last executing test programs: 1m19.183916549s ago: executing program 1 (id=751): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async, rerun: 64) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="03020c"], 0xa, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 1m19.049337378s ago: executing program 1 (id=754): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @raw_data="1ddd3aaaabd5e93373caf551db7eec0638fe582d3ba29fc79580ecc908169cb103733d5796c6844405a8be9aff8f20303b641d9bca05e4b6ca870e9c2516635f5af466b5330d5838902378e288eeb6429f6dc3b6e15baa87776a663cebac4d3d1cb9029bb4820a81bf77ea4e812c69283682171f56b7a2f6453bdec6b70421688ad3e0d273ffa9f9fa0996d7eca73dc21f3b5c688f08b0eab844c8f4e52e6d14437f1d1897f63e4e7505cff630091526a64b8567bda1f3a353f3e84b429ce4764e3fca9482f7c7c2"}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x3) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$FUSE_ATTR(r3, &(0x7f0000000140)={0x78, 0x0, 0x0, {0xd, 0x2, 0x0, {0x2, 0x80, 0x80000000, 0x3, 0x6, 0xa4, 0x8001, 0x1000, 0x6bd56db9, 0xc000, 0x66b5, 0x0, 0x0, 0x4, 0x2}}}, 0x78) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4, 0x7, 0x10, 0x22210, r2, 0x437, '\x00', 0x0, r3, 0x0, 0x5, 0x1, 0x1, @void, @value, @void, @value}, 0x50) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) fcntl$setlease(r3, 0x400, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 1m18.865128924s ago: executing program 1 (id=757): syz_emit_ethernet(0x2a, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r2, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() creat(&(0x7f00000002c0)='./file0\x00', 0x60) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x1812c09}}, 0x50) openat$dir(0xffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x101200, 0x8) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000003c0)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x29, 0x7, 0x2000000, 0x5, 0x2, 0xffff, 0xa04, 0x0, 0x0, 0x8, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0x1, 0x0) 1m17.556621961s ago: executing program 1 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 1m17.219172756s ago: executing program 1 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad6, 0x800, 0x7, 0x7f, 0x0, r1}, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1m15.568989998s ago: executing program 1 (id=767): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0xffff, 0x0, 0x6, 0x55, 0xb66e, 0x7c}, 0x9c) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_follow}, {@volatile}, {@xino_off}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x10010, r8, 0xd36c1000) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x78, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0xfffffffffffffffe, 0x2, 0x5, 0x40007fffffff, 0x6, 0x7, 0x80000001, 0x24e, 0x3, 0xffffffffffffffff], 0x0, 0x98302}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x10001, 0xe5, 0x3, 0x2, 0x4, 0xca9, 0x3b, 0x10000010000008]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, 0x0, 0x0}, 0x0) 59.877963746s ago: executing program 32 (id=767): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0xffff, 0x0, 0x6, 0x55, 0xb66e, 0x7c}, 0x9c) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_follow}, {@volatile}, {@xino_off}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x10010, r8, 0xd36c1000) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x78, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0xfffffffffffffffe, 0x2, 0x5, 0x40007fffffff, 0x6, 0x7, 0x80000001, 0x24e, 0x3, 0xffffffffffffffff], 0x0, 0x98302}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x10001, 0xe5, 0x3, 0x2, 0x4, 0xca9, 0x3b, 0x10000010000008]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, 0x0, 0x0}, 0x0) 14.150184781s ago: executing program 4 (id=951): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0xe0, 0x19, 0x7a, 0x0, 0x0, 0x198, 0x1f0, 0x1f0, 0x198, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x1d}, 0x0, 0xa0, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@addrtype={{0x30}, {0x4, 0x800, 0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c4078287ad09000000000000004384c45e4d0086dddf25bdd8dff300"}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xffffff00, 'batadv_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x41}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() connect$ax25(r1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x55779000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) accept(r3, 0x0, 0x0) 12.635730675s ago: executing program 4 (id=955): ioperm(0x0, 0xf1, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvfrom(r1, &(0x7f0000000140)=""/195, 0xc3, 0x10100, &(0x7f0000000240)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x80) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x48, 0x0, 0x5, 0x2, &(0x7f0000000000)='1', 0x0, 0x0, 0x0, {0x1}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.085007936s ago: executing program 4 (id=966): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) rseq(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x2}, 0x1}, 0x20, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x144, 0x0, &(0x7f0000000d40)=[@increfs_done={0x40106308, 0x1}, @enter_looper, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/244, 0xf4, 0x1, 0xc}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/47, 0x2f, 0x0, 0x2c}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000cc0)={@ptr={0x70742a85, 0x0, &(0x7f0000000c80)=""/45, 0x2d, 0x2, 0x35}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000800)=""/192, 0xc0, 0x2, 0x11}}, &(0x7f0000000680)={0x0, 0x28, 0x40}}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x6, 0x0, 0xf}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000940)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000b80)={@fd, @flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x201, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1440}], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0xffffffff}, {0xa, 0x0, 0x5, @mcast1}, r7}}, 0x48) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) timer_delete(0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2) pread64(r8, &(0x7f0000000000)=""/47, 0x2f, 0x5) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4694e30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}, r7}}, 0x30) 9.466148263s ago: executing program 4 (id=970): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x2, 0xffffffff, 0x80000001, 0x6, 0x0, "7f1227f7adf97affe4ffff7d1800"}) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048010) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f00000005c0)='./file0\x00', 0x400, 0xb5) mknodat$loop(r1, &(0x7f00000002c0)='./bus\x00', 0x1000, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x62, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r2, 0x0, 0x4}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r3, 0x0, 0x4}, 0x18) r4 = syz_io_uring_setup(0x110, &(0x7f0000000540)={0x0, 0xfffffffc, 0x80, 0x0, 0x29d, 0x0, r1}, &(0x7f00000007c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000080)=0x101, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000022}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x121400, 0x2) creat(&(0x7f0000000100)='./file1\x00', 0xe0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000640)={0x80000000, 0x0, &(0x7f0000000680)=[{{0x80000000, 0x0}}, {{}, {0x80000000}}]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRESOCT=r7, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e"], 0x70}, 0x1, 0x0, 0x0, 0xc894}, 0x40000) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000000701010000000000000000020000070c000340fffffffffffffeff0c000240000000000000000f080005400000000124000780080002400000000108000240000009ab08000140000002000800014000000008"], 0x58}}, 0x20000000) r10 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x8000) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc0287c02, &(0x7f00000000c0)={r8, 0x0, 0x0}) 7.529196397s ago: executing program 0 (id=973): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000fc0), 0x511080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32, @ANYRES16=r0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3a, 0x20000000) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)=ANY=[]) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) setgroups(0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="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"], 0x48}}, 0x40050) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 7.528069193s ago: executing program 2 (id=974): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x20, 0x20, 0xfffffd06, 0xf, {{0x7, 0x4, 0x1, 0x2, 0x1c, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x7, 0xf3, [@loopback]}]}}}}}) getuid() (async) r1 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) statx(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4000, 0x800, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@acquire={0x0, 0x17, 0x8, 0x70bd28, 0x25dfdbfd, {{@in=@broadcast, 0x4d2, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x0, 0x4e20, 0x0, 0x2, 0x20, 0x0, 0x1, r0, r1}, {{@in6=@remote, @in=@rand_addr=0x64010101, 0x4e20, 0x8, 0x4e24, 0x100, 0xa, 0x0, 0xa0, 0x5e, 0x0, r2}, {0xb2, 0x40, 0xfffffffffffffffd, 0x4, 0x50b9, 0x886d4fc, 0xffffffffffff0000, 0x4}, {0x6, 0x1ff, 0x101, 0x3}, 0x4, 0x6e6bb0, 0x1, 0x1, 0x4}, 0x5, 0xbea, 0x7, 0x70bd2a}, [@algo_auth={0x0, 0x1, {{'blake2s-160-arm\x00'}, 0x0, "c781f47e76761326e6c8d9632f5d237461cfe0f863bdf048e9e5c7b161f753d9e5c96ca433d8fab98cf3b432b3f0ae9df67badc49ade6f6fcbcd0c0d2229e7bb6c7ba655c717eeef4addb46fa36bad9f5ed56e3b42a13ac00bc2a8dfb0ea4321b65211f8fdc355665affb882de93e9ce3268e6b0fef574cd11862dec7e482874903961a6d7db828b0a2a58ed32f8a8c88994d8d9d65df1b81da59f1a1e3da637a6930606533758e33925fd52331fd05ff24550f2443a8de9a365580748a0c13dfcd3c6cfd5e7cc618b62c54f1e11d429116bb51dac6cd8795940cee263fda385dfa09e468ffe61"}}, @XFRMA_SET_MARK={0x0, 0x1d, 0x7}, @migrate={0x0, 0x11, [{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@multicast1, 0xff, 0x0, 0x0, 0x3506, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0, @in6=@mcast1, @in6=@remote, 0x2b, 0x0, 0x0, 0x3501, 0xa, 0x2}]}, @proto={0x0, 0x19, 0x2b}, @algo_crypt={0x0, 0x2, {{'cbc-camellia-aesni-avx2\x00'}, 0x0, "457a62171c3501ac8335ba5a4de267ad7fe356443ce3aa9053f6321380037926dbfd303ad2e764d5cd24dbc0fc8c1478af27cea824a9cb33eb4f8ccbc6058549894b96e8df05c4e7d4090129c0f62c45b5097672e97f580da1111d36c14f317659d0ce9bf496e688122905ab067d15fd04481226759665904995ec64994866c04a71077d3af33ebd5aa9744cae603c1fb1600d5d59f21d74710d6bf31edeb01b3cf84bc6547ab9b525fd97792f81fa4e47beccfbec0db95282a30f2471abd48b2873d0590e264dc5b91523ce66dfe371963b980ba069c4c3c090c912a0ce40e670de64a5c75bf8d3458435c37a930507d20e1c382b"}}, @sa={0x0, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0x35}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4e22, 0xb79b, 0x4e21, 0x9, 0x2, 0x20, 0x20, 0xff, 0x0, r3}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x32}, @in=@broadcast, {0x96, 0x0, 0x9, 0xea, 0x10, 0xac, 0x7ff, 0x80000000}, {0x101, 0x1, 0x9, 0x7}, {0xfffffffe, 0xffff57ee, 0x8}, 0x70bd26, 0x0, 0x2, 0x2, 0xd, 0x1e}}, @XFRMA_SET_MARK_MASK={0x0, 0x1e, 0xf129}, @address_filter={0x0, 0x1a, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0xa, 0x1}}, @algo_auth={0x0, 0x1, {{'sha512-neon\x00'}, 0x0, "06c6389f836df7a68ae4c5324c8f45fa908b1411a3f1e8bcd45d196d33a143d0e896318463b5cc51f02ce00b5423a0b1fdc72c9ee6da24d51f3fc177acd6be01f9e41d731522a08c895d85c0b76311ab9a76cb1b588168dd8e30cb76f5f9ffdbfb0dbd1d721d77d2aedd9efbb71ad0a37f128d7ef40c8738975aafc7d7d6c5a924a12a7ca6a834ccc03fc26a75d8ef27605e6e7f65177072cc2b6e2ace4847e0ea86648d85ed1fad68cfc56b8d3d46eaf57e4e21"}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="70000000000905030000000000000000000000000900010073797a31000000000c00048004000140000000003c0002000c0002800500010000005b002c000180140000000000000006000000000000000000000014000400fe8000000000000000000000000000bb080005"], 0x70}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readahead(r6, 0x0, 0x0) (async) readahead(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000cc0)={0x0, 0x7, 0x2}, &(0x7f0000000d00)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000f00)={r8, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x5, 0x4, 0xffffffff, 0xc, 0x3, 0xd}, 0x9c) landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) (async) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) (async) r10 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r11, 0x38) (async) tkill(r11, 0x38) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000226bd7000fbdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64725d707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000003f414e3cb002cbdc2534740818beb70f8eb9af6a3d0d7ff22c6c0c948bc169ccd64598cf4705f477cc729f54d749259482b29b1d3ba3152254008f33eb3a6fb59c0c06940e5fec70b97047fc959a603df3be5eca24edc799c44911c66ef45322d6706756a569495783a94f979bac6328abe5041d8246ec2966f1aca909e6168de9af557dbece0f82f440722c122c95464883467c5b6e8915c98dafd65419f78ee634bbddc9d3f565b359259b8544684740a32124ee4274"], 0x6c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4002) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4002) r13 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x202801, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010403000000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c002200"/26], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}, 0x1, 0x0, 0x0, 0x2092f62b01fbfc9b}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r14 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r15 = dup(r14) write$6lowpan_enable(r15, &(0x7f0000000000)='0', 0xfffffd2c) write$rfkill(r15, &(0x7f0000000040)={0x5, 0x5, 0x0, 0x0, 0x1}, 0x8) (async) write$rfkill(r15, &(0x7f0000000040)={0x5, 0x5, 0x0, 0x0, 0x1}, 0x8) 7.413741088s ago: executing program 4 (id=975): r0 = socket(0x10, 0x2, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r3 = getpid() ioperm(0x0, 0x3, 0x2) (async) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) (async) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 7.280136748s ago: executing program 5 (id=976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0xe8}}, 0x0) 7.020938078s ago: executing program 3 (id=977): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x1000000, 0x80, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1f00, 0x50, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0xa, 0xc8fe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x9, 0x6}], 0x10, 0x71, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff8000/0x3000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1c}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x800, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') getsockopt$MRT6(r7, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4) shmctl$IPC_RMID(r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000001"], 0x18}, 0x0, 0x20040000}) 6.626523314s ago: executing program 5 (id=978): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r0, 0x3841b273) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x30}, 0x4, 0x700000000000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) socket$netlink(0x10, 0x3, 0x15) epoll_create(0x1) r5 = io_uring_setup(0x1fc3, &(0x7f0000000000)={0x0, 0x0, 0x8000}) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000017000000bca30000000000002403000040feffff6b0af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430000000000007a0a00fe0000001f6114100000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4fffe2158dfb8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb3fa3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5973acc706db6b861b8c10a7cbd0b723906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff6194732827a58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f1000000006eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa555ec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f37382000000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23577949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115553f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5f07918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa61071799e1acb3928143be1c1023a375e528285544d0064b91f00f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aa3f999ce700ffe794e27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a2271d96c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b0200780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000005bae7859839f856e7a397913eec7977f6231c5f11849b3deabc60c5ccf240d16924eb760a969813be02a229c674045b88915518a17b683268f10358e1c0b20cfc2bd105e5e1db7fed951b8faf126267bb38b8d356f63d3433d3dee643503a8ba4968adf6673f720c474ecf324d989235f1b52aacfe52e4519af87b7e1594728d6d6fff1248e72d5b1b1b692b2b732f0f2ac0714079fd7bf97bf2b5687d1db91daa5210d09ebe66d00ff4f35143be01585e629d408f2d00a0a290db76adc5f57e160b2c188bb1ecc4e7d2948788e4f9c1bcaf91dac53a2f525f7385d5d82728b5217908748f4c22b6d79700"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', r6}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000140)={0xc, 0x0, 0x0, 0x0, 'syz0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6.524631026s ago: executing program 2 (id=979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r7) (async, rerun: 32) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 32) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x71, "7d866a1bc59ffade705bb0fc9eae85620f97339a731643af8afa642bd1df55bad2d76b821aa1183957ba200f2152491034852e593c5f522509ee66416fd71600d48e634dccb1e7872541f4ecabe58d6af06bb83381bc87e1bebbcf3e1aa2eec4f144e152d21ff8bdb36d1e49bef8674624"}, &(0x7f0000000100)=0x79) sendto$unix(r5, &(0x7f0000000300)="0bc9904f08a1844e97f1c31e5df32bcfaad4ef57e317768581f5cb35d680db37674035d95f33e429d5a83fdd1afcceeb1eba6f404b26d69ccc4f80baf37185ff0fb31a979673b0c91cfee7c7e16e6705bc30da4c870516afe9793582ea56617043875bfe6b50e31d2246b3c4ce539009f9364e857e6651bf2add281c418e0bfce6dd3f8d0ac8664261da", 0x8a, 0x4000000, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r9, 0x6}, 0x8) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) (async) preadv(r2, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 6.451484836s ago: executing program 0 (id=980): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) rseq(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x2}, 0x1}, 0x20, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x144, 0x0, &(0x7f0000000d40)=[@increfs_done={0x40106308, 0x1}, @enter_looper, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/244, 0xf4, 0x1, 0xc}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/47, 0x2f, 0x0, 0x2c}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000cc0)={@ptr={0x70742a85, 0x0, &(0x7f0000000c80)=""/45, 0x2d, 0x2, 0x35}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000800)=""/192, 0xc0, 0x2, 0x11}}, &(0x7f0000000680)={0x0, 0x28, 0x40}}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x6, 0x0, 0xf}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000940)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000b80)={@fd, @flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x201, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1440}], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0xffffffff}, {0xa, 0x0, 0x5, @mcast1}, r7}}, 0x48) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) timer_delete(0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2) pread64(r8, &(0x7f0000000000)=""/47, 0x2f, 0x5) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4694e30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}, r7}}, 0x30) 5.626609811s ago: executing program 4 (id=981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) fspick(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x6, &(0x7f00000003c0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000300)}}, &(0x7f0000000600)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="08001497733f7fb3", 0x8}], 0x1}}], 0x1, 0x2004000) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c024cfde47f33a4205128789edf19000000000000"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000001000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000740)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @loopback}, 0x26c, 0x0, 0x0, 0x0, 0x72c6, &(0x7f0000000700)='veth0\x00', 0x4, 0x7, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x8, 0x0, 0x0}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pause() r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000007c0)={0x3, 0xfffffffffffffee3, 0xfa02, {{0x0, 0x4e21, 0x40002, @remote}, {0x2, 0x4e23, 0x6, @local, 0x5852}, 0xffffffffffffffff, 0xe}}, 0x48) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r6 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000006c0)={&(0x7f0000000180)}) 5.549483889s ago: executing program 3 (id=982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@updsa={0x138, 0x1a, 0xffffffffffffffff, 0x0, 0x25dfdbfb, {{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in=@local, 0x0, 0x6c}, @in=@empty, {0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x970, 0x0, 0x6dbc}, {0x0, 0x3, 0x0, 0xa5}, {}, 0x0, 0x3503, 0xa, 0x0, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.542704301s ago: executing program 5 (id=983): r0 = userfaultfd(0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff0}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0x7f, &(0x7f00000001c0)=""/127, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x6, 0x1ff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x4, 0x10, 0x2}, {0x4, 0x5, 0x9, 0x9}, {0x0, 0x2, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x5}, {0x3, 0x5, 0xf, 0xd}], 0x10, 0x502, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='spi_message_done\x00', r1, 0x0, 0x37}, 0x18) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) io_setup(0xa853, &(0x7f0000000000)=0x0) io_submit(r2, 0x3, &(0x7f00000005c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xb18, r0, &(0x7f0000000140)="e33df6f15096510c0aa8223d1e969d6a80bf632735ef53c2ccaaafddd3552c61169086971ec492c50ae6faad95242c5a065351056621a38086ad6aad5f97fd8a1fe25c8d1db1a5704e47486af83bdb7125a6ef5621e736cb4cf1e511fe94e11b40930b5a488572531cfd6f642daf53bd2c8330fd2816b01506e922f7", 0x7c, 0xb}, 0x0, 0x0]) 5.523164209s ago: executing program 0 (id=984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000080)='$\x00'}, 0x30) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="010000000000020000003900000008000300", @ANYRES32=r4, @ANYBLOB="7c005a00780004801400050000000600070004000900c7000f0006001400030006006100fdff8100070008009800050014000300070005000700090b00800f000000fdff14001c0003000200ff7f01010d0004003dff05001f0001"], 0x98}, 0x1, 0x0, 0x0, 0x200440c0}, 0x8044) 5.490765731s ago: executing program 2 (id=985): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6a, 0xc8b, 0x4, 0x0, 0x1, 0x2, '\x00', 0x0, r0, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) read$msr(r0, &(0x7f0000000240)=""/110, 0x6e) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x2e) 5.368695865s ago: executing program 0 (id=986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x74f481) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x4, 0x300, 0x0, 0x10, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0xcc40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) 5.197349729s ago: executing program 2 (id=987): sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() 5.187889668s ago: executing program 3 (id=988): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)={0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000100)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000004c0)={'wg2\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x7800, 0x20, 0x8, 0x0, {{0x14, 0x4, 0x0, 0x8, 0x50, 0x68, 0x0, 0x7, 0x2f, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x1f, 0x7d, [@loopback, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2]}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x16, 0x2, [{0x1, 0x9, "9afb20eff04764"}, {0x0, 0x4, "d59c"}, {0x7, 0x3, "e1"}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@private, @empty}, &(0x7f0000000600)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000640)={'vcan0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700), 0x0, 0x87, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) socket(0x11, 0x3, 0x0) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000480000000100000080000000c164636f8160c31efbe9f460f0ae2014f9b4e40f2f83dcee7556d23a5f153fb15095c40fc1ad2f41d096587613a515c2e285b4d70b5b179d30e4f5fe21c7bc7a38", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 4.995862441s ago: executing program 3 (id=989): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000007c0), 0x880, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000000c0)={0xc, r2}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000980)={0x30}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00ffff0000000000ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000008000000000ee4fe5067406b838d15fcfcaae6ce3c669c849c25e7494883a79048ce005ab4ceb98d8d386f83f0764622b227f919590783aaa7c17a9e017dafc2102be619eb4f9544b29f5ecd189805f1a03d870ed42", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="189b11237b7ee500000000008000000000000000000218120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603dfffffffffff7f00000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) 4.89312461s ago: executing program 5 (id=990): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000fc0), 0x511080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32, @ANYRES16=r0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3a, 0x20000000) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)=ANY=[]) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) setgroups(0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="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"], 0x48}}, 0x40050) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 4.607867388s ago: executing program 0 (id=991): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00f8890d00080000000061f2002f557aef802eea060000000000560500000000", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB="807ae62b181c849367f2e2062cc06cf86d489c23008db715a171368498b7360be4eca8e312b87a618e0c0da610724c89b0647a356b09ef92fd832de5aa5816cac483ec4eaf148e1f468d4eff7ebc3f2ba4e8bf1108f79dc0713f035e8ebdbf0cf763e60fc9ce9c9f", @ANYRESOCT], &(0x7f0000001ec0)=""/254, 0x31, 0x12d, 0x6, 0x0, 0x0, @void, @value}, 0x28) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) rseq(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x2}, 0x1}, 0x20, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x106f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c979423af7fcfc9e00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x144, 0x0, &(0x7f0000000d40)=[@increfs_done={0x40106308, 0x1}, @enter_looper, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/244, 0xf4, 0x1, 0xc}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/47, 0x2f, 0x0, 0x2c}}, 0x0}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000cc0)={@ptr={0x70742a85, 0x0, &(0x7f0000000c80)=""/45, 0x2d, 0x2, 0x35}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000800)=""/192, 0xc0, 0x2, 0x11}}, &(0x7f0000000680)={0x0, 0x28, 0x40}}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x6, 0x0, 0xf}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000940)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000b80)={@fd, @flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @fd}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) timer_create(0x7, &(0x7f0000000340)={0x0, 0x28, 0x4}, &(0x7f0000000380)) timer_create(0x5, &(0x7f00000003c0)={0x0, 0x41, 0x3, @thr={&(0x7f0000000ec0)="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", &(0x7f0000000480)="c0ac9b994136cc70666467a5351bed349c294c8a3f5f9cf26f86d8e0d47dd7ada4c7317ec661cd721e62f53512aa647712d76713f407f47a11c5cfffbf57f74974e52a18b7d80a01ff4f9f74590460f8fa9da08edeec105266a94db7564a6202bc28efdaf9e95df0e378f3be409ebd9d6460048233251ad1a91ec177a2435ea3c9895a3a8e967e57"}}, &(0x7f0000000400)) socket(0x1, 0x6, 0x7ff) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x7, &(0x7f0000000580)={0x0, 0xc, 0x4, @thr={&(0x7f0000002100)="5f1708b427dafe85bbbdcfeaf87b8164b47650c79fee136b8fe32f83b1cfb13524092603cca092c98903d869e844758b8bcf8d053bcd09aa5313095f4b7df9276dbd5251efedd5ea9590bc4457af69401985f8556a0eabf5063adb72de9b6816d727a2db5de2a9e3efc9b706cd8a22b3c4e1c5e4c18858ad4be73bd6b443560f4955ca290731c98de724644464bca3878dc3524a17b2fe98ec2f8955c2f9c538b76a07e67af9acb8a48b17b604816bda5ef3291e8606388b67462daa5b97e982ee21352411295465809d0e6d8545e2af8a8047be2e28e25e259f755f00e7510b6ffe18713c39577496c2bd5b53d6a0d94a4f94e1b4562807a4e696bc046a7dbfd33c866d166f8d543afa81568c87638430e42e3e22fad8cad6711cfb567f39b23a5339ef3c8fbf115ea8fca1d9457dbad7bc2c5bbbc9e08924f0161fdaaa1dcc0ad0dfc2d3ead96a9e4ced1a42a8c8f6146902addfb64dcdfa5aa342576670936f9ef5c0138c84c92a22cb30c8667edbbfe6d29a31e12568c8e99e1de68a134d94a13477bd939adf94c1f2fedbffa144cfe9c70ddac9f56254cbae36a9f41271f8e0340101e2100b9fb2b9ff1042ce9c1f951f97524bdea070c6f1f13c0f689df3e5c1cec0b0a62e07d40450937c4bb4280ed6100be6a452d6aab6f523531a57ec39c75a30acc153563c66abf3670fc27930eccd661ec2a2b3f8b9f8de3bd5b68901ff025999902a874c5c4f4673498fa96c92af4bfd3d19e9c6852d54c23270677957e293d476717340b755c9ecf2de2a3a00299a741fa7882bcc22a86dbed2159008ce076d1a09a2fa3b792c2745bd493e71d8d2314083ce27290dbf6689280d1d1d2987dd3c098bc9459bbdd9cb240ac06595ae27f714ac59a67d007a9ba3e4e6e99f3bc4abae6ca15286625b169e1c22a76f45c63eedf39e203d7bd5260e02213ab6fbafb38af2100f05e512342cf6f0369f10add717467b25979b7858a6c4c1707d79fc2fce6a28ccbe7c5ec32c7eb8ca8257195df11542abb993e98c9509f237dd42d5738b773bef1ab1c7dba81a3e84de0c2e44ae83df9228a4b89fc62c801767c713d7672dcbafbd7a4a1633aab22086099125f870b4f6b8e62ff638b1df91a3d89f62beb6f7330a733672bdf0ae37860a75339b10e99fb83d1af761dc42ab3c62f2e8b56945861ff849470922a972bd242f74bef039b63fe3a9e718f9cfac884760867b7e4f7db59422eab90c3c5c402460a8127aa8c59b1af78b057743b0a1246e3856bca9fb80c27e3472601141a4681b4dcf9f83c02c318028206efce57a5a1f30dd3ae1b863e644cb3b7704cf196d497dade59553666c56a6a4caebb1492b9477023912abeefe1a54178c975ca25e9e65f7b70945b3498fac58ceb3308716f1f9f2b2074087b8342e5b7ed10012a63738c8572572990fc438d4884f3f86c11d3ae4613cdfa26a7355be5b4c176ab2a5b4472d1ebcebcde2e709196c81e037afbf2ccd7504893432e31f4688f09d897df239686dec575e8e8d5ef7b7086732ccc989d87694931f4cdd7191c90f125b24949cad233e655bce00d00b22abcb57b55afc0b4d88fdb22c3991858b7ef78585796f41037dd177c7935133641eef149ad11c5331fd8e870cd6b63f776d4b154315c08189cba4ed81504a0369df49128224f0cadafcec54773d725fe0d4b7ab9aa3fe0463ee78c96f6dd958952e56f7a95208772a311040387bb1643080607023a8235be08fab6999bd38fd76369766094dd1980990a70e5f2ec97a7522764d55dfec90d345bc5ddf43307db888fbc15ac12bd9662b58ab43f12ec4bfee50349934805f86d47a1bc2191980ccc99166e1731e70fadd384a900f66c1e4efd8fa95a0d56f792f9873c1c8ed117e653273fc09697558889e1e3a36a89c7c961596777a4c696a9f384bbe130af2a930d625328cc2675ce1b8b07102ab832ba9b55c7cadcbb002056f2ca965ea70162e5797e8443067740ef008e98584006bea29644836e105f3e93ba97e6eb2f8ebb4cf3dfef97f0508a8c4ed348a73f375260378874115298119e0963c8f37410b681c183216214e8218839bb4297915b4d552b69fbbccb03dc54b08cc3ef2f514d1a5cea97965cc5660522a9e0c1e493f1a9eb2b3d9ec555936c22737809cc55ff07d957e3219ce49362c01281bbb354cd2f5453e08a7c02ccd98ae52e7bc19760919e4ab9b6e920a75d2946fdaa6b1dc6e272fccd82a28b5ad26c8f6e9de19f26c05caf38853ddb000e8cda11d46be12910c69abc5608fe7f19763560ebff7dc025832d15bdb88480d0aaca17d6e560913e27cd97ab9e02447ae9a987a1c17040ce0641ca87a41b58c3aa110c8ab7260b4b7d58a21ad9e54cc6c7e96487c3c09d31df52ed10e589986098786efff7c08fd0ff4d29aa7a2436e0392ed0495959f407db8d3834d62b17ecc0dcfcd15c3c003eea292a15724cb54904b2f065dde34a4eaed88bb0ffeaecb4c58de827d6a6260e6e9e469fbee98fa4dd37be8108729882d21d7a4a4c752468b3965a9df7d9a179c18387c367cbdc2ff9c6e02745064a3c99e974780d1f23d0dd029034cec9ad6793d8ccef74e22b6de6c52a8d81ce774d4317d9e7134b85cbc86f6bf63543c68ba5aa9e01926236c5dc811d29aff460e52672bd69ec7ba3f9ddb5484d37ee52c36f26651ba625dc229ccc5bafe3a1f9b7ac3eff7eab4bd5c913faaff3c0006dd067605f218f3704efffb69fdd92ad89227b4def3960527f3eaa7b53fe4f8d31e6994707a3a79f8d2d1c89a90e2a9acde22418094020384fc1f75949887c13e549df9669e334f6721ab7672ba3e2cf2189bd6e6c309cc32bc5c7ad0b306c8c95d08322369c002e8e974cbc6917a681e319ee5e3636f04975ce8815eeedb85ad2d01b462edcd25e132dcc7c89cebebe5b630ce2e59cab995405eb3c5e8172926b65a695a63f8bd963d46da0e1cf961bd40a522b6f29b4dae74e07c7970f217378627880b6af3cb6a7a84f4079285c344bafe388dc3ae635c4f6e86e3cc08e7d13c53916fd297ca9453eeefc2119e4987ff11e18dd5e4c5d82f5798a76c6cdaa947ca469c19209f61e425882889192e6c0ca7faff59cfc8f4581ba118b0bcecbce5fcd3793f837ef6bf5641b57437c1fb2c503bf04b038386027e724509e6ecbc8f5afbbb3a75264b3296b7efb0b08bcd1fb9b9a2e1dfe9dba2c2bb3e1e2d9ee0aaee25f893625d989f3bf3c24cf00f9be653370431c25988f171fbbbc60e82662e26707f8a06b3729aeed586f3837bc62be6d437af4f7fa3ae3fac95de60acefd358c270857e960d258c8db922c74ccd11a4e2246962a689e396245c8c875bc1a42a898cb2e03348fc485b6589f81ba064a7fe2caf314511f6b3e99de6101fdbe1d236b5c43f6b255cebdd88571d6c8a9bdaead9f0a38908a22317f30efd3920013c9eb08423077cb69ca9417f88534f7d7948e40e4dd8fc1e6b1b488cdd5697266651da187ff33552202c73b3b003fa0e4c27a918063ebd949aabc688f31cee311eb78caaae6046afcf442d4444068736534af3a5ee3383dd7241b62bb1b668d396bfacbad55037db9d2cb918490531075fcd188e9889508247f032a745c32e057bc3b13faaba2c5ab90b8b9d6fbb61886fa605828e8aaf9110836e0db4c2d063244c736bffb7a04e24b266d30a52c58aaa3f867951b15269a05c40c0eb90a9d643c74ce56c4a90fdaf5cb6d6f5a68d5f890dedfbb67790317da64a410ea548a1190aecfad51277edbe7c8689d2f5d60baf0090807dd5ac830fb1c5a0814323e504354ed1ad3ac74e7c3234ec6fbb7ac524f3904cd2d27c5d33151a3397c0da760684b2d7d9b853801272aecd4f2210955ff414897bdc42a3d904f97b9a813f4da0bcf941e39b91ab845cbc64d27a1cff13ab8c717086909d4876b09a1fed4d527df06313455017a8669acacf5a1ec210cd95187b82c9a8537cb6dd750405eb2ddbd80c9b0c8f48a7c4fc65696940ef7f406b0fb5c331bdaacdff1472892b4abc842be07aa8dabd4549ff341e9982e2891dc72d5354db59630a62d09372eafcb3afa2d2e8d6e9518e5d62a930d08676fc0d48f80e3ff43b01f86b23c4595bd4b3d00997f4ae29127f07049acebcd5d12e7650ba3b7978c0b79a535ae635c1c92ece20860f168afa3810c9d48ced4e54c7c7299fb078361e5d73d8bfbc48315fa44fb0a570801bcec4b8989e124e382581753234e31deaaf066ab058beed2b03e2cc14b854f5a0382e80625b16e8251d193779ad9dcbeb3eb5c3776bb99ef37c599dc430b078ec3d2c4789f639ee6e6ac69a61feb1ec426e82c3ae27a726f2452961a8ad976eb71cc980f06a8d79fe13375484f113d9ca24e2528a85588657720d36cd16be1509e18ceefb43597810629d0677d1ceae2cb73087002be6d502557848c98102a38cb7f790c47a1999a3f25b80c8306b71276c987e8f0aeef4fe8cf2c0bf88a3c96b4ef50d8408927fbbe4435ad58b257f5dbb220375124e908c39f67beabcb9f21ac7e56900266439fb4b736d5499d7c169f49a955189bf1c9625988e140f0bfa0834ceba29afb562d590e9b13cac5ce8104c4c6a03d9adb897da3e8c612d09f695d86d83f0392bb4c336b3e25d943529a12448df4603dd5a0b0b214f854b5ad89239bae8f864db7418b8a14c2e100382f549714261bc8efac8e4704b4c39d76a3fc380f4717c77ca3688a41d76312973b15bf6cd796c050fb84bb4f44ec6d4ae6b76a83f0eef58d3a25786b9c33f8644a6a629029f956346c663e08e6a8b161ec5d41dca51d086049813230e604504cc4ce034ad6d3a7f1e84d0cd348d633dfbb9ce3195e3f9732ee47ecc5dd0744bd586161cf522f792beca77686f3a5034ff3ca304213794abd0731657bda83d11944c7ed2473a94984f36aefb15403c70c112f751fd3e825a46939332e187234eff360a2d39ddee0911378960f249305a86fa8f535004d1968289c6508f469ca782b74c72c0ddd76fed7df204d3696daabf24da3511b4d3f02baed3d34aee36c391f6efac93a7b4ac0cd4bd0852f29e911e51b9020ae0740bc61f4a59a37f3056c219452d304d2f6aa2ce1854b8d5ca26c9ace0dc58298f552a2cd1832ea1eb91bfed203920aac88d4b50fbf44ae974b87382d3eeb2f9d983d1b18dfd418c1c77588d4898ccf2f9f67849c175ccbbf8b4bce916602418fab37d32bc255225a03d081f9c21bb1b3c7fcaa1f2b59a748e8a54b6130517397b70a321687ee04009fe60b76c2a044d1e6aae26eb5f213fabe09e4c430e96c2532d3c42922fc346abae982eab76e1072c7759d28554f1692bedba4e2c18b241706ec4f57be3367e6eafb8411c93c962536223bc7f413a4bff8fc1499cb673e742106a38f15f596c402e14b4be6f869b73f087504762e759f930ccc6c4aad6435c17829cbd6e44fe4f86a26b9d2405e48e2ca2a05dd6bad08926eb9a86c91e6a79e32dd981fbb24d0af4c8eef4bf225b06e960364d210979fcc323f9a8083184863da604f148225bedf7adbcf315506f87d34bb522d9497b6486b61b0d3d094969c32c00eddfebfde46c6617dfe3d9911d096bc9e7b07418f94fa97ec7db2faa7310222227ab79d9fad230fbdf15a4ac9cc1360601f6e96b5628c435d5377bd4d32202c14afac06643782d7e80f17bd04172b20d0fc6bc2784a768665f405ada7b5b5bd79ee32466b50074d06a213aa9d42e393b5eea1e86b36eec5b463eca5e0e24d5", &(0x7f0000000540)="3dea785d94db3f1ce4f007809246193307a095"}}, &(0x7f00000005c0)=0x0) timer_create(0x7, &(0x7f00000006c0)={0x0, 0x10000026, 0x4}, &(0x7f0000000a00)) timer_delete(r6) clock_gettime(0x1, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) 3.93762803s ago: executing program 3 (id=992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) timer_create(0xb, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985", 0x5f}, {&(0x7f00000002c0)}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1ba0a5c6", 0x46}, {&(0x7f0000000b80)}], 0x5}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3a4ff", 0x29}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b4", 0x6a}, {0x0}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acbdd9f261b7349aeede1c42e31b1082eec37b959d16afb96240a5d057cab448c3c069f6a67c6f", 0x84}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0xc0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) write$selinux_access(r5, &(0x7f0000000380)={'system_u:object_r:fuse_device_t:s0', 0x20, 'unconfined', 0x20, 0x5}, 0x43) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000300)=0xe) sendto$inet(r5, &(0x7f0000000580)="1713", 0x2, 0x10008095, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) 3.885263109s ago: executing program 2 (id=993): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0xfffffffffffffff7, 0x1) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r3 = socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_dev$vim2m(0x0, 0x8000000000000000, 0x2) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x401}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={r4, 0x6, 0x1, [0x3]}, 0xa) (async) ioctl$FICLONE(r3, 0x40049409, r3) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040), 0x49) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000280), 0x4) io_uring_setup(0x1073, &(0x7f0000000240)={0x0, 0x32b6, 0x4000, 0x2, 0xdb}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x62) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) write$binfmt_aout(r2, 0x0, 0xffffffdb) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.846830944s ago: executing program 5 (id=994): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) rseq(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x2}, 0x1}, 0x20, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x144, 0x0, &(0x7f0000000d40)=[@increfs_done={0x40106308, 0x1}, @enter_looper, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/244, 0xf4, 0x1, 0xc}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/47, 0x2f, 0x0, 0x2c}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000cc0)={@ptr={0x70742a85, 0x0, &(0x7f0000000c80)=""/45, 0x2d, 0x2, 0x35}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000800)=""/192, 0xc0, 0x2, 0x11}}, &(0x7f0000000680)={0x0, 0x28, 0x40}}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x6, 0x0, 0xf}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000940)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000b80)={@fd, @flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x201, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1440}], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0xffffffff}, {0xa, 0x0, 0x5, @mcast1}, r7}}, 0x48) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) timer_delete(0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2) pread64(r8, &(0x7f0000000000)=""/47, 0x2f, 0x5) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4694e30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}, r7}}, 0x30) 3.268922832s ago: executing program 2 (id=995): mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00 \x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r0, 0x3841b273) socket$netlink(0x10, 0x3, 0x15) epoll_create(0x1) r1 = io_uring_setup(0x1fc3, &(0x7f0000000000)={0x0, 0x0, 0x8000}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x27, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000300)='./file0\x00', r2}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000140)={0xc, 0x0, 0x0, 0x0, 'syz0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3.081171066s ago: executing program 5 (id=996): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc7b37000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e48cde24c6857a69d5d6d1a9b589ec9c855689f5c1865def8cabb1c8e3e90bd491b5ee5c209d8524edf39563fd29c2c031c38312e8caa81d62d0f7f4595620d074cb8a2fd02d72b42ba2b4f804f3989350906fec205951e829f170c24104bb5a60bd89daaf3c201c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f9fffffbb703000008000000b70401000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000480)={r6, r7, 0xc, 0x0, 0x0, 0xc, 0x96, 0x458, 0x6, 0x1, 0x1, 0x7, 'syz0\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) (async) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r8, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080), 0xfffffffffffffd0b, 0xc9100060, 0x0, 0x11c8a34ed3d6f58a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 343.806255ms ago: executing program 0 (id=997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0xe0, 0x19, 0x7a, 0x0, 0x0, 0x198, 0x1f0, 0x1f0, 0x198, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x1d}, 0x0, 0xa0, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@addrtype={{0x30}, {0x4, 0x800, 0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c4078287ad09000000000000004384c45e4d0086dddf25bdd8dff300"}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xffffff00, 'batadv_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x41}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() connect$ax25(r1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) accept(r3, 0x0, 0x0) 0s ago: executing program 3 (id=998): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6a, 0xc8b, 0x4, 0x0, 0x1, 0x2, '\x00', 0x0, r0, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) read$msr(r0, &(0x7f0000000240)=""/110, 0x6e) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x2e) kernel console output (not intermixed with test programs): usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 196.509016][ T7740] xt_hashlimit: size too large, truncated to 1048576 [ 196.517678][ T5813] usb 2-1: config 0 descriptor?? [ 196.607173][ T7742] lo speed is unknown, defaulting to 1000 [ 196.616935][ T7742] lo speed is unknown, defaulting to 1000 [ 196.636760][ T7742] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 196.688010][ T7742] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 196.719894][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 196.726651][ T5861] usb 5-1: config 1 has an invalid descriptor of length 239, skipping remainder of the config [ 196.738106][ T5861] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 196.757191][ T7742] lo speed is unknown, defaulting to 1000 [ 196.765361][ T5861] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 196.774544][ T5861] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 196.796166][ T7742] lo speed is unknown, defaulting to 1000 [ 196.804807][ T5861] usb 5-1: Product: syz [ 196.808986][ T5861] usb 5-1: Manufacturer: syz [ 196.849622][ T5861] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 196.859356][ T7742] lo speed is unknown, defaulting to 1000 [ 196.891012][ T7742] lo speed is unknown, defaulting to 1000 [ 196.897868][ T7742] lo speed is unknown, defaulting to 1000 [ 196.933927][ T5813] uclogic 0003:28BD:0042.0005: interface is invalid, ignoring [ 197.048352][ T5813] usb 5-1: USB disconnect, device number 14 [ 197.090007][ T5817] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 197.268337][ T5817] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 197.317243][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.387544][ T30] audit: type=1400 audit(1747585963.959:446): avc: denied { mount } for pid=7716 comm="syz.1.440" name="/" dev="hugetlbfs" ino=17544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 197.412782][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.456492][ T5817] usb 4-1: config 0 descriptor?? [ 197.536410][ T5861] usb 2-1: USB disconnect, device number 13 [ 197.541073][ T5817] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 197.715751][ T5817] gspca_sunplus: reg_w_riv err -71 [ 197.723665][ T5817] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 197.733563][ T5817] usb 4-1: USB disconnect, device number 10 [ 198.214548][ T30] audit: type=1400 audit(1747585964.989:447): avc: denied { connect } for pid=7757 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 198.494523][ T30] audit: type=1400 audit(1747585965.269:448): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 198.542191][ T7766] tmpfs: Unknown parameter '' [ 198.770624][ T30] audit: type=1400 audit(1747585965.449:449): avc: denied { create } for pid=7770 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 198.803327][ T30] audit: type=1400 audit(1747585965.459:450): avc: denied { write } for pid=7770 comm="syz.1.455" path="socket:[17399]" dev="sockfs" ino=17399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 199.719700][ T7784] kvm: kvm [7776]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 199.739676][ T7784] kvm: kvm [7776]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 200.425430][ T7784] kvm: kvm [7776]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 200.553938][ T7784] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 200.969398][ T7813] netlink: 'syz.3.464': attribute type 30 has an invalid length. [ 200.985805][ T5817] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 201.180732][ T5817] usb 2-1: Invalid ep0 maxpacket: 16 [ 201.440786][ T5817] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 201.659889][ T5817] usb 2-1: Invalid ep0 maxpacket: 16 [ 201.753214][ T5817] usb usb2-port1: attempt power cycle [ 202.080591][ T30] audit: type=1400 audit(1747585968.849:451): avc: denied { watch watch_reads } for pid=7854 comm="syz.3.467" path="/98/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 202.160059][ T5817] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 202.187224][ T7860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=7860 comm=syz.0.468 [ 202.203029][ T5817] usb 2-1: Invalid ep0 maxpacket: 16 [ 202.349980][ T5817] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 202.381070][ T5817] usb 2-1: Invalid ep0 maxpacket: 16 [ 202.408468][ T5817] usb usb2-port1: unable to enumerate USB device [ 202.545804][ T7865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.774786][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 202.785243][ T7870] bridge_slave_1: left allmulticast mode [ 202.790938][ T7870] bridge_slave_1: left promiscuous mode [ 202.796965][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.842238][ T7870] bridge_slave_0: left allmulticast mode [ 202.848082][ T7870] bridge_slave_0: left promiscuous mode [ 202.897457][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.717086][ T30] audit: type=1400 audit(1747585970.489:452): avc: denied { create } for pid=7887 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 203.915195][ T30] audit: type=1400 audit(1747585970.529:453): avc: denied { allowed } for pid=7887 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 204.981237][ T30] audit: type=1400 audit(1747585971.759:454): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 205.678418][ T7904] binder: BINDER_SET_CONTEXT_MGR already set [ 205.684576][ T7904] binder: 7901:7904 ioctl 4018620d 200000000040 returned -16 [ 206.175147][ T30] audit: type=1400 audit(1747585972.949:455): avc: denied { ioctl } for pid=7906 comm="syz.3.481" path="socket:[17823]" dev="sockfs" ino=17823 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.519652][ T30] audit: type=1400 audit(1747585973.289:456): avc: denied { checkpoint_restore } for pid=7912 comm="syz.2.483" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 206.541278][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.837583][ T7922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.354869][ T7925] netlink: 72 bytes leftover after parsing attributes in process `syz.3.484'. [ 207.967240][ T7907] delete_channel: no stack [ 208.782999][ T30] audit: type=1400 audit(1747585975.549:457): avc: denied { setopt } for pid=7939 comm="syz.4.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 209.289960][ T30] audit: type=1400 audit(1747585975.679:458): avc: denied { connect } for pid=7932 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.421800][ T30] audit: type=1400 audit(1747585975.709:459): avc: denied { write } for pid=7945 comm="syz.0.491" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 209.655389][ T7957] binder: BINDER_SET_CONTEXT_MGR already set [ 209.661624][ T7957] binder: 7954:7957 ioctl 4018620d 200000000040 returned -16 [ 211.301891][ T7974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.368118][ T7964] kvm: kvm [7960]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 211.380778][ T7964] kvm: kvm [7960]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 211.389284][ T7964] kvm: kvm [7960]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 211.405115][ T7964] kvm_intel: kvm [7960]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 211.546702][ T7980] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 211.892516][ T7980] fuse: Bad value for 'fd' [ 213.017324][ T30] audit: type=1400 audit(1747585979.789:460): avc: denied { sqpoll } for pid=7998 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 213.267932][ T30] audit: type=1400 audit(1747585980.019:461): avc: denied { write } for pid=7989 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 213.312115][ T30] audit: type=1400 audit(1747585980.039:462): avc: denied { mount } for pid=7989 comm="syz.0.501" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 213.517221][ T5944] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 213.620119][ T5824] Bluetooth: hci0: command tx timeout [ 214.173279][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 214.700174][ T5944] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 214.725931][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.752153][ T5944] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 214.861222][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.869433][ T5944] usb 5-1: Product: syz [ 214.889898][ T5944] usb 5-1: Manufacturer: syz [ 214.897555][ T5944] usb 5-1: SerialNumber: syz [ 215.140323][ T5817] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 215.190074][ T5944] usb 5-1: config 0 descriptor?? [ 215.217432][ T5944] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 215.228941][ T5944] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 215.308552][ T5817] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 215.323765][ T5817] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.417174][ T8027] binder: BINDER_SET_CONTEXT_MGR already set [ 215.423336][ T8027] binder: 8025:8027 ioctl 4018620d 200000000040 returned -16 [ 215.630322][ T5817] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 215.639425][ T5817] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 215.650669][ T5817] usb 3-1: Manufacturer: syz [ 215.663311][ T5817] usb 3-1: SerialNumber: syz [ 215.929079][ T5817] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 215.987931][ T5817] usb 3-1: USB disconnect, device number 19 [ 216.013675][ T8032] kvm: kvm [8029]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 216.025253][ T8032] kvm: kvm [8029]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 216.051332][ T5944] em28xx 5-1:0.0: chip ID is em2870 [ 216.059720][ T8032] kvm: kvm [8029]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 216.130320][ T8036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.256617][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.323372][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.558970][ T5944] usb 5-1: USB disconnect, device number 15 [ 216.565926][ T5944] em28xx 5-1:0.0: Disconnecting em28xx [ 216.575417][ T8032] kvm_intel: kvm [8029]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 216.586100][ T5944] em28xx 5-1:0.0: Freeing device [ 216.723351][ T8049] SELinux: Context Z;Ñ'¶Ï8ÁjwÊÝdüø3¡Ž6¿úŽ»Rãx?¥~Â\Ù3$‘¨¯j¨zü´lÆòÙÛW>MA? is not valid (left unmapped). [ 216.753488][ T8046] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 216.767261][ T8049] SELinux: Context GIˆnñáCíëÁ´ªÂR¶ùùqüy°¬CµPý€Ñ@a(/-Mòθɩý¥íý€” ¦ZßvН‰´ÞXrOäãLXvåbÈ=.¤¨”eèîuøÞ ³™e/)Ûkí—$Œ__/¸äC‡jLñ±‚ºªžýA *lŠ)-ÿQäú㿯Ò)›ú&1 is not valid (left unmapped). [ 216.798931][ T8053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.812362][ T8049] SELinux: Context •b[Yñ³Ù‹foa¦gKÖÂ^Lx–EåÓýÏ9å¤P­ãM´c^/OZßñn»¢ì…^ƒÇôL%Q„¡n [ 216.812362][ T8049] …ü,á½,2J]+Ýæcì¡IgVe«IÍ Û&# UÈÖ”G*ÆÍ 5¿A‰.Os0‹[v›½é¹a?g×Í#“!IY¾VRËUvm4e [ 216.812362][ T8049] ÌŽòkS.üœqoi>.þÁëd$@ÀĬ--Œ³öCÁ€v:SKD±ž¯ñz is not valid (left unmapped). [ 216.824826][ T8055] Unsupported ieee802154 address type: 0 [ 216.843162][ T8049] SELinux: Context ™4˜|(øÁ is not valid (left unmapped). [ 216.866359][ T8056] usb usb8: usbfs: process 8056 (syz.1.517) did not claim interface 0 before use [ 217.243457][ T8063] binder: BINDER_SET_CONTEXT_MGR already set [ 217.249491][ T8063] binder: 8061:8063 ioctl 4018620d 200000000040 returned -16 [ 217.257056][ T5817] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 217.351356][ T5944] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 217.466807][ T5861] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 217.469864][ T5817] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 217.483976][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.495939][ T5817] usb 2-1: Product: syz [ 217.500876][ T5817] usb 2-1: Manufacturer: syz [ 217.505670][ T5817] usb 2-1: SerialNumber: syz [ 217.516128][ T5817] usb 2-1: config 0 descriptor?? [ 217.610079][ T5861] usb 3-1: device descriptor read/64, error -71 [ 217.630273][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 217.636653][ T5944] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 217.645852][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.657770][ T5944] pvrusb2: Hardware description: Terratec Grabster AV400 [ 217.664854][ T5944] pvrusb2: ********** [ 217.675104][ T5944] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 217.694933][ T5944] pvrusb2: Important functionality might not be entirely working. [ 217.709907][ T5944] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 217.722877][ T5944] pvrusb2: ********** [ 217.850033][ T5861] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 217.877834][ T2332] pvrusb2: Invalid write control endpoint [ 218.059914][ T5861] usb 3-1: device descriptor read/64, error -71 [ 218.645683][ T5861] usb usb3-port1: attempt power cycle [ 218.789615][ T2332] pvrusb2: Invalid write control endpoint [ 218.836848][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 218.847105][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 219.182627][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 219.193319][ T2332] pvrusb2: Device being rendered inoperable [ 219.239977][ T5813] usb 5-1: USB disconnect, device number 16 [ 219.247765][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 219.281008][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 219.300056][ T2332] pvrusb2: Attached sub-driver cx25840 [ 219.314152][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 219.332793][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 219.898508][ T5861] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 219.971753][ T30] audit: type=1400 audit(1747585986.749:463): avc: denied { setopt } for pid=8080 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.040449][ T5817] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 220.080165][ T30] audit: type=1326 audit(1747585986.849:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.2.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1086d8e969 code=0x0 [ 220.088814][ T5817] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 220.130620][ T5861] usb 3-1: device not accepting address 22, error -71 [ 220.198483][ T5817] usb 2-1: USB disconnect, device number 18 [ 220.418255][ T30] audit: type=1400 audit(1747585987.189:465): avc: denied { getopt } for pid=8092 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 222.814754][ T8105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.823033][ T30] audit: type=1400 audit(1747585989.569:466): avc: denied { read } for pid=8098 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.041830][ T8149] tmpfs: Unknown parameter 'hugƒ' [ 227.196021][ T8152] netlink: 508 bytes leftover after parsing attributes in process `syz.1.543'. [ 227.331803][ T8160] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.570253][ T5813] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 227.909877][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 227.928341][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.936198][ T5813] usb 5-1: too many configurations: 196, using maximum allowed: 8 [ 227.960667][ T5813] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 227.960700][ T5813] usb 5-1: can't read configurations, error -71 [ 228.056549][ T30] audit: type=1400 audit(1747585994.829:467): avc: denied { connect } for pid=8166 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.056594][ T30] audit: type=1400 audit(1747585994.829:468): avc: denied { setopt } for pid=8166 comm="syz.1.548" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.219998][ T30] audit: type=1400 audit(1747585994.979:469): avc: denied { read write } for pid=8172 comm="syz.2.550" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 228.466678][ T30] audit: type=1400 audit(1747585994.979:470): avc: denied { open } for pid=8172 comm="syz.2.550" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 228.545054][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 229.374432][ T30] audit: type=1400 audit(1747585994.979:471): avc: denied { read } for pid=8172 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.508190][ T30] audit: type=1400 audit(1747585996.279:472): avc: denied { mount } for pid=8187 comm="syz.4.554" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 229.540753][ T8189] tracefs: Invalid uid '0x00000000ffffffff' [ 229.551582][ T30] audit: type=1400 audit(1747585996.319:473): avc: denied { remount } for pid=8187 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 229.745602][ T30] audit: type=1400 audit(1747585996.389:474): avc: denied { ioctl } for pid=8172 comm="syz.2.550" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 229.770382][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.784988][ T30] audit: type=1400 audit(1747585997.549:475): avc: denied { bind } for pid=8195 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.896186][ T8201] hfs: unable to load iocharset "io#harset" [ 231.041386][ T30] audit: type=1400 audit(1747585997.809:476): avc: denied { setopt } for pid=8195 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.102903][ T8196] lo speed is unknown, defaulting to 1000 [ 232.622214][ T5813] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 233.039245][ T8222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.229477][ T30] audit: type=1400 audit(1747585999.999:477): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 233.262669][ T5813] usb 4-1: config 0 has no interfaces? [ 233.295357][ T5813] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 233.315185][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.327774][ T5813] usb 4-1: Product: syz [ 233.333089][ T5813] usb 4-1: Manufacturer: syz [ 233.338139][ T5813] usb 4-1: SerialNumber: syz [ 233.354744][ T5813] usb 4-1: config 0 descriptor?? [ 233.382092][ T8230] netlink: 'syz.4.563': attribute type 3 has an invalid length. [ 233.391613][ T8230] netlink: 228 bytes leftover after parsing attributes in process `syz.4.563'. [ 233.421203][ T8230] NCSI netlink: No device for ifindex 0 [ 233.691029][ T5813] usb 4-1: USB disconnect, device number 11 [ 233.859887][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 234.020000][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 234.028666][ T9] usb 3-1: config 1 has an invalid interface number: 191 but max is 0 [ 234.043167][ T9] usb 3-1: config 1 has no interface number 0 [ 234.057533][ T9] usb 3-1: config 1 interface 191 has no altsetting 0 [ 234.109215][ T9] usb 3-1: New USB device found, idVendor=0411, idProduct=0158, bcdDevice=eb.fa [ 234.136715][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.187768][ T9] usb 3-1: Product: syz [ 234.241471][ T9] usb 3-1: Manufacturer: syz [ 234.251656][ T9] usb 3-1: SerialNumber: syz [ 234.379340][ T8236] tipc: Enabled bearer , priority 0 [ 234.851496][ T8242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.367374][ T8234] tipc: Disabling bearer [ 236.147122][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 236.238977][ T8263] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 236.880541][ T8267] sp0: Synchronizing with TNC [ 237.734503][ T58] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 237.927162][ T8283] kvm: kvm [8276]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 237.952681][ T8283] kvm: kvm [8276]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 237.964155][ T8283] kvm: kvm [8276]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 238.012465][ T8283] kvm_intel: kvm [8276]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 238.213902][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 238.262009][ T58] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.288848][ T58] usb 2-1: config 0 has no interface number 0 [ 238.305650][ T58] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.332257][ T58] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.349869][ T58] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 238.351924][ T8287] kvm: kvm [8279]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 238.402597][ T8283] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 238.528431][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.543227][ T58] usb 2-1: config 0 descriptor?? [ 238.560108][ T8287] kvm: kvm [8279]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 238.568588][ T8287] kvm: kvm [8279]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 238.584781][ T8287] kvm_intel: kvm [8279]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 238.731333][ T5817] usb 3-1: USB disconnect, device number 24 [ 239.027857][ T58] usbhid 2-1:0.1: can't add hid device: -71 [ 239.037181][ T58] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 239.062762][ T58] usb 2-1: USB disconnect, device number 19 [ 239.154799][ T8305] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 239.915743][ T8312] kvm: kvm [8308]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 239.951854][ T8312] kvm: kvm [8308]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 239.970645][ T8312] kvm: kvm [8308]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 239.982906][ T8312] kvm_intel: kvm [8308]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 242.379899][ T58] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 242.531788][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.543396][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.553241][ T58] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 242.562680][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.573798][ T58] usb 4-1: config 0 descriptor?? [ 242.782968][ T8333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.793493][ T8333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.920432][ T5860] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 243.140158][ T5860] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 243.237279][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.254355][ T58] steelseries 0003:1038:1410.0006: missing HID_OUTPUT_REPORT 0 [ 243.265224][ T5860] usb 2-1: Product: syz [ 243.269439][ T5860] usb 2-1: Manufacturer: syz [ 243.274195][ T5860] usb 2-1: SerialNumber: syz [ 243.282174][ T5860] usb 2-1: config 0 descriptor?? [ 243.449614][ T9] usb 4-1: USB disconnect, device number 12 [ 243.474368][ T8370] kvm: kvm [8367]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 243.485901][ T8370] kvm: kvm [8367]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 243.621745][ T8370] kvm: kvm [8367]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 243.638514][ T8370] kvm_intel: kvm [8367]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 244.638922][ T8370] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 245.291954][ T8387] kvm: kvm [8378]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 245.306863][ T8387] kvm: kvm [8378]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 245.315577][ T8387] kvm: kvm [8378]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 245.329939][ T8387] kvm_intel: kvm [8378]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 245.740851][ T5860] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 245.987235][ T5860] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 245.997319][ T8401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.006201][ T5860] usb 2-1: USB disconnect, device number 20 [ 246.471589][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.727785][ T30] audit: type=1400 audit(1747586013.489:478): avc: denied { ioctl } for pid=8425 comm="syz.1.604" path="socket:[20022]" dev="sockfs" ino=20022 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 248.171300][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.604'. [ 248.180416][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'. [ 248.189270][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'. [ 248.272872][ T8447] program syz.3.607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.509439][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'. [ 248.674474][ T30] audit: type=1400 audit(1747586015.439:479): avc: denied { create } for pid=8425 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 248.800464][ T5860] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 248.959895][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 248.971764][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.983562][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.993592][ T5860] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 249.002694][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.016672][ T5860] usb 3-1: config 0 descriptor?? [ 249.034422][ T30] audit: type=1400 audit(1747586015.809:480): avc: denied { getopt } for pid=8452 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 249.436458][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.453191][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.465067][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.477776][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.499317][ T5860] logitech 0003:046D:C626.0007: item fetching failed at offset 2/69 [ 249.514200][ T5860] logitech 0003:046D:C626.0007: parse failed [ 249.520842][ T5860] logitech 0003:046D:C626.0007: probe with driver logitech failed with error -22 [ 249.672568][ T8453] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 249.733586][ T2144] usb 3-1: USB disconnect, device number 25 [ 251.833534][ T8475] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.309174][ T8485] kvm: kvm [8473]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 252.323327][ T8485] kvm: kvm [8473]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 252.352733][ T8485] kvm: kvm [8473]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 252.598068][ T8485] kvm_intel: kvm [8473]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 253.890833][ T5812] Bluetooth: hci4: command 0x0405 tx timeout [ 255.186113][ T30] audit: type=1400 audit(1747586021.939:481): avc: denied { mounton } for pid=8515 comm="syz.2.625" path="/proc/516/cgroup" dev="proc" ino=20146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 255.264515][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.270852][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.450895][ T8529] overlayfs: missing 'lowerdir' [ 256.213461][ T8532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.439933][ T58] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 257.501494][ T8542] tipc: Started in network mode [ 257.513651][ T8542] tipc: Node identity 929db8d7fa9, cluster identity 4711 [ 257.533617][ T8542] tipc: Enabled bearer , priority 0 [ 257.577927][ T8541] tipc: Disabling bearer [ 257.590027][ T58] usb 3-1: device descriptor read/64, error -71 [ 257.744156][ T8551] tipc: Started in network mode [ 257.749062][ T8551] tipc: Node identity 425f1182589c, cluster identity 4711 [ 257.758436][ T8551] tipc: Enabled bearer , priority 0 [ 257.830067][ T58] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 258.221647][ T8558] binder: BINDER_SET_CONTEXT_MGR already set [ 258.230000][ T8558] binder: 8552:8558 ioctl 4018620d 200000000040 returned -16 [ 258.238527][ T8547] tipc: Disabling bearer [ 258.496645][ T58] usb 3-1: device descriptor read/64, error -71 [ 258.660982][ T58] usb usb3-port1: attempt power cycle [ 259.090059][ T58] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 259.560332][ T58] usb 3-1: device descriptor read/8, error -71 [ 259.800055][ T58] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 259.971018][ T58] usb 3-1: device descriptor read/8, error -71 [ 260.146129][ T58] usb usb3-port1: unable to enumerate USB device [ 260.470285][ T8589] netlink: 'syz.0.644': attribute type 4 has an invalid length. [ 260.595982][ T8595] netlink: 48 bytes leftover after parsing attributes in process `syz.1.646'. [ 260.615086][ T30] audit: type=1400 audit(1747586027.369:482): avc: denied { nlmsg_read } for pid=8592 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 260.642980][ T30] audit: type=1400 audit(1747586027.419:483): avc: denied { write } for pid=8590 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 260.689975][ T5861] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 260.840020][ T5860] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 260.852803][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.865367][ T5861] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 260.876339][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.921112][ T5861] usb 5-1: config 0 descriptor?? [ 261.020413][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 261.036711][ T5860] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 261.048537][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.064221][ T5860] usb 2-1: config 0 has no interface number 0 [ 261.073965][ T5860] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 261.086299][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.094550][ T5860] usb 2-1: Product: syz [ 261.098894][ T5860] usb 2-1: Manufacturer: syz [ 261.106752][ T5860] usb 2-1: SerialNumber: syz [ 261.117595][ T5860] usb 2-1: config 0 descriptor?? [ 261.132527][ T5860] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 261.142067][ T5860] nokiaca42v2 ttyUSB0: required endpoint is missing [ 261.339474][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.339579][ T5861] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 261.365378][ T5861] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input11 [ 261.390921][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.399532][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.408293][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.417251][ T30] audit: type=1400 audit(1747586028.109:484): avc: denied { view } for pid=8584 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 261.459732][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.494517][ T30] audit: type=1400 audit(1747586028.199:485): avc: denied { watch_sb } for pid=8598 comm="syz.2.647" path="/132" dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 261.519346][ T5861] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 261.537741][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.567856][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.593535][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.613571][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.623048][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.645648][ T5861] usb 2-1: USB disconnect, device number 21 [ 261.654586][ T5861] cypress_m8 2-1:0.35: device disconnected [ 261.679434][ T8604] binder: BINDER_SET_CONTEXT_MGR already set [ 261.685683][ T8604] binder: 8602:8604 ioctl 4018620d 200000000040 returned -16 [ 261.759777][ T30] audit: type=1400 audit(1747586028.519:486): avc: denied { read } for pid=8605 comm="syz.2.649" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 261.918159][ T30] audit: type=1400 audit(1747586028.689:487): avc: denied { execute } for pid=8584 comm="syz.4.643" dev="hugetlbfs" ino=20880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 261.951611][ T30] audit: type=1400 audit(1747586028.689:488): avc: denied { execute_no_trans } for pid=8584 comm="syz.4.643" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=20880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 262.069917][ T5860] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 262.199975][ T5860] usb 3-1: device descriptor read/64, error -71 [ 262.338669][ T30] audit: type=1400 audit(1747586029.109:489): avc: denied { setopt } for pid=8617 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.670036][ T58] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 262.854449][ T58] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 262.872149][ T58] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 262.888968][ T58] usb 4-1: config 0 has no interface number 0 [ 262.906245][ T5860] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 262.906905][ T58] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 262.938481][ T58] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.950875][ T58] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 262.973453][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.999765][ T58] usb 4-1: config 0 descriptor?? [ 263.202664][ T30] audit: type=1400 audit(1747586029.979:490): avc: denied { recv } for pid=8625 comm="syz.1.654" saddr=10.128.0.169 src=30006 daddr=10.128.1.109 dest=33520 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 263.230404][ T5860] usb 3-1: device descriptor read/64, error -71 [ 263.413033][ T5860] usb usb3-port1: attempt power cycle [ 263.561925][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.592239][ T5892] usb 5-1: USB disconnect, device number 19 [ 263.608335][ T30] audit: type=1400 audit(1747586030.379:491): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 263.648534][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.765617][ T58] usb 4-1: USB disconnect, device number 13 [ 263.939899][ T5860] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 264.400322][ T5860] usb 3-1: device descriptor read/8, error -71 [ 264.411538][ T8643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.659'. [ 264.680201][ T5860] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 264.787854][ T5860] usb 3-1: device descriptor read/8, error -71 [ 264.933321][ T5860] usb usb3-port1: unable to enumerate USB device [ 265.040225][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 265.221489][ T8660] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 265.228690][ T8660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.258644][ T8660] vhci_hcd vhci_hcd.0: Device attached [ 265.270260][ T8660] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 265.276871][ T8660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.290287][ T8660] vhci_hcd vhci_hcd.0: Device attached [ 265.300473][ T8660] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 265.307081][ T8660] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 265.314843][ T8660] vhci_hcd vhci_hcd.0: Device attached [ 265.322852][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 265.348681][ T8660] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 265.360760][ T8660] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 265.367366][ T8660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.376488][ T8660] vhci_hcd vhci_hcd.0: Device attached [ 265.392610][ T8660] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21) [ 265.399227][ T8660] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 265.407240][ T8660] vhci_hcd vhci_hcd.0: Device attached [ 265.421768][ T8660] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 265.434299][ T8660] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 265.444440][ T8660] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 265.460017][ T8660] vhci_hcd vhci_hcd.0: port 0 already used [ 265.491717][ T5817] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 265.555311][ T8669] serio: Serial port ptm0 [ 266.023794][ T8686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.053696][ T8668] vhci_hcd: connection closed [ 266.053895][ T8675] vhci_hcd: connection closed [ 266.071458][ T8673] vhci_hcd: connection closed [ 266.076335][ T8664] vhci_hcd: connection closed [ 266.081097][ T8661] vhci_hcd: connection reset by peer [ 266.120044][ T7838] vhci_hcd: stop threads [ 266.124484][ T7838] vhci_hcd: release socket [ 266.134560][ T7838] vhci_hcd: disconnect device [ 266.227117][ T7838] vhci_hcd: stop threads [ 266.314163][ T7838] vhci_hcd: release socket [ 266.336760][ T7838] vhci_hcd: disconnect device [ 266.567872][ T7838] vhci_hcd: stop threads [ 266.574337][ T7838] vhci_hcd: release socket [ 266.578835][ T7838] vhci_hcd: disconnect device [ 266.584101][ T7838] vhci_hcd: stop threads [ 266.588366][ T7838] vhci_hcd: release socket [ 266.599167][ T7838] vhci_hcd: disconnect device [ 266.604958][ T7838] vhci_hcd: stop threads [ 266.784074][ T7838] vhci_hcd: release socket [ 266.882646][ T7838] vhci_hcd: disconnect device [ 270.929904][ T5817] vhci_hcd: vhci_device speed not set [ 271.038770][ T8738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.399339][ T8742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 272.651631][ T8748] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 272.699105][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 272.810018][ T8748] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 272.839296][ T8754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.685'. [ 272.909510][ T8748] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 272.947055][ T8753] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 273.032106][ T8753] bond1 (unregistering): Released all slaves [ 273.160299][ T5861] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 273.246909][ T8763] bridge_slave_0: left allmulticast mode [ 273.334296][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 273.334310][ T30] audit: type=1400 audit(1747586040.109:493): avc: denied { egress } for pid=5813 comm="kworker/1:3" saddr=fe80::1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 273.337412][ T8763] bridge_slave_0: left promiscuous mode [ 273.342979][ T30] audit: type=1400 audit(1747586040.109:494): avc: denied { sendto } for pid=5813 comm="kworker/1:3" saddr=fe80::1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 273.382484][ T5861] usb 5-1: device descriptor read/64, error -71 [ 273.865779][ T58] usb usb38-port1: attempt power cycle [ 273.874166][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.891106][ T30] audit: type=1400 audit(1747586040.669:495): avc: denied { read } for pid=8762 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 273.910105][ T5892] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 273.930670][ T8763] bridge_slave_1: left allmulticast mode [ 273.931147][ T30] audit: type=1400 audit(1747586040.699:496): avc: denied { setattr } for pid=8762 comm="syz.2.689" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 273.936423][ T8763] bridge_slave_1: left promiscuous mode [ 273.969137][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.017767][ T8763] bond0: (slave bond_slave_0): Releasing backup interface [ 274.029233][ T8763] bond0: (slave bond_slave_1): Releasing backup interface [ 274.059190][ T8763] team0: Port device team_slave_0 removed [ 274.074024][ T5892] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.09 [ 274.081408][ T8763] team0: Port device team_slave_1 removed [ 274.094772][ T8763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.102386][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.112503][ T5892] usb 4-1: Product: syz [ 274.116732][ T5892] usb 4-1: Manufacturer: syz [ 274.122102][ T5892] usb 4-1: SerialNumber: syz [ 274.125581][ T8763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.128785][ T5892] usb 4-1: config 0 descriptor?? [ 274.140467][ T8763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.148020][ T8763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.156538][ T5861] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 274.183219][ T8769] vlan2: entered allmulticast mode [ 274.188480][ T8769] bond0: entered allmulticast mode [ 274.194958][ T8769] bridge0: port 1(vlan2) entered blocking state [ 274.209222][ T8769] bridge0: port 1(vlan2) entered disabled state [ 274.289963][ T5861] usb 5-1: device descriptor read/64, error -71 [ 274.374697][ T5944] usb 4-1: USB disconnect, device number 14 [ 274.401598][ T5861] usb usb5-port1: attempt power cycle [ 274.473765][ T58] usb usb38-port1: unable to enumerate USB device [ 274.750100][ T5861] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 275.335412][ T5861] usb 5-1: device descriptor read/8, error -71 [ 275.593613][ T8794] FAULT_INJECTION: forcing a failure. [ 275.593613][ T8794] name failslab, interval 1, probability 0, space 0, times 0 [ 275.606446][ T8794] CPU: 0 UID: 0 PID: 8794 Comm: syz.2.698 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 275.606472][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.606483][ T8794] Call Trace: [ 275.606489][ T8794] [ 275.606496][ T8794] dump_stack_lvl+0x16c/0x1f0 [ 275.606527][ T8794] should_fail_ex+0x512/0x640 [ 275.606552][ T8794] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 275.606584][ T8794] should_failslab+0xc2/0x120 [ 275.606604][ T8794] __kmalloc_cache_node_noprof+0x6d/0x420 [ 275.606631][ T8794] ? __lock_acquire+0x5ca/0x1ba0 [ 275.606657][ T8794] ? __get_vm_area_node+0x101/0x330 [ 275.606684][ T8794] __get_vm_area_node+0x101/0x330 [ 275.606712][ T8794] __vmalloc_node_range_noprof+0x277/0x1540 [ 275.606738][ T8794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 275.606756][ T8794] ? find_held_lock+0x2b/0x80 [ 275.606784][ T8794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 275.606808][ T8794] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.606842][ T8794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 275.606861][ T8794] __vmalloc_noprof+0x6d/0x90 [ 275.606886][ T8794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 275.606904][ T8794] bpf_prog_alloc_no_stats+0x54/0x630 [ 275.606921][ T8794] ? security_capable+0x7e/0x260 [ 275.606945][ T8794] bpf_prog_alloc+0x3b/0x230 [ 275.606961][ T8794] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 275.606981][ T8794] bpf_prog_load+0x1a04/0x2490 [ 275.607008][ T8794] ? __pfx_bpf_prog_load+0x10/0x10 [ 275.607028][ T8794] ? avc_has_perm_noaudit+0x149/0x3b0 [ 275.607065][ T8794] ? selinux_bpf+0xde/0x130 [ 275.607083][ T8794] ? bpf_lsm_bpf+0x9/0x10 [ 275.607111][ T8794] __sys_bpf+0x433c/0x4d80 [ 275.607137][ T8794] ? __pfx___sys_bpf+0x10/0x10 [ 275.607159][ T8794] ? ksys_write+0x190/0x240 [ 275.607189][ T8794] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 275.607241][ T8794] __x64_sys_bpf+0x78/0xc0 [ 275.607266][ T8794] do_syscall_64+0xcd/0x260 [ 275.607294][ T8794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.607313][ T8794] RIP: 0033:0x7f1086d8e969 [ 275.607327][ T8794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.607345][ T8794] RSP: 002b:00007f1084bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.607362][ T8794] RAX: ffffffffffffffda RBX: 00007f1086fb6160 RCX: 00007f1086d8e969 [ 275.607373][ T8794] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 275.607383][ T8794] RBP: 00007f1084bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 275.607394][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.607409][ T8794] R13: 0000000000000001 R14: 00007f1086fb6160 R15: 00007ffd1bf2c328 [ 275.607433][ T8794] [ 275.607698][ T8794] syz.2.698: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 275.901709][ T8794] CPU: 0 UID: 0 PID: 8794 Comm: syz.2.698 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 275.901733][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.901742][ T8794] Call Trace: [ 275.901746][ T8794] [ 275.901750][ T8794] dump_stack_lvl+0x16c/0x1f0 [ 275.901771][ T8794] warn_alloc+0x248/0x3a0 [ 275.901783][ T8794] ? __pfx_warn_alloc+0x10/0x10 [ 275.901794][ T8794] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 275.901814][ T8794] ? __kasan_kmalloc+0x8a/0xb0 [ 275.901831][ T8794] ? __get_vm_area_node+0x208/0x330 [ 275.901849][ T8794] __vmalloc_node_range_noprof+0xd31/0x1540 [ 275.901865][ T8794] ? find_held_lock+0x2b/0x80 [ 275.901883][ T8794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 275.901898][ T8794] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.901918][ T8794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 275.901929][ T8794] __vmalloc_noprof+0x6d/0x90 [ 275.901945][ T8794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 275.901956][ T8794] bpf_prog_alloc_no_stats+0x54/0x630 [ 275.901966][ T8794] ? security_capable+0x7e/0x260 [ 275.901981][ T8794] bpf_prog_alloc+0x3b/0x230 [ 275.901991][ T8794] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 275.902003][ T8794] bpf_prog_load+0x1a04/0x2490 [ 275.902020][ T8794] ? __pfx_bpf_prog_load+0x10/0x10 [ 275.902032][ T8794] ? avc_has_perm_noaudit+0x149/0x3b0 [ 275.902054][ T8794] ? selinux_bpf+0xde/0x130 [ 275.902064][ T8794] ? bpf_lsm_bpf+0x9/0x10 [ 275.902082][ T8794] __sys_bpf+0x433c/0x4d80 [ 275.902097][ T8794] ? __pfx___sys_bpf+0x10/0x10 [ 275.902111][ T8794] ? ksys_write+0x190/0x240 [ 275.902130][ T8794] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 275.902161][ T8794] __x64_sys_bpf+0x78/0xc0 [ 275.902175][ T8794] do_syscall_64+0xcd/0x260 [ 275.902193][ T8794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.902204][ T8794] RIP: 0033:0x7f1086d8e969 [ 275.902214][ T8794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.902224][ T8794] RSP: 002b:00007f1084bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.902235][ T8794] RAX: ffffffffffffffda RBX: 00007f1086fb6160 RCX: 00007f1086d8e969 [ 275.902241][ T8794] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 275.902248][ T8794] RBP: 00007f1084bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 275.902254][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.902260][ T8794] R13: 0000000000000001 R14: 00007f1086fb6160 R15: 00007ffd1bf2c328 [ 275.902274][ T8794] [ 275.902291][ T8794] Mem-Info: [ 276.162595][ T8794] active_anon:12512 inactive_anon:0 isolated_anon:0 [ 276.162595][ T8794] active_file:18016 inactive_file:40646 isolated_file:0 [ 276.162595][ T8794] unevictable:768 dirty:450 writeback:0 [ 276.162595][ T8794] slab_reclaimable:10623 slab_unreclaimable:100547 [ 276.162595][ T8794] mapped:32013 shmem:9214 pagetables:959 [ 276.162595][ T8794] sec_pagetables:0 bounce:0 [ 276.162595][ T8794] kernel_misc_reclaimable:0 [ 276.162595][ T8794] free:1308979 free_pcp:1190 free_cma:0 [ 276.209463][ T8794] Node 0 active_anon:50048kB inactive_anon:0kB active_file:72020kB inactive_file:162380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128008kB dirty:1800kB writeback:0kB shmem:35320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11548kB pagetables:3836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.244055][ T8794] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.275689][ T8794] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.305544][ T8794] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 276.311616][ T8794] Node 0 DMA32 free:1313912kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:50020kB inactive_anon:0kB active_file:72020kB inactive_file:160556kB unevictable:1536kB writepending:1800kB present:3129332kB managed:2543896kB mlocked:0kB bounce:0kB free_pcp:4724kB local_pcp:732kB free_cma:0kB [ 276.342136][ T8794] lowmem_reserve[]: 0 0 1 1 1 [ 276.347069][ T8794] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:28kB free_cma:0kB [ 276.375916][ T8794] lowmem_reserve[]: 0 0 0 0 0 [ 276.381000][ T8794] Node 1 Normal free:3906628kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.412657][ T8794] lowmem_reserve[]: 0 0 0 0 0 [ 276.417640][ T8794] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.430977][ T8794] Node 0 DMA32: 2*4kB (ME) 29*8kB (E) 460*16kB (UME) 588*32kB (UME) 297*64kB (UME) 81*128kB (UME) 74*256kB (UME) 50*512kB (UM) 41*1024kB (UME) 20*2048kB (UM) 276*4096kB (UM) = 1313776kB [ 276.450512][ T8794] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 276.462953][ T8794] Node 1 Normal: 203*4kB (UM) 51*8kB (UME) 36*16kB (UME) 234*32kB (UME) 90*64kB (UME) 29*128kB (UME) 17*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 945*4096kB (UM) = 3906628kB [ 276.482107][ T8794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.491757][ T8794] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.501200][ T8794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.513501][ T8794] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.522934][ T8794] 67882 total pagecache pages [ 276.527646][ T8794] 0 pages in swap cache [ 276.531918][ T8794] Free swap = 124996kB [ 276.536139][ T8794] Total swap = 124996kB [ 276.540434][ T8794] 2097051 pages RAM [ 276.544277][ T8794] 0 pages HighMem/MovableOnly [ 276.549073][ T8794] 428971 pages reserved [ 276.553297][ T8794] 0 pages cma reserved [ 276.790406][ T5861] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 276.822790][ T5861] usb 5-1: device descriptor read/8, error -71 [ 276.840869][ T8799] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 276.868384][ T7838] Bluetooth: hci5: Frame reassembly failed (-84) [ 276.898414][ T8801] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.950125][ T5861] usb usb5-port1: unable to enumerate USB device [ 277.240155][ T5861] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 277.389874][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 277.389879][ T5892] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 277.404092][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.415039][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.424816][ T5861] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 277.434461][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.445422][ T5861] usb 5-1: config 0 descriptor?? [ 277.539889][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 277.545730][ T5892] usb 2-1: no configurations [ 277.550454][ T5892] usb 2-1: can't read configurations, error -22 [ 277.729452][ T5892] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 277.897987][ T5861] logitech 0003:046D:C626.0009: item fetching failed at offset 2/69 [ 277.906654][ T5861] logitech 0003:046D:C626.0009: parse failed [ 277.912761][ T5861] logitech 0003:046D:C626.0009: probe with driver logitech failed with error -22 [ 278.317941][ T5861] usb 5-1: USB disconnect, device number 24 [ 278.329916][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 278.335637][ T5892] usb 2-1: no configurations [ 278.340358][ T5892] usb 2-1: can't read configurations, error -22 [ 278.346868][ T5892] usb usb2-port1: attempt power cycle [ 278.690025][ T5892] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 278.720309][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 278.725983][ T5892] usb 2-1: no configurations [ 278.730667][ T5892] usb 2-1: can't read configurations, error -22 [ 278.851796][ T5812] Bluetooth: hci5: command 0x1003 tx timeout [ 278.858679][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 278.870711][ T5892] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 278.894116][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 278.901719][ T5892] usb 2-1: no configurations [ 278.906423][ T5892] usb 2-1: can't read configurations, error -22 [ 278.906933][ T5892] usb usb2-port1: unable to enumerate USB device [ 279.672466][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 279.684474][ T8837] Lens B: ================= START STATUS ================= [ 279.691981][ T8837] Lens B: Focus, Absolute: 0 [ 279.697553][ T8837] Lens B: ================== END STATUS ================== [ 279.792542][ T8838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.276885][ T8846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.406823][ T30] audit: type=1400 audit(1747586048.179:497): avc: denied { append } for pid=8847 comm="syz.4.715" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.533408][ T58] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 282.493720][ T58] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.519641][ T58] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 282.557288][ T58] usb 3-1: config 1 has no interface number 0 [ 282.570177][ T58] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.599845][ T58] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 282.820456][ T58] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.935091][ T5861] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 282.961954][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.984366][ T58] usb 3-1: Product: syz [ 283.269994][ T58] usb 3-1: Manufacturer: syz [ 283.307357][ T5861] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 283.429128][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.618901][ T5861] usb 4-1: Product: syz [ 283.645502][ T5861] usb 4-1: Manufacturer: syz [ 283.669099][ T5861] usb 4-1: SerialNumber: syz [ 284.098908][ T58] usb 3-1: SerialNumber: syz [ 284.706184][ T5861] usb 4-1: config 0 descriptor?? [ 284.714332][ T5861] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 284.778531][ T8879] loop2: detected capacity change from 0 to 7 [ 284.788284][ T8879] Dev loop2: unable to read RDB block 7 [ 284.795065][ T8879] loop2: AHDI p1 p2 p3 [ 284.799776][ T8879] loop2: partition table partially beyond EOD, truncated [ 284.807091][ T8879] loop2: p1 start 1601398130 is beyond EOD, truncated [ 284.813953][ T8879] loop2: p2 start 1702059890 is beyond EOD, truncated [ 284.821196][ T58] usb 3-1: can't set config #1, error -71 [ 284.830876][ T58] usb 3-1: USB disconnect, device number 34 [ 284.875868][ T30] audit: type=1400 audit(1747586051.649:498): avc: denied { create } for pid=8882 comm="syz.1.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 284.879694][ T8885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.134304][ T30] audit: type=1400 audit(1747586051.899:499): avc: denied { connect } for pid=8897 comm="syz.1.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 285.570297][ T30] audit: type=1400 audit(1747586051.899:500): avc: denied { bind } for pid=8897 comm="syz.1.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 285.621338][ T5861] gspca_sunplus: reg_r err -110 [ 285.707176][ T5861] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 286.474311][ T30] audit: type=1400 audit(1747586053.139:501): avc: denied { read write } for pid=8920 comm="syz.1.737" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 286.528931][ T30] audit: type=1400 audit(1747586053.139:502): avc: denied { open } for pid=8920 comm="syz.1.737" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 287.071875][ T30] audit: type=1400 audit(1747586053.429:503): avc: denied { ioctl } for pid=8917 comm="syz.4.736" path="socket:[21338]" dev="sockfs" ino=21338 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.198259][ T8917] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 287.312820][ T8940] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 287.410253][ T2144] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 287.552678][ T30] audit: type=1400 audit(1747586054.319:504): avc: denied { mount } for pid=8943 comm="syz.0.742" name="/" dev="rpc_pipefs" ino=21903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 287.640646][ T2144] usb 2-1: device descriptor read/64, error -71 [ 287.801642][ T8949] SELinux: Context Z;Ñ is not valid (left unmapped). [ 287.900359][ T2144] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 288.005162][ T8951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.017119][ T8951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.142823][ T2144] usb 2-1: device descriptor read/64, error -71 [ 288.157583][ T5944] usb 4-1: USB disconnect, device number 15 [ 288.798982][ T2144] usb usb2-port1: attempt power cycle [ 288.804429][ T5892] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 289.170105][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 289.200971][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 289.217029][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.337279][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 289.403873][ T5892] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.418425][ T2144] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 289.565885][ T2144] usb 2-1: device descriptor read/8, error -71 [ 289.580606][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.589755][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.597876][ T5892] usb 3-1: Product: syz [ 289.602145][ T5892] usb 3-1: Manufacturer: syz [ 289.606779][ T5892] usb 3-1: SerialNumber: syz [ 290.232497][ T8966] block device autoloading is deprecated and will be removed. [ 290.410036][ T2144] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 290.483628][ T30] audit: type=1400 audit(1747586057.249:505): avc: denied { read write } for pid=8972 comm="syz.0.750" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.537547][ T30] audit: type=1400 audit(1747586057.249:506): avc: denied { open } for pid=8972 comm="syz.0.750" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.578381][ T5892] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 290.590964][ T5892] cdc_ncm 3-1:1.0: bind() failure [ 290.634035][ T30] audit: type=1400 audit(1747586057.409:507): avc: denied { read } for pid=8986 comm="syz.1.754" dev="sockfs" ino=21975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.663541][ T8987] IPv4: Oversized IP packet from 172.20.20.24 [ 290.664492][ T5892] usb 3-1: USB disconnect, device number 35 [ 290.671132][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 290.675729][ T2144] usb 2-1: device not accepting address 29, error -71 [ 290.682101][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 290.702447][ T2144] usb usb2-port1: unable to enumerate USB device [ 290.868600][ T30] audit: type=1400 audit(1747586057.639:508): avc: denied { ioctl } for pid=8998 comm="syz.4.759" path="socket:[22025]" dev="sockfs" ino=22025 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.945743][ T9000] syzkaller1: entered promiscuous mode [ 290.965518][ T9000] syzkaller1: entered allmulticast mode [ 291.852765][ T5861] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 291.990997][ T30] audit: type=1400 audit(1747586058.769:509): avc: denied { getopt } for pid=9012 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 292.242197][ T5861] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 292.269123][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.371656][ T5861] usb 5-1: config 0 descriptor?? [ 292.415345][ T5860] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 292.426495][ T5861] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 292.595663][ T5860] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 292.607774][ T5860] usb 4-1: config 0 has no interface number 0 [ 292.636976][ T5860] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 292.667587][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.486908][ T5860] usb 4-1: Product: syz [ 293.491149][ T5860] usb 4-1: Manufacturer: syz [ 293.495837][ T5860] usb 4-1: SerialNumber: syz [ 293.505988][ T5860] usb 4-1: config 0 descriptor?? [ 294.096088][ T5860] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 294.105341][ T5860] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 294.114666][ T5860] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 294.123791][ T5860] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 294.133285][ T5860] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 294.149942][ T5860] usb 4-1: USB disconnect, device number 16 [ 294.159348][ T5860] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 294.169413][ T5860] keyspan 4-1:0.133: device disconnected [ 294.259067][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.268442][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.517288][ T58] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 294.680119][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 294.709469][ T58] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 294.742804][ T58] usb 2-1: config 0 has no interface number 0 [ 294.775815][ T58] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.824914][ T58] usb 2-1: config 0 interface 85 has no altsetting 0 [ 294.840275][ T58] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 294.850186][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.858336][ T58] usb 2-1: Product: syz [ 294.862942][ T58] usb 2-1: Manufacturer: syz [ 294.867660][ T58] usb 2-1: SerialNumber: syz [ 294.899965][ T58] usb 2-1: config 0 descriptor?? [ 295.214273][ T58] appletouch 2-1:0.85: Failed to read mode from device. [ 295.224155][ T58] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 295.441403][ T9054] tipc: Started in network mode [ 295.446791][ T9054] tipc: Node identity 928f98f51074, cluster identity 4711 [ 295.459165][ T9054] tipc: Enabled bearer , priority 0 [ 295.567219][ T9052] tipc: Disabling bearer [ 295.600087][ T5860] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 295.736471][ T5861] usb 5-1: USB disconnect, device number 25 [ 297.089918][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 297.218247][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.256021][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.265966][ T5860] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 297.278995][ T5860] usb 4-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 297.288212][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.299690][ T5860] usb 4-1: config 0 descriptor?? [ 297.359031][ T9063] kvm: kvm [9062]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000004b) [ 297.879939][ T5861] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 297.922909][ T5860] chicony 0003:04F2:1123.000A: hidraw0: USB HID v0.00 Device [HID 04f2:1123] on usb-dummy_hcd.3-1/input0 [ 297.964247][ T9073] kvm: kvm [9067]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 298.024373][ T9073] kvm: kvm [9067]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 298.033355][ T9073] kvm: kvm [9067]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 298.138385][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.189375][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 298.199353][ T9073] kvm_intel: kvm [9067]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 298.422509][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.952850][ T5892] usb 4-1: USB disconnect, device number 17 [ 298.959124][ T5861] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 298.967222][ T5861] usb 5-1: config 0 has no interface number 0 [ 299.039025][ T5861] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 299.149133][ T5861] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 299.223759][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 299.284600][ T5861] usb 5-1: Product: syz [ 299.294315][ T5861] usb 5-1: SerialNumber: syz [ 299.351237][ T5861] usb 5-1: config 0 descriptor?? [ 299.366458][ T9089] tipc: Enabling of bearer rejected, failed to enable media [ 299.404104][ T5861] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 299.618650][ T5861] usb 5-1: USB disconnect, device number 26 [ 301.380407][ T9114] kvm: kvm [9111]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 301.402213][ T9114] kvm: kvm [9111]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 301.440430][ T30] audit: type=1400 audit(1747586068.209:510): avc: denied { relabelfrom } for pid=9118 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 301.487568][ T9114] kvm: kvm [9111]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 301.549388][ T30] audit: type=1400 audit(1747586068.239:511): avc: denied { relabelto } for pid=9118 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 302.021370][ T9151] netlink: 36 bytes leftover after parsing attributes in process `syz.0.793'. [ 302.092049][ T9151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.111513][ T30] audit: type=1400 audit(1747586068.889:512): avc: denied { mount } for pid=9152 comm="syz.3.794" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 302.286718][ T30] audit: type=1400 audit(1747586068.939:513): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 302.337888][ T9157] kvm: kvm [9150]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 302.374497][ T9157] kvm: kvm [9150]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 302.383181][ T9157] kvm: kvm [9150]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 302.397888][ T9157] kvm_intel: kvm [9150]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 302.505094][ T30] audit: type=1400 audit(1747586069.149:514): avc: denied { map } for pid=9148 comm="syz.0.793" path="socket:[22434]" dev="sockfs" ino=22434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 302.600008][ T5892] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 302.724267][ T9170] kvm: kvm [9164]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 302.748577][ T9170] kvm_intel: kvm [9164]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 302.921253][ T9161] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 303.308338][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 303.362107][ T5892] usb 4-1: not running at top speed; connect to a high speed hub [ 303.390199][ T5892] usb 4-1: config 2 has an invalid interface number: 131 but max is 0 [ 303.398372][ T5892] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 303.420828][ T5892] usb 4-1: config 2 has no interface number 0 [ 303.436884][ T5892] usb 4-1: config 2 interface 131 altsetting 8 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.470977][ T5892] usb 4-1: config 2 interface 131 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.647651][ T9170] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 303.753576][ T5892] usb 4-1: config 2 interface 131 has no altsetting 0 [ 303.775521][ T5892] usb 4-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=57.30 [ 303.785023][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.929928][ T5892] usb 4-1: Product: syz [ 303.964476][ T5892] usb 4-1: Manufacturer: syz [ 303.969073][ T5892] usb 4-1: SerialNumber: syz [ 304.416288][ T9194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.432113][ T9194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.586420][ T5892] em28xx 4-1:2.131: New device syz syz @ 12 Mbps (2013:8461, interface 131, class 131) [ 304.627876][ T5892] em28xx 4-1:2.131: Device initialization failed. [ 304.670026][ T5892] em28xx 4-1:2.131: Device must be connected to a high-speed USB 2.0 port. [ 304.719343][ T5892] usb 4-1: USB disconnect, device number 18 [ 304.955315][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 305.742246][ T9184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 305.781542][ T5812] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 306.040045][ T9207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9207 comm=syz.0.799 [ 306.041410][ T9184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 306.096038][ T9221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'. [ 306.420166][ T9184] erspan0: entered promiscuous mode [ 306.444513][ T9184] gretap0: entered promiscuous mode [ 307.514804][ T9234] kvm_pr_unimpl_wrmsr: 2 callbacks suppressed [ 307.514823][ T9234] kvm: kvm [9231]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 307.685176][ T30] audit: type=1400 audit(1747586074.459:515): avc: denied { getopt } for pid=9237 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 307.766533][ T9234] kvm: kvm [9231]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 307.775143][ T9234] kvm: kvm [9231]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 307.786737][ T30] audit: type=1400 audit(1747586074.489:516): avc: denied { append } for pid=9239 comm="syz.0.812" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.986132][ T9234] kvm_intel: kvm [9231]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 308.067755][ T9234] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 308.334025][ T9257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 309.744228][ T30] audit: type=1400 audit(1747586076.519:517): avc: denied { create } for pid=9260 comm="syz.0.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 309.918726][ T30] audit: type=1400 audit(1747586076.519:518): avc: denied { write } for pid=9260 comm="syz.0.816" path="socket:[23748]" dev="sockfs" ino=23748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 310.004010][ T9278] /dev/nullb0: Can't open blockdev [ 310.084105][ T9282] netlink: 152 bytes leftover after parsing attributes in process `syz.3.821'. [ 311.162369][ T30] audit: type=1400 audit(1747586076.779:519): avc: denied { ioctl } for pid=9277 comm="syz.3.821" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 311.357715][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.367477][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.378709][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.387885][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.395853][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.444955][ T9292] lo speed is unknown, defaulting to 1000 [ 311.899878][ T5892] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 312.314064][ T9292] chnl_net:caif_netlink_parms(): no params data found [ 312.400023][ T58] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 312.423063][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.447330][ T5892] usb 3-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 312.483878][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.587109][ T5892] usb 3-1: config 0 descriptor?? [ 312.619892][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 312.660498][ T58] usb 5-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 312.671903][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.678952][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.690015][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.702003][ T58] usb 5-1: config 0 descriptor?? [ 312.708222][ T9292] bridge_slave_0: entered allmulticast mode [ 312.722764][ T9292] bridge_slave_0: entered promiscuous mode [ 312.737813][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.758004][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.786087][ T9292] bridge_slave_1: entered allmulticast mode [ 312.803764][ T9314] kvm: kvm [9311]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 312.815447][ T9314] kvm: kvm [9311]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 312.825674][ T9292] bridge_slave_1: entered promiscuous mode [ 312.899650][ T9314] kvm: kvm [9311]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 312.996420][ T9314] kvm_intel: kvm [9311]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 313.207846][ T5892] usb 3-1: string descriptor 0 read error: -71 [ 313.218936][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 313.274692][ T9292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.290046][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 313.327573][ T5892] usb 3-1: USB disconnect, device number 36 [ 313.344288][ T9292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.497611][ T5824] Bluetooth: hci5: command tx timeout [ 313.570432][ T2144] usb 5-1: USB disconnect, device number 27 [ 314.192019][ T9292] team0: Port device team_slave_0 added [ 314.505353][ T9333] binder: BINDER_SET_CONTEXT_MGR already set [ 314.511643][ T9333] binder: 9331:9333 ioctl 4018620d 200000000040 returned -16 [ 315.863835][ T5824] Bluetooth: hci5: command tx timeout [ 315.907817][ T9292] team0: Port device team_slave_1 added [ 316.269463][ T9340] bridge0: port 3(gretap0) entered blocking state [ 316.276291][ T9340] bridge0: port 3(gretap0) entered disabled state [ 316.282929][ T9340] gretap0: entered allmulticast mode [ 316.289283][ T9340] gretap0: entered promiscuous mode [ 316.299445][ T9340] bridge0: port 3(gretap0) entered blocking state [ 316.306838][ T9340] bridge0: port 3(gretap0) entered forwarding state [ 316.493563][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.517645][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.522108][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.556537][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.563117][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.607320][ T58] usb 2-1: USB disconnect, device number 30 [ 316.699299][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.705622][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.716628][ T9292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.733859][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.771632][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.789077][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.811483][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.823330][ T30] audit: type=1400 audit(1747586083.599:520): avc: denied { bind } for pid=9345 comm="syz.3.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 316.859212][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.867446][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.875303][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.884977][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.898891][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.909151][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.920803][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.923202][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.928191][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928215][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928234][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928252][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928271][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928289][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928308][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928327][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928345][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928364][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928382][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928401][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928420][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928440][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928459][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928477][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928496][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928514][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928533][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928552][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928570][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928589][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.928607][ T10] hid-generic 0000:007F:07FF.000B: unknown main item tag 0x0 [ 316.936803][ T10] hid-generic 0000:007F:07FF.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 316.964960][ T9292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.055673][ T30] audit: type=1400 audit(1747586083.829:521): avc: denied { accept } for pid=9355 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.163588][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 317.170268][ T30] audit: type=1400 audit(1747586083.879:522): avc: denied { ioctl } for pid=9358 comm="syz.4.837" path="socket:[23904]" dev="sockfs" ino=23904 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 317.224386][ T9357] vlan2: entered promiscuous mode [ 317.229544][ T9357] vlan2: entered allmulticast mode [ 317.234790][ T58] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 317.243863][ T9357] hsr_slave_1: entered allmulticast mode [ 317.250567][ T9363] netlink: 'syz.0.836': attribute type 4 has an invalid length. [ 317.429945][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 317.621208][ T58] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 317.656107][ T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.681662][ T5983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.697604][ T58] usb 3-1: config 0 has no interface number 0 [ 317.726322][ T58] usb 3-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 317.782768][ T58] usb 3-1: New USB device found, idVendor=0424, idProduct=9d4c, bcdDevice=c2.57 [ 317.800146][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.808153][ T58] usb 3-1: Product: syz [ 317.812322][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 317.812329][ T58] usb 3-1: Manufacturer: syz [ 317.826322][ T58] usb 3-1: SerialNumber: syz [ 317.848568][ T58] usb 3-1: config 0 descriptor?? [ 317.871334][ T5983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.888740][ T9380] vivid-001: ================= START STATUS ================= [ 317.890260][ T5812] Bluetooth: hci5: command tx timeout [ 317.900960][ T9380] vivid-001: Radio HW Seek Mode: Bounded [ 317.909509][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 317.912347][ T9380] vivid-001: Radio Programmable HW Seek: false [ 317.927978][ T9292] hsr_slave_0: entered promiscuous mode [ 317.931719][ T9380] vivid-001: RDS Rx I/O Mode: Block I/O [ 317.934550][ T9292] hsr_slave_1: entered promiscuous mode [ 317.948078][ T9292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.949506][ T9380] vivid-001: Generate RBDS Instead of RDS: [ 317.955807][ T9292] Cannot create hsr debugfs directory [ 317.959609][ T9380] false [ 317.979884][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 317.981034][ T9380] vivid-001: RDS Reception: true [ 317.987901][ T10] usb 5-1: config 10 has an invalid interface number: 137 but max is 3 [ 317.995904][ T9380] vivid-001: RDS Program Type: 0 inactive [ 318.001371][ T10] usb 5-1: config 10 contains an unexpected descriptor of type 0x2, skipping [ 318.006072][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 318.013921][ T10] usb 5-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 318.028457][ T9380] vivid-001: RDS PS Name: inactive [ 318.033034][ T10] usb 5-1: config 10 has 1 interface, different from the descriptor's value: 4 [ 318.039546][ T9380] vivid-001: RDS Radio Text: [ 318.047410][ T10] usb 5-1: config 10 has no interface number 0 [ 318.053537][ T9380] inactive [ 318.064169][ T10] usb 5-1: config 10 interface 137 altsetting 2 has an endpoint descriptor with address 0x24, changing to 0x4 [ 318.080044][ T10] usb 5-1: config 10 interface 137 altsetting 2 endpoint 0x4 has an invalid bInterval 229, changing to 7 [ 318.090778][ T9380] [ 318.091412][ T10] usb 5-1: config 10 interface 137 altsetting 2 endpoint 0x4 has invalid maxpacket 32768, setting to 1024 [ 318.104878][ T9380] vivid-001: RDS Traffic Announcement: false inactive [ 318.104908][ T9380] vivid-001: RDS Traffic Program: false inactive [ 318.104932][ T9380] vivid-001: RDS Music: false inactive [ 318.104960][ T9380] vivid-001: ================== END STATUS ================== [ 318.127226][ T5983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.147468][ T10] usb 5-1: config 10 interface 137 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 318.160834][ T10] usb 5-1: config 10 interface 137 has no altsetting 0 [ 318.169786][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=3216, bcdDevice=45.48 [ 318.177740][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 318.178946][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.202491][ T10] usb 5-1: Product: syz [ 318.208765][ T10] usb 5-1: Manufacturer: syz [ 318.213325][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 318.213502][ T10] usb 5-1: SerialNumber: syz [ 318.267760][ T5983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.287147][ T9388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.322974][ T9388] input: syz1 as /devices/virtual/input/input15 [ 319.530543][ T10] usb 5-1: USB disconnect, device number 28 [ 319.914560][ T5983] bridge_slave_1: left allmulticast mode [ 319.921083][ T5983] bridge_slave_1: left promiscuous mode [ 319.928518][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.962925][ T5983] bridge_slave_0: left allmulticast mode [ 319.968581][ T5983] bridge_slave_0: left promiscuous mode [ 319.974186][ T5812] Bluetooth: hci5: command 0x0419 tx timeout [ 319.998493][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.026045][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 320.049050][ T5860] usb 3-1: USB disconnect, device number 37 [ 320.242767][ T9410] kvm: kvm [9403]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 320.254349][ T9410] kvm: kvm [9403]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 320.271398][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.284558][ T9409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.292755][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.302621][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 320.415756][ T9410] kvm: kvm [9403]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 320.419035][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.597750][ T10] usb 4-1: config 0 descriptor?? [ 320.945393][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.964251][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.979149][ T5983] bond0 (unregistering): Released all slaves [ 321.005833][ T9407] vlan2: entered allmulticast mode [ 321.014452][ T9407] bridge_slave_0: entered allmulticast mode [ 321.020674][ T10] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 321.275176][ T5983] tipc: Left network mode [ 321.968475][ T9292] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.049983][ T5824] Bluetooth: hci5: command 0x0419 tx timeout [ 322.168359][ T9292] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 322.239876][ T9292] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 322.286175][ T30] audit: type=1400 audit(1747586089.059:523): avc: denied { create } for pid=9440 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 322.325419][ T5983] hsr_slave_0: left promiscuous mode [ 322.331657][ T30] audit: type=1400 audit(1747586089.059:524): avc: denied { write } for pid=9440 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 322.351054][ T5983] hsr_slave_1: left promiscuous mode [ 322.360532][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.368157][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.410244][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.418823][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.446339][ T5983] veth1_macvtap: left promiscuous mode [ 322.452324][ T5983] veth0_macvtap: left promiscuous mode [ 322.458364][ T5983] veth1_vlan: left promiscuous mode [ 322.464570][ T5983] veth0_vlan: left promiscuous mode [ 322.888035][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 322.938971][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 323.322669][ T9292] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 323.451969][ T10] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 323.464920][ T10] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 323.482958][ T10] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71 [ 323.542377][ T10] usb 4-1: USB disconnect, device number 19 [ 323.667958][ T9292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.793157][ T9292] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.838552][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.845726][ T7274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.991592][ T30] audit: type=1400 audit(1747586090.749:525): avc: denied { ioctl } for pid=9453 comm="syz.2.857" path="socket:[24273]" dev="sockfs" ino=24273 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 324.016087][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.031522][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.038670][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.673662][ T9292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.684067][ T9292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.001124][ T9466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.044317][ T30] audit: type=1326 audit(1747586091.819:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7463f8e969 code=0x7ffc0000 [ 325.188146][ T30] audit: type=1326 audit(1747586091.849:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7463f8e969 code=0x7ffc0000 [ 325.299981][ T5817] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 325.327848][ T30] audit: type=1326 audit(1747586091.849:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7463f8e969 code=0x7ffc0000 [ 325.351055][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.377910][ T30] audit: type=1326 audit(1747586091.969:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7463fc1225 code=0x7ffc0000 [ 325.409667][ T30] audit: type=1326 audit(1747586091.969:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7463f8e969 code=0x7ffc0000 [ 325.679971][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 325.710070][ T30] audit: type=1326 audit(1747586091.979:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f7463f8e969 code=0x7ffc0000 [ 325.735066][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 325.762912][ T5817] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 325.785720][ T30] audit: type=1326 audit(1747586091.979:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7463f8e969 code=0x7ffc0000 [ 325.792529][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.882576][ T5817] usb 3-1: Product: syz [ 325.886766][ T5817] usb 3-1: Manufacturer: syz [ 325.915466][ T5817] usb 3-1: SerialNumber: syz [ 325.920732][ T9292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.934133][ T5817] usb 3-1: config 0 descriptor?? [ 325.954242][ T5817] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 325.974412][ T5817] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 326.080740][ T2144] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 326.381703][ T2144] usb 5-1: config 0 interface 0 has no altsetting 0 [ 326.389646][ T2144] usb 5-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 326.403860][ T2144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.434358][ T2144] usb 5-1: config 0 descriptor?? [ 327.356812][ T5817] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 327.496218][ T5817] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 327.525866][ T5817] em28xx 3-1:0.0: board has no eeprom [ 327.556117][ T9292] veth0_vlan: entered promiscuous mode [ 327.615441][ T9292] veth1_vlan: entered promiscuous mode [ 327.639873][ T5817] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 327.647915][ T5817] em28xx 3-1:0.0: dvb set to bulk mode. [ 327.659558][ T24] em28xx 3-1:0.0: Binding DVB extension [ 327.683485][ T9292] veth0_macvtap: entered promiscuous mode [ 327.750131][ T9292] veth1_macvtap: entered promiscuous mode [ 327.768487][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.780463][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.808792][ T24] em28xx 3-1:0.0: Registering input extension [ 327.825429][ T2144] usbhid 5-1:0.0: can't add hid device: -71 [ 327.831795][ T2144] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 327.842598][ T9292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.844080][ T2144] usb 5-1: USB disconnect, device number 29 [ 327.867180][ T9292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.876403][ T9292] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.885254][ T9292] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.017778][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.025699][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.057115][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.065306][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.082759][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 328.082775][ T30] audit: type=1400 audit(1747586094.859:558): avc: denied { mounton } for pid=9292 comm="syz-executor" path="/root/syzkaller.7sCsIi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 328.115529][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.866654][ T9524] kvm: kvm [9519]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 328.878062][ T9524] kvm: kvm [9519]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 328.886544][ T9524] kvm: kvm [9519]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 328.897417][ T9524] kvm_intel: kvm [9519]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 328.910519][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 328.998328][ T5824] Bluetooth: hci5: unexpected event 0x1c length: 0 < 5 [ 329.025364][ T58] usb 3-1: USB disconnect, device number 38 [ 329.032300][ T58] em28xx 3-1:0.0: Disconnecting em28xx [ 329.038046][ T58] em28xx 3-1:0.0: Closing input extension [ 329.124635][ T24] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 329.134675][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.251795][ T58] em28xx 3-1:0.0: Freeing device [ 329.259061][ T24] usb 4-1: Product: syz [ 329.279204][ T24] usb 4-1: Manufacturer: syz [ 329.284836][ T24] usb 4-1: SerialNumber: syz [ 329.322166][ T9524] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 329.371485][ T24] usb 4-1: config 0 descriptor?? [ 329.472432][ T9532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.462387][ T9552] binder: BINDER_SET_CONTEXT_MGR already set [ 331.468525][ T9552] binder: 9550:9552 ioctl 4018620d 200000000040 returned -16 [ 331.722330][ T24] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 331.804525][ T24] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 331.832609][ T24] usb 4-1: USB disconnect, device number 20 [ 332.135988][ T9559] program syz.3.877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.714905][ T9563] netlink: 80 bytes leftover after parsing attributes in process `syz.4.879'. [ 332.769209][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.879'. [ 332.779888][ T9563] tipc: MTU too low for tipc bearer [ 332.813154][ T9568] ubi31: attaching mtd0 [ 332.826596][ T9568] ubi31: scanning is finished [ 332.831831][ T9568] ubi31: empty MTD device detected [ 332.864428][ T30] audit: type=1400 audit(1747586099.639:559): avc: denied { mounton } for pid=9562 comm="syz.4.879" path="/170/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 332.914634][ T9573] netlink: 552 bytes leftover after parsing attributes in process `syz.3.882'. [ 332.934572][ T9573] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 332.948323][ T30] audit: type=1400 audit(1747586099.709:560): avc: denied { ioctl } for pid=9565 comm="syz.0.880" path="socket:[24549]" dev="sockfs" ino=24549 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 333.077053][ T9568] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 333.098971][ T9568] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 333.107022][ T9568] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 333.116010][ T9568] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 333.165150][ T9568] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 333.168727][ T9582] netlink: 224 bytes leftover after parsing attributes in process `syz.4.883'. [ 333.204672][ T9568] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 333.460139][ T9568] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4023224297 [ 333.529880][ T9568] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 333.554350][ T9579] ubi31: background thread "ubi_bgt31d" started, PID 9579 [ 333.723600][ T9598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.031322][ T9603] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 334.440031][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 334.937548][ T9607] sctp: [Deprecated]: syz.5.885 (pid 9607) Use of int in maxseg socket option. [ 334.937548][ T9607] Use struct sctp_assoc_value instead [ 335.418562][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 335.427014][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.451294][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 335.479364][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 335.509612][ T9] usb 4-1: Manufacturer: syz [ 335.566521][ T9615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.585316][ T9615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.602406][ T9615] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 336.018386][ T24] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 336.557148][ T9] usb 4-1: config 0 descriptor?? [ 336.759983][ T24] usb 3-1: device descriptor read/64, error -71 [ 336.775669][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.895'. [ 336.956804][ T9626] evm: overlay not supported [ 337.073248][ T30] audit: type=1400 audit(1747586103.789:561): avc: denied { link } for pid=9621 comm="syz.4.894" name="#10" dev="tmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 337.199912][ T24] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 337.205841][ T9] rc_core: IR keymap rc-hauppauge not found [ 337.232169][ T9] Registered IR keymap rc-empty [ 337.239901][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 337.250948][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 337.266267][ T30] audit: type=1400 audit(1747586103.789:562): avc: denied { rename } for pid=9621 comm="syz.4.894" name="#11" dev="tmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 337.291939][ T9] usb 4-1: USB disconnect, device number 21 [ 337.430240][ T24] usb 3-1: device descriptor read/64, error -71 [ 337.543566][ T24] usb usb3-port1: attempt power cycle [ 337.549553][ T9641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.710058][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 337.899892][ T9] usb 4-1: device descriptor read/64, error -71 [ 337.930133][ T24] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 337.954657][ T24] usb 3-1: device descriptor read/8, error -71 [ 338.140056][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 338.199944][ T24] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 338.220359][ T24] usb 3-1: device descriptor read/8, error -71 [ 338.269992][ T9] usb 4-1: device descriptor read/64, error -71 [ 338.330240][ T24] usb usb3-port1: unable to enumerate USB device [ 338.392332][ T9] usb usb4-port1: attempt power cycle [ 339.090894][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 339.235735][ T9] usb 4-1: device descriptor read/8, error -71 [ 339.538614][ T5817] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 339.546414][ T30] audit: type=1400 audit(1747586106.279:563): avc: denied { listen } for pid=9659 comm="syz.5.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 339.769910][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 339.782224][ T5817] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 339.792524][ T5817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.794502][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 339.825131][ T5817] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 339.836234][ T5817] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.840739][ T9] usb 4-1: device descriptor read/8, error -71 [ 339.847915][ T5817] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.861379][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.869369][ T5817] usb 5-1: Product: syz [ 339.873599][ T5817] usb 5-1: Manufacturer: syz [ 339.878204][ T5817] usb 5-1: SerialNumber: syz [ 339.963853][ T9] usb usb4-port1: unable to enumerate USB device [ 340.242124][ T9663] netlink: 128 bytes leftover after parsing attributes in process `syz.4.905'. [ 340.251394][ T9663] netlink: 'syz.4.905': attribute type 5 has an invalid length. [ 340.540710][ T5817] usb 5-1: USB disconnect, device number 30 [ 340.672048][ T30] audit: type=1326 audit(1747586107.449:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6678e969 code=0x7ffc0000 [ 340.699726][ T9670] xt_TPROXY: Can be used only with -p tcp or -p udp [ 340.707383][ T30] audit: type=1326 audit(1747586107.449:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6678e969 code=0x7ffc0000 [ 340.740833][ T30] audit: type=1326 audit(1747586107.479:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fdd6678e969 code=0x7ffc0000 [ 340.764867][ T30] audit: type=1326 audit(1747586107.479:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6678e969 code=0x7ffc0000 [ 340.797423][ T30] audit: type=1326 audit(1747586107.479:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6678e969 code=0x7ffc0000 [ 340.825551][ T30] audit: type=1326 audit(1747586107.479:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd6678e969 code=0x7ffc0000 [ 340.848649][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.884389][ T30] audit: type=1326 audit(1747586107.479:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6678e969 code=0x7ffc0000 [ 340.909890][ T5861] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 340.949361][ T9677] xt_CT: You must specify a L4 protocol and not use inversions on it [ 341.052864][ T5861] usb 3-1: device descriptor read/64, error -71 [ 341.077140][ T9670] syz.5.908: attempt to access beyond end of device [ 341.077140][ T9670] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 341.090451][ T9670] EXT4-fs (nbd5): unable to read superblock [ 341.374770][ T5861] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 341.509862][ T5861] usb 3-1: device descriptor read/64, error -71 [ 342.072738][ T5861] usb usb3-port1: attempt power cycle [ 342.530192][ T5861] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 342.764570][ T9697] lo speed is unknown, defaulting to 1000 [ 345.253309][ T5861] usb 3-1: device descriptor read/8, error -71 [ 345.956993][ T9708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.996446][ T9714] netlink: 'syz.2.921': attribute type 4 has an invalid length. [ 346.004277][ T9714] netlink: 17 bytes leftover after parsing attributes in process `syz.2.921'. [ 346.365976][ T9725] program syz.3.924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.738548][ T5892] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 346.762705][ T5861] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 346.791786][ T5861] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 346.805510][ T5861] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 346.817063][ T5861] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.833424][ T5861] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.842648][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.843550][ T9706] infiniband syz!: set down [ 346.868560][ T5861] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 346.876493][ T5861] usb 3-1: invalid MIDI out EP 0 [ 346.892524][ T5892] usb 6-1: device descriptor read/64, error -71 [ 346.905165][ T9706] infiniband syz!: added team_slave_0 [ 346.925127][ T9706] syz!: rxe_create_cq: returned err = -12 [ 346.942796][ T9728] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.951688][ T9706] infiniband syz!: Couldn't create ib_mad CQ [ 346.958444][ T9706] infiniband syz!: Couldn't open port 1 [ 347.144192][ T9706] RDS/IB: syz!: added [ 347.148455][ T9706] smc: adding ib device syz! with port count 1 [ 347.159305][ T9709] delete_channel: no stack [ 347.169014][ T5861] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 347.170073][ T9706] smc: ib device syz! port 1 has pnetid [ 347.192489][ T5861] usb 3-1: USB disconnect, device number 46 [ 347.228754][ T5892] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 347.450178][ T5892] usb 6-1: device descriptor read/64, error -71 [ 347.590041][ T5892] usb usb6-port1: attempt power cycle [ 348.450158][ T5892] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 348.612563][ T5892] usb 6-1: device descriptor read/8, error -71 [ 348.863574][ T9751] program syz.2.930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.319868][ T5892] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 349.613207][ T9757] program syz.4.931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.025659][ T5892] usb 6-1: device not accepting address 5, error -71 [ 350.056942][ T5892] usb usb6-port1: unable to enumerate USB device [ 351.167002][ T9773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.129630][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 352.159141][ T9792] kvm: kvm [9785]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 352.177233][ T9794] netlink: 'syz.4.940': attribute type 5 has an invalid length. [ 352.184283][ T9792] kvm: kvm [9785]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 352.197942][ T9792] kvm: kvm [9785]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 352.260652][ T9792] kvm_intel: kvm [9785]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 352.489889][ T5892] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 352.510568][ T58] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 352.659898][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 352.667042][ T58] usb 6-1: config 0 has an invalid interface number: 148 but max is 0 [ 352.676937][ T58] usb 6-1: config 0 has no interface number 0 [ 352.701275][ T58] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 352.733297][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.741464][ T58] usb 6-1: Product: syz [ 352.745629][ T58] usb 6-1: Manufacturer: syz [ 352.750405][ T58] usb 6-1: SerialNumber: syz [ 352.760604][ T5892] usb 3-1: no configurations [ 352.765226][ T5892] usb 3-1: can't read configurations, error -22 [ 352.900361][ T5892] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 352.913155][ T58] usb 6-1: config 0 descriptor?? [ 352.929380][ T58] kobil_sct 6-1:0.148: KOBIL USB smart card terminal converter detected [ 352.952979][ T58] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 353.227588][ T5892] usb 3-1: no configurations [ 353.232314][ T5892] usb 3-1: can't read configurations, error -22 [ 353.240179][ T5892] usb usb3-port1: attempt power cycle [ 353.590196][ T5892] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 353.615452][ T5892] usb 3-1: no configurations [ 353.621239][ T5892] usb 3-1: can't read configurations, error -22 [ 354.011757][ T5892] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 354.049354][ T5892] usb 3-1: no configurations [ 354.072978][ T5892] usb 3-1: can't read configurations, error -22 [ 354.081820][ T5892] usb usb3-port1: unable to enumerate USB device [ 355.010123][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 355.424217][ T9] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 355.508311][ T9] usb 4-1: config 0 has no interface number 0 [ 355.524320][ T9833] batadv1: entered promiscuous mode [ 355.533482][ T9] usb 4-1: config 0 interface 113 has no altsetting 0 [ 355.555438][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 355.569008][ T9834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9834 comm=syz.2.950 [ 355.569108][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.591954][ T9] usb 4-1: Product: syz [ 355.597793][ T9836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.606151][ T9] usb 4-1: Manufacturer: syz [ 355.632816][ T9] usb 4-1: SerialNumber: syz [ 355.734469][ T9] usb 4-1: config 0 descriptor?? [ 356.092417][ C0] usb 4-1: NFC: Urb failure (status -71) [ 356.119755][ C0] usb 4-1: NFC: Urb failure (status -71) [ 356.135177][ T9] usb 4-1: NFC: Unable to get FW version [ 356.156953][ T9] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -71 [ 356.183709][ T9] usb 4-1: USB disconnect, device number 26 [ 356.206061][ T5892] usb 6-1: USB disconnect, device number 6 [ 356.234823][ T5892] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 356.408225][ T5892] kobil_sct 6-1:0.148: device disconnected [ 357.349542][ T5860] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 357.548636][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.561182][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.572024][ T5860] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 357.584633][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.267442][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 358.267460][ T30] audit: type=1400 audit(1747586124.999:616): avc: denied { recv } for pid=9858 comm="syz.3.958" saddr=10.128.0.169 src=35616 daddr=10.128.1.109 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 358.436176][ T5860] usb 3-1: config 0 descriptor?? [ 358.448267][ T5860] usbhid 3-1:0.0: can't add hid device: -22 [ 358.538360][ T5860] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 358.753472][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.771381][ T9875] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 358.778458][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.868758][ T9882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.956'. [ 358.871271][ T30] audit: type=1400 audit(1747586125.589:617): avc: denied { map } for pid=9850 comm="syz.2.956" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 358.883600][ T9882] mkiss: ax0: crc mode is auto. [ 359.102828][ T30] audit: type=1400 audit(1747586125.799:618): avc: denied { execmem } for pid=9883 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 360.156034][ T5817] usb 3-1: USB disconnect, device number 51 [ 361.207897][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 361.370679][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.970'. [ 361.648748][ T9906] netlink: 80 bytes leftover after parsing attributes in process `syz.4.970'. [ 361.706414][ T30] audit: type=1400 audit(1747586127.999:619): avc: denied { ioctl } for pid=9905 comm="syz.0.971" path="socket:[27073]" dev="sockfs" ino=27073 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 362.373392][ T30] audit: type=1400 audit(1747586129.149:620): avc: denied { create } for pid=9915 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.412155][ T9914] netlink: 'syz.2.974': attribute type 2 has an invalid length. [ 362.578148][ T9923] program syz.0.973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.631841][ T9914] netlink: 'syz.2.974': attribute type 1 has an invalid length. [ 362.790048][ T9914] netlink: 'syz.2.974': attribute type 1 has an invalid length. [ 363.194665][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 364.180203][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'. [ 364.252204][ T30] audit: type=1400 audit(1747586131.029:621): avc: denied { write } for pid=9951 comm="syz.3.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 364.476126][ T30] audit: type=1400 audit(1747586131.029:622): avc: denied { nlmsg_write } for pid=9951 comm="syz.3.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 364.973966][ T9970] program syz.5.990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.520809][ T9972] block device autoloading is deprecated and will be removed. [ 365.530741][ T9972] syz.3.989: attempt to access beyond end of device [ 365.530741][ T9972] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 366.260022][ T30] audit: type=1400 audit(1747586132.749:623): avc: denied { map } for pid=9975 comm="syz.2.993" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 366.506029][ T9989] nfs: Unknown parameter '' [ 379.876158][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.893672][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.906945][ T9940] sched: DL replenish lagged too much [ 476.498230][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 476.519149][ T5824] Bluetooth: hci5: command 0x0419 tx timeout [ 486.298599][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.536292][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.552136][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 517.189752][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 517.196729][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5892/1:b..l [ 517.205104][ C1] rcu: (detected by 1, t=10502 jiffies, g=28305, q=457373 ncpus=2) [ 517.213078][ C1] task:kworker/1:7 state:R running task stack:24952 pid:5892 tgid:5892 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 517.227672][ C1] Workqueue: events_power_efficient gc_worker [ 517.233764][ C1] Call Trace: [ 517.237041][ C1] [ 517.239974][ C1] __schedule+0x116f/0x5de0 [ 517.244513][ C1] ? __pfx___schedule+0x10/0x10 [ 517.249364][ C1] ? lock_acquire+0x179/0x350 [ 517.254058][ C1] ? mark_held_locks+0x49/0x80 [ 517.258837][ C1] preempt_schedule_irq+0x51/0x90 [ 517.263868][ C1] irqentry_exit+0x36/0x90 [ 517.268294][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 517.274274][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 517.279478][ C1] Code: 39 0c 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 52 07 ed 0e 0f 82 74 02 00 00 8b 35 ea 36 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 39 0c 12 0f 85 c7 02 00 00 48 83 c4 [ 517.299102][ C1] RSP: 0018:ffffc90004e7fae8 EFLAGS: 00000206 [ 517.305176][ C1] RAX: 0000000000000046 RBX: ffffffff8e3bfc00 RCX: 0000000098976749 [ 517.313156][ C1] RDX: 0000000000000000 RSI: ffffffff8dbbf003 RDI: ffffffff8bf4a2a0 [ 517.321135][ C1] RBP: 0000000000000002 R08: 20d35136f2fa4cfa R09: 0000000000000000 [ 517.329107][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 517.337084][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.345069][ C1] ? __pfx___might_resched+0x10/0x10 [ 517.350366][ C1] ? gc_worker+0x999/0x16e0 [ 517.354878][ C1] gc_worker+0x241/0x16e0 [ 517.359210][ C1] ? gc_worker+0x230/0x16e0 [ 517.363742][ C1] ? __pfx_gc_worker+0x10/0x10 [ 517.368529][ C1] ? rcu_is_watching+0x12/0xc0 [ 517.373308][ C1] process_one_work+0x9cf/0x1b70 [ 517.378260][ C1] ? __pfx_gc_worker+0x10/0x10 [ 517.383038][ C1] ? __pfx_process_one_work+0x10/0x10 [ 517.388419][ C1] ? assign_work+0x1a0/0x250 [ 517.393012][ C1] worker_thread+0x6c8/0xf10 [ 517.397610][ C1] ? __kthread_parkme+0x19e/0x250 [ 517.402640][ C1] ? __pfx_worker_thread+0x10/0x10 [ 517.407751][ C1] kthread+0x3c2/0x780 [ 517.411831][ C1] ? __pfx_kthread+0x10/0x10 [ 517.416423][ C1] ? __pfx_kthread+0x10/0x10 [ 517.421012][ C1] ? __pfx_kthread+0x10/0x10 [ 517.425602][ C1] ? __pfx_kthread+0x10/0x10 [ 517.430193][ C1] ? rcu_is_watching+0x12/0xc0 [ 517.434960][ C1] ? __pfx_kthread+0x10/0x10 [ 517.439549][ C1] ret_from_fork+0x45/0x80 [ 517.443964][ C1] ? __pfx_kthread+0x10/0x10 [ 517.448551][ C1] ret_from_fork_asm+0x1a/0x30 [ 517.453331][ C1]