10000, 0x9, {{0x11, 0x4, 0x2, 0x1b, 0x44, 0x68, 0x0, 0x8, 0x2d, 0x0, @loopback, @multicast2, {[@end, @ssrr={0x89, 0x7, 0x98, [@local]}, @timestamp={0x44, 0x24, 0xf3, 0x0, 0xc, [0xbc, 0x2, 0xffffffff, 0x90, 0x6, 0x8, 0x0, 0xb5]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001f00)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001f00)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f00000020c0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001f40)={0x128, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x6c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x96}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000044}, 0x8090) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f0000002100)={0x4, 0x9, 0x9}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000002140)) 28.312526ms ago: executing program 4 (id=857): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) exit(0x0) rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x40000000, 0x0, {[0xd]}}, 0x0, 0x8, &(0x7f0000000280)) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000580)=""/156, 0x9c}, 0x4}], 0x1, 0x40000000, &(0x7f00000002c0)={0x77359400}) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21, 0xffffffff, 0xfffffffff12bd390, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}}, 0x50) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}]}}) 22.984057ms ago: executing program 1 (id=858): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', '', [], 0xa, 'O'}, 0x5) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r3 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) (async) recvmmsg(r3, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x20, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xd431}, 0x0) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) r7 = dup2(r5, r5) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r8) unshare(0x6a040000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r9, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) (async) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'sit0\x00', {0x2, 0x0, @broadcast}}) 0s ago: executing program 6 (id=859): mkdir(&(0x7f0000000300)='./file0\x00', 0x85) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) (async) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) (async) syz_open_dev$sg(&(0x7f00000002c0), 0x7f, 0x40040) recvmmsg$unix(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r3 = socket$kcm(0xa, 0x2, 0x11) syz_extract_tcp_res$synack(&(0x7f0000000440), 0x1, 0x0) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0xa, @remote, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18}}], 0xf}, 0x0) (async) syz_emit_ethernet(0x1f, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffff0700000000000000000000114242030001"], 0x0) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001600)=""/4103, 0x1007, 0x97) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x480, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}, {@dfltgid={'dfltgid', 0x3d, r7}}]}}) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40081271, &(0x7f0000000980)=0x4000) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000180)={0x7, 0xb, 0x8, 0xfff8, 0x9}) kernel console output (not intermixed with test programs): [ 167.378879][ T30] audit: type=1400 audit(1757435041.787:443): avc: denied { setopt } for pid=7299 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.945072][ T30] audit: type=1326 audit(1757435042.347:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22198ebe9 code=0x7ffc0000 [ 168.051479][ T30] audit: type=1326 audit(1757435042.347:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22198ebe9 code=0x7ffc0000 [ 168.159134][ T30] audit: type=1326 audit(1757435042.347:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff22198ebe9 code=0x7ffc0000 [ 168.218756][ T30] audit: type=1326 audit(1757435042.347:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22198ebe9 code=0x7ffc0000 [ 168.423378][ T30] audit: type=1326 audit(1757435042.347:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22198ebe9 code=0x7ffc0000 [ 168.641753][ T7342] ptrace attach of "./syz-executor exec"[6203] was attempted by "./syz-executor exec"[7342] [ 168.684661][ T30] audit: type=1326 audit(1757435042.347:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff221990b07 code=0x7ffc0000 [ 168.941027][ T30] audit: type=1326 audit(1757435042.347:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff221990a7c code=0x7ffc0000 [ 169.264174][ T30] audit: type=1326 audit(1757435042.347:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff2219909b4 code=0x7ffc0000 [ 169.511170][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 169.733391][ T5864] Bluetooth: hci5: command 0x0405 tx timeout [ 170.066212][ T7343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.603082][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.610375][ T7330] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 170.640081][ T7359] ======================================================= [ 170.640081][ T7359] WARNING: The mand mount option has been deprecated and [ 170.640081][ T7359] and is ignored by this kernel. Remove the mand [ 170.640081][ T7359] option from the mount to silence this warning. [ 170.640081][ T7359] ======================================================= [ 170.727574][ T7359] vlan2: entered allmulticast mode [ 170.732782][ T7359] macvtap0: entered allmulticast mode [ 170.738652][ T7359] veth0_macvtap: entered allmulticast mode [ 170.968361][ T7330] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.977640][ T7330] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.989652][ T7330] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.004455][ T7330] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 171.015623][ T7330] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 171.028922][ T7330] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 171.303033][ T5915] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.352984][ T5901] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 171.523305][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 171.581268][ T5915] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.689792][ T5901] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 171.719182][ T5915] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 171.733152][ T5901] usb 6-1: config 0 has no interface number 0 [ 171.739524][ T5901] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.816873][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.837246][ T5901] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.847095][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 171.862987][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 171.885116][ T5901] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 171.898298][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 171.922557][ T5915] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.951159][ T7368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.993148][ T5901] usb 6-1: Product: syz [ 171.998617][ T5901] usb 6-1: SerialNumber: syz [ 172.005087][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.043630][ T5901] usb 6-1: config 0 descriptor?? [ 172.051666][ T5915] usb 3-1: Product: syz [ 172.072203][ T5915] usb 3-1: Manufacturer: syz [ 172.079434][ T5901] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 172.106730][ T5915] cdc_wdm 3-1:1.0: skipping garbage [ 172.111965][ T5915] cdc_wdm 3-1:1.0: skipping garbage [ 172.117901][ T5901] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input11 [ 172.163286][ T5915] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 172.191044][ T5915] cdc_wdm 3-1:1.0: Unknown control protocol [ 172.301082][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 172.301103][ T30] audit: type=1400 audit(1757435046.657:476): avc: denied { append } for pid=7373 comm="syz.1.285" name="video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 172.443585][ T5915] usb 3-1: USB disconnect, device number 11 [ 172.452825][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.038099][ T5864] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.104912][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 173.110954][ T5864] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.117665][ T5864] Bluetooth: hci5: command 0x0405 tx timeout [ 173.150520][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.188429][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 173.395767][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.413187][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.420407][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.427725][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.436232][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.443405][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.450570][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.458667][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.465969][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.473146][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.481440][ T5973] usb 6-1: USB disconnect, device number 13 [ 173.487695][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 173.951947][ T30] audit: type=1400 audit(1757435048.087:477): avc: denied { write } for pid=7396 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.120093][ T5973] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 174.271933][ T30] audit: type=1326 audit(1757435048.677:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 174.615912][ T30] audit: type=1326 audit(1757435048.757:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 174.767891][ T30] audit: type=1326 audit(1757435048.797:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 174.793195][ T30] audit: type=1326 audit(1757435048.797:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 174.867115][ T30] audit: type=1326 audit(1757435048.797:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 175.232028][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 175.291192][ T30] audit: type=1326 audit(1757435048.797:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 175.314352][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.449547][ T30] audit: type=1326 audit(1757435048.797:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 175.536086][ T30] audit: type=1326 audit(1757435048.797:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 175.787462][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 175.954799][ T7425] team0: Port device batadv1 added [ 177.411221][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 177.844281][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 178.697980][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 178.698000][ T30] audit: type=1400 audit(1757435053.107:510): avc: denied { read } for pid=7462 comm="syz.0.305" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.056989][ T30] audit: type=1400 audit(1757435053.147:511): avc: denied { open } for pid=7462 comm="syz.0.305" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.150342][ T5908] IPVS: starting estimator thread 0... [ 179.164714][ T30] audit: type=1400 audit(1757435053.457:512): avc: denied { ioctl } for pid=7462 comm="syz.0.305" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.287629][ T7472] IPVS: using max 51 ests per chain, 122400 per kthread [ 179.527588][ T7479] omfs: Invalid superblock (0) [ 179.729468][ T7479] macvlan0: entered promiscuous mode [ 179.773945][ T7479] netlink: 'syz.5.306': attribute type 1 has an invalid length. [ 179.788681][ T30] audit: type=1400 audit(1757435053.937:513): avc: denied { mounton } for pid=7474 comm="syz.5.306" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 179.792737][ T7479] netlink: 'syz.5.306': attribute type 2 has an invalid length. [ 179.856239][ T7488] lo speed is unknown, defaulting to 1000 [ 179.895861][ T30] audit: type=1400 audit(1757435054.167:514): avc: denied { connect } for pid=7475 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.223117][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 180.417641][ T7478] syz.1.307 (7478): drop_caches: 2 [ 181.856573][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 181.910791][ T10] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 182.063128][ T10] usb 1-1: config 0 has no interface number 0 [ 182.069292][ T10] usb 1-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 166 [ 182.103561][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 182.339479][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.348038][ T10] usb 1-1: Product: syz [ 182.352212][ T10] usb 1-1: Manufacturer: syz [ 182.361773][ T10] usb 1-1: SerialNumber: syz [ 182.392821][ T10] usb 1-1: config 0 descriptor?? [ 182.431269][ T7492] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.436906][ T30] audit: type=1400 audit(1757435056.837:515): avc: denied { append } for pid=7503 comm="syz.5.313" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.978125][ T10] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 183.070830][ T10] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 183.081694][ T10] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 183.089974][ T10] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 183.101564][ T10] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 183.733023][ T10] usb 1-1: USB disconnect, device number 18 [ 183.781591][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 183.901530][ T10] keyspan 1-1:0.133: device disconnected [ 183.968781][ T7513] tmpfs: Unknown parameter 'grpquota{Šĝ˙' [ 185.003290][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 185.017793][ T7516] delete_channel: no stack [ 185.367499][ T10] usb 1-1: config 0 has an invalid interface number: 129 but max is 0 [ 185.386191][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.322'. [ 185.434137][ T10] usb 1-1: config 0 has no interface number 0 [ 185.443218][ T7542] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 185.448702][ T10] usb 1-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice=4e.90 [ 185.468175][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.468619][ T7542] exFAT-fs (nullb0): invalid boot record signature [ 185.487981][ T10] usb 1-1: config 0 descriptor?? [ 185.496995][ T7542] exFAT-fs (nullb0): failed to read boot sector [ 185.543137][ T7542] exFAT-fs (nullb0): failed to recognize exfat type [ 185.568983][ T7543] netlink: 'syz.4.318': attribute type 4 has an invalid length. [ 185.598430][ T7530] ceph: No mds server is up or the cluster is laggy [ 185.608329][ T7528] ceph: No mds server is up or the cluster is laggy [ 185.619233][ T7543] netlink: 'syz.4.318': attribute type 4 has an invalid length. [ 185.699404][ T10] usb 1-1: string descriptor 0 read error: -71 [ 185.738394][ T10] usb 1-1: disable ehci-hcd to run US-144 [ 185.761683][ T10] usb 1-1: USB disconnect, device number 19 [ 185.913622][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 186.073315][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 186.098584][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 186.113065][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 186.631725][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 186.643626][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 186.660927][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 186.700853][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 186.753290][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 186.791059][ T7548] macvlan0: left promiscuous mode [ 186.959387][ T30] audit: type=1400 audit(1757435061.367:516): avc: denied { append } for pid=7555 comm="syz.5.327" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 187.358320][ T7560] IPVS: set_ctl: invalid protocol: 46 172.20.20.66:20003 [ 187.870760][ T30] audit: type=1400 audit(1757435062.277:517): avc: denied { read } for pid=7578 comm="syz.5.332" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 187.970100][ T30] audit: type=1400 audit(1757435062.307:518): avc: denied { open } for pid=7578 comm="syz.5.332" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 188.116970][ T30] audit: type=1400 audit(1757435062.307:519): avc: denied { ioctl } for pid=7578 comm="syz.5.332" path="socket:[14317]" dev="sockfs" ino=14317 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.357205][ T7587] qnx6: unable to read the first superblock [ 188.385667][ T7587] futex_wake_op: syz.5.334 tries to shift op by 144; fix this program [ 189.066607][ T30] audit: type=1800 audit(1757435063.467:520): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.336" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 190.264519][ T30] audit: type=1400 audit(1757435064.677:521): avc: denied { setopt } for pid=7607 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.330292][ T30] audit: type=1400 audit(1757435064.707:522): avc: denied { setopt } for pid=7607 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 190.914746][ T7621] tmpfs: Bad value for 'mpol' [ 191.240112][ T30] audit: type=1400 audit(1757435065.647:523): avc: denied { bind } for pid=7631 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.268300][ T30] audit: type=1400 audit(1757435065.647:524): avc: denied { node_bind } for pid=7631 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 191.463230][ T5974] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 191.819785][ T5974] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 191.829498][ T5974] usb 6-1: config 0 has no interface number 0 [ 191.836738][ T5974] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 191.847291][ T5974] usb 6-1: config 0 interface 200 has no altsetting 0 [ 191.861978][ T7640] __nla_validate_parse: 139 callbacks suppressed [ 191.862021][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 191.878755][ T7642] netlink: 32 bytes leftover after parsing attributes in process `syz.0.349'. [ 191.887978][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 191.897742][ T5974] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 191.912648][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.921873][ T5974] usb 6-1: Product: syz [ 191.926224][ T5974] usb 6-1: Manufacturer: syz [ 191.933808][ T5974] usb 6-1: SerialNumber: syz [ 191.942253][ T5974] usb 6-1: config 0 descriptor?? [ 191.949336][ T30] audit: type=1400 audit(1757435066.357:525): avc: denied { getopt } for pid=7638 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.102198][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.350'. [ 192.120097][ T7645] netlink: 'syz.2.350': attribute type 1 has an invalid length. [ 192.177362][ T7645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.225950][ T30] audit: type=1400 audit(1757435066.597:526): avc: denied { ioctl } for pid=7644 comm="syz.2.350" path="socket:[15097]" dev="sockfs" ino=15097 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 192.523282][ T30] audit: type=1400 audit(1757435066.927:527): avc: denied { ioctl } for pid=7653 comm="syz.1.352" path="socket:[15540]" dev="sockfs" ino=15540 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.634256][ T30] audit: type=1400 audit(1757435067.037:528): avc: denied { setopt } for pid=7653 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.694309][ T5915] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 192.718147][ T30] audit: type=1400 audit(1757435067.127:529): avc: denied { remount } for pid=7657 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 192.739515][ T7658] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 192.832996][ T5915] usb 3-1: device descriptor read/64, error -71 [ 192.867607][ T7642] syz.0.349 (7642): drop_caches: 2 [ 192.890803][ T30] audit: type=1800 audit(1757435067.297:530): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.353" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 193.049477][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 193.087906][ T5915] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 193.104329][ T7663] nbd: must specify a size in bytes for the device [ 193.115077][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 193.125575][ T7664] nbd: must specify a size in bytes for the device [ 193.234672][ T5915] usb 3-1: device descriptor read/64, error -71 [ 193.343468][ T5915] usb usb3-port1: attempt power cycle [ 193.622578][ T7676] tipc: Enabling of bearer rejected, failed to enable media [ 193.683088][ T5915] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.713797][ T5915] usb 3-1: device descriptor read/8, error -71 [ 193.993032][ T5915] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 194.019694][ T5915] usb 3-1: device descriptor read/8, error -71 [ 194.123747][ T5974] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input12 [ 194.135806][ T5915] usb usb3-port1: unable to enumerate USB device [ 194.176626][ T5974] usb 6-1: USB disconnect, device number 14 [ 194.369322][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.377607][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.499423][ T7688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'. [ 194.524538][ T30] audit: type=1400 audit(1757435068.927:531): avc: denied { setattr } for pid=7687 comm="syz.1.362" name="NETLINK" dev="sockfs" ino=15669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.269877][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 196.923655][ T30] audit: type=1400 audit(1757435071.307:532): avc: denied { map } for pid=7718 comm="syz.4.372" path="socket:[15790]" dev="sockfs" ino=15790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 197.070645][ T30] audit: type=1800 audit(1757435071.417:533): pid=7727 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.370" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 198.021069][ T30] audit: type=1400 audit(1757435072.427:534): avc: denied { getopt } for pid=7731 comm="syz.5.376" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.503135][ T5973] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 198.834680][ T5973] usb 6-1: Using ep0 maxpacket: 16 [ 199.056292][ T978] libceph: connect (1)[c::]:6789 error -101 [ 199.068792][ T7744] ceph: No mds server is up or the cluster is laggy [ 199.069053][ T7749] ceph: No mds server is up or the cluster is laggy [ 199.102036][ T5973] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.115268][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 199.126241][ T5915] libceph: connect (1)[b::]:6789 error -101 [ 199.132410][ T5915] libceph: mon0 (1)[b::]:6789 connect error [ 199.140532][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 199.152117][ T5973] usb 6-1: config 0 has no interface number 0 [ 199.177817][ T5973] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.224695][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 199.240581][ T7762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 199.275090][ T5973] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.287737][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 199.343070][ T5973] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 199.395420][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.413507][ T5974] libceph: connect (1)[c::]:6789 error -101 [ 199.423192][ T5974] libceph: mon0 (1)[c::]:6789 connect error [ 199.423526][ T5915] libceph: connect (1)[b::]:6789 error -101 [ 199.460141][ T5973] usb 6-1: config 0 descriptor?? [ 199.490907][ T5915] libceph: mon0 (1)[b::]:6789 connect error [ 199.517296][ T7755] ceph: No mds server is up or the cluster is laggy [ 199.527198][ T7758] ceph: No mds server is up or the cluster is laggy [ 200.309078][ T30] audit: type=1400 audit(1757435074.717:535): avc: denied { read } for pid=7745 comm="syz.5.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.361873][ T7796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.392507][ T7796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.550999][ T30] audit: type=1400 audit(1757435074.957:536): avc: denied { create } for pid=7745 comm="syz.5.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 200.993628][ T7800] CUSE: unknown device info "" [ 201.009457][ T7800] CUSE: zero length info key specified [ 201.320914][ T7810] dlm: plock device version mismatch: kernel (1.2.0), user (1.45.0) [ 201.332195][ T7810] tmpfs: Bad value for 'mpol' [ 201.619641][ T5973] usbhid 6-1:0.1: can't add hid device: -71 [ 201.632033][ T5973] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 201.645467][ T5973] usb 6-1: USB disconnect, device number 15 [ 201.695951][ T7819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7819 comm=syz.5.395 [ 201.798114][ T30] audit: type=1800 audit(1757435076.137:537): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.391" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 201.874622][ T30] audit: type=1400 audit(1757435076.287:538): avc: denied { connect } for pid=7818 comm="syz.5.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 201.981000][ T30] audit: type=1400 audit(1757435076.367:539): avc: denied { read } for pid=7818 comm="syz.5.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.127789][ T7828] geneve3: entered promiscuous mode [ 202.136742][ T7828] geneve3: entered allmulticast mode [ 202.665810][ T30] audit: type=1400 audit(1757435077.077:540): avc: denied { ioctl } for pid=7830 comm="syz.5.396" path="socket:[15999]" dev="sockfs" ino=15999 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.755869][ T7848] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 204.890696][ T7868] fuse: Bad value for 'fd' [ 204.913497][ T7868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8254 sclass=netlink_route_socket pid=7868 comm=syz.1.403 [ 205.065793][ T7872] lo speed is unknown, defaulting to 1000 [ 205.260377][ T7871] block device autoloading is deprecated and will be removed. [ 205.401107][ T43] libceph: connect (1)[c::]:6789 error -101 [ 205.401641][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.408'. [ 205.416184][ T5974] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 205.469227][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 205.493494][ T5915] libceph: connect (1)[b::]:6789 error -101 [ 205.516488][ T5915] libceph: mon0 (1)[b::]:6789 connect error [ 205.612657][ T5974] usb 1-1: config 1 interface 0 has no altsetting 0 [ 205.631277][ T5974] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 205.695308][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.720893][ T5974] usb 1-1: Product: syz [ 205.725671][ T5974] usb 1-1: Manufacturer: syz [ 205.730299][ T5974] usb 1-1: SerialNumber: syz [ 205.793529][ T5915] libceph: connect (1)[b::]:6789 error -101 [ 205.801563][ T5915] libceph: mon0 (1)[b::]:6789 connect error [ 205.809611][ T43] libceph: connect (1)[c::]:6789 error -101 [ 205.822975][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 205.922186][ T30] audit: type=1800 audit(1757435080.327:541): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.410" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 206.134990][ T7875] ceph: No mds server is up or the cluster is laggy [ 206.135505][ T7879] ceph: No mds server is up or the cluster is laggy [ 206.242711][ T5974] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 206.295743][ T5974] usb 1-1: USB disconnect, device number 20 [ 206.342050][ T5974] usblp0: removed [ 208.057112][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 208.063303][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 208.107173][ T5973] libceph: connect (1)[b::]:6789 error -101 [ 208.117815][ T5973] libceph: mon0 (1)[b::]:6789 connect error [ 208.333677][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 208.340230][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 208.360787][ T7935] syzkaller1: entered promiscuous mode [ 208.368323][ T7935] syzkaller1: entered allmulticast mode [ 208.393430][ T5973] libceph: connect (1)[b::]:6789 error -101 [ 208.399634][ T5973] libceph: mon0 (1)[b::]:6789 connect error [ 208.553443][ T7943] syz.1.422 uses obsolete (PF_INET,SOCK_PACKET) [ 208.697359][ T7947] 9pnet_fd: Insufficient options for proto=fd [ 208.856025][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 208.862346][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 208.899902][ T7920] ceph: No mds server is up or the cluster is laggy [ 208.900218][ T7925] ceph: No mds server is up or the cluster is laggy [ 208.920314][ T5973] libceph: connect (1)[b::]:6789 error -101 [ 208.934985][ T5973] libceph: mon0 (1)[b::]:6789 connect error [ 208.966126][ T30] audit: type=1800 audit(1757435083.377:542): pid=7954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.424" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 208.987196][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.383104][ T5974] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 210.631091][ T5974] usb 3-1: config 1 interface 0 has no altsetting 0 [ 210.679116][ T30] audit: type=1400 audit(1757435085.087:543): avc: denied { write } for pid=7971 comm="syz.0.430" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 210.679146][ T7973] random: crng reseeded on system resumption [ 210.679276][ T5974] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 210.740382][ T30] audit: type=1400 audit(1757435085.127:544): avc: denied { ioctl } for pid=7971 comm="syz.0.430" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 210.805917][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.821051][ T5974] usb 3-1: Product: syz [ 210.828151][ T5974] usb 3-1: Manufacturer: syz [ 210.839457][ T5974] usb 3-1: SerialNumber: syz [ 211.308403][ T5974] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 211.367681][ T5974] usb 3-1: USB disconnect, device number 16 [ 211.410865][ T5974] usblp0: removed [ 211.574434][ T30] audit: type=1400 audit(1757435085.977:545): avc: denied { mount } for pid=7983 comm="syz.1.433" name="/" dev="rpc_pipefs" ino=16265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 211.762530][ T30] audit: type=1400 audit(1757435086.127:546): avc: denied { ioctl } for pid=7981 comm="syz.4.432" path="socket:[16282]" dev="sockfs" ino=16282 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.035406][ T30] audit: type=1800 audit(1757435087.447:547): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.440" name="SYSV00000000" dev="tmpfs" ino=36 res=0 errno=0 [ 213.075001][ T5974] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 213.134605][ T5915] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 213.245674][ T5974] usb 3-1: config 1 interface 0 has no altsetting 0 [ 213.257788][ T5974] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 213.267308][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.277711][ T5974] usb 3-1: Product: syz [ 213.282029][ T5974] usb 3-1: Manufacturer: syz [ 213.286838][ T5974] usb 3-1: SerialNumber: syz [ 213.293381][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 213.301362][ T5915] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 213.311789][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.322741][ T5915] usb 1-1: config 0 descriptor?? [ 213.335906][ T5915] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 213.707935][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 213.715394][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 213.727220][ T5974] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 213.746219][ T5974] usb 3-1: USB disconnect, device number 17 [ 213.778149][ T5974] usblp0: removed [ 215.441148][ T30] audit: type=1400 audit(1757435089.847:548): avc: denied { write } for pid=8012 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 215.794426][ T5915] gspca_sonixj: reg_r err -110 [ 215.880022][ T5915] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 216.423033][ T5915] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 216.579294][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.590403][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.600351][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.609514][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.625575][ T5915] usb 3-1: config 0 descriptor?? [ 216.642474][ T5915] hub 3-1:0.0: USB hub found [ 216.680553][ T30] audit: type=1400 audit(1757435091.087:549): avc: denied { name_connect } for pid=8048 comm="syz.4.449" dest=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 216.846618][ T5915] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 216.864208][ T5915] usbhid 3-1:0.0: can't add hid device: -71 [ 216.876894][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 216.899753][ T30] audit: type=1400 audit(1757435091.307:550): avc: denied { bind } for pid=8043 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.920687][ T30] audit: type=1400 audit(1757435091.307:551): avc: denied { ioctl } for pid=8043 comm="syz.2.447" path="socket:[16814]" dev="sockfs" ino=16814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.948333][ T5915] usb 3-1: USB disconnect, device number 18 [ 217.267636][ T10] usb 1-1: USB disconnect, device number 21 [ 217.383912][ T8058] netlink: 348 bytes leftover after parsing attributes in process `syz.0.452'. [ 217.872271][ T30] audit: type=1400 audit(1757435092.277:552): avc: denied { append } for pid=8066 comm="syz.2.454" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 217.900918][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 217.908462][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 218.070911][ T5901] libceph: connect (1)[b::]:6789 error -101 [ 218.119532][ T5901] libceph: mon0 (1)[b::]:6789 connect error [ 218.173520][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 218.181281][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 218.181728][ T8080] kAFS: unparsable volume name [ 218.298793][ T8064] ceph: No mds server is up or the cluster is laggy [ 218.307650][ T8061] ceph: No mds server is up or the cluster is laggy [ 218.423363][ T5915] libceph: connect (1)[b::]:6789 error -101 [ 218.436921][ T5915] libceph: mon0 (1)[b::]:6789 connect error [ 218.689028][ T30] audit: type=1400 audit(1757435093.007:553): avc: denied { read } for pid=8085 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.746536][ T30] audit: type=1400 audit(1757435093.017:554): avc: denied { module_request } for pid=8074 comm="syz.2.456" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 218.767971][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.828555][ T8092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=8092 comm=syz.0.459 [ 219.640201][ T8115] bridge0: port 3(team0) entered blocking state [ 219.646912][ T8115] bridge0: port 3(team0) entered disabled state [ 219.655030][ T8115] team0: entered allmulticast mode [ 219.660221][ T8115] team_slave_0: entered allmulticast mode [ 219.666013][ T8115] team_slave_1: entered allmulticast mode [ 219.671754][ T8115] geneve0: entered allmulticast mode [ 219.684935][ T8115] team0: entered promiscuous mode [ 219.690075][ T8115] team_slave_0: entered promiscuous mode [ 219.696692][ T8115] team_slave_1: entered promiscuous mode [ 219.702955][ T8115] geneve0: entered promiscuous mode [ 219.710656][ T8115] bridge0: port 3(team0) entered blocking state [ 219.717112][ T8115] bridge0: port 3(team0) entered forwarding state [ 220.214777][ T8118] netlink: 108 bytes leftover after parsing attributes in process `syz.2.463'. [ 220.782981][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 221.586090][ T8113] Set syz1 is full, maxelem 65536 reached [ 221.634511][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 221.687954][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 221.724030][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.777870][ T8127] netlink: 1760 bytes leftover after parsing attributes in process `syz.1.466'. [ 221.797781][ T30] audit: type=1400 audit(1757435096.197:555): avc: denied { view } for pid=8122 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 221.834281][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 221.885022][ T10] usb 3-1: config 1 has no interface number 1 [ 221.973198][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 222.025240][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 222.040883][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.053214][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.067416][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.067901][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.113086][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.121159][ T10] usb 3-1: Product: syz [ 222.127541][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.137483][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.181580][ T8129] lo speed is unknown, defaulting to 1000 [ 222.235769][ T10] usb 3-1: Manufacturer: syz [ 222.266986][ T10] usb 3-1: SerialNumber: syz [ 222.437730][ T8129] chnl_net:caif_netlink_parms(): no params data found [ 222.497749][ T10] hub 3-1:1.0: Invalid hub with more than one config or interface [ 222.559130][ T10] hub 3-1:1.0: probe with driver hub failed with error -22 [ 222.587460][ T10] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 222.620874][ T8137] 9pnet_fd: Insufficient options for proto=fd [ 222.713181][ T10] usb 3-1: USB disconnect, device number 19 [ 223.769671][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 223.780555][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 223.971342][ T10] libceph: connect (1)[b::]:6789 error -101 [ 223.978273][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 224.053357][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 224.059563][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 224.095946][ T8147] ceph: No mds server is up or the cluster is laggy [ 224.096697][ T8144] ceph: No mds server is up or the cluster is laggy [ 224.183367][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.201815][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.211754][ T51] Bluetooth: hci1: command tx timeout [ 224.222715][ T8129] bridge_slave_0: entered allmulticast mode [ 224.231169][ T8129] bridge_slave_0: entered promiscuous mode [ 224.241463][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.256544][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.277931][ T8129] bridge_slave_1: entered allmulticast mode [ 224.381141][ T8129] bridge_slave_1: entered promiscuous mode [ 224.401943][ T30] audit: type=1400 audit(1757435098.807:556): avc: denied { create } for pid=8173 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 224.724908][ T5915] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 224.752160][ T30] audit: type=1400 audit(1757435098.837:557): avc: denied { listen } for pid=8173 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 224.769778][ T8182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.779227][ T8182] IPv6: NLM_F_CREATE should be set when creating new route [ 224.838977][ T8172] netlink: 'syz.1.475': attribute type 12 has an invalid length. [ 224.856469][ T30] audit: type=1400 audit(1757435098.837:558): avc: denied { accept } for pid=8173 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 224.888371][ T30] audit: type=1400 audit(1757435099.077:559): avc: denied { map } for pid=8163 comm="syz.1.475" path="socket:[17637]" dev="sockfs" ino=17637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.911451][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.931304][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 224.940135][ T8129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.008303][ T5915] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 225.022997][ T5915] usb 1-1: config 0 has no interface number 0 [ 225.023668][ T30] audit: type=1400 audit(1757435099.077:560): avc: denied { accept } for pid=8163 comm="syz.1.475" path="socket:[17637]" dev="sockfs" ino=17637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.032790][ T8129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.082604][ T5915] usb 1-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 166 [ 225.408704][ T5915] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 225.437870][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.460805][ T5915] usb 1-1: Product: syz [ 225.466548][ T5915] usb 1-1: Manufacturer: syz [ 225.471177][ T5915] usb 1-1: SerialNumber: syz [ 225.511930][ T8129] team0: Port device team_slave_0 added [ 225.522383][ T5915] usb 1-1: config 0 descriptor?? [ 225.532548][ T8167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.577133][ T8129] team0: Port device team_slave_1 added [ 225.737566][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.747732][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.883162][ T5908] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 226.143285][ T5908] usb 3-1: device descriptor read/64, error -71 [ 226.147464][ T8129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.175632][ T5915] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 226.196684][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.198914][ T5915] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 226.204217][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.214759][ T5915] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 226.272399][ T5915] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 226.284376][ T51] Bluetooth: hci1: command tx timeout [ 226.292137][ T5915] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 226.309561][ T8129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.387822][ T8198] netlink: 'syz.1.479': attribute type 4 has an invalid length. [ 226.441504][ T5915] usb 1-1: USB disconnect, device number 22 [ 226.908858][ T5908] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 226.919034][ T5915] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 226.930448][ T8197] netlink: 'syz.1.479': attribute type 4 has an invalid length. [ 226.941148][ T5915] keyspan 1-1:0.133: device disconnected [ 226.982518][ T8129] hsr_slave_0: entered promiscuous mode [ 226.992278][ T8129] hsr_slave_1: entered promiscuous mode [ 226.998972][ T8129] debugfs: 'hsr0' already exists in 'hsr' [ 227.006283][ T8129] Cannot create hsr debugfs directory [ 227.052987][ T5908] usb 3-1: device descriptor read/64, error -71 [ 227.174963][ T5908] usb usb3-port1: attempt power cycle [ 227.431923][ T8212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.483'. [ 227.443938][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 227.603264][ T5908] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 227.624143][ T5908] usb 3-1: device descriptor read/8, error -71 [ 227.695749][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 227.709518][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 227.787698][ T8129] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 227.806608][ T5973] libceph: connect (1)[b::]:6789 error -101 [ 227.812941][ T5973] libceph: mon0 (1)[b::]:6789 connect error [ 227.858936][ T8129] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 227.879607][ T8129] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 227.893033][ T5908] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 227.927872][ T8129] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 227.943957][ T5908] usb 3-1: device descriptor read/8, error -71 [ 227.974317][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 227.980381][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 228.063321][ T5908] usb usb3-port1: unable to enumerate USB device [ 228.074116][ T5974] libceph: connect (1)[b::]:6789 error -101 [ 228.082131][ T5974] libceph: mon0 (1)[b::]:6789 connect error [ 228.331014][ T8129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.368256][ T8129] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.376187][ T51] Bluetooth: hci1: command tx timeout [ 228.386011][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.393192][ T6221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.417483][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.424643][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.470999][ T8218] ceph: No mds server is up or the cluster is laggy [ 228.470999][ T8223] ceph: No mds server is up or the cluster is laggy [ 228.496383][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 228.507063][ T5908] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 228.522398][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 228.684759][ T5908] usb 1-1: config 1 interface 0 has no altsetting 0 [ 228.700765][ T5908] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 228.729481][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.745975][ T5908] usb 1-1: Product: syz [ 228.755261][ T5908] usb 1-1: Manufacturer: syz [ 228.781479][ T5908] usb 1-1: SerialNumber: syz [ 228.844745][ T8242] lo speed is unknown, defaulting to 1000 [ 229.010224][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 229.108985][ T8250] cgroup: No subsys list or none specified [ 229.272539][ T5908] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 229.273631][ T5974] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 229.376698][ T5908] usb 1-1: USB disconnect, device number 23 [ 229.425819][ T5908] usblp0: removed [ 229.479248][ T8129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.501706][ T5974] usb 3-1: config 1 interface 0 has no altsetting 0 [ 229.539314][ T5974] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 229.577595][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.617159][ T5974] usb 3-1: Product: syz [ 229.632938][ T5974] usb 3-1: Manufacturer: syz [ 229.687005][ T5974] usb 3-1: SerialNumber: syz [ 230.532667][ T51] Bluetooth: hci1: command tx timeout [ 230.552602][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 230.564401][ T5974] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 230.584997][ T5974] usb 3-1: USB disconnect, device number 24 [ 230.594221][ T5974] usblp0: removed [ 230.959006][ T8129] veth0_vlan: entered promiscuous mode [ 230.990613][ T30] audit: type=1400 audit(1757435105.387:561): avc: denied { load_policy } for pid=8270 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 231.023958][ T8129] veth1_vlan: entered promiscuous mode [ 231.040785][ T8274] ALSA: mixer_oss: invalid OSS volume '8' [ 231.077525][ T8129] veth0_macvtap: entered promiscuous mode [ 231.206375][ T8129] veth1_macvtap: entered promiscuous mode [ 231.263605][ T30] audit: type=1800 audit(1757435105.647:562): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.496" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 231.388009][ T30] audit: type=1400 audit(1757435105.767:563): avc: denied { map } for pid=8277 comm="syz.2.497" path="pipe:[17220]" dev="pipefs" ino=17220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 231.452791][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.506391][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.880357][ T6225] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.931385][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.954169][ T5974] libceph: connect (1)[c::]:6789 error -101 [ 231.960824][ T5974] libceph: mon0 (1)[c::]:6789 connect error [ 231.961055][ T5908] libceph: connect (1)[b::]:6789 error -101 [ 231.993406][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.004827][ T5908] libceph: mon0 (1)[b::]:6789 connect error [ 232.030914][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.223484][ T978] libceph: connect (1)[c::]:6789 error -101 [ 232.249409][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 232.282120][ T6221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.295479][ T6221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.337906][ T8283] ceph: No mds server is up or the cluster is laggy [ 232.346073][ T5847] libceph: connect (1)[b::]:6789 error -101 [ 232.354712][ T5847] libceph: mon0 (1)[b::]:6789 connect error [ 232.459029][ T8284] ceph: No mds server is up or the cluster is laggy [ 232.692705][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.724310][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.837907][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 233.391908][ T30] audit: type=1326 audit(1757435107.797:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf498ebe9 code=0x7ffc0000 [ 233.521227][ T30] audit: type=1326 audit(1757435107.797:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf498ebe9 code=0x7ffc0000 [ 233.848774][ T30] audit: type=1326 audit(1757435108.257:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fecf498ebe9 code=0x7ffc0000 [ 233.881486][ T8306] debugfs: '!' already exists in 'ieee80211' [ 233.895822][ T30] audit: type=1326 audit(1757435108.257:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf498ebe9 code=0x7ffc0000 [ 233.943954][ T30] audit: type=1326 audit(1757435108.257:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf498ebe9 code=0x7ffc0000 [ 233.990706][ T30] audit: type=1326 audit(1757435108.277:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fecf498ebe9 code=0x7ffc0000 [ 234.013854][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.038456][ T30] audit: type=1326 audit(1757435108.277:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf498ebe9 code=0x7ffc0000 [ 234.061714][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.795536][ T8362] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 236.914950][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 236.914984][ T30] audit: type=1800 audit(1757435111.287:590): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.514" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 237.094980][ T5974] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 237.166273][ T8367] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 237.174229][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.517'. [ 237.354895][ T8367] team0: Port device geneve0 added [ 237.519553][ T5974] usb 3-1: too many configurations: 122, using maximum allowed: 8 [ 237.540145][ T5974] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 237.549429][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.557650][ T5974] usb 3-1: Product: syz [ 237.561916][ T5974] usb 3-1: Manufacturer: syz [ 237.569479][ T5974] usb 3-1: SerialNumber: syz [ 237.603976][ T5974] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 237.649283][ T30] audit: type=1400 audit(1757435112.057:591): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 237.695393][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 238.807581][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 238.834300][ T10] ath9k_htc: Failed to initialize the device [ 238.879273][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 241.023142][ T8362] infiniband syz!: set active [ 241.031173][ T8362] infiniband syz!: added team_slave_0 [ 241.047778][ T8362] syz!: rxe_create_cq: returned err = -12 [ 241.085497][ T8362] infiniband syz!: Couldn't create ib_mad CQ [ 241.108525][ T8362] infiniband syz!: Couldn't open port 1 [ 241.132519][ T8414] netlink: 28164 bytes leftover after parsing attributes in process `syz.1.530'. [ 241.197633][ T8362] RDS/IB: syz!: added [ 241.234373][ T8362] smc: adding ib device syz! with port count 1 [ 241.241542][ T8362] smc: ib device syz! port 1 has pnetid [ 241.241699][ T8414] veth0_macvtap: left promiscuous mode [ 242.232045][ T8440] 9pnet_fd: Insufficient options for proto=fd [ 242.683984][ T30] audit: type=1326 audit(1757435117.097:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.6.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 243.344433][ T30] audit: type=1326 audit(1757435117.127:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.6.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 243.367968][ T30] audit: type=1326 audit(1757435117.127:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.6.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 243.479435][ T30] audit: type=1326 audit(1757435117.127:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.6.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 243.506702][ T30] audit: type=1326 audit(1757435117.127:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.6.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 243.533584][ T30] audit: type=1326 audit(1757435117.127:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.6.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 243.574312][ T30] audit: type=1326 audit(1757435117.127:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.6.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 243.615615][ T30] audit: type=1326 audit(1757435117.127:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.6.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 243.647734][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 244.103068][ T5974] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 244.151351][ T30] audit: type=1326 audit(1757435117.127:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.6.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 244.228904][ T30] audit: type=1326 audit(1757435117.127:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.6.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 244.426470][ T8465] sch_fq: defrate 6 ignored. [ 244.544708][ T5974] usb 7-1: config 1 interface 0 has no altsetting 0 [ 244.562031][ T5974] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 244.581318][ T5974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.743036][ T5974] usb 7-1: Product: syz [ 244.758785][ T5974] usb 7-1: Manufacturer: syz [ 244.764773][ T5974] usb 7-1: SerialNumber: syz [ 245.251505][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 245.258971][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 245.266715][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 245.274219][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 245.309350][ T5974] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 245.326543][ T5974] usb 7-1: USB disconnect, device number 2 [ 245.367504][ T5974] usblp0: removed [ 245.520438][ T8476] 9p: Unknown Cache mode or invalid value fSc [ 245.848087][ T8487] netlink: 'syz.4.549': attribute type 1 has an invalid length. [ 245.973040][ T5847] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 245.994283][ T8493] fuse: Unknown parameter 'groRş_id' [ 246.144722][ T5847] usb 1-1: config 1 interface 0 has no altsetting 0 [ 246.240504][ T5908] usb 3-1: USB disconnect, device number 25 [ 246.304729][ T5847] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 246.323042][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.349946][ T5847] usb 1-1: Product: syz [ 246.381949][ T5847] usb 1-1: Manufacturer: syz [ 246.495186][ T5847] usb 1-1: SerialNumber: syz [ 247.023690][ T8505] netlink: 755 bytes leftover after parsing attributes in process `syz.2.553'. [ 247.679747][ T5847] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 248.269408][ T8522] hub 9-0:1.0: USB hub found [ 248.284477][ T8522] hub 9-0:1.0: 1 port detected [ 248.449571][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 248.607919][ T8531] lo speed is unknown, defaulting to 1000 [ 249.144245][ T8538] lo speed is unknown, defaulting to 1000 [ 249.210618][ T5847] usb 1-1: USB disconnect, device number 24 [ 249.230460][ T5847] usblp0: removed [ 249.861185][ T5847] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 250.054059][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.073008][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.082819][ T5847] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 250.103067][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.142800][ T5847] usb 3-1: config 0 descriptor?? [ 250.301842][ T5847] hub 3-1:0.0: USB hub found [ 250.958951][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 250.958970][ T30] audit: type=1400 audit(1757435125.367:626): avc: denied { read } for pid=8544 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.162057][ T30] audit: type=1400 audit(1757435125.567:627): avc: denied { shutdown } for pid=8544 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.193941][ T30] audit: type=1326 audit(1757435125.567:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 251.228782][ T5847] hub 3-1:0.0: 1 port detected [ 251.288554][ T30] audit: type=1326 audit(1757435125.567:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 251.311798][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.313863][ T8567] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 251.374959][ T30] audit: type=1326 audit(1757435125.597:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 251.408067][ T8567] block device autoloading is deprecated and will be removed. [ 251.431298][ T30] audit: type=1326 audit(1757435125.597:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 251.490091][ T30] audit: type=1326 audit(1757435125.597:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 251.523169][ T30] audit: type=1326 audit(1757435125.597:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 251.559749][ T30] audit: type=1326 audit(1757435125.597:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 251.601278][ T30] audit: type=1326 audit(1757435125.597:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 251.662254][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.675312][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.911802][ T5847] hub 3-1:0.0: activate --> -90 [ 252.817945][ T8600] netlink: 72 bytes leftover after parsing attributes in process `syz.0.580'. [ 253.107524][ T5864] Bluetooth: hci1: command 0x0405 tx timeout [ 253.410466][ T5847] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 253.432561][ T5847] usb 3-1-port1: cannot disable (err = -32) [ 253.500556][ T5847] usb 3-1: USB disconnect, device number 26 [ 253.780258][ T8608] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 253.920794][ T8616] ucma_write: process 441 (syz.0.585) changed security contexts after opening file descriptor, this is not allowed. [ 254.465481][ T8605] rtc_cmos 00:00: Alarms can be up to one day in the future [ 254.548155][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 254.597456][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 254.628538][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 254.677531][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 254.716072][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 255.401766][ T8643] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.592'. [ 255.840778][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.848032][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.383027][ T5901] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 256.403064][ T978] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 256.552982][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 256.564939][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 256.581431][ T978] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 256.595230][ T978] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 256.618107][ T978] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 256.636755][ T5901] usb 7-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 256.656578][ T978] usb 1-1: config 0 interface 0 has no altsetting 0 [ 256.668216][ T5901] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.683036][ T5901] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.693616][ T978] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 256.693705][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.725416][ T5901] usb 7-1: Product: syz [ 256.730326][ T5901] usb 7-1: Manufacturer: syz [ 256.737577][ T5901] usb 7-1: SerialNumber: syz [ 256.740471][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.751651][ T978] usb 1-1: Product: syz [ 256.762538][ T978] usb 1-1: Manufacturer: syz [ 256.762681][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 256.774515][ T978] usb 1-1: SerialNumber: syz [ 256.782659][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 256.791396][ T978] usb 1-1: config 0 descriptor?? [ 256.811919][ T10] libceph: connect (1)[b::]:6789 error -101 [ 256.820650][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 256.955623][ T5901] usb 7-1: 0:2 : does not exist [ 256.981911][ T5901] usb 7-1: USB disconnect, device number 3 [ 257.017216][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.036837][ T978] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 257.052778][ T5205] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 257.063503][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 257.070070][ T5205] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 257.080730][ T5205] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 257.085849][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 257.091585][ T978] libceph: connect (1)[b::]:6789 error -101 [ 257.115416][ T978] libceph: mon0 (1)[b::]:6789 connect error [ 257.121816][ T5205] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 257.156234][ T5846] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 257.185620][ T5205] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 257.224798][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 257.224814][ T30] audit: type=1400 audit(1757435131.637:707): avc: denied { read } for pid=8655 comm="syz.0.597" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 257.265015][ T8656] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 257.286031][ T30] audit: type=1400 audit(1757435131.637:708): avc: denied { open } for pid=8655 comm="syz.0.597" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 257.312790][ T5205] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 257.324444][ T30] audit: type=1400 audit(1757435131.667:709): avc: denied { read write } for pid=8672 comm="syz.2.601" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 257.348843][ T5205] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 257.357700][ T30] audit: type=1400 audit(1757435131.667:710): avc: denied { open } for pid=8672 comm="syz.2.601" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 257.387780][ T5847] usb 1-1: USB disconnect, device number 25 [ 257.495355][ T30] audit: type=1400 audit(1757435131.667:711): avc: denied { ioctl } for pid=8672 comm="syz.2.601" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 257.707620][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 257.713921][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 258.124734][ T30] audit: type=1400 audit(1757435132.097:712): avc: denied { map } for pid=8672 comm="syz.2.601" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 258.178608][ T10] libceph: connect (1)[b::]:6789 error -101 [ 258.217366][ T8665] ceph: No mds server is up or the cluster is laggy [ 258.217368][ T8668] ceph: No mds server is up or the cluster is laggy [ 258.242816][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 259.078389][ T8685] netlink: 256 bytes leftover after parsing attributes in process `syz.2.602'. [ 259.134013][ T8690] input: syz1 as /devices/virtual/input/input14 [ 262.239435][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 262.284016][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 262.657271][ T8708] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 262.679261][ T8708] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 262.691330][ T8709] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 262.808360][ T8709] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 262.851862][ T8709] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 262.863374][ T8708] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 262.863445][ T8709] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 262.875420][ T8708] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 262.875512][ T8709] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 262.884407][ T8708] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 262.897715][ T8708] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 262.993923][ T8709] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 263.010734][ T8708] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 263.016951][ T8708] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 263.419884][ T8708] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.427291][ T8708] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 263.617545][ T8747] Driver unsupported XDP return value 0 on prog (id 137) dev N/A, expect packet loss! [ 263.657037][ T30] audit: type=1400 audit(1757435138.047:713): avc: denied { ioctl } for pid=8745 comm="syz.6.616" path="socket:[20096]" dev="sockfs" ino=20096 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 264.638175][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 264.647128][ T8772] netlink: 'syz.1.623': attribute type 30 has an invalid length. [ 265.038864][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 265.148319][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 265.159754][ T8778] netlink: 'syz.4.625': attribute type 18 has an invalid length. [ 265.377354][ T10] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 265.610023][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 265.612921][ T6225] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.648423][ T6225] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.653280][ T10] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 265.668767][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 265.679215][ T10] usb 7-1: config 0 has no interface number 0 [ 265.686266][ T1338] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.695657][ T1338] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.705625][ T8778] netlink: 'syz.4.625': attribute type 18 has an invalid length. [ 265.717457][ T10] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 265.730333][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.790499][ T10] usb 7-1: Product: syz [ 265.806775][ T10] usb 7-1: Manufacturer: syz [ 265.811428][ T10] usb 7-1: SerialNumber: syz [ 265.836985][ T10] usb 7-1: config 0 descriptor?? [ 265.859817][ T30] audit: type=1800 audit(1757435140.267:714): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.632" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 266.004122][ T8806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.631'. [ 266.401868][ T10] asix 7-1:0.251: probe with driver asix failed with error -71 [ 266.458267][ T10] usb 7-1: USB disconnect, device number 4 [ 266.603927][ T30] audit: type=1800 audit(1757435140.907:715): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.634" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 266.739930][ T30] audit: type=1800 audit(1757435141.097:716): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.635" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 267.657375][ T30] audit: type=1800 audit(1757435142.057:717): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.636" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 268.449278][ T8834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.456935][ T8834] batadv_slave_0: entered promiscuous mode [ 269.014021][ T8851] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.643'. [ 269.313958][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 269.523319][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 269.532617][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 269.565467][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.586799][ T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.614888][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.627501][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.636359][ T10] usb 7-1: Product: syz [ 269.640711][ T10] usb 7-1: Manufacturer: syz [ 269.651814][ T10] usb 7-1: SerialNumber: syz [ 269.813465][ T30] audit: type=1326 audit(1757435144.207:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22198ebe9 code=0x7ffc0000 [ 269.859029][ T30] audit: type=1326 audit(1757435144.217:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22198ebe9 code=0x7ffc0000 [ 269.920291][ T30] audit: type=1326 audit(1757435144.217:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff22198ebe9 code=0x7ffc0000 [ 269.993098][ T30] audit: type=1326 audit(1757435144.217:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22198ebe9 code=0x7ffc0000 [ 270.031249][ T30] audit: type=1326 audit(1757435144.217:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff221990b07 code=0x7ffc0000 [ 270.063423][ T30] audit: type=1326 audit(1757435144.217:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff221990a7c code=0x7ffc0000 [ 270.087886][ T10] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 270.125379][ T30] audit: type=1326 audit(1757435144.217:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff2219909b4 code=0x7ffc0000 [ 270.149052][ T30] audit: type=1326 audit(1757435144.217:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff2219909b4 code=0x7ffc0000 [ 270.177209][ T30] audit: type=1326 audit(1757435144.217:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff22198d84a code=0x7ffc0000 [ 270.205969][ T30] audit: type=1326 audit(1757435144.217:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22198ebe9 code=0x7ffc0000 [ 270.770045][ T8881] ecryptfs: Unknown parameter 'ecryptfs' [ 271.128139][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.143396][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.224548][ T10] usb 7-1: USB disconnect, device number 5 [ 271.635146][ T10] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 271.741995][ T8895] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 271.819227][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 271.840895][ T10] usb 7-1: can't read configurations, error -71 [ 273.693948][ T8911] syz.2.657 (8911) used greatest stack depth: 19080 bytes left [ 274.251518][ T8931] sit1: entered allmulticast mode [ 274.581788][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'. [ 274.651626][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.661'. [ 275.250486][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 275.310362][ T30] audit: type=1400 audit(1757435149.655:772): avc: denied { setopt } for pid=8943 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 275.713006][ T5973] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 276.081908][ T5973] usb 1-1: Using ep0 maxpacket: 32 [ 276.163773][ T8956] netlink: 'syz.6.669': attribute type 10 has an invalid length. [ 276.171986][ T5973] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 276.201973][ T5973] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 276.231731][ T30] audit: type=1400 audit(1757435150.635:773): avc: denied { getopt } for pid=8960 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 276.254028][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 276.262236][ T5973] usb 1-1: Product: syz [ 276.271983][ T5973] usb 1-1: Manufacturer: syz [ 276.276772][ T5973] usb 1-1: SerialNumber: syz [ 276.285928][ T5973] usb 1-1: config 0 descriptor?? [ 276.293769][ T8947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 276.305017][ T5973] hub 1-1:0.0: bad descriptor, ignoring hub [ 276.311436][ T5973] hub 1-1:0.0: probe with driver hub failed with error -5 [ 276.337430][ T8966] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 276.352775][ T8966] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 276.362463][ T8966] overlayfs: missing 'lowerdir' [ 276.613469][ T5973] usb 1-1: USB disconnect, device number 26 [ 276.799328][ T5974] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 277.047469][ T5973] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 277.174864][ T5974] usb 3-1: config 1 interface 0 has no altsetting 0 [ 277.192765][ T5974] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 277.208382][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.234714][ T5974] usb 3-1: Product: syz [ 277.252894][ T5974] usb 3-1: Manufacturer: syz [ 277.271930][ T5974] usb 3-1: SerialNumber: syz [ 277.293490][ T5973] usb 1-1: Using ep0 maxpacket: 32 [ 277.327402][ T5973] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 277.363579][ T5973] usb 1-1: string descriptor 0 read error: -22 [ 277.370407][ T5973] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 277.382748][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 277.397862][ T5973] usb 1-1: config 0 descriptor?? [ 277.429866][ T8947] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 277.438712][ T5973] hub 1-1:0.0: bad descriptor, ignoring hub [ 277.476042][ T5973] hub 1-1:0.0: probe with driver hub failed with error -5 [ 277.652116][ T8947] ksmbd: Unknown IPC event: 3, ignore. [ 277.931813][ T5974] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 27 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 278.065383][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.677'. [ 278.300565][ T30] audit: type=1326 audit(1757435152.685:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 278.389573][ T30] audit: type=1326 audit(1757435152.695:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 278.419657][ T30] audit: type=1326 audit(1757435152.695:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 278.451073][ T30] audit: type=1326 audit(1757435152.695:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 278.488978][ T30] audit: type=1326 audit(1757435152.695:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 278.520021][ T30] audit: type=1326 audit(1757435152.695:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 278.550542][ T30] audit: type=1326 audit(1757435152.705:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 279.153059][ T30] audit: type=1326 audit(1757435152.705:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f55e918ebe9 code=0x7ffc0000 [ 279.408178][ T5973] usb 3-1: USB disconnect, device number 27 [ 279.422640][ T5973] usblp1: removed [ 279.427065][ T5974] usb 1-1: USB disconnect, device number 27 [ 279.547004][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 279.553861][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 279.692160][ T9022] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 2, id = 0 [ 279.694444][ T5974] libceph: connect (1)[b::]:6789 error -101 [ 279.707882][ T5974] libceph: mon0 (1)[b::]:6789 connect error [ 279.815086][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 279.821118][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 279.883171][ T5973] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 279.967749][ T9029] 9pnet_virtio: no channels available for device ./file0 [ 279.983345][ T5974] libceph: connect (1)[b::]:6789 error -101 [ 279.989461][ T5974] libceph: mon0 (1)[b::]:6789 connect error [ 280.053087][ T5973] usb 3-1: Using ep0 maxpacket: 16 [ 280.064645][ T5973] usb 3-1: config 255 has an invalid interface number: 47 but max is 0 [ 280.086507][ T5973] usb 3-1: config 255 has no interface number 0 [ 280.109937][ T5973] usb 3-1: config 255 interface 47 has no altsetting 0 [ 280.131948][ T5973] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 280.141539][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.150328][ T5973] usb 3-1: Product: syz [ 280.155262][ T5973] usb 3-1: Manufacturer: syz [ 280.159985][ T5973] usb 3-1: SerialNumber: syz [ 280.364030][ T9008] ceph: No mds server is up or the cluster is laggy [ 280.364048][ T9016] ceph: No mds server is up or the cluster is laggy [ 280.377739][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 280.378768][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.404755][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 280.409662][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.493698][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.504102][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.554851][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.576204][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.590637][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.609402][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.626899][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.643097][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.734540][ T5973] legousbtower 3-1:255.47: interrupt endpoints not found [ 280.746726][ T5973] usb 3-1: USB disconnect, device number 28 [ 280.848966][ T9038] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 280.875446][ T9038] bond1: entered promiscuous mode [ 280.880991][ T9038] bond1: entered allmulticast mode [ 280.899306][ T9038] bond1: (slave geneve2): making interface the new active one [ 280.906945][ T9038] geneve2: entered promiscuous mode [ 280.912305][ T9038] geneve2: entered allmulticast mode [ 280.918705][ T9038] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 282.876176][ T978] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 283.044481][ T978] usb 1-1: config 1 interface 0 has no altsetting 0 [ 283.052997][ T978] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 283.062660][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.076502][ T978] usb 1-1: Product: syz [ 283.084922][ T978] usb 1-1: Manufacturer: syz [ 283.094588][ T978] usb 1-1: SerialNumber: syz [ 284.009403][ T978] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 284.469946][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 284.469964][ T30] audit: type=1400 audit(1757435158.875:797): avc: denied { append } for pid=9094 comm="syz.6.708" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 284.471200][ T9096] overlay: Unknown parameter 'pcr' [ 284.500429][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.574368][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.708'. [ 284.613656][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.708'. [ 284.627862][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.708'. [ 284.640687][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.708'. [ 284.649849][ T5974] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 284.780085][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 284.804016][ T5974] usb 3-1: Using ep0 maxpacket: 16 [ 284.820222][ T5974] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 284.831969][ T5974] usb 3-1: config 0 has no interface number 0 [ 284.842221][ T5974] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 166 [ 284.864975][ T5974] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 284.875345][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.892302][ T5974] usb 3-1: Product: syz [ 284.896782][ T5974] usb 3-1: Manufacturer: syz [ 284.902407][ T5974] usb 3-1: SerialNumber: syz [ 284.929133][ T5974] usb 3-1: config 0 descriptor?? [ 284.940993][ T9090] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 285.519711][ T5974] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 285.556642][ T5974] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 285.577795][ T5901] usb 1-1: USB disconnect, device number 28 [ 285.599926][ T5974] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 285.620190][ T5901] usblp0: removed [ 285.668118][ T5974] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 285.707643][ T5974] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 285.732040][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 285.739802][ T5974] usb 3-1: USB disconnect, device number 29 [ 285.749968][ T5974] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 285.759428][ T30] audit: type=1400 audit(1757435160.155:798): avc: denied { mounton } for pid=9113 comm="syz.6.713" path="/proc/173/task/173/net/netfilter" dev="proc" ino=4026533123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 285.784280][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.789787][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 285.798251][ T978] libceph: connect (1)[b::]:6789 error -101 [ 285.807382][ T978] libceph: mon0 (1)[b::]:6789 connect error [ 285.833034][ T5974] keyspan 3-1:0.133: device disconnected [ 285.998375][ T9115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.712'. [ 286.062762][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.090262][ T10] libceph: connect (1)[b::]:6789 error -101 [ 286.093281][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 286.102993][ T30] audit: type=1400 audit(1757435160.505:799): avc: denied { ioctl } for pid=9112 comm="syz.0.712" path="socket:[21796]" dev="sockfs" ino=21796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 286.153832][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 286.273321][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 286.535300][ T9110] ceph: No mds server is up or the cluster is laggy [ 286.535486][ T9117] ceph: No mds server is up or the cluster is laggy [ 286.990627][ T30] audit: type=1800 audit(1757435161.385:800): pid=9142 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.715" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 287.301968][ T9148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.347804][ T978] lo speed is unknown, defaulting to 1000 [ 287.426955][ T9148] vim2m vim2m.0: vidioc_s_fmt queue busy [ 288.423741][ T9160] netlink: 'syz.1.720': attribute type 10 has an invalid length. [ 288.443113][ T9160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.555704][ T30] audit: type=1400 audit(1757435162.965:801): avc: denied { connect } for pid=9162 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.593769][ T9160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.671573][ T9160] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 289.730149][ T9180] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.727'. [ 289.826700][ T9183] netlink: 'syz.4.721': attribute type 11 has an invalid length. [ 289.836175][ T9183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.721'. [ 290.182369][ T9196] tmpfs: Unknown parameter 'u˙˙˙˙ota_inode_hardliĊ½t' [ 290.580252][ T30] audit: type=1400 audit(1757435163.988:802): avc: denied { watch } for pid=9174 comm="syz.1.725" path="/162/file0" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 290.861946][ T9199] lo speed is unknown, defaulting to 1000 [ 290.900658][ T30] audit: type=1400 audit(1757435164.058:803): avc: denied { bind } for pid=9201 comm="syz.4.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.903355][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 291.063128][ T5908] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 291.075649][ T5974] libceph: connect (1)[b::]:6789 error -101 [ 291.084209][ T5974] libceph: mon0 (1)[b::]:6789 connect error [ 291.100175][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 291.184601][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 291.457115][ T5974] libceph: connect (1)[b::]:6789 error -101 [ 291.469272][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 291.470604][ T5974] libceph: mon0 (1)[b::]:6789 connect error [ 291.546239][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 291.593091][ T5901] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 291.701343][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 291.776443][ T9207] ceph: No mds server is up or the cluster is laggy [ 291.776622][ T9211] ceph: No mds server is up or the cluster is laggy [ 291.948336][ T5908] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 292.012361][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.021227][ T43] libceph: connect (1)[c::]:6789 error -101 [ 292.033232][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 292.059460][ T5901] usb 1-1: config 170 has an invalid descriptor of length 0, skipping remainder of the config [ 292.095202][ T5908] usb 3-1: Product: syz [ 292.102755][ T5901] usb 1-1: config 170 has no interfaces? [ 292.111139][ T5908] usb 3-1: Manufacturer: syz [ 292.203042][ T5908] usb 3-1: SerialNumber: syz [ 292.210951][ T5908] usb 3-1: config 0 descriptor?? [ 292.227492][ T43] libceph: connect (1)[b::]:6789 error -101 [ 292.233600][ T43] libceph: mon0 (1)[b::]:6789 connect error [ 292.245034][ T5908] gspca_main: se401-2.14.0 probing 047d:5003 [ 292.686943][ T43] libceph: connect (1)[c::]:6789 error -101 [ 292.703304][ T5901] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 292.736838][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 292.773421][ T5901] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 292.784554][ T9221] ceph: No mds server is up or the cluster is laggy [ 292.784562][ T9225] ceph: No mds server is up or the cluster is laggy [ 292.798528][ T43] libceph: connect (1)[b::]:6789 error -101 [ 292.804970][ T43] libceph: mon0 (1)[b::]:6789 connect error [ 292.810969][ T5901] usb 1-1: Product: syz [ 292.817121][ T5901] usb 1-1: Manufacturer: syz [ 292.845657][ T5901] usb 1-1: SerialNumber: syz [ 293.039329][ T5901] usb 1-1: USB disconnect, device number 29 [ 294.854957][ T5908] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 295.020195][ T9250] netlink: 'syz.0.743': attribute type 30 has an invalid length. [ 295.959275][ T5974] usb 3-1: USB disconnect, device number 30 [ 296.544472][ T43] libceph: connect (1)[c::]:6789 error -22 [ 296.579206][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 296.697543][ T30] audit: type=1400 audit(1757435170.108:804): avc: denied { ioctl } for pid=9294 comm="syz.6.754" path="socket:[22058]" dev="sockfs" ino=22058 ioctlcmd=0x4945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 296.803438][ T5974] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 296.890389][ T9298] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.900095][ T9298] vxfs: unable to read disk superblock at 1 [ 296.908739][ T9298] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.919190][ T9298] vxfs: unable to read disk superblock at 8 [ 296.925462][ T9298] vxfs: can't find superblock. [ 296.964072][ T43] libceph: connect (1)[c::]:6789 error -22 [ 296.970210][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 297.122392][ T5974] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 297.133482][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.141488][ T5974] usb 3-1: Product: syz [ 297.149647][ T5974] usb 3-1: Manufacturer: syz [ 297.154423][ T5974] usb 3-1: SerialNumber: syz [ 297.498359][ T5908] libceph: connect (1)[c::]:6789 error -22 [ 297.733315][ T9288] ceph: No mds server is up or the cluster is laggy [ 297.740893][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 297.841249][ T30] audit: type=1400 audit(1757435171.248:805): avc: denied { read } for pid=9306 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 297.998560][ T10] libceph: connect (1)[c::]:6789 error -101 [ 298.012750][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 298.033244][ T9309] ceph: No mds server is up or the cluster is laggy [ 298.141731][ T9313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.750'. [ 298.285712][ T10] libceph: connect (1)[c::]:6789 error -101 [ 298.360274][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 299.136768][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 299.202000][ T5974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 299.285785][ T5974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 299.329182][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.763'. [ 299.334334][ T5974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 299.415408][ T5974] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 299.479153][ T5974] usb 3-1: USB disconnect, device number 31 [ 300.507532][ T30] audit: type=1400 audit(1757435173.488:806): avc: denied { write } for pid=9336 comm="syz.6.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 300.729229][ T9351] overlay: Unknown parameter 'fowner' [ 301.123100][ T5974] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 301.336115][ T5974] usb 1-1: config 0 has no interfaces? [ 301.351617][ T5974] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 301.358266][ T43] libceph: connect (1)[c::]:6789 error -101 [ 301.368579][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 301.396317][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 301.529506][ T5974] usb 1-1: Product: syz [ 301.540451][ T5974] usb 1-1: Manufacturer: syz [ 301.550763][ T5974] usb 1-1: SerialNumber: syz [ 301.566096][ T5974] usb 1-1: config 0 descriptor?? [ 301.633352][ T43] libceph: connect (1)[c::]:6789 error -101 [ 301.641554][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 301.743069][ T5847] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 302.012974][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 302.020131][ T5847] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 302.034351][ T5847] usb 3-1: config 0 has no interface number 0 [ 302.047052][ T5847] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 302.058859][ T5847] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 302.071230][ T5847] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.082996][ T5847] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.096902][ T5847] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 302.105142][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 302.106277][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.128684][ T5847] usb 3-1: config 0 descriptor?? [ 302.139582][ T5847] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 302.157367][ T9358] ceph: No mds server is up or the cluster is laggy [ 302.164634][ T43] libceph: connect (1)[c::]:6789 error -101 [ 302.170701][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 302.261590][ T9371] netlink: 24 bytes leftover after parsing attributes in process `syz.6.774'. [ 302.299179][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.714333][ T9391] netlink: 13 bytes leftover after parsing attributes in process `syz.4.777'. [ 303.779189][ T30] audit: type=1400 audit(1757435177.184:807): avc: denied { getopt } for pid=9394 comm="syz.6.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 303.912212][ T5847] usb 1-1: USB disconnect, device number 30 [ 304.029228][ T9404] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9404 comm=syz.6.779 [ 304.186664][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 304.194439][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 304.369190][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 304.473652][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 304.479751][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 304.735246][ T9433] netlink: 'syz.1.787': attribute type 10 has an invalid length. [ 304.752069][ T9433] bridge0: port 3(team0) entered disabled state [ 304.760063][ T9433] team0: left allmulticast mode [ 304.769189][ T9433] team_slave_0: left allmulticast mode [ 304.774791][ T9433] team_slave_1: left allmulticast mode [ 304.780397][ T9433] geneve0: left allmulticast mode [ 304.785964][ T9433] team0: left promiscuous mode [ 304.790845][ T9433] team_slave_0: left promiscuous mode [ 304.797153][ T9433] team_slave_1: left promiscuous mode [ 304.804350][ T9433] geneve0: left promiscuous mode [ 304.810526][ T9433] bridge0: port 3(team0) entered disabled state [ 304.839630][ T30] audit: type=1400 audit(1757435178.244:808): avc: denied { create } for pid=9425 comm="syz.1.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 304.870376][ T978] usb 3-1: USB disconnect, device number 32 [ 304.882437][ T9433] batman_adv: batadv0: Adding interface: team0 [ 304.889351][ T9433] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.922581][ T9433] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 304.970673][ T978] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 304.995236][ T30] audit: type=1400 audit(1757435178.404:809): avc: denied { write } for pid=9425 comm="syz.1.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 305.016383][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 305.070945][ T9412] ceph: No mds server is up or the cluster is laggy [ 305.097446][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 305.142927][ T5974] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 305.293053][ T5974] usb 1-1: Using ep0 maxpacket: 32 [ 305.301691][ T5974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.319115][ T5974] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 305.338833][ T5974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.377262][ T5974] usb 1-1: config 0 descriptor?? [ 305.696744][ T9453] tipc: Started in network mode [ 305.701862][ T9453] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 305.711703][ T9453] tipc: Enabled bearer , priority 10 [ 305.801414][ T5974] hid_parser_main: 4 callbacks suppressed [ 305.801436][ T5974] lenovo 0003:17EF:60A3.0007: unknown main item tag 0x1 [ 305.828762][ T5974] lenovo 0003:17EF:60A3.0007: hidraw0: USB HID v0.80 Device [HID 17ef:60a3] on usb-dummy_hcd.0-1/input0 [ 305.975305][ T978] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 306.003799][ T5928] usb 1-1: USB disconnect, device number 31 [ 306.160734][ T9460] netlink: 24 bytes leftover after parsing attributes in process `syz.6.799'. [ 306.230231][ T978] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 306.232597][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.800'. [ 306.247813][ T978] usb 3-1: config 0 has no interface number 0 [ 306.278572][ T978] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 306.293214][ T9462] fido_id[9462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 306.307714][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.319936][ T978] usb 3-1: Product: syz [ 306.334319][ T978] usb 3-1: Manufacturer: syz [ 306.346498][ T978] usb 3-1: SerialNumber: syz [ 306.435690][ T978] usb 3-1: config 0 descriptor?? [ 306.674685][ T978] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 306.684795][ T978] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 306.694098][ T978] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 306.718625][ T978] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 306.775916][ T978] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 306.824441][ T5928] tipc: Node number set to 10136234 [ 307.111587][ T9483] netlink: 24 bytes leftover after parsing attributes in process `syz.6.803'. [ 307.258182][ T978] usb 3-1: USB disconnect, device number 33 [ 307.277474][ T978] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 307.301837][ T978] keyspan 3-1:0.133: device disconnected [ 307.854649][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'. [ 307.869282][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'. [ 308.194652][ T9505] /dev/nullb0: Can't lookup blockdev [ 308.202059][ T9507] netlink: 56 bytes leftover after parsing attributes in process `syz.2.807'. [ 308.370545][ T9511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9511 comm=syz.4.809 [ 308.875459][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'. [ 309.192898][ T5847] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 309.344470][ T5847] usb 3-1: config 1 interface 0 has no altsetting 0 [ 309.353394][ T5847] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 309.372532][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.384862][ T978] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 309.412448][ T5847] usb 3-1: Product: syz [ 309.428900][ T5847] usb 3-1: Manufacturer: syz [ 309.448508][ T5847] usb 3-1: SerialNumber: syz [ 309.515302][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 309.524237][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 309.536547][ T9537] netlink: 'syz.1.817': attribute type 7 has an invalid length. [ 309.554562][ T978] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.570042][ T978] usb 1-1: config 0 interface 0 has no altsetting 0 [ 309.590685][ T978] usb 1-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 309.610896][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.629709][ T978] usb 1-1: config 0 descriptor?? [ 309.636466][ T9541] fuse: Bad value for 'fd' [ 310.849045][ T978] usbhid 1-1:0.0: can't add hid device: -71 [ 310.857119][ T5847] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 310.862937][ T978] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 310.878579][ T5847] usb 3-1: USB disconnect, device number 34 [ 310.887054][ T5847] usblp0: removed [ 311.068939][ T978] usb 1-1: USB disconnect, device number 32 [ 311.862796][ T9560] Invalid option length (63011) for dns_resolver key [ 311.931331][ T9567] netlink: 'syz.2.826': attribute type 10 has an invalid length. [ 311.943546][ T9567] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 311.956468][ T9566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.113275][ T5847] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 312.229186][ T30] audit: type=1800 audit(1757435185.634:810): pid=9572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.827" name="SYSV00000000" dev="tmpfs" ino=37 res=0 errno=0 [ 312.242942][ T5847] usb 1-1: device descriptor read/64, error -71 [ 312.495883][ T5847] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 312.673070][ T5847] usb 1-1: device descriptor read/64, error -71 [ 312.796315][ T5847] usb usb1-port1: attempt power cycle [ 313.143647][ T5847] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 313.186568][ T5847] usb 1-1: device descriptor read/8, error -71 [ 313.442959][ T5847] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 313.494556][ T5847] usb 1-1: device descriptor read/8, error -71 [ 313.623286][ T5847] usb usb1-port1: unable to enumerate USB device [ 313.803296][ T30] audit: type=1400 audit(1757435187.214:811): avc: denied { append } for pid=9599 comm="syz.2.836" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 314.423245][ T92] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 314.574418][ T92] usb 3-1: config 1 interface 0 has no altsetting 0 [ 314.662234][ T92] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 314.671775][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.682264][ T92] usb 3-1: Product: syz [ 314.689513][ T92] usb 3-1: Manufacturer: syz [ 314.721336][ T30] audit: type=1800 audit(1757435188.114:812): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.843" name="SYSV00000000" dev="tmpfs" ino=38 res=0 errno=0 [ 314.742726][ T92] usb 3-1: SerialNumber: syz [ 314.930910][ T9633] netlink: 'syz.0.844': attribute type 4 has an invalid length. [ 315.045743][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 315.375971][ T92] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 315.928308][ T30] audit: type=1400 audit(1757435189.334:813): avc: denied { setopt } for pid=9647 comm="syz.1.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.046778][ T9633] syz.0.844: vmalloc error: size 960602112, failed to allocated page array size 1876176, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 316.070730][ T9633] CPU: 1 UID: 0 PID: 9633 Comm: syz.0.844 Not tainted syzkaller #0 PREEMPT(full) [ 316.070755][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.070767][ T9633] Call Trace: [ 316.070773][ T9633] [ 316.070779][ T9633] dump_stack_lvl+0x16c/0x1f0 [ 316.070809][ T9633] warn_alloc+0x248/0x3a0 [ 316.070836][ T9633] ? __pfx_warn_alloc+0x10/0x10 [ 316.070864][ T9633] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 316.070893][ T9633] ? __vmalloc_node_noprof+0xad/0xf0 [ 316.070924][ T9633] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 316.070959][ T9633] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 316.070992][ T9633] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.071027][ T9633] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 316.071055][ T9633] vmalloc_user_noprof+0x9e/0xe0 [ 316.071081][ T9633] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 316.071109][ T9633] vb2_vmalloc_alloc+0x135/0x3f0 [ 316.071138][ T9633] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 316.071167][ T9633] __vb2_queue_alloc+0x8c6/0x1280 [ 316.071207][ T9633] vb2_core_create_bufs+0x559/0xab0 [ 316.071238][ T9633] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 316.071271][ T9633] ? __mutex_trylock_common+0xe9/0x250 [ 316.071303][ T9633] vb2_create_bufs+0x5e8/0x840 [ 316.071331][ T9633] ? __pfx_vb2_create_bufs+0x10/0x10 [ 316.071363][ T9633] vb2_ioctl_create_bufs+0x244/0x3e0 [ 316.071389][ T9633] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 316.071413][ T9633] vidioc_create_bufs+0x7d/0xf0 [ 316.071437][ T9633] v4l_create_bufs+0x159/0x270 [ 316.071457][ T9633] __video_do_ioctl+0xb3d/0xfc0 [ 316.071481][ T9633] ? __might_fault+0xe3/0x190 [ 316.071498][ T9633] ? __pfx___video_do_ioctl+0x10/0x10 [ 316.071529][ T9633] video_usercopy+0x4cd/0x1720 [ 316.071553][ T9633] ? __pfx___video_do_ioctl+0x10/0x10 [ 316.071575][ T9633] ? selinux_kernel_read_file+0xd0/0x130 [ 316.071601][ T9633] ? __pfx_video_usercopy+0x10/0x10 [ 316.071640][ T9633] v4l2_ioctl+0x1ba/0x250 [ 316.071660][ T9633] ? __pfx_v4l2_ioctl+0x10/0x10 [ 316.071680][ T9633] __x64_sys_ioctl+0x18b/0x210 [ 316.071711][ T9633] do_syscall_64+0xcd/0x4c0 [ 316.071737][ T9633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.071756][ T9633] RIP: 0033:0x7fecf498ebe9 [ 316.071771][ T9633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.071789][ T9633] RSP: 002b:00007fecf57c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.071807][ T9633] RAX: ffffffffffffffda RBX: 00007fecf4bc5fa0 RCX: 00007fecf498ebe9 [ 316.071818][ T9633] RDX: 00002000000059c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 316.071834][ T9633] RBP: 00007fecf4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 316.071845][ T9633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.071855][ T9633] R13: 00007fecf4bc6038 R14: 00007fecf4bc5fa0 R15: 00007ffd39c4d178 [ 316.071880][ T9633] [ 316.071940][ T9633] Mem-Info: [ 316.102034][ T9662] overlayfs: failed to clone upperpath [ 316.114165][ T9633] active_anon:10708 inactive_anon:0 isolated_anon:0 [ 316.114165][ T9633] active_file:18304 inactive_file:41224 isolated_file:0 [ 316.114165][ T9633] unevictable:1792 dirty:691 writeback:0 [ 316.114165][ T9633] slab_reclaimable:9934 slab_unreclaimable:105750 [ 316.114165][ T9633] mapped:36288 shmem:2424 pagetables:1497 [ 316.114165][ T9633] sec_pagetables:0 bounce:0 [ 316.114165][ T9633] kernel_misc_reclaimable:0 [ 316.114165][ T9633] free:1234022 free_pcp:20467 free_cma:0 [ 316.474818][ T9633] Node 0 active_anon:43732kB inactive_anon:0kB active_file:73188kB inactive_file:164696kB unevictable:5632kB isolated(anon):0kB isolated(file):0kB mapped:145124kB dirty:2760kB writeback:0kB shmem:8160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13512kB pagetables:5824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.510867][ T30] audit: type=1326 audit(1757435189.914:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9654 comm="syz.6.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 316.545245][ T9633] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.588171][ T30] audit: type=1326 audit(1757435189.914:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9654 comm="syz.6.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f3f8ebe9 code=0x7ffc0000 [ 316.635631][ T9633] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.643138][ T9672] tipc: Enabling of bearer rejected, failed to enable media [ 316.676982][ T9633] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 316.685931][ T9633] Node 0 DMA32 free:1039892kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44212kB inactive_anon:0kB active_file:73188kB inactive_file:163352kB unevictable:5632kB writepending:2760kB present:3129332kB managed:2539340kB mlocked:0kB bounce:0kB free_pcp:54288kB local_pcp:22268kB free_cma:0kB [ 316.720912][ T9633] lowmem_reserve[]: 0 0 1 1 1 [ 316.731791][ T9633] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:1344kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 316.763547][ T9633] lowmem_reserve[]: 0 0 0 0 0 [ 316.768334][ T9633] Node 1 Normal free:3880620kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26080kB local_pcp:18464kB free_cma:0kB [ 316.856970][ T9633] lowmem_reserve[]: 0 0 0 0 0 [ 316.871938][ T9633] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 317.006365][ T9633] Node 0 DMA32: 2*4kB (ME) 62*8kB (ME) 50*16kB (E) 102*32kB (ME) 189*64kB (UME) 90*128kB (ME) 51*256kB (UME) 15*512kB (UME) 10*1024kB (UM) 3*2048kB (UE) 236*4096kB (UM) = 1031960kB [ 317.056066][ T9633] Node 0 Normal: 0*4kB 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 317.274212][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.441469][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.451084][ T5928] usb 3-1: USB disconnect, device number 35 [ 317.457752][ T9633] Node 1 Normal: 210*4kB (UME) 59*8kB (UME) 46*16kB (UME) 171*32kB (UME) 44*64kB (UME) 11*128kB (UME) 3*256kB (UE) 3*512kB (UE) 0*1024kB 2*2048kB (ME) 943*4096kB (M) = 3880672kB [ 317.479664][ T5928] usblp0: removed [ 317.517259][ T9633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.529838][ T9633] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 317.540487][ T9633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.551047][ T9633] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.562045][ T9633] 64818 total pagecache pages [ 317.567836][ T9633] 0 pages in swap cache [ 317.572077][ T9633] Free swap = 124996kB [ 317.577793][ T9633] Total swap = 124996kB [ 317.582240][ T9633] 2097051 pages RAM [ 317.607823][ T9633] 0 pages HighMem/MovableOnly [ 317.626420][ T9633] 430254 pages reserved [ 317.631036][ T30] audit: type=1400 audit(1757435191.034:816): avc: denied { bind } for pid=9683 comm="syz.2.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 317.663064][ T9633] 0 pages cma reserved [ 317.791880][ T30] audit: type=1400 audit(1757435191.184:817): avc: denied { accept } for pid=9683 comm="syz.2.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.080072][ T9699] 9pnet_fd: Insufficient options for proto=fd [ 318.092333][ T9700] dvmrp0: entered allmulticast mode [ 318.167119][ T9700] lo speed is unknown, defaulting to 1000 [ 318.309312][ T9704] ------------[ cut here ]------------ [ 318.315344][ T9704] WARNING: CPU: 0 PID: 9704 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 318.325923][ T9704] Modules linked in: [ 318.330223][ T9704] CPU: 0 UID: 0 PID: 9704 Comm: syz.4.857 Not tainted syzkaller #0 PREEMPT(full) [ 318.339610][ T9704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.349737][ T9704] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 318.356508][ T9704] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 7f c1 7e 0e 00 75 0b c6 05 76 c1 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 318.376360][ T9704] RSP: 0018:ffffc90003c6f7f0 EFLAGS: 00010246 [ 318.382445][ T9704] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 318.390631][ T9704] RDX: 0000000000000000 RSI: 000000000000001a RDI: 0000000000040d40 [ 318.399195][ T9704] RBP: 000000000000001a R08: 0000000000000005 R09: 0000000000000009 [ 318.407591][ T9704] R10: 000000000000001a R11: ffffffff8b93f0cd R12: 0000000000040d40 [ 318.416019][ T9704] R13: 1ffff9200078df13 R14: ffffffff9ae7fa24 R15: 000000000000001a [ 318.424639][ T9704] FS: 00007f55e9fdc6c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 318.434108][ T9704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.441556][ T9704] CR2: 0000000000000000 CR3: 0000000045c64000 CR4: 00000000003526f0 [ 318.450202][ T9704] Call Trace: [ 318.453892][ T9704] [ 318.456824][ T9704] ? do_syscall_64+0xcd/0x4c0 [ 318.461508][ T9704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.468089][ T9704] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 318.474886][ T9704] ? kasan_quarantine_put+0x10a/0x240 [ 318.480274][ T9704] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.486108][ T9704] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 318.492026][ T9704] ? policy_nodemask+0xea/0x4e0 [ 318.497381][ T9704] alloc_pages_mpol+0x1fb/0x550 [ 318.502255][ T9704] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 318.508100][ T9704] ? v9fs_fid_get_acl+0x7a/0x120 [ 318.513496][ T9704] ___kmalloc_large_node+0xed/0x160 [ 318.518730][ T9704] ? v9fs_fid_get_acl+0x7a/0x120 [ 318.524384][ T9704] __kmalloc_large_node_noprof+0x1c/0x70 [ 318.530043][ T9704] __kmalloc_noprof.cold+0xc/0x61 [ 318.535683][ T9704] ? __pfx_iget5_locked+0x10/0x10 [ 318.540731][ T9704] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 318.547184][ T9704] v9fs_fid_get_acl+0x7a/0x120 [ 318.551968][ T9704] v9fs_get_acl+0xee/0x530 [ 318.556893][ T9704] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 318.562461][ T9704] v9fs_mount+0x4fd/0xa90 [ 318.567203][ T9704] ? __pfx_v9fs_mount+0x10/0x10 [ 318.572065][ T9704] ? cap_capable+0xb3/0x250 [ 318.576995][ T9704] ? __pfx_v9fs_mount+0x10/0x10 [ 318.581849][ T9704] legacy_get_tree+0x10c/0x220 [ 318.587101][ T9704] vfs_get_tree+0x8b/0x340 [ 318.591533][ T9704] path_mount+0x1513/0x2000 [ 318.596475][ T9704] ? __pfx_path_mount+0x10/0x10 [ 318.601360][ T9704] ? kmem_cache_free+0x2d1/0x4d0 [ 318.606879][ T9704] ? putname+0x154/0x1a0 [ 318.611134][ T9704] ? putname+0x154/0x1a0 [ 318.615874][ T9704] ? __x64_sys_mount+0x28d/0x310 [ 318.620815][ T9704] __x64_sys_mount+0x28d/0x310 [ 318.626169][ T9704] ? __pfx___x64_sys_mount+0x10/0x10 [ 318.631476][ T9704] do_syscall_64+0xcd/0x4c0 [ 318.636636][ T9704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.642549][ T9704] RIP: 0033:0x7f55e918ebe9 [ 318.647487][ T9704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.667549][ T9704] RSP: 002b:00007f55e9fdc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.676426][ T9704] RAX: ffffffffffffffda RBX: 00007f55e93c6090 RCX: 00007f55e918ebe9 [ 318.684887][ T9704] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 318.693305][ T9704] RBP: 00007f55e9211e19 R08: 0000200000000500 R09: 0000000000000000 [ 318.701289][ T9704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.709775][ T9704] R13: 00007f55e93c6128 R14: 00007f55e93c6090 R15: 00007ffe0cdda038 [ 318.718281][ T9704] [ 318.721309][ T9704] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 318.728591][ T9704] CPU: 0 UID: 0 PID: 9704 Comm: syz.4.857 Not tainted syzkaller #0 PREEMPT(full) [ 318.737792][ T9704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.747851][ T9704] Call Trace: [ 318.751183][ T9704] [ 318.754110][ T9704] dump_stack_lvl+0x3d/0x1f0 [ 318.758711][ T9704] vpanic+0x6e8/0x7a0 [ 318.762703][ T9704] ? __pfx_vpanic+0x10/0x10 [ 318.767221][ T9704] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 318.773288][ T9704] panic+0xca/0xd0 [ 318.777024][ T9704] ? __pfx_panic+0x10/0x10 [ 318.781454][ T9704] check_panic_on_warn+0xab/0xb0 [ 318.786373][ T9704] __warn+0xf6/0x3c0 [ 318.790246][ T9704] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 318.796293][ T9704] report_bug+0x3c3/0x580 [ 318.800603][ T9704] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 318.806650][ T9704] handle_bug+0x184/0x210 [ 318.810965][ T9704] exc_invalid_op+0x17/0x50 [ 318.815465][ T9704] asm_exc_invalid_op+0x1a/0x20 [ 318.820327][ T9704] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 318.827007][ T9704] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 7f c1 7e 0e 00 75 0b c6 05 76 c1 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 318.846601][ T9704] RSP: 0018:ffffc90003c6f7f0 EFLAGS: 00010246 [ 318.852667][ T9704] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 318.860617][ T9704] RDX: 0000000000000000 RSI: 000000000000001a RDI: 0000000000040d40 [ 318.868567][ T9704] RBP: 000000000000001a R08: 0000000000000005 R09: 0000000000000009 [ 318.876530][ T9704] R10: 000000000000001a R11: ffffffff8b93f0cd R12: 0000000000040d40 [ 318.884513][ T9704] R13: 1ffff9200078df13 R14: ffffffff9ae7fa24 R15: 000000000000001a [ 318.892497][ T9704] ? do_syscall_64+0xcd/0x4c0 [ 318.897181][ T9704] ? do_syscall_64+0xcd/0x4c0 [ 318.901845][ T9704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.907903][ T9704] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 318.914221][ T9704] ? kasan_quarantine_put+0x10a/0x240 [ 318.919571][ T9704] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.924752][ T9704] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 318.930632][ T9704] ? policy_nodemask+0xea/0x4e0 [ 318.935465][ T9704] alloc_pages_mpol+0x1fb/0x550 [ 318.940299][ T9704] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 318.945658][ T9704] ? v9fs_fid_get_acl+0x7a/0x120 [ 318.950602][ T9704] ___kmalloc_large_node+0xed/0x160 [ 318.955791][ T9704] ? v9fs_fid_get_acl+0x7a/0x120 [ 318.960712][ T9704] __kmalloc_large_node_noprof+0x1c/0x70 [ 318.966327][ T9704] __kmalloc_noprof.cold+0xc/0x61 [ 318.971336][ T9704] ? __pfx_iget5_locked+0x10/0x10 [ 318.976344][ T9704] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 318.982313][ T9704] v9fs_fid_get_acl+0x7a/0x120 [ 318.987063][ T9704] v9fs_get_acl+0xee/0x530 [ 318.991458][ T9704] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 318.996986][ T9704] v9fs_mount+0x4fd/0xa90 [ 319.001296][ T9704] ? __pfx_v9fs_mount+0x10/0x10 [ 319.006126][ T9704] ? cap_capable+0xb3/0x250 [ 319.010611][ T9704] ? __pfx_v9fs_mount+0x10/0x10 [ 319.015438][ T9704] legacy_get_tree+0x10c/0x220 [ 319.020185][ T9704] vfs_get_tree+0x8b/0x340 [ 319.024587][ T9704] path_mount+0x1513/0x2000 [ 319.029075][ T9704] ? __pfx_path_mount+0x10/0x10 [ 319.033909][ T9704] ? kmem_cache_free+0x2d1/0x4d0 [ 319.038824][ T9704] ? putname+0x154/0x1a0 [ 319.043052][ T9704] ? putname+0x154/0x1a0 [ 319.047280][ T9704] ? __x64_sys_mount+0x28d/0x310 [ 319.052196][ T9704] __x64_sys_mount+0x28d/0x310 [ 319.056944][ T9704] ? __pfx___x64_sys_mount+0x10/0x10 [ 319.062217][ T9704] do_syscall_64+0xcd/0x4c0 [ 319.066706][ T9704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.072596][ T9704] RIP: 0033:0x7f55e918ebe9 [ 319.077014][ T9704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.096613][ T9704] RSP: 002b:00007f55e9fdc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 319.105010][ T9704] RAX: ffffffffffffffda RBX: 00007f55e93c6090 RCX: 00007f55e918ebe9 [ 319.112960][ T9704] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 319.120908][ T9704] RBP: 00007f55e9211e19 R08: 0000200000000500 R09: 0000000000000000 [ 319.128871][ T9704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.136819][ T9704] R13: 00007f55e93c6128 R14: 00007f55e93c6090 R15: 00007ffe0cdda038 [ 319.144779][ T9704] [ 319.147987][ T9704] Kernel Offset: disabled [ 319.152284][ T9704] Rebooting in 86400 seconds..