last executing test programs: 1m9.486586132s ago: executing program 4 (id=364): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x400000000}, {}, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x5, 0x0, 0x0, 0x2000000}}, 0xe4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000"/158], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r6 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="14794ebb0f317b5784ba506be33abe9e6c847b2c85785b77cdd91c042d9657cc08e190bd760f8eae2444717e815ef9dea221e40bac95e4f89ebfd207ea09d78d629388fa42bd4d631508fa5cce", 0x4d, 0xffffffffffffffff) keyctl$set_timeout(0xf, r6, 0x2) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r7, &(0x7f0000000080)=""/152, 0x98) read(r7, &(0x7f0000001140)=""/212, 0xd4) socket$nl_audit(0x10, 0x3, 0x9) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000480)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000100)={0xc}) 1m8.960505699s ago: executing program 0 (id=366): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) capget(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x5, 0x8, 0xfffffffc, 0x7, 0xd, 0x9}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x36, 0x1) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000600000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x3, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4048aecb, &(0x7f00000034c0)={{0x0, 0x0, 0x80, {0xeeee0000, 0x5, 0x2}}, "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", "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"}) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x60) r7 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r7) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fedbdf250200000014000700fe80000000000000000000000000002806000a004e200000070001004e210000090009000000000000000000000000000000000014000900ff020000000000000000000002892e"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x8000) ioctl$KVM_RUN(r5, 0xae80, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) 1m7.201768824s ago: executing program 4 (id=368): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x7d, &(0x7f0000000080)={0x0, 0x86f7, 0x2000}, &(0x7f0000000300), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000002a0e83dd8000000040000"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000003a00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500), 0x0, 0x4) 1m7.08441378s ago: executing program 1 (id=369): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) setpriority(0x1, r0, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000fcf000/0x4000)=nil, 0x4000}) 1m6.141568142s ago: executing program 1 (id=371): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) socket$inet6(0xa, 0x6, 0x10000) pread64(r2, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r3 = openat(0xffffffffffffff9c, 0x0, 0xa00, 0x1c2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) 1m5.382501783s ago: executing program 2 (id=372): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r0, r0, 0x2) fsetxattr$security_ima(r0, &(0x7f0000000a40), 0x0, 0x0, 0x3) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x40a700, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 1m5.036739638s ago: executing program 1 (id=373): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone3(&(0x7f0000000440)={0x10000000, &(0x7f0000000040), 0x0, &(0x7f00000001c0), {0x31}, 0x0, 0x0, &(0x7f0000000280)=""/43, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x4000001) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) sendto$unix(r0, &(0x7f00000000c0), 0x0, 0x40, &(0x7f0000000640)=@file={0x0, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000600)={&(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864d1, &(0x7f0000000d40)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x3ff, 0x2, 0x806}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000005f40), &(0x7f0000005e80)=0xfc9e) close_range(r3, 0xffffffffffffffff, 0x0) 1m3.677419845s ago: executing program 1 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) pipe(&(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x20000840) 1m3.596070903s ago: executing program 2 (id=375): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/173) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) unshare(0x20000400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) lsm_set_self_attr(0x6a, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) 1m3.178688124s ago: executing program 4 (id=376): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_usb_disconnect(r4) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}}], 0x1, 0x0, &(0x7f0000000480)={r5, r6+60000000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) 1m3.080613208s ago: executing program 2 (id=377): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4054}, 0x400400d1) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x62258fcdfbd36776}, 0x4000000) 1m3.078856388s ago: executing program 1 (id=378): getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000100)) getresgid(&(0x7f00000009c0), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x8012}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x43) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 1m3.01763339s ago: executing program 0 (id=379): bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x8, 0x20000fe}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m1.018404285s ago: executing program 1 (id=381): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r3, &(0x7f0000000000)=[{0x0}], 0x1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x39) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, &(0x7f0000000300), {0x15}, 0x0, 0x0, &(0x7f00000003c0)=""/172, 0x0}, 0x58) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r8}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000"/51], 0x0) 58.422994436s ago: executing program 2 (id=383): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r2, 0x0, 0x9100, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000002000010000000000000000000a00000000000000000000001400110064766d7270310000000001000000000008000a00000046"], 0x38}}, 0x0) socket$inet6(0xa, 0x1, 0x9) 58.309438226s ago: executing program 0 (id=384): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) capget(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x5, 0x8, 0xfffffffc, 0x7, 0xd, 0x9}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000992000/0x2000)=nil, 0x2000, 0x2, 0x30, 0xffffffffffffffff, 0x8293a000) lseek(0xffffffffffffffff, 0x36, 0x1) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000600000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x3, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4048aecb, &(0x7f00000034c0)={{0x0, 0x0, 0x80, {0xeeee0000, 0x5, 0x2}}, "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", "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"}) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x60) r7 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r7) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fedbdf250200000014000700fe80000000000000000000000000002806000a004e200000070001004e210000090009000000000000000000000000000000000014000900ff020000000000000000000002892e"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x8000) ioctl$KVM_RUN(r5, 0xae80, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) 55.155401334s ago: executing program 2 (id=386): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/4096, 0x1000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210800000122f8040905a103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) setuid(0x0) 50.198920623s ago: executing program 4 (id=388): getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000100)) getresgid(&(0x7f00000009c0), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x8012}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x43) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 47.183559474s ago: executing program 0 (id=389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r0, r0, 0x2) fsetxattr$security_ima(r0, &(0x7f0000000a40), 0x0, 0x0, 0x3) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x40a700, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000040)={0x3, 0x3, 0x1, 'queue1\x00', 0x4}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) 47.137577039s ago: executing program 2 (id=390): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/173) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) unshare(0x20000400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) lsm_set_self_attr(0x6a, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) 47.039003184s ago: executing program 4 (id=391): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004a80), 0x0, 0x400c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 45.271041479s ago: executing program 32 (id=381): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r3, &(0x7f0000000000)=[{0x0}], 0x1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x39) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, &(0x7f0000000300), {0x15}, 0x0, 0x0, &(0x7f00000003c0)=""/172, 0x0}, 0x58) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r8}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000"/51], 0x0) 45.257556699s ago: executing program 0 (id=393): mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) getpid() syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c192fa280724060000d2cf0524001c620d240f0100000000020005f29011cc03080353ee97050a2401f90a00020102092403060703020208"], &(0x7f00000000c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r1, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff0205000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 45.244787672s ago: executing program 4 (id=395): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_usb_disconnect(r4) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}}], 0x1, 0x0, &(0x7f0000000480)={r5, r6+60000000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) 36.870491426s ago: executing program 0 (id=398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) 28.537103299s ago: executing program 33 (id=390): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/173) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) unshare(0x20000400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) lsm_set_self_attr(0x6a, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) 28.349971679s ago: executing program 34 (id=395): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_usb_disconnect(r4) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}}], 0x1, 0x0, &(0x7f0000000480)={r5, r6+60000000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) 18.860927406s ago: executing program 35 (id=398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) 16.766252428s ago: executing program 6 (id=399): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/4096, 0x1000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210800000122f8040905a103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 3.572104884s ago: executing program 3 (id=407): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) write$P9_RSTATu(r6, &(0x7f00000004c0)={0x232, 0x7d, 0x1, {{0x500, 0xf1, 0x0, 0x400, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x334e89}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000200)={0x18, r1}) 2.376172094s ago: executing program 3 (id=408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6afbc267e17", 0x16}, {0x0}], 0x2}}], 0x1, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) 2.282242013s ago: executing program 3 (id=409): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 1.822890036s ago: executing program 3 (id=410): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.349696617s ago: executing program 3 (id=411): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x334e89}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000200)={0x18, r1}) 0s ago: executing program 3 (id=412): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x7d, &(0x7f0000000080)={0x0, 0x86f7, 0x2000}, &(0x7f0000000300), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000002a0e83dd8000000040000"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000003a0000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500), 0x0, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 56.306194][ T30] audit: type=1400 audit(1755123528.974:62): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.309787][ T5830] cgroup: Unknown subsys name 'net' [ 56.329007][ T30] audit: type=1400 audit(1755123528.974:63): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.357008][ T30] audit: type=1400 audit(1755123529.014:64): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.514856][ T5830] cgroup: Unknown subsys name 'cpuset' [ 56.522801][ T5830] cgroup: Unknown subsys name 'rlimit' [ 56.658530][ T30] audit: type=1400 audit(1755123529.324:65): avc: denied { setattr } for pid=5830 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.702123][ T30] audit: type=1400 audit(1755123529.324:66): avc: denied { create } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.722661][ T30] audit: type=1400 audit(1755123529.324:67): avc: denied { write } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.744644][ T30] audit: type=1400 audit(1755123529.324:68): avc: denied { read } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.765260][ T30] audit: type=1400 audit(1755123529.324:69): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 56.787022][ T5833] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 56.790387][ T30] audit: type=1400 audit(1755123529.324:70): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.822491][ T30] audit: type=1400 audit(1755123529.364:71): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.771406][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.008979][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.017134][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.021692][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.024785][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.035267][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.039472][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.052963][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.062551][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.070271][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.075161][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.079003][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.085800][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.092637][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.100241][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.106078][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.114564][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.120734][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.127386][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.133857][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.141295][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.148276][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.163194][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.172858][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.183094][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.192622][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.577445][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 60.707456][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 60.763795][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 60.845135][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 60.881838][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.889164][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.896614][ T5850] bridge_slave_0: entered allmulticast mode [ 60.903330][ T5850] bridge_slave_0: entered promiscuous mode [ 60.931407][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.939625][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.946947][ T5850] bridge_slave_1: entered allmulticast mode [ 60.954135][ T5850] bridge_slave_1: entered promiscuous mode [ 60.965766][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 61.004762][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.011929][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.019290][ T5841] bridge_slave_0: entered allmulticast mode [ 61.026423][ T5841] bridge_slave_0: entered promiscuous mode [ 61.066675][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.074556][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.081720][ T5841] bridge_slave_1: entered allmulticast mode [ 61.088444][ T5841] bridge_slave_1: entered promiscuous mode [ 61.103102][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.110190][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.117490][ T5846] bridge_slave_0: entered allmulticast mode [ 61.124632][ T5846] bridge_slave_0: entered promiscuous mode [ 61.134645][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.173283][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.180483][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.189209][ T5846] bridge_slave_1: entered allmulticast mode [ 61.196139][ T5846] bridge_slave_1: entered promiscuous mode [ 61.205249][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.262738][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.269951][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.277664][ T5842] bridge_slave_0: entered allmulticast mode [ 61.284467][ T5842] bridge_slave_0: entered promiscuous mode [ 61.293613][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.311445][ T5850] team0: Port device team_slave_0 added [ 61.325150][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.332308][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.339423][ T5855] bridge_slave_0: entered allmulticast mode [ 61.346323][ T5855] bridge_slave_0: entered promiscuous mode [ 61.355385][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.364623][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.371688][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.379891][ T5842] bridge_slave_1: entered allmulticast mode [ 61.386708][ T5842] bridge_slave_1: entered promiscuous mode [ 61.403834][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.416159][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.426492][ T5850] team0: Port device team_slave_1 added [ 61.441428][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.448668][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.456267][ T5855] bridge_slave_1: entered allmulticast mode [ 61.463795][ T5855] bridge_slave_1: entered promiscuous mode [ 61.525196][ T5841] team0: Port device team_slave_0 added [ 61.534299][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.546044][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.561798][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.568862][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.595186][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.608321][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.620775][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.631063][ T5841] team0: Port device team_slave_1 added [ 61.648719][ T5846] team0: Port device team_slave_0 added [ 61.656800][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.663877][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.690151][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.725947][ T5846] team0: Port device team_slave_1 added [ 61.733100][ T5842] team0: Port device team_slave_0 added [ 61.770654][ T5842] team0: Port device team_slave_1 added [ 61.796987][ T5855] team0: Port device team_slave_0 added [ 61.803359][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.810310][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.836356][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.864251][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.871209][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.897872][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.910478][ T5855] team0: Port device team_slave_1 added [ 61.917031][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.924340][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.950474][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.961821][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.969068][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.995395][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.016020][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.023058][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.049056][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.073816][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.080756][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.106915][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.121762][ T5850] hsr_slave_0: entered promiscuous mode [ 62.128123][ T5850] hsr_slave_1: entered promiscuous mode [ 62.148621][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.155608][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.182264][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.197625][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.204916][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.231206][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.252885][ T5848] Bluetooth: hci2: command tx timeout [ 62.252887][ T5849] Bluetooth: hci1: command tx timeout [ 62.253089][ T5848] Bluetooth: hci3: command tx timeout [ 62.258622][ T50] Bluetooth: hci4: command tx timeout [ 62.264295][ T5861] Bluetooth: hci0: command tx timeout [ 62.310368][ T5841] hsr_slave_0: entered promiscuous mode [ 62.316985][ T5841] hsr_slave_1: entered promiscuous mode [ 62.323178][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 62.329066][ T5841] Cannot create hsr debugfs directory [ 62.349754][ T5842] hsr_slave_0: entered promiscuous mode [ 62.356148][ T5842] hsr_slave_1: entered promiscuous mode [ 62.362130][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 62.367908][ T5842] Cannot create hsr debugfs directory [ 62.452982][ T5846] hsr_slave_0: entered promiscuous mode [ 62.459007][ T5846] hsr_slave_1: entered promiscuous mode [ 62.465527][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 62.471255][ T5846] Cannot create hsr debugfs directory [ 62.514760][ T5855] hsr_slave_0: entered promiscuous mode [ 62.520816][ T5855] hsr_slave_1: entered promiscuous mode [ 62.527175][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 62.532967][ T5855] Cannot create hsr debugfs directory [ 62.833801][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.850397][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.859779][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.876299][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.918373][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.930948][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.948857][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.958989][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.010918][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.021140][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.031248][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.045658][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.131914][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.143396][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.164315][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.176142][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.245496][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.294460][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.301314][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.311377][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.331673][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.338941][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.348072][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.375660][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.382765][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.396305][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.425656][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.461389][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.495342][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.508515][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.515674][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.545764][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.552885][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.570165][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.587594][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.594763][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.628296][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.635484][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.640957][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 63.640970][ T30] audit: type=1400 audit(1755123536.314:86): avc: denied { sys_module } for pid=5850 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.694064][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.719607][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.777218][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.784381][ T4605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.795911][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.803069][ T4605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.851738][ T5846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.867869][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.901764][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.934786][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.980370][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.039856][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.047084][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.123991][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.131100][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.210330][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.305563][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.336622][ T5861] Bluetooth: hci3: command tx timeout [ 64.340541][ T5848] Bluetooth: hci4: command tx timeout [ 64.342795][ T5861] Bluetooth: hci1: command tx timeout [ 64.348060][ T5848] Bluetooth: hci0: command tx timeout [ 64.356128][ T50] Bluetooth: hci2: command tx timeout [ 64.390684][ T5842] veth0_vlan: entered promiscuous mode [ 64.440432][ T5842] veth1_vlan: entered promiscuous mode [ 64.469414][ T5846] veth0_vlan: entered promiscuous mode [ 64.507839][ T5846] veth1_vlan: entered promiscuous mode [ 64.553830][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.571933][ T5850] veth0_vlan: entered promiscuous mode [ 64.588810][ T5842] veth0_macvtap: entered promiscuous mode [ 64.605209][ T5846] veth0_macvtap: entered promiscuous mode [ 64.615193][ T5850] veth1_vlan: entered promiscuous mode [ 64.630268][ T5846] veth1_macvtap: entered promiscuous mode [ 64.644036][ T5842] veth1_macvtap: entered promiscuous mode [ 64.668042][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.677888][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.709514][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.718860][ T5850] veth0_macvtap: entered promiscuous mode [ 64.728112][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.747657][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.766422][ T5850] veth1_macvtap: entered promiscuous mode [ 64.781170][ T2949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.792512][ T2949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.808552][ T5841] veth0_vlan: entered promiscuous mode [ 64.818872][ T2949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.828545][ T2949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.847015][ T2949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.858274][ T2949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.881473][ T5841] veth1_vlan: entered promiscuous mode [ 64.888169][ T2949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.898398][ T2949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.919391][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.959559][ T5855] veth0_vlan: entered promiscuous mode [ 64.970195][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.990740][ T5855] veth1_vlan: entered promiscuous mode [ 65.013933][ T2949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.025111][ T2962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.045537][ T2962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.055362][ T992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.076168][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.091356][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.131560][ T5841] veth0_macvtap: entered promiscuous mode [ 65.146956][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.155290][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.168267][ T5841] veth1_macvtap: entered promiscuous mode [ 65.208648][ T5855] veth0_macvtap: entered promiscuous mode [ 65.229549][ T4605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.238277][ T4605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.247450][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.256211][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.265372][ T30] audit: type=1400 audit(1755123537.944:87): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.A5ymkG/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.268758][ T5855] veth1_macvtap: entered promiscuous mode [ 65.310486][ T30] audit: type=1400 audit(1755123537.944:88): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.323894][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.348300][ T30] audit: type=1400 audit(1755123537.964:89): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.A5ymkG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.377143][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.382502][ T30] audit: type=1400 audit(1755123537.964:90): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.417633][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.431131][ T30] audit: type=1400 audit(1755123537.974:91): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.A5ymkG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.435302][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.461182][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.468815][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.484189][ T30] audit: type=1400 audit(1755123537.974:92): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.A5ymkG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.510830][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.533076][ T30] audit: type=1400 audit(1755123537.974:93): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.543162][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.553664][ T30] audit: type=1400 audit(1755123537.974:94): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.574860][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.588947][ T30] audit: type=1400 audit(1755123537.974:95): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="gadgetfs" ino=6974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.658600][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.687853][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.701450][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.712448][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.721255][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.823782][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.838533][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.889369][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.928735][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.965919][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.079339][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.103605][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.262458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 66.271342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.336925][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.355348][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.385407][ T2949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.409115][ T2949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.416919][ T50] Bluetooth: hci2: command tx timeout [ 66.422609][ T5861] Bluetooth: hci1: command tx timeout [ 66.424075][ T5849] Bluetooth: hci0: command tx timeout [ 66.433556][ T5848] Bluetooth: hci4: command tx timeout [ 66.435910][ T50] Bluetooth: hci3: command tx timeout [ 66.672188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 66.681110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.293546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.301943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.323883][ T5981] usb usb8: usbfs: process 5981 (syz.2.3) did not claim interface 0 before use [ 67.881729][ T5986] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7'. [ 67.976349][ T5980] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5'. [ 68.012725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.105752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.158038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.166497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.813525][ T50] Bluetooth: hci3: command tx timeout [ 68.819272][ T50] Bluetooth: hci1: command tx timeout [ 68.825275][ T50] Bluetooth: hci4: command tx timeout [ 68.830702][ T50] Bluetooth: hci0: command tx timeout [ 68.836103][ T50] Bluetooth: hci2: command tx timeout [ 69.166751][ T6000] usb usb8: usbfs: process 6000 (syz.3.8) did not claim interface 0 before use [ 69.550617][ T6008] Zero length message leads to an empty skb [ 69.715903][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 69.715920][ T30] audit: type=1400 audit(1755123542.384:143): avc: denied { prog_run } for pid=6011 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 69.758138][ T6013] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11'. [ 70.284712][ T6019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 70.581498][ T30] audit: type=1400 audit(1755123543.244:144): avc: denied { search } for pid=6020 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.676128][ T30] audit: type=1400 audit(1755123543.304:145): avc: denied { search } for pid=6020 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.847244][ T30] audit: type=1400 audit(1755123543.304:146): avc: denied { search } for pid=6020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.957801][ T30] audit: type=1400 audit(1755123543.304:147): avc: denied { search } for pid=6020 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.981095][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.056894][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.076013][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.167543][ T30] audit: type=1400 audit(1755123543.314:148): avc: denied { read open } for pid=6023 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.204274][ T30] audit: type=1400 audit(1755123543.314:149): avc: denied { getattr } for pid=6023 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.336473][ T30] audit: type=1400 audit(1755123543.954:150): avc: denied { read write } for pid=6031 comm="syz.3.15" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.392089][ T30] audit: type=1400 audit(1755123543.954:151): avc: denied { open } for pid=6031 comm="syz.3.15" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.422691][ T30] audit: type=1400 audit(1755123544.014:152): avc: denied { bind } for pid=6031 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.612861][ T6046] usb usb8: usbfs: process 6046 (syz.1.14) did not claim interface 0 before use [ 74.091829][ T6057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 74.106001][ T6051] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.617222][ T6071] capability: warning: `syz.2.20' uses deprecated v2 capabilities in a way that may be insecure [ 76.453215][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 76.453233][ T30] audit: type=1400 audit(1755123548.674:165): avc: denied { ioctl } for pid=6076 comm="syz.2.21" path="socket:[7760]" dev="sockfs" ino=7760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.804721][ T10] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 77.316007][ T30] audit: type=1326 audit(1755123549.614:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6085 comm="syz.2.25" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0b218ebe9 code=0x0 [ 77.432062][ T10] usb 5-1: device descriptor read/all, error -71 [ 78.562297][ T5895] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 78.598474][ T6104] process 'syz.2.26' launched './file0' with NULL argv: empty string added [ 78.755851][ T30] audit: type=1400 audit(1755123551.264:167): avc: denied { execute } for pid=6098 comm="syz.2.26" name="file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.032922][ T5902] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.164225][ T30] audit: type=1400 audit(1755123551.284:168): avc: denied { execute_no_trans } for pid=6098 comm="syz.2.26" path="/5/file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.193705][ T30] audit: type=1400 audit(1755123551.294:169): avc: denied { remount } for pid=6098 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.194214][ T5895] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.222300][ T30] audit: type=1400 audit(1755123551.324:170): avc: denied { ioctl } for pid=6098 comm="syz.2.26" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.753251][ T5895] usb 2-1: config 0 has no interface number 0 [ 79.765893][ T30] audit: type=1400 audit(1755123551.324:171): avc: denied { write } for pid=6098 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.788519][ T5895] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 79.808295][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 79.823305][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.834469][ T5895] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 79.845828][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.866352][ T5895] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 79.885691][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.966811][ T5902] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 80.154744][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.164276][ T5895] usb 2-1: config 0 descriptor?? [ 80.185159][ T5902] usb 3-1: config 0 descriptor?? [ 80.238902][ T6119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.674333][ T30] audit: type=1326 audit(1755123553.334:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.0.30" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7aa98ebe9 code=0x0 [ 81.395673][ T975] cfg80211: failed to load regulatory.db [ 81.559360][ T5895] usb 2-1: can't set config #0, error -71 [ 81.715204][ T5895] usb 2-1: USB disconnect, device number 2 [ 81.839819][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 81.873082][ T30] audit: type=1400 audit(1755123554.534:173): avc: denied { create } for pid=6145 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.962102][ T5955] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 82.568444][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 82.677627][ T6155] usb usb8: usbfs: process 6155 (syz.1.33) did not claim interface 0 before use [ 82.804521][ T30] audit: type=1400 audit(1755123554.544:174): avc: denied { bind } for pid=6145 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.908033][ T5902] usb 3-1: USB disconnect, device number 2 [ 82.950964][ T30] audit: type=1400 audit(1755123554.644:175): avc: denied { append } for pid=6145 comm="syz.0.32" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.018423][ T6152] No buffer was provided with the request [ 83.097017][ T5955] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.097053][ T5955] usb 5-1: config 0 has no interface number 0 [ 83.097073][ T5955] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 83.097087][ T5955] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 83.097108][ T5955] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.097121][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.098751][ T5955] usb 5-1: config 0 descriptor?? [ 83.099360][ T6143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 83.138568][ T5955] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 83.350208][ T5902] usb 5-1: USB disconnect, device number 4 [ 83.350310][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 83.584851][ T30] audit: type=1400 audit(1755123556.154:176): avc: denied { setopt } for pid=6149 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.614925][ T30] audit: type=1400 audit(1755123556.284:177): avc: denied { read } for pid=6163 comm="syz.3.36" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.614972][ T30] audit: type=1400 audit(1755123556.284:178): avc: denied { open } for pid=6163 comm="syz.3.36" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.664084][ T30] audit: type=1400 audit(1755123556.334:179): avc: denied { map } for pid=6163 comm="syz.3.36" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.664613][ T30] audit: type=1400 audit(1755123556.334:180): avc: denied { read write } for pid=6163 comm="syz.3.36" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.665909][ T30] audit: type=1400 audit(1755123556.334:181): avc: denied { create } for pid=6163 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.667276][ T30] audit: type=1400 audit(1755123556.334:182): avc: denied { connect } for pid=6163 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.935365][ T6179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.212166][ T5955] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 85.480958][ T5955] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.480978][ T5955] usb 1-1: config 0 has no interface number 0 [ 85.481326][ T5955] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 85.481343][ T5955] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 85.481364][ T5955] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 85.481376][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.499600][ T5955] usb 1-1: config 0 descriptor?? [ 85.500789][ T6185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.566057][ T5955] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 85.689029][ T6200] netlink: 68 bytes leftover after parsing attributes in process `syz.4.40'. [ 85.732413][ T5955] usb 1-1: USB disconnect, device number 2 [ 85.732459][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 89.145043][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 89.145082][ T30] audit: type=1400 audit(1755123561.814:198): avc: denied { create } for pid=6221 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.422552][ T30] audit: type=1400 audit(1755123561.864:199): avc: denied { write } for pid=6221 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.497858][ T6226] netlink: 44 bytes leftover after parsing attributes in process `syz.2.44'. [ 91.385979][ T6246] netlink: 'syz.3.49': attribute type 72 has an invalid length. [ 91.732127][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.898396][ T6264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.109025][ T5895] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.119071][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.366676][ T6268] No buffer was provided with the request [ 92.381513][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.482118][ T5895] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.516269][ T5895] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.527788][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.539195][ T5895] usb 4-1: Product: syz [ 92.548161][ T5895] usb 4-1: Manufacturer: syz [ 94.250064][ T6288] netlink: 68 bytes leftover after parsing attributes in process `syz.4.58'. [ 95.023175][ T978] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 95.306599][ T978] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.319433][ T978] usb 2-1: config 0 has no interface number 0 [ 95.370159][ T978] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 96.032765][ T978] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 96.061464][ T978] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.117416][ T30] audit: type=1400 audit(1755123568.384:200): avc: denied { read } for pid=6297 comm="syz.2.60" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.172939][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.074994][ T30] audit: type=1400 audit(1755123568.384:201): avc: denied { open } for pid=6297 comm="syz.2.60" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 98.182715][ T978] usb 2-1: config 0 descriptor?? [ 98.264519][ T6315] netlink: 68 bytes leftover after parsing attributes in process `syz.0.63'. [ 98.551716][ T5955] usb 4-1: USB disconnect, device number 2 [ 100.127974][ T30] audit: type=1400 audit(1755123572.794:202): avc: denied { unlink } for pid=6323 comm="syz.4.65" name="#1" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.155909][ T30] audit: type=1400 audit(1755123572.794:203): avc: denied { mount } for pid=6323 comm="syz.4.65" name="/" dev="overlay" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 100.319191][ T30] audit: type=1400 audit(1755123572.824:204): avc: denied { create } for pid=6323 comm="syz.4.65" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.343824][ T30] audit: type=1400 audit(1755123572.824:205): avc: denied { link } for pid=6323 comm="syz.4.65" name="#3" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.365576][ T30] audit: type=1400 audit(1755123572.824:206): avc: denied { rename } for pid=6323 comm="syz.4.65" name="#4" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.480371][ T978] usb 2-1: can't set config #0, error -71 [ 100.515952][ T978] usb 2-1: USB disconnect, device number 3 [ 101.886541][ T30] audit: type=1326 audit(1755123574.214:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6340 comm="syz.3.69" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d10b8ebe9 code=0x0 [ 103.651388][ T30] audit: type=1400 audit(1755123576.314:208): avc: denied { append } for pid=6379 comm="syz.4.77" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.786177][ T6382] netlink: 68 bytes leftover after parsing attributes in process `syz.2.76'. [ 104.202500][ T6389] netlink: 68 bytes leftover after parsing attributes in process `syz.0.78'. [ 104.276729][ T6390] ubi31: attaching mtd0 [ 104.282925][ T6390] ubi31: scanning is finished [ 104.287645][ T6390] ubi31: empty MTD device detected [ 104.408705][ T6390] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 104.416463][ T6390] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 104.423849][ T6390] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 104.430938][ T6390] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 104.438449][ T6390] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 104.445306][ T6390] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 104.453470][ T6390] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 503469636 [ 104.463460][ T6390] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 104.510457][ T6392] ubi31: background thread "ubi_bgt31d" started, PID 6392 [ 106.832275][ T30] audit: type=1400 audit(1755123579.474:209): avc: denied { create } for pid=6416 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.851664][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.960844][ T30] audit: type=1400 audit(1755123579.474:210): avc: denied { create } for pid=6416 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.633763][ T6420] netlink: 96 bytes leftover after parsing attributes in process `syz.2.82'. [ 109.541353][ T6441] overlayfs: failed to resolve './file1': -2 [ 109.702163][ T30] audit: type=1400 audit(1755123582.304:211): avc: denied { read } for pid=6437 comm="syz.1.89" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.003513][ T30] audit: type=1400 audit(1755123582.304:212): avc: denied { open } for pid=6437 comm="syz.1.89" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.226971][ T5961] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.298043][ T6448] netlink: 44 bytes leftover after parsing attributes in process `syz.2.92'. [ 110.437713][ T5961] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.450696][ T5961] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.478195][ T5961] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.481649][ T6454] netlink: 68 bytes leftover after parsing attributes in process `syz.3.93'. [ 110.521926][ T5961] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 49, using maximum allowed: 30 [ 110.584979][ T5961] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 110.644425][ T5961] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.746636][ T30] audit: type=1326 audit(1755123583.384:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.1.95" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f373c78ebe9 code=0x0 [ 110.834885][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.852098][ T5961] usb 1-1: Product: syz [ 110.964514][ T5961] usb 1-1: Manufacturer: syz [ 111.950895][ T30] audit: type=1400 audit(1755123584.614:214): avc: denied { accept } for pid=6470 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 112.182247][ T30] audit: type=1400 audit(1755123584.744:215): avc: denied { ioctl } for pid=6470 comm="syz.1.96" path="net:[4026532808]" dev="nsfs" ino=4026532808 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 114.603149][ T5961] usb 1-1: USB disconnect, device number 3 [ 114.858973][ T6497] usb usb8: usbfs: process 6497 (syz.0.103) did not claim interface 0 before use [ 116.844499][ T6521] netlink: 96 bytes leftover after parsing attributes in process `syz.2.102'. [ 119.026280][ T6540] ubi: mtd0 is already attached to ubi31 [ 121.023104][ T6550] ubi: mtd0 is already attached to ubi31 [ 121.220405][ T30] audit: type=1400 audit(1755123593.814:216): avc: denied { ioctl } for pid=6549 comm="syz.4.119" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.395753][ T30] audit: type=1400 audit(1755123594.064:217): avc: denied { create } for pid=6560 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 121.467020][ T30] audit: type=1400 audit(1755123594.094:218): avc: denied { create } for pid=6560 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.973036][ T5909] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.207852][ T5909] usb 4-1: config 0 has no interfaces? [ 124.095245][ T5909] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 124.191645][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.268249][ T5909] usb 4-1: Product: syz [ 124.402669][ T5909] usb 4-1: Manufacturer: syz [ 124.407307][ T5909] usb 4-1: SerialNumber: syz [ 124.551744][ T6594] netlink: 68 bytes leftover after parsing attributes in process `syz.1.127'. [ 125.021288][ T5909] usb 4-1: config 0 descriptor?? [ 125.079653][ T5909] usb 4-1: can't set config #0, error -71 [ 125.093232][ T5909] usb 4-1: USB disconnect, device number 3 [ 126.400152][ T30] audit: type=1400 audit(1755123599.064:219): avc: denied { create } for pid=6606 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.802141][ T5909] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.911727][ T6592] netlink: 96 bytes leftover after parsing attributes in process `syz.2.126'. [ 127.025619][ T5909] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.145800][ T5909] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 127.175652][ T5909] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.284326][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.339735][ T6608] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.370225][ T5909] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.647965][ T6608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.659483][ T6608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.668908][ T30] audit: type=1400 audit(1755123600.304:220): avc: denied { setopt } for pid=6606 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.744754][ T30] audit: type=1400 audit(1755123600.314:221): avc: denied { read write } for pid=6606 comm="syz.0.131" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.882511][ T30] audit: type=1400 audit(1755123600.314:222): avc: denied { open } for pid=6606 comm="syz.0.131" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.990581][ T30] audit: type=1400 audit(1755123600.314:223): avc: denied { bind } for pid=6606 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.019977][ T5925] usb 1-1: USB disconnect, device number 4 [ 128.173401][ T30] audit: type=1400 audit(1755123600.414:224): avc: denied { connect } for pid=6616 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.193332][ T5955] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.608834][ T5955] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.621688][ T30] audit: type=1400 audit(1755123600.614:225): avc: denied { write } for pid=6606 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.650894][ T5955] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.702920][ T30] audit: type=1400 audit(1755123600.614:226): avc: denied { read } for pid=6606 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.716010][ T5955] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.087247][ T30] audit: type=1400 audit(1755123600.684:227): avc: denied { write } for pid=6606 comm="syz.0.131" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 129.110438][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.182170][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.207981][ T30] audit: type=1326 audit(1755123601.014:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.1.133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f373c78ebe9 code=0x0 [ 129.233656][ T6620] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 129.280936][ T5955] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.050525][ T5955] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.124230][ T5925] usb 5-1: USB disconnect, device number 5 [ 131.373449][ T5955] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.386353][ T5955] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 131.497364][ T5852] Bluetooth: hci4: link tx timeout [ 131.505311][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.525864][ T50] Bluetooth: hci4: link tx timeout [ 131.542861][ T30] audit: type=1400 audit(1755123604.154:229): avc: denied { write } for pid=6656 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.547315][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.590579][ T5955] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.654185][ T50] Bluetooth: hci4: link tx timeout [ 131.685951][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.686411][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.892303][ T5961] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.014964][ T6652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.126792][ T5955] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.192109][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 132.290932][ T5961] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.495442][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.720653][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.912745][ T6652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.931509][ T6652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.940024][ T5961] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 132.980778][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.989057][ T5961] usb 3-1: Product: syz [ 132.993298][ T5961] usb 3-1: Manufacturer: syz [ 132.997886][ T5961] usb 3-1: SerialNumber: syz [ 133.137111][ T5961] usb 3-1: config 0 descriptor?? [ 133.414508][ T5895] usb 4-1: USB disconnect, device number 4 [ 133.634758][ T5961] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 133.642710][ T5961] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 133.692187][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 135.224239][ T5909] usb 3-1: USB disconnect, device number 3 [ 140.424501][ T30] audit: type=1400 audit(1755123612.654:230): avc: denied { ioctl } for pid=6736 comm="syz.4.165" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 141.074467][ T30] audit: type=1400 audit(1755123613.744:231): avc: denied { ioctl } for pid=6741 comm="syz.3.167" path="socket:[9958]" dev="sockfs" ino=9958 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.316557][ T6751] netlink: 68 bytes leftover after parsing attributes in process `syz.1.169'. [ 141.992068][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.032169][ T5895] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.101860][ T6767] netlink: 80 bytes leftover after parsing attributes in process `syz.0.175'. [ 142.229297][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.333567][ T5895] usb 4-1: config 0 has no interfaces? [ 142.828309][ T6772] fuse: Unknown parameter 'grou00000000000000000000' [ 143.158061][ T30] audit: type=1400 audit(1755123615.494:232): avc: denied { mounton } for pid=6768 comm="syz.4.176" path="/31/file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.187417][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 143.198132][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.212467][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.214405][ T5895] usb 4-1: Product: syz [ 143.228493][ T5895] usb 4-1: Manufacturer: syz [ 143.241165][ T5895] usb 4-1: SerialNumber: syz [ 143.266797][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.295677][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.296472][ T5895] usb 4-1: config 0 descriptor?? [ 143.315398][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.329039][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.337120][ T24] usb 3-1: Product: syz [ 143.341939][ T24] usb 3-1: Manufacturer: syz [ 143.693050][ T6778] netlink: 68 bytes leftover after parsing attributes in process `syz.4.178'. [ 143.828512][ T24] usb 3-1: USB disconnect, device number 4 [ 143.913475][ T5961] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.115134][ T5961] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.409518][ T5961] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.422669][ T5961] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.437241][ T5961] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.547502][ T5961] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.592141][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.624039][ T5961] usb 2-1: Product: syz [ 144.664548][ T5961] usb 2-1: Manufacturer: syz [ 144.997623][ T6783] netlink: 96 bytes leftover after parsing attributes in process `syz.0.177'. [ 146.304091][ T24] usb 4-1: USB disconnect, device number 5 [ 147.051338][ T6814] netlink: 68 bytes leftover after parsing attributes in process `syz.2.186'. [ 147.738814][ T6820] fuse: Bad value for 'fd' [ 148.428494][ T5961] usb 2-1: USB disconnect, device number 4 [ 148.556864][ T6822] netlink: 80 bytes leftover after parsing attributes in process `syz.4.188'. [ 150.491484][ T6844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.762244][ T30] audit: type=1400 audit(1755123623.434:233): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 150.874499][ T6850] netlink: 68 bytes leftover after parsing attributes in process `syz.3.195'. [ 151.042186][ T5961] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 151.973757][ T5961] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.038958][ T5961] usb 1-1: config 0 has no interface number 0 [ 152.056540][ T5961] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 152.085776][ T5961] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 152.232925][ T5961] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.429627][ T6866] fuse: Bad value for 'fd' [ 153.245525][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.810287][ T5961] usb 1-1: config 0 descriptor?? [ 154.112862][ T6877] ubi: mtd0 is already attached to ubi31 [ 154.660236][ T6882] No buffer was provided with the request [ 154.766158][ T6878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.285979][ T5961] usb 1-1: can't set config #0, error -71 [ 155.400720][ T5961] usb 1-1: USB disconnect, device number 5 [ 155.581112][ T30] audit: type=1400 audit(1755123628.204:234): avc: denied { execute } for pid=6885 comm="syz.2.204" name="file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.912980][ T30] audit: type=1400 audit(1755123628.204:235): avc: denied { execute_no_trans } for pid=6885 comm="syz.2.204" path="/44/file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.936276][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.064845][ T30] audit: type=1400 audit(1755123628.214:236): avc: denied { remount } for pid=6885 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 156.084541][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.152110][ T978] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.248543][ T30] audit: type=1326 audit(1755123628.914:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f373c78ebe9 code=0x0 [ 156.271152][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.314489][ T978] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 156.380042][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.567393][ T978] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 156.613261][ T6900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.853742][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.981880][ T978] usb 3-1: config 0 descriptor?? [ 157.008178][ T978] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 158.117354][ T6917] trusted_key: syz.4.211 sent an empty control message without MSG_MORE. [ 158.643054][ T9] usb 3-1: USB disconnect, device number 5 [ 159.535398][ T6931] fuse: Bad value for 'fd' [ 160.157213][ T5909] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.299578][ T30] audit: type=1400 audit(1755123632.874:238): avc: denied { sqpoll } for pid=6935 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 160.318815][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.389803][ T6936] netlink: 80 bytes leftover after parsing attributes in process `syz.4.217'. [ 160.418852][ T5909] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.439592][ T5909] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.453313][ T5909] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.497622][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.540636][ T6932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.564909][ T24] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 160.708525][ T5909] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.783300][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.793450][ T24] usb 1-1: config 0 has no interfaces? [ 160.798915][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.809472][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.907346][ T24] usb 1-1: config 0 descriptor?? [ 161.133701][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.142666][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.457388][ T9] usb 1-1: USB disconnect, device number 6 [ 161.467747][ T5925] usb 2-1: USB disconnect, device number 5 [ 164.371338][ T6981] No buffer was provided with the request [ 164.472063][ T5925] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.566610][ T6984] fuse: Unknown parameter '0x0000000000000003' [ 164.625961][ T5925] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.626000][ T5925] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.626037][ T5925] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.626060][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.922216][ T6976] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 165.320255][ T5925] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.460632][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.603034][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.960312][ T30] audit: type=1326 audit(1755123638.444:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.4.225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a13f8ebe9 code=0x0 [ 166.337243][ T24] usb 2-1: USB disconnect, device number 6 [ 168.624456][ T7004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.562081][ T7030] fuse: Unknown parameter '0x0000000000000003' [ 170.339043][ T7032] netlink: 68 bytes leftover after parsing attributes in process `syz.1.238'. [ 170.987642][ T30] audit: type=1400 audit(1755123643.644:240): avc: denied { write } for pid=7025 comm="syz.0.240" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.319009][ T7045] ubi: mtd0 is already attached to ubi31 [ 171.996050][ T7053] No buffer was provided with the request [ 173.367274][ T7067] overlayfs: missing 'workdir' [ 174.532118][ T5909] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 174.872245][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 174.992919][ T5909] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 175.214067][ T5909] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 175.291355][ T7085] binder: 7084:7085 ioctl c0306201 200000000080 returned -14 [ 175.315680][ T30] audit: type=1400 audit(1755123647.944:241): avc: denied { ioctl } for pid=7084 comm="syz.1.253" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 175.340841][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.398286][ T5909] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 175.590028][ T30] audit: type=1400 audit(1755123648.194:242): avc: denied { write } for pid=7084 comm="syz.1.253" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 175.682069][ T5909] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 175.772855][ T7095] No buffer was provided with the request [ 175.800335][ T5909] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.842139][ T30] audit: type=1400 audit(1755123648.194:243): avc: denied { map } for pid=7084 comm="syz.1.253" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 175.875419][ T7097] netlink: 68 bytes leftover after parsing attributes in process `syz.3.257'. [ 175.928349][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.995544][ T30] audit: type=1400 audit(1755123648.204:244): avc: denied { set_context_mgr } for pid=7084 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 176.245972][ T5909] usbtmc 5-1:16.0: bulk endpoints not found [ 176.326964][ T7104] netlink: 68 bytes leftover after parsing attributes in process `syz.1.259'. [ 176.752545][ T5909] usb 5-1: USB disconnect, device number 6 [ 178.485578][ T7122] netlink: 68 bytes leftover after parsing attributes in process `syz.0.263'. [ 180.999727][ T7140] No buffer was provided with the request [ 181.075563][ T7142] netlink: 68 bytes leftover after parsing attributes in process `syz.4.270'. [ 182.086594][ T24] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 182.503293][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.523416][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.547977][ T7160] netlink: 68 bytes leftover after parsing attributes in process `syz.2.275'. [ 182.560308][ T24] usb 4-1: config 0 has no interface number 0 [ 182.583504][ T24] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.813201][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.257792][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.290114][ T24] usb 4-1: config 0 descriptor?? [ 183.330769][ T24] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 183.565728][ T24] usb 4-1: USB disconnect, device number 6 [ 183.963921][ T7184] fuse: Unknown parameter 'gro00000000000000000000' [ 184.786488][ T7196] No buffer was provided with the request [ 184.843266][ T9] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 185.108124][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.139205][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.214310][ T9] usb 3-1: config 0 has no interface number 0 [ 185.360484][ T9] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.427639][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 185.521843][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.605851][ T9] usb 3-1: config 0 descriptor?? [ 185.651322][ T9] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 185.854191][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 185.860251][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 185.866310][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 185.882074][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 185.963106][ T9] usb 3-1: USB disconnect, device number 6 [ 187.053182][ T7212] netlink: 68 bytes leftover after parsing attributes in process `syz.0.286'. [ 187.480361][ T30] audit: type=1326 audit(1755123660.074:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7215 comm="syz.4.287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a13f8ebe9 code=0x0 [ 187.595063][ T7225] netlink: 68 bytes leftover after parsing attributes in process `syz.3.288'. [ 189.400606][ T7246] netlink: 80 bytes leftover after parsing attributes in process `syz.2.294'. [ 191.431225][ T7270] netlink: 68 bytes leftover after parsing attributes in process `syz.0.297'. [ 192.229354][ T7280] netlink: 68 bytes leftover after parsing attributes in process `syz.4.302'. [ 193.946164][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.952583][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.003009][ T7296] netlink: 80 bytes leftover after parsing attributes in process `syz.2.309'. [ 194.028283][ T30] audit: type=1326 audit(1755123666.694:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.1.307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f373c78ebe9 code=0x0 [ 195.024598][ T30] audit: type=1326 audit(1755123667.594:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.2.311" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0b218ebe9 code=0x0 [ 196.068018][ T7332] ubi: mtd0 is already attached to ubi31 [ 196.434875][ T30] audit: type=1326 audit(1755123669.104:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.1.313" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f373c78ebe9 code=0x0 [ 197.252650][ T7347] netlink: 68 bytes leftover after parsing attributes in process `syz.2.316'. [ 199.256179][ T7359] netlink: 68 bytes leftover after parsing attributes in process `syz.0.319'. [ 199.511451][ T7365] netlink: 68 bytes leftover after parsing attributes in process `syz.2.322'. [ 199.594184][ T5955] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 199.827109][ T5955] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.884427][ T5955] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.096666][ T30] audit: type=1400 audit(1755123672.664:249): avc: denied { connect } for pid=7366 comm="syz.0.323" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.570038][ T5955] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.692260][ T5955] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.717703][ T5955] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.768303][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.813133][ T5955] usb 2-1: Product: syz [ 200.830154][ T30] audit: type=1400 audit(1755123673.494:250): avc: denied { create } for pid=7374 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 200.870772][ T5955] usb 2-1: Manufacturer: syz [ 200.932036][ T30] audit: type=1400 audit(1755123673.534:251): avc: denied { block_suspend } for pid=7374 comm="syz.4.326" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.035227][ T30] audit: type=1400 audit(1755123673.674:252): avc: denied { create } for pid=7378 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.102007][ T30] audit: type=1400 audit(1755123673.684:253): avc: denied { connect } for pid=7378 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.122920][ T30] audit: type=1400 audit(1755123673.684:254): avc: denied { getopt } for pid=7378 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.187637][ T30] audit: type=1400 audit(1755123673.744:255): avc: denied { create } for pid=7381 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.231805][ T30] audit: type=1400 audit(1755123673.744:256): avc: denied { ioctl } for pid=7381 comm="syz.0.329" path="socket:[12790]" dev="sockfs" ino=12790 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.256264][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.320010][ T30] audit: type=1400 audit(1755123673.744:257): avc: denied { setopt } for pid=7381 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 201.339529][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.413930][ T7396] netlink: 68 bytes leftover after parsing attributes in process `syz.0.332'. [ 201.512164][ T30] audit: type=1400 audit(1755123674.074:258): avc: denied { bind } for pid=7385 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.708655][ T5955] usb 2-1: USB disconnect, device number 7 [ 202.721814][ T7409] netlink: 68 bytes leftover after parsing attributes in process `syz.2.334'. [ 203.045194][ T7418] netlink: 80 bytes leftover after parsing attributes in process `syz.0.337'. [ 204.107702][ T7432] fuse: Bad value for 'user_id' [ 204.112655][ T7432] fuse: Bad value for 'user_id' [ 207.523216][ T7447] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.534587][ T7447] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.546167][ T7447] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.557295][ T7447] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.570374][ T7447] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.581321][ T7447] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.592275][ T7447] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.605499][ T7447] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.616385][ T7447] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.627260][ T7447] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 208.344139][ T7455] netlink: 68 bytes leftover after parsing attributes in process `syz.1.345'. [ 208.495341][ T7462] netlink: 68 bytes leftover after parsing attributes in process `syz.2.347'. [ 208.950263][ T7467] netlink: 80 bytes leftover after parsing attributes in process `syz.4.350'. [ 208.962269][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 209.299030][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.299055][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.299066][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.299088][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.312249][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.312279][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.312298][ T24] usb 1-1: Product: syz [ 209.312313][ T24] usb 1-1: Manufacturer: syz [ 212.950343][ T7491] netlink: 96 bytes leftover after parsing attributes in process `syz.1.354'. [ 214.428316][ T9] usb 1-1: USB disconnect, device number 7 [ 214.806402][ T30] audit: type=1326 audit(1755123687.474:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.0.359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7aa98ebe9 code=0x0 [ 215.547587][ T978] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.754556][ T7516] No buffer was provided with the request [ 215.882537][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 215.889479][ T978] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.900379][ T978] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 215.910937][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.934842][ T978] usb 2-1: Product: syz [ 215.939082][ T978] usb 2-1: Manufacturer: syz [ 215.944982][ T978] usb 2-1: SerialNumber: syz [ 215.953906][ T978] usb 2-1: config 0 descriptor?? [ 216.452133][ T7523] netlink: 96 bytes leftover after parsing attributes in process `syz.3.360'. [ 216.494731][ T978] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 216.501797][ T978] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 216.544547][ T7526] netlink: 68 bytes leftover after parsing attributes in process `syz.4.364'. [ 218.444622][ T9] usb 2-1: USB disconnect, device number 8 [ 218.552040][ T978] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 218.742069][ T24] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 218.803588][ T978] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 218.815194][ T978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.832871][ T978] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.842108][ T978] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 218.860378][ T978] usb 4-1: Product: syz [ 218.870087][ T978] usb 4-1: Manufacturer: syz [ 218.880365][ T978] usb 4-1: SerialNumber: syz [ 218.900379][ T978] usb 4-1: config 0 descriptor?? [ 218.904391][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.919147][ T978] usb 4-1: selecting invalid altsetting 0 [ 218.926121][ T24] usb 1-1: config 0 has no interface number 0 [ 219.025965][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 219.088444][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 219.157756][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 219.202351][ T7537] mmap: syz.3.367 (7537) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 219.239543][ T30] audit: type=1400 audit(1755123691.904:260): avc: denied { create } for pid=7536 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 219.259147][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.419010][ T24] usb 1-1: config 0 descriptor?? [ 219.428967][ T7534] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 219.923002][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.960681][ T24] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 219.987199][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.054219][ T24] usb 1-1: USB disconnect, device number 8 [ 220.310555][ T7552] netlink: 96 bytes leftover after parsing attributes in process `syz.4.368'. [ 220.884825][ T7568] sctp_transport_update_pmtu: 49 callbacks suppressed [ 220.884847][ T7568] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 220.903115][ T7568] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 220.914165][ T7568] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 220.925386][ T7568] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 220.939262][ T7568] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 220.950717][ T7568] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 220.962158][ T7568] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 220.973418][ T7568] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 220.984458][ T7568] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 220.995549][ T7568] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 222.605186][ T24] usb 4-1: USB disconnect, device number 7 [ 222.782110][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 224.608725][ T30] audit: type=1400 audit(1755123697.264:261): avc: denied { write } for pid=7581 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 226.770750][ T7601] tty tty27: ldisc open failed (-12), clearing slot 26 [ 228.822062][ T978] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 229.849277][ T978] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.860629][ T9] usb 5-1: device descriptor read/all, error -110 [ 229.921419][ T978] usb 1-1: config 0 has no interface number 0 [ 230.322292][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 231.045821][ T978] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 231.092290][ T978] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.222079][ T9] usb 5-1: device descriptor read/64, error -32 [ 232.882097][ T9] usb usb5-port1: attempt power cycle [ 232.947435][ T978] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.975214][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.000129][ T978] usb 1-1: config 0 descriptor?? [ 234.218126][ T978] usb 1-1: can't set config #0, error -71 [ 234.234914][ T978] usb 1-1: USB disconnect, device number 9 [ 234.272045][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 234.664774][ T9] usb 5-1: device descriptor read/8, error -32 [ 234.902569][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 234.981416][ T5955] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 235.422091][ T9] usb 5-1: device not accepting address 10, error -71 [ 237.031831][ T9] usb usb5-port1: unable to enumerate USB device [ 238.341420][ T5955] usb 3-1: device descriptor read/all, error -71 [ 242.351263][ T978] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 242.932103][ T978] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 243.166129][ T978] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.976808][ T978] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.531959][ C0] sched: DL replenish lagged too much [ 247.712051][ T978] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.443484][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.032124][ T978] usb 5-1: can't set config #27, error -110 [ 256.060946][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.072315][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.155587][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.185480][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.206461][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.237970][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.284811][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.438430][ T30] audit: type=1400 audit(1755123730.104:262): avc: denied { mounton } for pid=7679 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 257.981075][ T30] audit: type=1326 audit(1755123730.434:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.3.401" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d10b8ebe9 code=0x0 [ 260.920468][ T5852] Bluetooth: hci1: command tx timeout [ 261.942315][ T30] audit: type=1400 audit(1755123734.484:264): avc: denied { sys_module } for pid=7682 comm="syz.3.401" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 263.041979][ T5852] Bluetooth: hci1: command tx timeout [ 263.253479][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.262334][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.270746][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.280174][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.288074][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.402657][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.418259][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.452234][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.912058][ T5848] Bluetooth: hci0: Opcode 0x1009 failed: -110 [ 265.918596][ T5848] Bluetooth: hci1: command tx timeout [ 265.924067][ T5848] Bluetooth: hci3: command tx timeout [ 266.349250][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.153391][ T992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.199462][ T5848] Bluetooth: hci1: command tx timeout [ 268.205701][ T5848] Bluetooth: hci3: command tx timeout [ 268.338690][ T7693] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 268.793679][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.802659][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.811394][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.820369][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.828898][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.253162][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.266354][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.276761][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.285632][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.293477][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.203533][ T5909] usb 5-1: USB disconnect, device number 11 [ 270.255137][ T5852] Bluetooth: hci3: command tx timeout [ 270.339940][ T992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.372263][ T5852] Bluetooth: hci5: command tx timeout [ 271.378152][ T5852] Bluetooth: hci0: command tx timeout [ 272.332162][ T5852] Bluetooth: hci3: command tx timeout [ 273.545767][ T5852] Bluetooth: hci0: command tx timeout [ 273.551203][ T5852] Bluetooth: hci5: command tx timeout [ 273.952886][ T992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.098260][ T7679] chnl_net:caif_netlink_parms(): no params data found [ 274.714860][ T992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.062987][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.070441][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.081377][ T7679] bridge_slave_0: entered allmulticast mode [ 275.089228][ T7679] bridge_slave_0: entered promiscuous mode [ 275.112440][ T7705] chnl_net:caif_netlink_parms(): no params data found [ 275.138527][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.156934][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.168291][ T7679] bridge_slave_1: entered allmulticast mode [ 275.175955][ T7679] bridge_slave_1: entered promiscuous mode [ 275.644777][ T5852] Bluetooth: hci5: command tx timeout [ 275.644791][ T5861] Bluetooth: hci0: command tx timeout [ 275.824898][ T7679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.928794][ T7679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.031890][ T7708] chnl_net:caif_netlink_parms(): no params data found [ 277.218906][ T7691] chnl_net:caif_netlink_parms(): no params data found [ 277.264376][ T7679] team0: Port device team_slave_0 added [ 277.270611][ T992] bridge_slave_1: left allmulticast mode [ 277.282142][ T992] bridge_slave_1: left promiscuous mode [ 277.304179][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.345073][ T5955] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 277.346813][ T992] bridge_slave_0: left allmulticast mode [ 277.377501][ T992] bridge_slave_0: left promiscuous mode [ 277.386134][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.692099][ T5861] Bluetooth: hci0: command tx timeout [ 277.697885][ T5861] Bluetooth: hci5: command tx timeout [ 278.037852][ T5955] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.054565][ T5955] usb 4-1: config 0 has no interface number 0 [ 278.101415][ T5955] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 278.139765][ T5955] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.168344][ T5955] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.211778][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.290241][ T5955] usb 4-1: config 0 descriptor?? [ 278.358953][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.378383][ T5955] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 278.401372][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.430980][ T992] bond0 (unregistering): Released all slaves [ 278.514098][ T7679] team0: Port device team_slave_1 added [ 278.556321][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.577634][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.585206][ T7705] bridge_slave_0: entered allmulticast mode [ 278.606635][ T7705] bridge_slave_0: entered promiscuous mode [ 278.632506][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.640021][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.647525][ T7705] bridge_slave_1: entered allmulticast mode [ 278.655070][ T7705] bridge_slave_1: entered promiscuous mode [ 278.775368][ T7735] iowarrior 4-1:0.1: Error -90 while submitting URB [ 278.805816][ T5902] usb 4-1: USB disconnect, device number 8 [ 279.175595][ T7705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.574074][ T7705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.641669][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.654831][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.772610][ T7679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.005435][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.027622][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.040489][ T7691] bridge_slave_0: entered allmulticast mode [ 280.069545][ T7691] bridge_slave_0: entered promiscuous mode [ 280.090206][ T7708] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.104414][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.123388][ T7708] bridge_slave_0: entered allmulticast mode [ 280.130883][ T7708] bridge_slave_0: entered promiscuous mode [ 280.446999][ T7705] team0: Port device team_slave_0 added [ 280.554089][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.561050][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.650188][ T7679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.677971][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.696860][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.716750][ T7691] bridge_slave_1: entered allmulticast mode [ 280.741306][ T7691] bridge_slave_1: entered promiscuous mode [ 280.792991][ T7708] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.804585][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.811776][ T7708] bridge_slave_1: entered allmulticast mode [ 280.839315][ T7708] bridge_slave_1: entered promiscuous mode [ 280.977746][ T992] hsr_slave_0: left promiscuous mode [ 280.994703][ T992] hsr_slave_1: left promiscuous mode [ 281.009231][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.016794][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.039791][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.060563][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.120784][ T992] veth1_macvtap: left promiscuous mode [ 281.140779][ T992] veth0_macvtap: left promiscuous mode [ 281.151324][ T992] veth1_vlan: left promiscuous mode [ 281.157631][ T992] veth0_vlan: left promiscuous mode [ 282.818456][ T992] team0 (unregistering): Port device team_slave_1 removed [ 282.917097][ T992] team0 (unregistering): Port device team_slave_0 removed [ 283.832599][ T7792] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.410'. [ 283.960932][ T7705] team0: Port device team_slave_1 added [ 284.153746][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.160705][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.248153][ T7705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.463715][ T7691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.479809][ T7691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.497399][ T7708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.509513][ T7708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.532904][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.540862][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.817547][ T7705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.860051][ T7679] hsr_slave_0: entered promiscuous mode [ 284.871117][ T7679] hsr_slave_1: entered promiscuous mode [ 284.878133][ T7679] debugfs: 'hsr0' already exists in 'hsr' [ 284.888702][ T7679] Cannot create hsr debugfs directory [ 285.067093][ T7708] team0: Port device team_slave_0 added [ 285.090177][ T7691] team0: Port device team_slave_0 added [ 285.103382][ T7691] team0: Port device team_slave_1 added [ 285.173534][ T7708] team0: Port device team_slave_1 added [ 285.728493][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.747619][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.806239][ T7691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.865933][ T7705] hsr_slave_0: entered promiscuous mode [ 285.882528][ T7705] hsr_slave_1: entered promiscuous mode [ 285.897442][ T7705] debugfs: 'hsr0' already exists in 'hsr' [ 285.912370][ T7705] Cannot create hsr debugfs directory [ 286.026523][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.039140][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.094077][ T7708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.126731][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.145990][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.212013][ T7708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.247192][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.256296][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.287779][ T7691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.856463][ T7708] hsr_slave_0: entered promiscuous mode [ 287.025282][ T7708] hsr_slave_1: entered promiscuous mode [ 287.072346][ T7708] debugfs: 'hsr0' already exists in 'hsr' [ 287.078099][ T7708] Cannot create hsr debugfs directory [ 397.731892][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 397.738889][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7815/1:b..l [ 397.747118][ C0] rcu: (detected by 0, t=10503 jiffies, g=19665, q=1279900 ncpus=2) [ 397.755179][ C0] task:syz.3.412 state:R running task stack:25944 pid:7815 tgid:7804 ppid:5846 task_flags:0x40044c flags:0x00004006 [ 397.769408][ C0] Call Trace: [ 397.772690][ C0] [ 397.775620][ C0] __schedule+0x1190/0x5de0 [ 397.780134][ C0] ? swap_entries_put_cache+0x217/0x2d0 [ 397.785779][ C0] ? __pfx___schedule+0x10/0x10 [ 397.790633][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 397.795573][ C0] ? mark_held_locks+0x49/0x80 [ 397.800340][ C0] preempt_schedule_irq+0x51/0x90 [ 397.805353][ C0] irqentry_exit+0x36/0x90 [ 397.809757][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 397.815728][ C0] RIP: 0010:stack_access_ok+0x16/0x200 [ 397.821181][ C0] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 4c 8d 77 08 41 55 41 54 <49> 89 d4 4c 89 f2 55 48 c1 ea 03 48 89 f5 53 48 89 fb 48 83 ec 08 [ 397.840791][ C0] RSP: 0018:ffffc90003ebf648 EFLAGS: 00000246 [ 397.846871][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff913a882a [ 397.854838][ C0] RDX: 00000000000000a8 RSI: ffffc90003ebff58 RDI: ffffc90003ebf6e0 [ 397.862808][ C0] RBP: ffffc90003ebf728 R08: ffffffff913a882e R09: 0000000000000000 [ 397.870770][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90003ebf730 [ 397.878729][ C0] R13: ffffc90003ebf6e0 R14: ffffc90003ebf6e8 R15: ffffc90003ebff58 [ 397.886713][ C0] unwind_next_frame+0xc2d/0x20a0 [ 397.891740][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.897804][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 397.903959][ C0] arch_stack_walk+0x94/0x100 [ 397.908636][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.914707][ C0] stack_trace_save+0x8e/0xc0 [ 397.919384][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 397.924753][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 397.929697][ C0] save_stack+0x160/0x1f0 [ 397.934026][ C0] ? __pfx_save_stack+0x10/0x10 [ 397.938872][ C0] ? __free_frozen_pages+0x7d5/0x10f0 [ 397.944241][ C0] ? __put_partials+0x165/0x1c0 [ 397.949093][ C0] ? qlist_free_all+0x4d/0x120 [ 397.953848][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 397.959467][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 397.964481][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 397.970113][ C0] ? taskstats_exit+0x654/0xbe0 [ 397.974953][ C0] ? do_exit+0x5dc/0x2bf0 [ 397.979277][ C0] ? do_group_exit+0xd3/0x2a0 [ 397.983949][ C0] ? get_signal+0x2673/0x26d0 [ 397.988619][ C0] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 397.994331][ C0] ? exit_to_user_mode_loop+0x84/0x110 [ 397.999782][ C0] ? do_syscall_64+0x3f6/0x4c0 [ 398.004536][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.010594][ C0] ? page_ext_put+0x3e/0xd0 [ 398.015092][ C0] __reset_page_owner+0x84/0x1a0 [ 398.020021][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 398.025226][ C0] __put_partials+0x165/0x1c0 [ 398.029908][ C0] qlist_free_all+0x4d/0x120 [ 398.034490][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 398.039941][ C0] __kasan_slab_alloc+0x69/0x90 [ 398.044789][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 398.050235][ C0] ? __pfx_acct_collect+0x10/0x10 [ 398.055294][ C0] ? taskstats_exit+0x654/0xbe0 [ 398.060145][ C0] taskstats_exit+0x654/0xbe0 [ 398.064818][ C0] ? __pfx_taskstats_exit+0x10/0x10 [ 398.070014][ C0] do_exit+0x5dc/0x2bf0 [ 398.074170][ C0] ? __pfx___might_resched+0x10/0x10 [ 398.079542][ C0] ? __pfx_do_exit+0x10/0x10 [ 398.084132][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 398.089147][ C0] ? find_held_lock+0x2b/0x80 [ 398.093821][ C0] do_group_exit+0xd3/0x2a0 [ 398.098324][ C0] get_signal+0x2673/0x26d0 [ 398.102842][ C0] ? __mm_populate+0x299/0x380 [ 398.107606][ C0] ? __pfx_get_signal+0x10/0x10 [ 398.112457][ C0] ? up_write+0x209/0x520 [ 398.116782][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 398.122324][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 398.128471][ C0] ? __pfx_do_mlock+0x10/0x10 [ 398.133155][ C0] exit_to_user_mode_loop+0x84/0x110 [ 398.138431][ C0] do_syscall_64+0x3f6/0x4c0 [ 398.143021][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.148930][ C0] RIP: 0033:0x7f3d10b8ebe9 [ 398.153345][ C0] RSP: 002b:00007f3d119c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 398.161753][ C0] RAX: fffffffffffffffc RBX: 00007f3d10db6270 RCX: 00007f3d10b8ebe9 [ 398.169721][ C0] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 398.177690][ C0] RBP: 00007f3d10c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 398.185654][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.193618][ C0] R13: 00007f3d10db6308 R14: 00007f3d10db6270 R15: 00007ffe0b332088 [ 398.201596][ C0] [ 398.613614][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.629707][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.098837][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 401.115300][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 401.121315][ T5849] Bluetooth: hci1: command 0x0406 tx timeout