last executing test programs: 9.157575041s ago: executing program 0 (id=42): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x7, 0xfffffffffdffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2404c004}, 0x4850) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000100)=0x6) socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xf0, 0x2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_gfeatures}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f0000001300), &(0x7f00000001c0)='%-010d \x00', 0x8}, 0x20) io_setup(0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000380)=0x102) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r9, 0x4068aea3, &(0x7f0000000140)={0x80, 0x0, 0x8000000000000001}) syz_usb_control_io$uac1(r7, 0x0, 0x0) 8.839494219s ago: executing program 1 (id=46): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') getdents64(r2, 0xffffffffffffffff, 0x43) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x484000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="183fa4000300000000ec24709633a1aa240e", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001830000005000000000000000000000095000000000000000990040004000000186500000e0000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xd}, 0x94) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept4(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80, 0x80000) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x64048080) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000500)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc20f23457e792945f640094000500281fde804127a580358443d6014aa4925aaa0000c600000000000000feff2c707f8700ff00", 0x66}], 0x1) listen(r1, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r6, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000000)="378303076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000034c", 0x0, 0x400000fe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmmsg$sock(r7, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000800) (fail_nth: 2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', 0x0}) 7.597545216s ago: executing program 1 (id=48): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)={0x28f6c81d26a0207, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x40015) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x5c, "20854e8c4bb334715f8227fd4236ff070000000000001c9d3f45f2e89c1cffa964866b4b54712851c8825a2f8de125e1470c50febcb7566c61ba0000b8c84e5b"}, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000140)=@chain) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000000000000000010050001000700000000000000000000002c3e3700"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 7.463251647s ago: executing program 4 (id=51): mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@redirect_dir_on}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{+\xfa\x1c*'}}, {@euid_lt}, {@flag='dirsync'}, {@obj_type}, {@uid_lt}, {@appraise}, {@obj_user={'obj_user', 0x3d, 'obj_type'}}]}) rmdir(&(0x7f0000000180)='./file1\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x8001af85, &(0x7f0000000dc0)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0xfffffffd, 0x0, 'syz1\x00', 0x109a7}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r5}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x19) r7 = epoll_create1(0x80000) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000004c0)={0x2, 0x0, [{0x70000, 0xa1, &(0x7f0000000600)=""/161}, {0xdddd0ffe, 0x5c, &(0x7f0000000200)=""/92}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) 7.223388742s ago: executing program 3 (id=53): close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000000)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000140)) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000080)='./file0/../file0\x00'}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0x2, 0x1f8}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x20000010, 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x109540) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) 6.483798614s ago: executing program 4 (id=55): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2100, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x465c, 0x800, 0x3, 0x2fd}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) (fail_nth: 2) 6.100942615s ago: executing program 3 (id=56): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0x6, 0x0, 0x0) 5.997818641s ago: executing program 4 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xe7}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a69702c706f727400"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000003c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=r5, @ANYRESOCT=r5], 0x48}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r8, &(0x7f00000002c0)="88", 0x1) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r10}, 0x4) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, r11, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000300)={0x8, r11}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8, r9}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r7, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000400)={0x8, r6}) 5.681215123s ago: executing program 3 (id=58): listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) getrlimit(0x1, &(0x7f0000000000)) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x20008000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe3c, &(0x7f00000002c0)=0x400001bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) socket$caif_stream(0x25, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x110) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x4000, 0x4000000}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e21, 0x6dc, 0xa, 0xa0}, {0x0, 0x9, 0x4, 0x0, 0xfffffffffffffffa, 0x0, 0x1}, {0x0, 0x4, 0x43, 0xa787}, 0xfffffffe, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x3506, 0x2, 0x3, 0x7, 0x1}}, 0xe8) 5.054810939s ago: executing program 3 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000001c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5a90a000f01c40f019c09000f01c2", 0x65}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5], 0x15) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d00000004000000040000000900000050010000", @ANYRES32=r3, @ANYBLOB="00e600d4945b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r8, &(0x7f0000000cc0)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x9}, 0x80, 0x0}}], 0x2, 0x40094) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r9, 0x0, 0xffffffff000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.241900361s ago: executing program 0 (id=60): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000200)="73828135e9c62c7a51e99e85028e164548197e7d3c5b25df5f", 0x19, 0x3b00, 0x0, 0x0) (fail_nth: 2) 3.483671088s ago: executing program 0 (id=62): socket(0x2d, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x6, 0x3008, 0x4, 0xb, 0x2, 0x1, 0x8}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$6lowpan_control(r1, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x400) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000200)={0x1, 0x1, 0x8, &(0x7f00000001c0)={0x13, "a64facf230551fbebb4485ff0fd4fd7e7bc335a769fcb24b811659084a2c208acc"}}) socket(0x2d, 0x2, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) unshare(0x6a040000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x6, 0x3008, 0x4, 0xb, 0x2, 0x1, 0x8}}) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_control(r1, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x400) (async) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000200)={0x1, 0x1, 0x8, &(0x7f00000001c0)={0x13, "a64facf230551fbebb4485ff0fd4fd7e7bc335a769fcb24b811659084a2c208acc"}}) (async) 3.481215521s ago: executing program 1 (id=63): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000001080)=0x200000b, 0x67) r1 = creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) connect$bt_rfcomm(r1, &(0x7f0000001040)={0x1f, @any, 0x47}, 0xa) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000b, 0x2) syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x5, 0xffffffff}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x5) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, 0xffffffffffffffff, 0xd925000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FIONREAD(r5, 0x5453, 0xfffffffffffffffe) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffd, 0x9, @remote, 0x8}, 0x1c) 3.30163451s ago: executing program 2 (id=64): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 3.167092817s ago: executing program 3 (id=65): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x0) sendmsg$nl_netfilter(r0, 0x0, 0x20040001) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.617644425s ago: executing program 2 (id=66): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) gettid() io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r0, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r1) 2.540875188s ago: executing program 3 (id=67): socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x100}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x4}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce01028297090212000100000000090400000002"], 0x0) 2.203231221s ago: executing program 2 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000040000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.100697127s ago: executing program 4 (id=69): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f00000005c0), 0x0) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000"], 0x40}, 0xc004) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x87e, 0x20203843, 0x4, [0x2], [0x800, 0x0, 0x1000], [0xff, 0x0, 0x8000fa, 0xb1e5]}) fremovexattr(r2, &(0x7f0000000000)=@random={'system.', '\x00'}) 1.9820941s ago: executing program 0 (id=70): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000200)="73828135e9c62c7a51e99e85028e164548197e7d3c5b25df5f7c", 0x1a, 0x3b00, 0x0, 0x0) (fail_nth: 2) 1.813280416s ago: executing program 1 (id=71): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0xf8, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x1010000000}, {0x0, 0x200000, 0x5, 0x2}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@tfcpad={0x8, 0x16, 0x7}]}, 0xf8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$iommufd(0xffffff9c, 0x0, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000009}, 0x0, 0x0) (fail_nth: 2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, 0x0) ioctl$BLKPG(r5, 0x1269, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000029c0)={0x9, {"a2e3ad084fc752f91b29090942f70e0dd038e7ff7fc6e5539b3272078b089b34393b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d336d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b473e2ffd9d44b56871495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3527138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aad66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) 1.78764997s ago: executing program 4 (id=72): setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x281c012, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) utime(&(0x7f0000000000)='.\x00', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x23ac, 0xffffffff, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000031, 0x4010, 0xffffffffffffffff, 0x1cbf8000) 1.767047385s ago: executing program 2 (id=73): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) socket$inet6(0xa, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3ff, @none, 0x0, 0x1}, 0xe) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, r2}, 0xc) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000000)={0x2, 0xc0b}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7157ad36}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25}]}]}, 0xb0}}, 0x0) 1.697379243s ago: executing program 0 (id=74): r0 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x76, 0x141b41) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) r1 = memfd_secret(0xa51cd372813f45c5) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f00000016c0)=""/161, 0xa1}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000001780)=""/132, 0x84}, {&(0x7f0000001840)=""/214, 0xd6}], 0x8, &(0x7f0000001940)=""/145, 0x91}, 0xe5}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000077c0)=""/66, 0x42}, {&(0x7f0000001a80)=""/80, 0x50}, {&(0x7f0000001b00)=""/4096, 0x1000}], 0x3, &(0x7f0000002b00)=""/227, 0xe3}, 0x785}, {{&(0x7f0000002c00)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/164, 0xa4}, 0x7}, {{&(0x7f0000003dc0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004240)=[{&(0x7f0000003e40)=""/129, 0x81}, {&(0x7f0000003f00)=""/142, 0x8e}, {&(0x7f0000003fc0)=""/8, 0x8}, {&(0x7f0000004000)=""/177, 0xb1}, {&(0x7f00000040c0)=""/222, 0xde}, {&(0x7f00000041c0)=""/86, 0x56}], 0x6, &(0x7f00000042c0)=""/136, 0x88}, 0x8a}, {{&(0x7f0000004380)=@generic, 0x80, &(0x7f0000004840)=[{&(0x7f0000004400)=""/255, 0xff}, {&(0x7f0000004500)=""/211, 0xd3}, {&(0x7f0000004600)=""/31, 0x1f}, {&(0x7f0000004640)=""/253, 0xfd}, {&(0x7f0000004740)=""/172, 0xac}, {&(0x7f0000004800)=""/52, 0x34}], 0x6}, 0x8}, {{&(0x7f00000048c0)=@caif, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004940)=""/119, 0x77}, {&(0x7f00000049c0)=""/168, 0xa8}, {&(0x7f0000007840)=""/179, 0xb3}, {&(0x7f0000004b40)=""/196, 0xc4}], 0x4, &(0x7f0000004c80)=""/224, 0xe0}, 0x6}, {{&(0x7f0000004d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000060c0)=[{&(0x7f0000004e00)=""/101, 0x65}, {&(0x7f0000004e80)=""/58, 0x3a}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/211, 0xd3}, {&(0x7f0000005fc0)=""/165, 0xa5}, {&(0x7f0000006080)=""/37, 0x25}], 0x6, &(0x7f0000006140)=""/163, 0xa3}, 0xfffffffb}, {{0x0, 0x0, &(0x7f00000074c0)=[{&(0x7f0000006200)=""/86, 0x56}, {&(0x7f0000006280)=""/27, 0x1b}, {&(0x7f00000062c0)=""/76, 0x4c}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000007340)=""/88, 0x58}, {&(0x7f00000073c0)=""/230, 0xe6}], 0x6, &(0x7f0000007540)=""/88, 0x58}, 0x10}], 0x8, 0x40010161, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r5, 0x1, 0x10000, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xc9, 0x18}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400d5}, 0xc0) r8 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r9 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0x4, 0x2010, r9, 0x0) process_vm_writev(r2, &(0x7f0000001a00)=[{&(0x7f0000007900)=""/244, 0xf4}, {&(0x7f0000004a80)=""/140, 0x8c}], 0x2, &(0x7f0000001a40)=[{&(0x7f0000007a00)=""/91, 0x5b}], 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.348251768s ago: executing program 4 (id=75): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1c) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0401, 0x0) pread64(r4, &(0x7f0000000140)=""/35, 0x23, 0x4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002840)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r10, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) close(r6) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xf, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x4, 0xfffffff7, 0x157, 0x3, 0x2, 0x3, 0x10000, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0)={0x0, 0x16, 0x1, "e8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 715.922796ms ago: executing program 0 (id=76): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000100)=[{0x9, 0x4000, 0x0, 0x0}, {0x8, 0x10, 0x0, 0x0}, {0x0, 0x200, 0x0, 0x0}], 0x3}) 607.190039ms ago: executing program 1 (id=77): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x0) sendmsg$nl_netfilter(r0, 0x0, 0x20040001) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 223.005926ms ago: executing program 2 (id=78): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) gettid() io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r0, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r1) 137.895325ms ago: executing program 1 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xe7}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a69702c706f727400"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000003c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=r5, @ANYRESOCT=r5], 0x48}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r8, &(0x7f00000002c0)="88", 0x1) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r10}, 0x4) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, r11, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000300)={0x8, r11}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8, r9}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r7, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000400)={0x8, r6}) 0s ago: executing program 2 (id=80): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000023000701feffffff02000000027c0000040042800c00000000000000000914bb140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r5}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r5, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r5}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 373.834884][ T30] audit: type=1400 audit(1772641164.976:62): avc: denied { mounton } for pid=5836 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 373.858302][ T30] audit: type=1400 audit(1772641164.996:63): avc: denied { mount } for pid=5836 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 373.860755][ T5836] cgroup: Unknown subsys name 'net' [ 373.887174][ T30] audit: type=1400 audit(1772641165.026:64): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 374.022628][ T5836] cgroup: Unknown subsys name 'cpuset' [ 374.030906][ T5836] cgroup: Unknown subsys name 'rlimit' [ 374.169315][ T30] audit: type=1400 audit(1772641165.306:65): avc: denied { setattr } for pid=5836 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.192885][ T30] audit: type=1400 audit(1772641165.306:66): avc: denied { create } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.231612][ T30] audit: type=1400 audit(1772641165.306:67): avc: denied { write } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.252671][ T30] audit: type=1400 audit(1772641165.316:68): avc: denied { read } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.272965][ T30] audit: type=1400 audit(1772641165.336:69): avc: denied { mounton } for pid=5836 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 374.291022][ T5839] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 374.297871][ T30] audit: type=1400 audit(1772641165.336:70): avc: denied { mount } for pid=5836 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 374.329577][ T30] audit: type=1400 audit(1772641165.456:71): avc: denied { relabelto } for pid=5839 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 375.222961][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 377.115410][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.123665][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.131437][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.139121][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.147351][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.155275][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.168494][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.180941][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.191990][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.193230][ T5126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.199537][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.207272][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.214592][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.222257][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.229824][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.243131][ T5126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.251210][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.251485][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.266430][ T5126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.272359][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.279036][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.288531][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.288996][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.303852][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.304532][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.728117][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 377.762127][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 377.783218][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 377.827965][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 377.941472][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 377.992191][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.999432][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.006861][ T5853] bridge_slave_0: entered allmulticast mode [ 378.013656][ T5853] bridge_slave_0: entered promiscuous mode [ 378.028509][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.035632][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.043067][ T5853] bridge_slave_1: entered allmulticast mode [ 378.049693][ T5853] bridge_slave_1: entered promiscuous mode [ 378.069371][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.076493][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.084006][ T5854] bridge_slave_0: entered allmulticast mode [ 378.090799][ T5854] bridge_slave_0: entered promiscuous mode [ 378.098263][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.105493][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.112603][ T5854] bridge_slave_1: entered allmulticast mode [ 378.119207][ T5854] bridge_slave_1: entered promiscuous mode [ 378.144939][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.152090][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.159158][ T5850] bridge_slave_0: entered allmulticast mode [ 378.166068][ T5850] bridge_slave_0: entered promiscuous mode [ 378.188850][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.195959][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.203387][ T5855] bridge_slave_0: entered allmulticast mode [ 378.210186][ T5855] bridge_slave_0: entered promiscuous mode [ 378.217394][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.224527][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.231669][ T5850] bridge_slave_1: entered allmulticast mode [ 378.238298][ T5850] bridge_slave_1: entered promiscuous mode [ 378.256482][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.265641][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.272760][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.279836][ T5855] bridge_slave_1: entered allmulticast mode [ 378.286933][ T5855] bridge_slave_1: entered promiscuous mode [ 378.312862][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.327464][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.338029][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.356209][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.367012][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.389903][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.425903][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.453397][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.460636][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.467707][ T5848] bridge_slave_0: entered allmulticast mode [ 378.474606][ T5848] bridge_slave_0: entered promiscuous mode [ 378.482744][ T5853] team0: Port device team_slave_0 added [ 378.488380][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.495650][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.502942][ T5848] bridge_slave_1: entered allmulticast mode [ 378.509872][ T5848] bridge_slave_1: entered promiscuous mode [ 378.524549][ T5855] team0: Port device team_slave_0 added [ 378.531794][ T5854] team0: Port device team_slave_0 added [ 378.538731][ T5855] team0: Port device team_slave_1 added [ 378.553513][ T5853] team0: Port device team_slave_1 added [ 378.573125][ T5850] team0: Port device team_slave_0 added [ 378.586198][ T5854] team0: Port device team_slave_1 added [ 378.598827][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.605939][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.632154][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.644850][ T5850] team0: Port device team_slave_1 added [ 378.659663][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.682059][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.689008][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.714991][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.734109][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.750148][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.757090][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.783623][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.804501][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.811593][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.837631][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.855991][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.863009][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.889069][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.901016][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.907944][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.933872][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.945495][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.952471][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.978387][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.995318][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.002481][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.028433][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.063269][ T5848] team0: Port device team_slave_0 added [ 379.079821][ T5855] hsr_slave_0: entered promiscuous mode [ 379.085923][ T5855] hsr_slave_1: entered promiscuous mode [ 379.093449][ T5848] team0: Port device team_slave_1 added [ 379.132707][ T5854] hsr_slave_0: entered promiscuous mode [ 379.138889][ T5854] hsr_slave_1: entered promiscuous mode [ 379.144915][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 379.150780][ T5854] Cannot create hsr debugfs directory [ 379.203657][ T5853] hsr_slave_0: entered promiscuous mode [ 379.209653][ T5853] hsr_slave_1: entered promiscuous mode [ 379.215707][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 379.221532][ T5853] Cannot create hsr debugfs directory [ 379.232020][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.238954][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.265045][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.271038][ T5852] Bluetooth: hci0: command tx timeout [ 379.282399][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.289572][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.315752][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.330418][ T5852] Bluetooth: hci4: command tx timeout [ 379.336415][ T5850] hsr_slave_0: entered promiscuous mode [ 379.342337][ T5852] Bluetooth: hci1: command tx timeout [ 379.342364][ T5857] Bluetooth: hci2: command tx timeout [ 379.348648][ T5850] hsr_slave_1: entered promiscuous mode [ 379.359929][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 379.365694][ T5850] Cannot create hsr debugfs directory [ 379.407236][ T5848] hsr_slave_0: entered promiscuous mode [ 379.412925][ T5857] Bluetooth: hci3: command tx timeout [ 379.413550][ T5848] hsr_slave_1: entered promiscuous mode [ 379.424329][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 379.430083][ T5848] Cannot create hsr debugfs directory [ 379.753370][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 379.765016][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 379.774704][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 379.791474][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 379.843577][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 379.865549][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 379.876490][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 379.888455][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 379.947424][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 379.958368][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 379.977142][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 379.986368][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.047395][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.063222][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.072771][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.083019][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.098776][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.134092][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.188281][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 380.198942][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 380.209640][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.216809][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.236406][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 380.246503][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.253605][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.271712][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 380.299598][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.314501][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.353503][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.383338][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.404079][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.411238][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.425847][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.432996][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.441582][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 380.441595][ T30] audit: type=1400 audit(1772641171.566:84): avc: denied { sys_module } for pid=5855 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 380.475825][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.482911][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.492368][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.499470][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.525470][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.579312][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.637625][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.659474][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.682545][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.689629][ T5921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.713028][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.723587][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.741092][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.748142][ T5921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.791403][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.808645][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.868956][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.876095][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.904324][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.911474][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.943561][ T5855] veth0_vlan: entered promiscuous mode [ 380.983542][ T5855] veth1_vlan: entered promiscuous mode [ 380.996860][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.059995][ T5848] veth0_vlan: entered promiscuous mode [ 381.088009][ T5848] veth1_vlan: entered promiscuous mode [ 381.114152][ T5855] veth0_macvtap: entered promiscuous mode [ 381.134916][ T5855] veth1_macvtap: entered promiscuous mode [ 381.146765][ T5854] veth0_vlan: entered promiscuous mode [ 381.169948][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.193315][ T5848] veth0_macvtap: entered promiscuous mode [ 381.203519][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.225248][ T5854] veth1_vlan: entered promiscuous mode [ 381.241015][ T5848] veth1_macvtap: entered promiscuous mode [ 381.254722][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.269582][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.305512][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.315047][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.341409][ T5857] Bluetooth: hci0: command tx timeout [ 381.348829][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.398412][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.410401][ T5857] Bluetooth: hci2: command tx timeout [ 381.416945][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.421070][ T5857] Bluetooth: hci1: command tx timeout [ 381.429502][ T5857] Bluetooth: hci4: command tx timeout [ 381.469597][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.490594][ T5857] Bluetooth: hci3: command tx timeout [ 381.525606][ T5854] veth0_macvtap: entered promiscuous mode [ 381.533768][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.546150][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.586399][ T5921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.598079][ T5854] veth1_macvtap: entered promiscuous mode [ 381.607800][ T5921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.617931][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.628816][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.657372][ T5850] veth0_vlan: entered promiscuous mode [ 381.684599][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.695623][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.711938][ T5850] veth1_vlan: entered promiscuous mode [ 381.725475][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.759770][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.780291][ T30] audit: type=1400 audit(1772641172.906:85): avc: denied { mounton } for pid=5855 comm="syz-executor" path="/root/syzkaller.1oiGNV/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 381.783823][ T5853] veth0_vlan: entered promiscuous mode [ 381.815218][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.827959][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.842337][ T30] audit: type=1400 audit(1772641172.906:86): avc: denied { mount } for pid=5855 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 381.846483][ T5853] veth1_vlan: entered promiscuous mode [ 381.871323][ T30] audit: type=1400 audit(1772641172.916:87): avc: denied { mounton } for pid=5855 comm="syz-executor" path="/root/syzkaller.1oiGNV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 381.891696][ T5853] veth0_macvtap: entered promiscuous mode [ 381.909136][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 381.929269][ T1025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.939558][ T30] audit: type=1400 audit(1772641172.916:88): avc: denied { mount } for pid=5855 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 381.944179][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.969948][ T30] audit: type=1400 audit(1772641172.916:89): avc: denied { mounton } for pid=5855 comm="syz-executor" path="/root/syzkaller.1oiGNV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 381.970327][ T5853] veth1_macvtap: entered promiscuous mode [ 381.998407][ T30] audit: type=1400 audit(1772641172.916:90): avc: denied { mounton } for pid=5855 comm="syz-executor" path="/root/syzkaller.1oiGNV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 382.005884][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.033528][ T30] audit: type=1400 audit(1772641172.956:91): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 382.053128][ T5850] veth0_macvtap: entered promiscuous mode [ 382.062687][ T30] audit: type=1400 audit(1772641172.966:92): avc: denied { mounton } for pid=5855 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 382.074242][ T1025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.096391][ T30] audit: type=1400 audit(1772641172.976:93): avc: denied { mount } for pid=5855 comm="syz-executor" name="/" dev="gadgetfs" ino=7507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 382.097468][ T1025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.184061][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.225072][ T1025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.248893][ T5850] veth1_macvtap: entered promiscuous mode [ 382.275029][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.317308][ T1025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.332353][ T1025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.347703][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.356439][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.373317][ T5962] kvm: pic: non byte write [ 382.384893][ T1025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.408490][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.543305][ T1025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.570993][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.578856][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.594260][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.600366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 382.750524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 382.760623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 382.769405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 382.837982][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.847109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 382.856290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 382.866574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 382.998080][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.295569][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.318304][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.329105][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.353130][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.411970][ T5857] Bluetooth: hci0: command tx timeout [ 383.492786][ T5857] Bluetooth: hci4: command tx timeout [ 383.498207][ T5857] Bluetooth: hci1: command tx timeout [ 383.504292][ T5852] Bluetooth: hci2: command tx timeout [ 383.510338][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.518137][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.569438][ T5975] comedi comedi1: Minor 47 could not be opened [ 383.586173][ T5857] Bluetooth: hci3: command tx timeout [ 383.625562][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.635731][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.709189][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.727117][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.950735][ T5954] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 384.122413][ T5954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.153130][ T5954] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 384.180217][ T5954] usb 3-1: config 1 has no interface number 0 [ 384.190723][ T5954] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 384.226195][ T5954] usb 3-1: config 1 interface 1 has no altsetting 0 [ 384.248590][ T5954] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.268374][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.289007][ T5954] usb 3-1: Product: syz [ 384.344361][ T5954] usb 3-1: Manufacturer: syz [ 384.365592][ T5954] usb 3-1: SerialNumber: syz [ 385.011116][ T6008] netlink: 'syz.1.14': attribute type 1 has an invalid length. [ 385.138924][ T6007] kvm: pic: non byte write [ 385.230098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 385.270079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 385.280056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 385.530012][ T5857] Bluetooth: hci0: command tx timeout [ 385.570542][ T5857] Bluetooth: hci1: command tx timeout [ 385.576002][ T5126] Bluetooth: hci2: command tx timeout [ 385.581659][ T5852] Bluetooth: hci4: command tx timeout [ 385.653162][ T5857] Bluetooth: hci3: command tx timeout [ 386.623656][ T5954] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 386.670496][ T5954] usb 3-1: USB disconnect, device number 2 [ 386.764930][ T5822] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 386.819832][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 386.819869][ T30] audit: type=1400 audit(1772641177.946:142): avc: denied { read } for pid=6023 comm="syz.2.17" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 386.963328][ T30] audit: type=1400 audit(1772641177.956:143): avc: denied { open } for pid=6023 comm="syz.2.17" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 386.987538][ T30] audit: type=1400 audit(1772641177.956:144): avc: denied { ioctl } for pid=6023 comm="syz.2.17" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 387.016655][ T30] audit: type=1400 audit(1772641177.956:145): avc: denied { read write } for pid=6023 comm="syz.2.17" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 387.122124][ T5822] usb 1-1: Using ep0 maxpacket: 16 [ 387.151554][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.168514][ T5822] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 387.190168][ T5822] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 387.212143][ T30] audit: type=1400 audit(1772641177.956:146): avc: denied { open } for pid=6023 comm="syz.2.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 387.256368][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.287737][ T5822] usb 1-1: config 0 descriptor?? [ 387.295122][ T30] audit: type=1400 audit(1772641177.956:147): avc: denied { ioctl } for pid=6023 comm="syz.2.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 387.419629][ T30] audit: type=1400 audit(1772641178.336:148): avc: denied { name_bind } for pid=6027 comm="syz.3.18" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 387.482113][ T30] audit: type=1400 audit(1772641178.336:149): avc: denied { node_bind } for pid=6027 comm="syz.3.18" saddr=::ffff:172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 387.509061][ T6032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.644181][ T30] audit: type=1400 audit(1772641178.386:150): avc: denied { write } for pid=6027 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 387.689261][ T30] audit: type=1400 audit(1772641178.626:151): avc: denied { create } for pid=6027 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 387.844897][ T5954] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 387.914042][ T5822] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 387.924798][ T5822] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 387.932393][ T5822] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 387.939691][ T5822] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 387.947212][ T5822] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 387.954580][ T5902] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 387.966225][ T5822] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 387.978070][ T5822] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 387.987575][ T5822] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 388.024366][ T5822] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 388.037280][ T5822] microsoft 0003:045E:07DA.0001: no inputs found [ 388.047999][ T5822] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 388.084416][ T5954] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.184056][ T6022] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 388.187846][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.225053][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.357839][ T5822] usb 1-1: USB disconnect, device number 2 [ 388.370892][ T5902] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 388.402584][ T5954] usb 3-1: Product: syz [ 388.406994][ T5902] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 388.531221][ T5954] usb 3-1: Manufacturer: syz [ 388.535845][ T5954] usb 3-1: SerialNumber: syz [ 388.542851][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.555066][ T6040] fido_id[6040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 388.577895][ T5902] usb 4-1: config 0 descriptor?? [ 388.603344][ T5902] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 388.718082][ T5902] dvb-usb: bulk message failed: -22 (3/0) [ 388.761337][ T5902] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 388.808413][ T6029] dvb-usb: bulk message failed: -22 (3/0) [ 389.254537][ T5902] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 389.288655][ T5902] usb 4-1: media controller created [ 389.324341][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.384437][ T5902] dvb-usb: bulk message failed: -22 (6/0) [ 389.398272][ T5902] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 389.433882][ T5902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 389.508546][ T5902] dvb-usb: schedule remote query interval to 150 msecs. [ 389.523177][ T5902] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 389.608763][ T5954] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 389.616697][ T5954] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 389.674987][ T6051] serio: Serial port ptm0 [ 389.691848][ T5822] dvb-usb: bulk message failed: -22 (1/0) [ 389.699440][ T5822] dvb-usb: error while querying for an remote control event. [ 389.750135][ T5902] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 389.785155][ T6051] Zero length message leads to an empty skb [ 389.860365][ T5822] dvb-usb: bulk message failed: -22 (1/0) [ 389.868864][ T5954] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 389.880696][ T5822] dvb-usb: error while querying for an remote control event. [ 389.929744][ T5954] usb 3-1: USB disconnect, device number 3 [ 389.938562][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.951898][ T5954] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 389.963598][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.998366][ T5902] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 390.023422][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.046308][ T5822] dvb-usb: bulk message failed: -22 (1/0) [ 390.067238][ T5902] usb 2-1: config 0 descriptor?? [ 390.084991][ T5822] dvb-usb: error while querying for an remote control event. [ 390.112312][ T5902] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 390.154090][ T29] usb 4-1: USB disconnect, device number 2 [ 390.197920][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 390.358878][ T6049] mmap: syz.1.23 (6049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 390.608445][ T6068] kvm: pic: non byte write [ 390.927320][ T6076] xt_ecn: cannot match TCP bits for non-tcp packets [ 390.975369][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.983195][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.100661][ T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 391.265057][ T29] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 391.279110][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.279170][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.287387][ T5851] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 391.299547][ T29] usb 3-1: Product: syz [ 391.312521][ T29] usb 3-1: Manufacturer: syz [ 391.317133][ T29] usb 3-1: SerialNumber: syz [ 391.339285][ T29] usb 3-1: config 0 descriptor?? [ 391.348925][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.432582][ T5851] usb 5-1: unable to get BOS descriptor or descriptor too short [ 391.442734][ T5851] usb 5-1: not running at top speed; connect to a high speed hub [ 391.461017][ T5851] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 391.483183][ T5851] usb 5-1: config 1 interface 0 has no altsetting 0 [ 391.502770][ T5851] usb 5-1: string descriptor 0 read error: -22 [ 391.509114][ T5851] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 391.522404][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.550000][ T6085] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 391.570794][ T5909] usb 3-1: USB disconnect, device number 4 [ 391.677825][ T5971] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.687059][ T5971] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.725644][ T6082] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.765650][ T5971] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.778138][ T5971] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.828831][ T6082] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.929724][ T6082] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.983900][ T5851] acrux 0003:1A34:F705.0002: unknown main item tag 0x2 [ 391.992405][ T5851] acrux 0003:1A34:F705.0002: report_id 0 is invalid [ 391.999775][ T5851] acrux 0003:1A34:F705.0002: item 0 0 1 8 parsing failed [ 392.007598][ T5851] acrux 0003:1A34:F705.0002: parse failed [ 392.013588][ T5851] acrux 0003:1A34:F705.0002: probe with driver acrux failed with error -22 [ 392.069975][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 392.069989][ T30] audit: type=1400 audit(1772641183.206:191): avc: denied { getopt } for pid=6115 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 392.083148][ T6082] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.253334][ T6120] kAFS: unable to lookup cell '(' [ 392.440401][ T29] usb 5-1: USB disconnect, device number 2 [ 392.563952][ T30] audit: type=1400 audit(1772641183.706:192): avc: denied { ioctl } for pid=6121 comm="syz.2.33" path="socket:[9327]" dev="sockfs" ino=9327 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.572864][ T1025] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.620122][ T5909] usb 2-1: USB disconnect, device number 2 [ 392.644801][ T30] audit: type=1400 audit(1772641183.736:193): avc: denied { bind } for pid=6121 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.679592][ T1025] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.716848][ T30] audit: type=1400 audit(1772641183.826:194): avc: denied { read } for pid=6125 comm="syz.3.35" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 392.717790][ T1025] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.768448][ T1025] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.796439][ T30] audit: type=1400 audit(1772641183.826:195): avc: denied { open } for pid=6125 comm="syz.3.35" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 392.832475][ T6133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.844312][ T30] audit: type=1400 audit(1772641183.856:196): avc: denied { read } for pid=6125 comm="syz.3.35" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 392.930194][ T30] audit: type=1400 audit(1772641183.856:197): avc: denied { open } for pid=6125 comm="syz.3.35" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 393.304625][ T29] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 393.399619][ T30] audit: type=1400 audit(1772641184.536:198): avc: denied { create } for pid=6135 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 393.489334][ T6143] process 'syz.4.40' launched '/dev/fd/7' with NULL argv: empty string added [ 393.598053][ T30] audit: type=1400 audit(1772641184.546:199): avc: denied { bind } for pid=6135 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 393.598099][ T30] audit: type=1400 audit(1772641184.626:200): avc: denied { execute } for pid=6139 comm="syz.4.40" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 393.881501][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.881526][ T29] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 393.881565][ T29] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 393.881586][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.907646][ T29] usb 3-1: config 0 descriptor?? [ 393.913104][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 393.913150][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 393.927788][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 393.936952][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 393.937005][ T29] usb 3-1: media controller created [ 393.938713][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.975602][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 393.975677][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 394.067460][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 394.068790][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 394.068810][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 394.145393][ T6133] dvb-usb: bulk message failed: -22 (3/0) [ 394.341271][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 394.358487][ T29] dvb-usb: error while querying for an remote control event. [ 394.612285][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 394.630123][ T29] dvb-usb: error while querying for an remote control event. [ 394.790188][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 394.796019][ T29] dvb-usb: error while querying for an remote control event. [ 395.144799][ T6167] FAULT_INJECTION: forcing a failure. [ 395.144799][ T6167] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 395.159113][ T6167] CPU: 0 UID: 0 PID: 6167 Comm: syz.1.46 Not tainted syzkaller #0 PREEMPT(full) [ 395.159137][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.159147][ T6167] Call Trace: [ 395.159152][ T6167] [ 395.159159][ T6167] dump_stack_lvl+0x100/0x190 [ 395.159190][ T6167] should_fail_ex.cold+0x5/0xa [ 395.159211][ T6167] _copy_from_iter+0x43a/0x1690 [ 395.159231][ T6167] ? __pfx__copy_from_iter+0x10/0x10 [ 395.159247][ T6167] ? avc_has_perm+0x135/0x1e0 [ 395.159263][ T6167] ? __pfx_avc_has_perm+0x10/0x10 [ 395.159278][ T6167] ? __pfx___schedule+0x10/0x10 [ 395.159290][ T6167] bcm_sendmsg+0x18f/0x44e0 [ 395.159303][ T6167] ? sock_has_perm+0x258/0x2f0 [ 395.159319][ T6167] ? __pfx_sock_has_perm+0x10/0x10 [ 395.159336][ T6167] ? __pfx_bcm_sendmsg+0x10/0x10 [ 395.159352][ T6167] ? selinux_socket_sendmsg+0xd/0x40 [ 395.159366][ T6167] ____sys_sendmsg+0xa54/0xc30 [ 395.159381][ T6167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.159398][ T6167] ? __pfx___schedule+0x10/0x10 [ 395.159409][ T6167] ___sys_sendmsg+0x190/0x1e0 [ 395.159423][ T6167] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.159438][ T6167] ? preempt_schedule_thunk+0x16/0x30 [ 395.159457][ T6167] ? find_held_lock+0x2b/0x80 [ 395.159478][ T6167] __sys_sendmmsg+0x205/0x430 [ 395.159491][ T6167] ? __pfx___sys_sendmmsg+0x10/0x10 [ 395.159506][ T6167] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 395.159523][ T6167] ? fput+0x79/0x100 [ 395.159534][ T6167] ? ksys_write+0x1ac/0x250 [ 395.159550][ T6167] ? __pfx_ksys_write+0x10/0x10 [ 395.159567][ T6167] __x64_sys_sendmmsg+0x9c/0x100 [ 395.159578][ T6167] ? lockdep_hardirqs_on+0x78/0x100 [ 395.159588][ T6167] do_syscall_64+0x106/0xf80 [ 395.159599][ T6167] ? clear_bhb_loop+0x40/0x90 [ 395.159611][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.159622][ T6167] RIP: 0033:0x7fa85b99c799 [ 395.159631][ T6167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.159640][ T6167] RSP: 002b:00007fa85c90f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 395.159651][ T6167] RAX: ffffffffffffffda RBX: 00007fa85bc16090 RCX: 00007fa85b99c799 [ 395.159657][ T6167] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000008 [ 395.159663][ T6167] RBP: 00007fa85c90f090 R08: 0000000000000000 R09: 0000000000000000 [ 395.159669][ T6167] R10: 0000000024000800 R11: 0000000000000246 R12: 0000000000000001 [ 395.159675][ T6167] R13: 00007fa85bc16128 R14: 00007fa85bc16090 R15: 00007ffc353128e8 [ 395.159688][ T6167] [ 395.712565][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 395.727528][ T29] dvb-usb: error while querying for an remote control event. [ 395.747062][ T29] usb 3-1: USB disconnect, device number 5 [ 395.806615][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 395.836494][ T6173] input: syz0 as /devices/virtual/input/input8 [ 396.010454][ T5909] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 396.170121][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 396.176993][ T5909] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 396.191774][ T5909] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 396.202262][ T5909] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 396.212324][ T5954] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 396.222070][ T5909] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.257220][ T5909] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.269413][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.313145][ T6190] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 396.319814][ T6190] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 396.347344][ T6190] vhci_hcd vhci_hcd.0: Device attached [ 396.402217][ T6191] vhci_hcd: connection closed [ 396.404151][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 396.405507][ T5971] vhci_hcd vhci_hcd.2: stop threads [ 396.430389][ T5971] vhci_hcd vhci_hcd.2: release socket [ 396.435354][ T6196] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 396.435982][ T5971] vhci_hcd vhci_hcd.2: disconnect device [ 396.466485][ T5954] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 396.480102][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.691215][ T5954] usb 2-1: config 0 descriptor?? [ 396.697270][ T5909] usb 1-1: usb_control_msg returned -32 [ 396.704242][ T5909] usbtmc 1-1:16.0: can't read capabilities [ 396.913670][ T5954] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 396.923073][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 396.938178][ T5954] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 396.948219][ T5954] usb 2-1: media controller created [ 396.975563][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.121133][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 397.121148][ T30] audit: type=1400 audit(1772641188.266:236): avc: denied { create } for pid=6176 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 397.248674][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.48'. [ 397.263383][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.272507][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.281499][ T30] audit: type=1400 audit(1772641188.386:237): avc: denied { write } for pid=6176 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.312317][ T30] audit: type=1400 audit(1772641188.386:238): avc: denied { nlmsg_write } for pid=6176 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.745418][ T5923] usb 1-1: USB disconnect, device number 3 [ 397.976106][ T6219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.455978][ T30] audit: type=1400 audit(1772641189.306:239): avc: denied { create } for pid=6220 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 398.573202][ T30] audit: type=1400 audit(1772641189.356:240): avc: denied { setopt } for pid=6220 comm="syz.3.58" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 398.706427][ T30] audit: type=1400 audit(1772641189.846:241): avc: denied { create } for pid=6225 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 398.735715][ T30] audit: type=1400 audit(1772641189.876:242): avc: denied { write } for pid=6225 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 398.802331][ T29] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 398.985905][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.047130][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 399.048062][ T5954] az6027: usb out operation failed. (-110) [ 399.208371][ T29] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 399.210430][ T5954] az6027: usb out operation failed. (-32) [ 399.300176][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.347851][ T29] usb 5-1: config 0 descriptor?? [ 399.356576][ T5954] stb0899_attach: Driver disabled by Kconfig [ 399.370234][ T5954] az6027: no front-end attached [ 399.370234][ T5954] [ 399.381750][ T30] audit: type=1400 audit(1772641190.526:243): avc: denied { connect } for pid=6254 comm="syz.0.60" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.382236][ T6255] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 399.430545][ T5954] az6027: usb out operation failed. (-32) [ 399.456563][ T5954] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 399.475504][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 399.514586][ T6255] audit: out of memory in audit_log_start [ 399.820911][ T5954] dvb-usb: schedule remote query interval to 400 msecs. [ 399.830377][ T5954] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 399.842337][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 399.873207][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 399.890987][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 399.908729][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 399.916050][ T29] usb 5-1: media controller created [ 399.922650][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.936440][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 399.942263][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 400.001125][ T5902] usb 2-1: USB disconnect, device number 3 [ 400.037081][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 400.115539][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 400.137822][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 400.303842][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 400.314986][ T29] dvb-usb: error while querying for an remote control event. [ 400.510132][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 400.515952][ T29] dvb-usb: error while querying for an remote control event. [ 400.604953][ T5954] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 400.850469][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 400.871968][ T29] dvb-usb: error while querying for an remote control event. [ 401.000652][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 401.038433][ T6280] syz.3.67 uses obsolete (PF_INET,SOCK_PACKET) [ 401.047784][ T5954] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 401.061394][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 401.067975][ T5923] dvb-usb: error while querying for an remote control event. [ 401.136331][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.160194][ T5954] usb 1-1: Product: syz [ 401.164377][ T5954] usb 1-1: Manufacturer: syz [ 401.169003][ T5954] usb 1-1: SerialNumber: syz [ 401.186027][ T5954] usb 1-1: config 0 descriptor?? [ 401.202969][ T5954] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 401.239129][ T5954] dvb-usb: bulk message failed: -22 (4/0) [ 401.260123][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 401.265874][ T29] dvb-usb: error while querying for an remote control event. [ 401.273769][ T5954] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 401.284539][ T5954] dvb-usb: bulk message failed: -22 (5/0) [ 401.291607][ T5954] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 401.350225][ T5923] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 401.351488][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.368033][ T5954] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 401.395265][ T29] usb 5-1: USB disconnect, device number 3 [ 401.418630][ T5902] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 401.427196][ T5954] usb 1-1: media controller created [ 401.448271][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.519988][ T5954] usb 1-1: selecting invalid altsetting 3 [ 401.551818][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.561200][ T5954] ttusb2: set interface to alts=3 failed [ 401.603865][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 401.669627][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 401.728098][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 401.732255][ T5954] DVB: Unable to find symbol tda10086_attach() [ 401.740830][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 401.772169][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 401.780140][ T5954] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 401.849114][ T5954] dvb-usb: bulk message failed: -22 (4/0) [ 401.854287][ T5923] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 401.856670][ T5954] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 401.957482][ T5954] dvb-usb: bulk message failed: -22 (5/0) [ 401.963721][ T5954] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 401.974434][ T5954] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 402.006483][ T5954] usb 1-1: USB disconnect, device number 4 [ 402.057571][ T6300] FAULT_INJECTION: forcing a failure. [ 402.057571][ T6300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.071066][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.1.71 Not tainted syzkaller #0 PREEMPT(full) [ 402.071089][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.071099][ T6300] Call Trace: [ 402.071105][ T6300] [ 402.071112][ T6300] dump_stack_lvl+0x100/0x190 [ 402.071144][ T6300] should_fail_ex.cold+0x5/0xa [ 402.071168][ T6300] _copy_from_user+0x2e/0xd0 [ 402.071194][ T6300] core_sys_select+0x472/0xbb0 [ 402.071217][ T6300] ? __pfx_core_sys_select+0x10/0x10 [ 402.071232][ T6300] ? find_held_lock+0x2b/0x80 [ 402.071253][ T6300] ? get_pid_task+0xfc/0x250 [ 402.071304][ T6300] ? __pfx_set_user_sigmask+0x10/0x10 [ 402.071323][ T6300] ? __mutex_unlock_slowpath+0x15c/0x790 [ 402.071345][ T6300] ? __fget_files+0x215/0x3d0 [ 402.071367][ T6300] do_pselect.constprop.0+0x238/0x270 [ 402.071388][ T6300] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 402.071410][ T6300] ? ksys_write+0x1ac/0x250 [ 402.071441][ T6300] __x64_sys_pselect6+0x149/0x1c0 [ 402.071462][ T6300] do_syscall_64+0x106/0xf80 [ 402.071479][ T6300] ? clear_bhb_loop+0x40/0x90 [ 402.071500][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.071518][ T6300] RIP: 0033:0x7fa85b99c799 [ 402.071534][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.071550][ T6300] RSP: 002b:00007fa85c90f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 402.071567][ T6300] RAX: ffffffffffffffda RBX: 00007fa85bc16090 RCX: 00007fa85b99c799 [ 402.071578][ T6300] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 402.071588][ T6300] RBP: 00007fa85c90f090 R08: 0000000000000000 R09: 0000000000000000 [ 402.071598][ T6300] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 402.071608][ T6300] R13: 00007fa85bc16128 R14: 00007fa85bc16090 R15: 00007ffc353128e8 [ 402.071631][ T6300] [ 402.110070][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 402.156383][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 402.156397][ T30] audit: type=1400 audit(1772641193.276:252): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 402.164287][ T5923] usb 4-1: Product: syz [ 402.732455][ T30] audit: type=1400 audit(1772641193.816:253): avc: denied { ioctl } for pid=6292 comm="syz.2.73" path="socket:[9604]" dev="sockfs" ino=9604 ioctlcmd=0x6414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 402.771985][ T5954] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 402.940404][ T5923] usb 4-1: Manufacturer: syz [ 402.945032][ T5923] usb 4-1: SerialNumber: syz [ 402.951890][ T5923] usb 4-1: config 0 descriptor?? [ 403.072002][ T5902] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 403.307782][ T5923] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 403.314670][ T5923] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 403.421569][ T29] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 403.430831][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 403.437383][ T5902] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 403.449319][ T5902] usb 5-1: config 0 has no interface number 0 [ 403.459413][ T5902] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 403.488446][ T5902] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 403.509896][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.532044][ T5923] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 403.533698][ T5902] usb 5-1: Product: syz [ 403.539637][ T5923] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 403.560341][ T5902] usb 5-1: Manufacturer: syz [ 403.590141][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 403.597971][ T5902] usb 5-1: SerialNumber: syz [ 403.604049][ T5902] usb 5-1: config 0 descriptor?? [ 403.614084][ T5902] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 403.635985][ T29] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 403.639044][ T5902] em28xx 5-1:0.132: Video interface 132 found: [ 403.645169][ T5923] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 403.654201][ T6322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.676194][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.700068][ T29] usb 1-1: Product: syz [ 403.704268][ T29] usb 1-1: Manufacturer: syz [ 403.720266][ T29] usb 1-1: SerialNumber: syz [ 403.735117][ T5923] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 403.748983][ T29] usb 1-1: config 0 descriptor?? [ 403.958267][ T975] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 404.051290][ T5902] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 404.107678][ T6310] syzkaller0: entered promiscuous mode [ 404.113430][ T6310] syzkaller0: entered allmulticast mode [ 404.125007][ T6310] tipc: Started in network mode [ 404.130470][ T6310] tipc: Node identity 96d8f20f9909, cluster identity 4711 [ 404.148472][ T6310] tipc: Enabled bearer , priority 0 [ 404.168778][ T975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.179043][ T29] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 404.199364][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 404.209525][ T975] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 404.218696][ T975] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 404.228252][ T29] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 404.236286][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.244367][ T29] usb 1-1: media controller created [ 404.252340][ T975] usb 2-1: config 0 descriptor?? [ 404.272430][ T975] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 404.279086][ T975] dvb-usb: bulk message failed: -22 (3/0) [ 404.288188][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.310390][ T975] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 404.340573][ T975] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 404.348319][ T975] usb 2-1: media controller created [ 404.359239][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.391319][ T975] dvb-usb: bulk message failed: -22 (6/0) [ 404.397163][ T975] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 404.407790][ T975] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 404.431872][ T975] dvb-usb: schedule remote query interval to 150 msecs. [ 404.438893][ T975] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 404.600164][ T975] dvb-usb: bulk message failed: -22 (1/0) [ 404.606227][ T975] dvb-usb: error while querying for an remote control event. [ 404.770628][ T975] dvb-usb: bulk message failed: -22 (1/0) [ 404.791030][ T975] dvb-usb: error while querying for an remote control event. [ 404.813830][ T6309] tipc: Resetting bearer [ 404.828844][ T6309] tipc: Disabling bearer [ 404.871282][ T29] zl10353_read_register: readreg error (reg=127, ret==0) [ 404.887785][ T29] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 404.894249][ T5902] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 404.895902][ T6321] ------------[ cut here ]------------ [ 404.906182][ T5902] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 404.910120][ T6321] usb 1-1: BOGUS control dir, pipe 80000580 doesn't match bRequestType c0 [ 404.910138][ T6321] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#1: syz.1.79/6321 [ 404.917018][ T5902] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 404.925247][ T6321] Modules linked in: [ 404.948358][ T6321] CPU: 1 UID: 0 PID: 6321 Comm: syz.1.79 Not tainted syzkaller #0 PREEMPT(full) [ 404.957536][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.967629][ T6321] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 404.973324][ T6321] Code: d2 74 5d 48 89 54 24 40 e8 df 77 b8 fa 4c 89 ef e8 67 c3 de fe 48 89 c6 48 8d 3d ad fe 95 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 b3 77 b8 fa 89 ee bf ff 00 00 00 [ 404.993904][ T6321] RSP: 0018:ffffc90006ecf820 EFLAGS: 00010283 [ 404.999954][ T6321] RAX: ffffffff8c80b620 RBX: ffff888057e20b00 RCX: 0000000080000580 [ 405.008298][ T6321] RDX: ffff88802330e720 RSI: ffffffff8c80b620 RDI: ffffffff90e63c40 [ 405.016281][ T6321] RBP: ffff888020b3a058 R08: 00000000000000c0 R09: 0000000000000000 [ 405.024366][ T6321] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880344a5ce0 [ 405.032373][ T6321] R13: ffff888020b3a0b0 R14: 0000000080000580 R15: 00000000000000c0 [ 405.040367][ T6321] FS: 00007fa85c90f6c0(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 405.049281][ T6321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.055895][ T6321] CR2: 00007ffc4f4adfe4 CR3: 0000000022f6d000 CR4: 00000000003526f0 [ 405.061474][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.063886][ T6321] Call Trace: [ 405.075470][ T6321] [ 405.078391][ T6321] ? __init_swait_queue_head+0xca/0x150 [ 405.084418][ T6321] usb_start_wait_urb+0x106/0x4c0 [ 405.089765][ T6321] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 405.095439][ T6321] ? __asan_memset+0x23/0x50 [ 405.100057][ T6321] usb_control_msg+0x326/0x4a0 [ 405.104821][ T6321] ? __pfx_usb_control_msg+0x10/0x10 [ 405.110183][ T6321] ? __asan_memset+0x23/0x50 [ 405.114787][ T6321] dtv5100_i2c_msg+0x1be/0x340 [ 405.119583][ T6321] dtv5100_i2c_xfer+0x131/0x3d0 [ 405.124508][ T6321] ? mark_held_locks+0x40/0x70 [ 405.129292][ T6321] __i2c_transfer+0x5d9/0x17f0 [ 405.134089][ T6321] ? __pfx___i2c_transfer+0x10/0x10 [ 405.139307][ T6321] i2c_transfer+0x15f/0x380 [ 405.143850][ T6321] i2c_transfer_buffer_flags+0x10c/0x190 [ 405.149489][ T6321] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 405.150455][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.155703][ T6321] ? _copy_from_user+0x59/0xd0 [ 405.168113][ T6321] i2cdev_write+0x11e/0x240 [ 405.172690][ T6321] vfs_write+0x2aa/0x1070 [ 405.177042][ T6321] ? __pfx_i2cdev_write+0x10/0x10 [ 405.180320][ T5902] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 405.182097][ T6321] ? __pfx_vfs_write+0x10/0x10 [ 405.195572][ T6321] ? find_held_lock+0x2b/0x80 [ 405.200182][ T5902] em28xx 5-1:0.132: analog set to bulk mode. [ 405.200911][ T6321] ? __fget_files+0x215/0x3d0 [ 405.210932][ T6321] ? __fget_files+0x215/0x3d0 [ 405.212962][ T5909] em28xx 5-1:0.132: Registering V4L2 extension [ 405.215627][ T6321] ? __fget_files+0x21f/0x3d0 [ 405.226581][ T6321] ksys_write+0x12a/0x250 [ 405.230987][ T6321] ? __pfx_ksys_write+0x10/0x10 [ 405.235868][ T6321] do_syscall_64+0x106/0xf80 [ 405.240501][ T6321] ? clear_bhb_loop+0x40/0x90 [ 405.245203][ T6321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.251167][ T6321] RIP: 0033:0x7fa85b99c799 [ 405.255619][ T6321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.275312][ T6321] RSP: 002b:00007fa85c90f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.283783][ T6321] RAX: ffffffffffffffda RBX: 00007fa85bc16090 RCX: 00007fa85b99c799 [ 405.284343][ T5902] usb 5-1: USB disconnect, device number 4 [ 405.292706][ T6321] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 000000000000000a [ 405.300124][ T5909] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 405.306390][ T6321] RBP: 00007fa85ba32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 405.322687][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.330883][ T6321] R13: 00007fa85bc16128 R14: 00007fa85bc16090 R15: 00007ffc353128e8 [ 405.338913][ T6321] [ 405.341985][ T6321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 405.349264][ T6321] CPU: 1 UID: 0 PID: 6321 Comm: syz.1.79 Not tainted syzkaller #0 PREEMPT(full) [ 405.358371][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.368409][ T6321] Call Trace: [ 405.371666][ T6321] [ 405.374577][ T6321] dump_stack_lvl+0x100/0x190 [ 405.379248][ T6321] vpanic+0x552/0x970 [ 405.383210][ T6321] ? __pfx_vpanic+0x10/0x10 [ 405.387696][ T6321] panic+0xd1/0xe0 [ 405.391397][ T6321] ? __pfx_panic+0x10/0x10 [ 405.395800][ T6321] check_panic_on_warn.cold+0x19/0x34 [ 405.401152][ T6321] ? usb_submit_urb+0x1573/0x1910 [ 405.406172][ T6321] __warn.cold+0x191/0x348 [ 405.410571][ T6321] __report_bug+0x296/0x3d0 [ 405.415049][ T6321] ? usb_submit_urb+0x1573/0x1910 [ 405.420057][ T6321] ? __pfx___report_bug+0x10/0x10 [ 405.425068][ T6321] ? mark_held_locks+0x40/0x70 [ 405.429828][ T6321] report_bug_entry+0xe1/0x290 [ 405.434569][ T6321] ? usb_submit_urb+0x157e/0x1910 [ 405.439574][ T6321] handle_bug+0x1cd/0x2a0 [ 405.443885][ T6321] exc_invalid_op+0x17/0x50 [ 405.448370][ T6321] asm_exc_invalid_op+0x1a/0x20 [ 405.453198][ T6321] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 405.458812][ T6321] Code: d2 74 5d 48 89 54 24 40 e8 df 77 b8 fa 4c 89 ef e8 67 c3 de fe 48 89 c6 48 8d 3d ad fe 95 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 b3 77 b8 fa 89 ee bf ff 00 00 00 [ 405.478745][ T6321] RSP: 0018:ffffc90006ecf820 EFLAGS: 00010283 [ 405.484791][ T6321] RAX: ffffffff8c80b620 RBX: ffff888057e20b00 RCX: 0000000080000580 [ 405.492738][ T6321] RDX: ffff88802330e720 RSI: ffffffff8c80b620 RDI: ffffffff90e63c40 [ 405.500694][ T6321] RBP: ffff888020b3a058 R08: 00000000000000c0 R09: 0000000000000000 [ 405.508661][ T6321] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880344a5ce0 [ 405.516608][ T6321] R13: ffff888020b3a0b0 R14: 0000000080000580 R15: 00000000000000c0 [ 405.524569][ T6321] ? __init_swait_queue_head+0xca/0x150 [ 405.530110][ T6321] usb_start_wait_urb+0x106/0x4c0 [ 405.535119][ T6321] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 405.540667][ T6321] ? __asan_memset+0x23/0x50 [ 405.545255][ T6321] usb_control_msg+0x326/0x4a0 [ 405.550014][ T6321] ? __pfx_usb_control_msg+0x10/0x10 [ 405.555299][ T6321] ? __asan_memset+0x23/0x50 [ 405.559879][ T6321] dtv5100_i2c_msg+0x1be/0x340 [ 405.564641][ T6321] dtv5100_i2c_xfer+0x131/0x3d0 [ 405.569479][ T6321] ? mark_held_locks+0x40/0x70 [ 405.574233][ T6321] __i2c_transfer+0x5d9/0x17f0 [ 405.578985][ T6321] ? __pfx___i2c_transfer+0x10/0x10 [ 405.584167][ T6321] i2c_transfer+0x15f/0x380 [ 405.588658][ T6321] i2c_transfer_buffer_flags+0x10c/0x190 [ 405.594273][ T6321] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 405.600411][ T6321] ? _copy_from_user+0x59/0xd0 [ 405.605163][ T6321] i2cdev_write+0x11e/0x240 [ 405.609648][ T6321] vfs_write+0x2aa/0x1070 [ 405.613964][ T6321] ? __pfx_i2cdev_write+0x10/0x10 [ 405.618973][ T6321] ? __pfx_vfs_write+0x10/0x10 [ 405.623723][ T6321] ? find_held_lock+0x2b/0x80 [ 405.628381][ T6321] ? __fget_files+0x215/0x3d0 [ 405.633036][ T6321] ? __fget_files+0x215/0x3d0 [ 405.637696][ T6321] ? __fget_files+0x21f/0x3d0 [ 405.642365][ T6321] ksys_write+0x12a/0x250 [ 405.646696][ T6321] ? __pfx_ksys_write+0x10/0x10 [ 405.651541][ T6321] do_syscall_64+0x106/0xf80 [ 405.656120][ T6321] ? clear_bhb_loop+0x40/0x90 [ 405.660789][ T6321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.666836][ T6321] RIP: 0033:0x7fa85b99c799 [ 405.671232][ T6321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.690818][ T6321] RSP: 002b:00007fa85c90f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.699211][ T6321] RAX: ffffffffffffffda RBX: 00007fa85bc16090 RCX: 00007fa85b99c799 [ 405.707161][ T6321] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 000000000000000a [ 405.715109][ T6321] RBP: 00007fa85ba32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 405.723057][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.731004][ T6321] R13: 00007fa85bc16128 R14: 00007fa85bc16090 R15: 00007ffc353128e8 [ 405.738976][ T6321] [ 405.742230][ T6321] Kernel Offset: disabled [ 405.746527][ T6321] Rebooting in 86400 seconds..