last executing test programs: 19.778959729s ago: executing program 4 (id=603): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002}}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000640)={0x0, 0x5}, 0x8) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0xf55a1f1d3119de44, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000780)={r4, &(0x7f0000000680)='{+%},-{\\\x00', 0x880, &(0x7f00000006c0)={@align=0xc, {0xfffb, 0x5, 0x1ff, 0x3}}, 0x7, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0xd64995e2}) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000900)={r11, @in={{0x2, 0x4e23, @remote}}, 0x8, 0x2}, &(0x7f00000009c0)=0x90) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_MSG_GETGEN(r9, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8080) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f0000000140)={0x40, 0x30, 0x96, {0x96, 0xc, "0e2878461ea1df414fe5069a8ff3167c99ddeba228caa2f534e82eb67affc1a4e7c8bd40180b14524b543fd4d8d3c5efc7377a03895c46ed7cfeada5125b90b4abe719ed8b3ebcdee9ba497dd029d3fd162be3e5a39b35e66d8b36f6cb1ac09e79307033f6630a40ae60b9e3d17c9640332d3516a4b051bfffa1b46c0ad3ddb5433a000be5cc95cc567749968a72e4512614e91a"}}, &(0x7f0000000200)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "a1915265b2bbb7e8a3c0b146c94e86940de074433e713de5497af1799696f98e42df14e010980f439cd21f3149897ce5bd6a480145deb2d0c8a0fdbf0184010e4c2d7950f22e428112"}}, &(0x7f0000000280)={0x0, 0x22, 0x14, {[@main=@item_012={0x2, 0x0, 0xc, "238a"}, @global=@item_012={0x2, 0x1, 0x9, "e89f"}, @global=@item_012={0x1, 0x1, 0x3, 'R'}, @main=@item_012={0x1, 0x0, 0xa, "1f"}, @global=@item_4={0x3, 0x1, 0x5, "82738a8b"}, @local=@item_4={0x3, 0x2, 0x7, "31f327af"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7d, 0x81, 0x1, {0x22, 0xe8a}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="000759000000cc6ed9a32e8a43e0df2547e1f0fb2e98e5fdaa42c59b1e784008771a41f101dd6d5f2489035df310e8c96789cc8ba7d87fafa6fd97e76bf4ae99d78e979c758cdcd54008e050a8dc7360d330d0d9380307bbe11370f2df3311"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x20, 0x3, 0x1, 0xf8}}) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 17.720178265s ago: executing program 0 (id=608): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) 17.433864905s ago: executing program 0 (id=609): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) r2 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x91ea6c1af182532) renameat2(r3, &(0x7f0000000000)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) sched_getattr(r2, &(0x7f0000000240)={0x38}, 0x38, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) tkill(r2, 0xe) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x2, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x73}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000040)={&(0x7f0000000780)=[{0x10, 0x0, 0x0, 0x0}, {0x9, 0x200, 0x0, 0x0}], 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 14.617991009s ago: executing program 1 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x141) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa4) 14.510081192s ago: executing program 4 (id=618): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r6, &(0x7f0000004000)=""/4112, 0x1010, 0xbdca9fdae8226dea, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000027000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00018e98868feeb62e0500000800000085000000a50000009500000000000000ab38614a228b9df6312678ec5a8e953f57fa29dd2bcdea1808c8a2e60f326085af86ed362842061f6709c963b6403ec04969c5a6633aff95ed5d9639739dfa75f5982862512f68959cf92af41d2800000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$rds(0x15, 0x5, 0x0) setsockopt(r0, 0x86, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 14.297025768s ago: executing program 2 (id=619): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffffc, {0x0, 0x0, 0x0, r10, {0x9}, {0x10}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x42, 0x5, 0x3ff, 0x2, 0x200, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0xfc, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x20006, 0x3, 0x8, 0x2, 0x3d, 0x4, 0x84000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x542a73c, 0xffffffff, 0x2, 0x4, 0xb0, 0xea, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x9, 0x3, 0x8, 0x4, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2e7, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xe, 0x6, 0x80000001, 0x5, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x7fff, 0x7, 0x2, 0x5, 0x8000, 0x200, 0x3, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0x1, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0xfffffffe, 0x80000000, 0x400, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r12 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r12, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 13.694417209s ago: executing program 3 (id=621): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt(r0, 0x86, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000b80), &(0x7f0000000c00)=0x8) 13.679071905s ago: executing program 1 (id=622): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prlimit64(r2, 0xe, &(0x7f0000000240)={0x8, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x4, 0x7, 0x7f, 0x28, 0xffffffffffffffff, 0x5}, 0x50) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000100ffffffff00000000030000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r4, &(0x7f0000001000)=""/4085, 0xff5) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0x1000f1, 0x5, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x0, 0x8, 0x400b, 0x746f, 0x8, 0x6, 0x63, 0xee, 0x4, 0x7ffd]}) ioctl$COMEDI_DEVINFO(r5, 0x80b06401, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x3f}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0) 12.866292494s ago: executing program 2 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000400000000", @ANYRES32=0x0, @ANYBLOB="937b010000000000140012800b0001006d616373656300001400028008005cc5", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) dup3(r0, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r10, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe8, r9, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000055}, 0x20000000) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r13, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b01008d4ec6"}) 12.863393335s ago: executing program 4 (id=624): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000d4ba", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r6, &(0x7f0000004000)=""/4112, 0x1010, 0xbdca9fdae8226dea, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000027000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00018e98868feeb62e0500000800000085000000a50000009500000000000000ab38614a228b9df6312678ec5a8e953f57fa29dd2bcdea1808c8a2e60f326085af86ed362842061f6709c963b6403ec04969c5a6633aff95ed5d9639739dfa75f5982862512f68959cf92af41d2800000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r11, 0x114, 0x3, &(0x7f0000000100)={{0x9bdf, 0x196}, 0x8}, 0x10) setsockopt(r0, 0x86, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12.665567766s ago: executing program 0 (id=625): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="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"/352, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000140)='espintcp', 0xfffffffffffffd39) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x0, 0x80000000, 0x5, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {0xa, 0xffe0}, {0x0, 0xd}}}, 0x24}}, 0x44051) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000007200010b2bbd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0800010001000000e474f82e4c1ad1b1076466b49ed6f68eef7be00bbbff3a03b43adc3f3c0bb15bc8ac50f6af54e870780593c2421bf71060b20eb5888e324dd9223db8c801afda7970d119c43ec421fcd0d8f66e7b2907ebf9d02ff84c4e67951932423118ff25e6785694f0e75478ab159fe34f74e75ce9b0fa791ac46e9adb82676bd59091d230719ebb1d061ac22a858674d30935eebbd23273996e2fcbf65836da142b0a61c953dfd1edee768a51c36af981bc4f982c2a91963492b6919ab45ee7ee1cb484e261d0e9021cd1a0f565ebe3d95053b2be58d699f169cf75884d84dabadac5"], 0x20}}, 0x4040) sendmmsg(r2, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000000640), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_RADAR_DETECT(r2, 0x0, 0x4000010) 12.324551977s ago: executing program 3 (id=626): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000d4bad2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r6, &(0x7f0000004000)=""/4112, 0x1010, 0xbdca9fdae8226dea, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000027000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00018e98868feeb62e0500000800000085000000a50000009500000000000000ab38614a228b9df6312678ec5a8e953f57fa29dd2bcdea1808c8a2e60f326085af86ed362842061f6709c963b6403ec04969c5a6633aff95ed5d9639739dfa75f5982862512f68959cf92af41d2800000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$rds(0x15, 0x5, 0x0) setsockopt(r0, 0x86, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11.378773604s ago: executing program 4 (id=627): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000d4bad23f00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) 11.366346161s ago: executing program 0 (id=628): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004844) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x80000, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x800, 0xa, 0x8}]}]}, 0x138}}, 0x0) 11.297657672s ago: executing program 1 (id=629): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000d4bad2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r6, &(0x7f0000004000)=""/4112, 0x1010, 0xbdca9fdae8226dea, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000027000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00018e98868feeb62e0500000800000085000000a50000009500000000000000ab38614a228b9df6312678ec5a8e953f57fa29dd2bcdea1808c8a2e60f326085af86ed362842061f6709c963b6403ec04969c5a6633aff95ed5d9639739dfa75f5982862512f68959cf92af41d2800000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$rds(0x15, 0x5, 0x0) setsockopt(r0, 0x86, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11.19384428s ago: executing program 2 (id=630): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_cmd={0x2, 0x1, 0x1000, 0x200, 0x4, 0x0, 0x8, 0x5f, 0x4, 0x12, 0xfffffff9, 0x0, 0xc, 0xcf, 0x5, 0x1, [0x53, 0x284d]}}) r1 = socket$netlink(0x10, 0x3, 0x7) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000000)=0x1, 0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xba3a75b424809aac, 0x0) syz_emit_ethernet(0xad, &(0x7f0000000200)={@multicast, @random="ebbc544db3b4", @void, {@mpls_mc={0x8848, {[{0x1}, {0x3, 0x0, 0x1}, {0x5}, {0x800}], @ipv6=@generic={0x3, 0x6, "51db48", 0x67, 0x0, 0x515bf78f3f236997, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], "fac08d2477937eaefbaed75ad0d14c23fd0bf5cde5b1ea21f25e08dcc34d44c4947f6b56384ef8e2aa344bc02a6720698fe5ed005bc9d0285161cff304d2f25516eba6cbe5fbd26b63898b420b5eaed271249ffa42cc2d7b17ab53561c7124bf01458db1868f61"}}}}}}, &(0x7f0000000440)={0x1, 0x3, [0xc95, 0x687, 0xc9b, 0x7ee]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x1, 0x70bd2b, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x4, 0x47}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)={[{@size}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x121200, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount(&(0x7f0000000500)=@sr0, &(0x7f00000005c0)='./cgroup\x00', &(0x7f0000000600)='binder\x00', 0x804000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000480)=r2, 0x4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000303"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) 10.742178766s ago: executing program 3 (id=631): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) 10.397326694s ago: executing program 0 (id=632): r0 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99l \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x3) fallocate(r0, 0x0, 0x0, 0x400001) fcntl$addseals(r0, 0x409, 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @remote, 0x8}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000010000108fdefffff080000f3ffffffef03fbfec46a5fbeb4526713790ec95c452c323acf83c53f1d67b679619b29eacc78687e7c5adba0afd53c7bcece4b9478b1b5a23b0dea410b0bf7633ecd9dd674c3648148e0e81036d58f1491b4abc95567cbdaeb166e9b3cc98719283ec974a2ada68de24bc4ad8dc6dc5e0b2ab2c3eb1457088a2b1302b371c46de6cfaac0ee94", @ANYRES32=0x0, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r2, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\'@^', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x7d2e09d0332e2f67]}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r6, 0x2, &(0x7f00000011c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r5, &(0x7f00000000c0)=' ', 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x5, r5, 0x0, 0x0, 0x1}]) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0xc6) syz_clone(0x4000e400, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "51edef7214e4ff93", "42635001e90003a25f49631e467e1074", "6bbc39e1", "e01cf9ab6c03e72d"}, 0x28) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) 10.394499682s ago: executing program 2 (id=633): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002}}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000640)={0x0, 0x5}, 0x8) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0xf55a1f1d3119de44, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000780)={r4, &(0x7f0000000680)='{+%},-{\\\x00', 0x880, &(0x7f00000006c0)={@align=0xc, {0xfffb, 0x5, 0x1ff, 0x3}}, 0x7, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0xd64995e2}) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000900)={r11, @in={{0x2, 0x4e23, @remote}}, 0x8, 0x2}, &(0x7f00000009c0)=0x90) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_MSG_GETGEN(r9, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8080) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f0000000140)={0x40, 0x30, 0x96, {0x96, 0xc, "0e2878461ea1df414fe5069a8ff3167c99ddeba228caa2f534e82eb67affc1a4e7c8bd40180b14524b543fd4d8d3c5efc7377a03895c46ed7cfeada5125b90b4abe719ed8b3ebcdee9ba497dd029d3fd162be3e5a39b35e66d8b36f6cb1ac09e79307033f6630a40ae60b9e3d17c9640332d3516a4b051bfffa1b46c0ad3ddb5433a000be5cc95cc567749968a72e4512614e91a"}}, &(0x7f0000000200)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "a1915265b2bbb7e8a3c0b146c94e86940de074433e713de5497af1799696f98e42df14e010980f439cd21f3149897ce5bd6a480145deb2d0c8a0fdbf0184010e4c2d7950f22e428112"}}, &(0x7f0000000280)={0x0, 0x22, 0x14, {[@main=@item_012={0x2, 0x0, 0xc, "238a"}, @global=@item_012={0x2, 0x1, 0x9, "e89f"}, @global=@item_012={0x1, 0x1, 0x3, 'R'}, @main=@item_012={0x1, 0x0, 0xa, "1f"}, @global=@item_4={0x3, 0x1, 0x5, "82738a8b"}, @local=@item_4={0x3, 0x2, 0x7, "31f327af"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7d, 0x81, 0x1, {0x22, 0xe8a}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="000759000000cc6ed9a32e8a43e0df2547e1f0fb2e98e5fdaa42c59b1e784008771a41f101dd6d5f2489035df310e8c96789cc8ba7d87fafa6fd97e76bf4ae99d78e979c758cdcd54008e050a8dc7360d330d0d9380307bbe11370f2df3311"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x20, 0x3, 0x1, 0xf8}}) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10.214194414s ago: executing program 3 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) prlimit64(r1, 0xe, &(0x7f0000000240)={0x8, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x4, 0x7, 0x7f, 0x28, 0xffffffffffffffff, 0x5}, 0x50) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000100ffffffff00000000030000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r4, &(0x7f0000001000)=""/4085, 0xff5) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0x1000f1, 0x5, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x0, 0x8, 0x400b, 0x746f, 0x8, 0x6, 0x63, 0xee, 0x4, 0x7ffd]}) ioctl$COMEDI_DEVINFO(r5, 0x80b06401, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x3f}) 10.190727029s ago: executing program 4 (id=635): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x255}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x10002, 0x27e}, &(0x7f0000001240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x988a, 0x5420, 0x0, 0x10000003, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5240, 0x20, 0x0, 0x146}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd15, 0x10, 0x1, 0x263}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0x1, 0x0, r5}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r9, '\x00', {0x0, 0x5, 0x0, 0x0}}, 0x0) r14 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r14, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x7, 0x0, &(0x7f0000000340)=0x37}) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x19, 0x2000004, 0x80010, r13, 0x20000000) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 7.257118062s ago: executing program 1 (id=636): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0xf500000000000000, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 6.529853527s ago: executing program 2 (id=637): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="000000000000000000000000d4bad2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r6, &(0x7f0000004000)=""/4112, 0x1010, 0xbdca9fdae8226dea, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000027000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00018e98868feeb62e0500000800000085000000a50000009500000000000000ab38614a228b9df6312678ec5a8e953f57fa29dd2bcdea1808c8a2e60f326085af86ed362842061f6709c963b6403ec04969c5a6633aff95ed5d9639739dfa75f5982862512f68959cf92af41d2800000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r11, 0x114, 0x3, &(0x7f0000000100)={{0x9bdf, 0x196}, 0x8}, 0x10) setsockopt(r0, 0x86, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.177597182s ago: executing program 3 (id=638): socket$inet_icmp(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/xfrm_stat\x00') open_tree(0xffffffffffffff9c, 0x0, 0x89101) futex(&(0x7f0000000040)=0x1, 0x7, 0x2, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)=0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ftruncate(0xffffffffffffffff, 0x51a9497) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="4401000010000100fcffffbf00010000fe880000000000000000000000000001ac1414aa000000000000000000000000000107944e2300050000a0003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0xc0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1, {0x0, 0x192, 0x9ba3, 0xffff, 0x82520, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4040080) socket(0x400000000010, 0x3, 0x0) 5.073731297s ago: executing program 1 (id=639): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000d4bad2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r6, &(0x7f0000004000)=""/4112, 0x1010, 0xbdca9fdae8226dea, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000027000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00018e98868feeb62e0500000800000085000000a50000009500000000000000ab38614a228b9df6312678ec5a8e953f57fa29dd2bcdea1808c8a2e60f326085af86ed362842061f6709c963b6403ec04969c5a6633aff95ed5d9639739dfa75f5982862512f68959cf92af41d2800000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$rds(0x15, 0x5, 0x0) setsockopt(r0, 0x86, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.264764192s ago: executing program 2 (id=640): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3, 0x0, 0x200000000000000}, 0x38) 4.209232007s ago: executing program 4 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) prlimit64(r1, 0xe, &(0x7f0000000240)={0x8, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x4, 0x7, 0x7f, 0x28, 0xffffffffffffffff, 0x5}, 0x50) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000100ffffffff00000000030000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r4, &(0x7f0000001000)=""/4085, 0xff5) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0x1000f1, 0x5, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x0, 0x8, 0x400b, 0x746f, 0x8, 0x6, 0x63, 0xee, 0x4, 0x7ffd]}) ioctl$COMEDI_DEVINFO(r5, 0x80b06401, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x3f}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0) 1.539959918s ago: executing program 1 (id=642): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)="4eb7627d651221dfe543962df18dd93e7a2359215df6d5f727cb368e8141290f4edd61ac885a27e5c5184995dc53ab918a6e26713db29a", &(0x7f0000000680)="4352228044cf0dffd6360c5b1650292e9f86c0f8f99b0479163bee4a816e13694fb7329f6f4aa78c21b85e7b8435028f1c51907ff9c9eca0cf3f7710ee7d6d74ed0cd6dc14faa9d4c3e720a0390b7e62753023f8c62254b1847a7c6d04749d86d22bfed856672ee1a66e40528d8a4ae309e4425cf88e4a2de1b61fe231a0ee4cbe3cf3ddbd4c9ca7595baeda80e297e35a3a37bb52258180c165d4aa21b1dd409c553c1c23bb80bf66d0cd25d3fdce1d8cb86423f0247d08ce3ef75718d6a20f62c0", 0x76, r1, 0x4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x40}, {}, {}, {}, {}, {0x20, 0xf1}, {}, {}, {0x3}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000001c0)={0x1, 0x10, &(0x7f00000024c0)="739c17c2c2cc029eecad068741dfda99"}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff3, 0xb}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0xb, 0x4, 0xc, 0x0, 0x7, 0x5, 0xc, 0x3, 0x7, 0x8, 0xd, 0xc, 0xe, 0xf, 0xb, 0x8], 0x0, [0x7, 0x3, 0x2, 0x2, 0x823, 0x8000, 0x9, 0x7, 0x9, 0xeaf, 0x8, 0x8, 0x0, 0x100, 0x3ff, 0x9], [0xe, 0x7, 0x2, 0x0, 0x3, 0x2, 0x7, 0x7, 0x7, 0x3, 0x8, 0x3, 0x8, 0x8, 0x4bc3, 0xff]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24004070}, 0x24000890) write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x11) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffd, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r11, 0x13000000}, 0x48) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x48e300, 0x0) 554.238027ms ago: executing program 0 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x141) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa4) 0s ago: executing program 3 (id=644): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) close(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0xa1328f59b7fd100f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x65d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x60}}}, &(0x7f0000000480)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x40890) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a800000000010506000000000000000002000000340001801400018008000100ac14142308000200ac1414aa1c0002800500010006000000060002004e220000060003004e230000340002801400018008000100ac1414aa08000200ac1414231c0002800500010006000000060002004e230000060003004e220000100004800c00018005000100010000001400188008000100000001000800020000000000080007000000012c"], 0xa8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0) dup(0xffffffffffffffff) kernel console output (not intermixed with test programs): T5595] Bluetooth: hci3: command tx timeout [ 69.919918][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.927075][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.940778][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.947935][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.963536][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.970758][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.026029][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.060067][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.067253][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.096882][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.104056][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.166202][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.347679][ T5605] veth0_vlan: entered promiscuous mode [ 70.376481][ T5605] veth1_vlan: entered promiscuous mode [ 70.450593][ T5605] veth0_macvtap: entered promiscuous mode [ 70.475293][ T5605] veth1_macvtap: entered promiscuous mode [ 70.536646][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.578594][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.643442][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.704525][ T1162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.733194][ T1162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.773083][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.812637][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.988021][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.006976][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.021867][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.037028][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.054995][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.095104][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.126539][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.151895][ T5592] veth0_vlan: entered promiscuous mode [ 71.177202][ T30] audit: type=1400 audit(1786063506.876:154): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.KuNKbZ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.206475][ T5592] veth1_vlan: entered promiscuous mode [ 71.227592][ T30] audit: type=1400 audit(1786063506.876:155): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.252961][ T30] audit: type=1400 audit(1786063506.876:156): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.KuNKbZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.253900][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.280674][ T30] audit: type=1400 audit(1786063506.876:157): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.307195][ T30] audit: type=1400 audit(1786063506.876:158): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.KuNKbZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.334316][ T30] audit: type=1400 audit(1786063506.876:159): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.KuNKbZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.369637][ T30] audit: type=1400 audit(1786063506.876:160): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.379692][ T5601] veth0_vlan: entered promiscuous mode [ 71.391926][ T30] audit: type=1400 audit(1786063506.906:161): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.420404][ T5605] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.437663][ T30] audit: type=1400 audit(1786063506.906:162): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="gadgetfs" ino=7385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.447845][ T5592] veth0_macvtap: entered promiscuous mode [ 71.485706][ T5601] veth1_vlan: entered promiscuous mode [ 71.497996][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.524251][ T5592] veth1_macvtap: entered promiscuous mode [ 71.611708][ T5593] veth0_vlan: entered promiscuous mode [ 71.625006][ T5593] veth1_vlan: entered promiscuous mode [ 71.681704][ T5601] veth0_macvtap: entered promiscuous mode [ 71.690880][ T5601] veth1_macvtap: entered promiscuous mode [ 71.726407][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.747472][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.870135][ T5595] Bluetooth: hci0: command tx timeout [ 71.876642][ T5595] Bluetooth: hci1: command tx timeout [ 71.911430][ T5595] Bluetooth: hci4: command tx timeout [ 71.918176][ T50] Bluetooth: hci2: command tx timeout [ 71.995504][ T50] Bluetooth: hci3: command tx timeout [ 72.139094][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.155900][ T5593] veth0_macvtap: entered promiscuous mode [ 72.166508][ T5593] veth1_macvtap: entered promiscuous mode [ 72.190652][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.243140][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.273020][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.289196][ T5603] veth0_vlan: entered promiscuous mode [ 72.300189][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.309690][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.344868][ T5603] veth1_vlan: entered promiscuous mode [ 72.382835][ T1085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.394470][ T1085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.493832][ T3354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.513560][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.522146][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.534980][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.557283][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.592405][ T5603] veth0_macvtap: entered promiscuous mode [ 72.604752][ T5785] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6'. [ 72.641338][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.657805][ T5603] veth1_macvtap: entered promiscuous mode [ 72.689047][ T3354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.707096][ T3354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.731727][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.743239][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.760154][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.770125][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.807965][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.818863][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.818880][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.853131][ T3354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.853430][ T3354] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.853582][ T3354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.882643][ T5686] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.922789][ T5789] [U]  [ 72.932222][ T3354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.048657][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.074432][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.107086][ T5686] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.120034][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.120051][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.120066][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.139163][ T5686] usb 2-1: config 0 has no interfaces? [ 73.150373][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.169965][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.204800][ T5686] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 73.221337][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.229444][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.247804][ T5686] usb 2-1: Product: syz [ 73.257592][ T5686] usb 2-1: Manufacturer: syz [ 73.268625][ T5686] usb 2-1: SerialNumber: syz [ 73.275104][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.289965][ T5686] usb 2-1: config 0 descriptor?? [ 73.323673][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.357893][ T5797] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 73.369052][ T5797] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 73.391135][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.406712][ T5797] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 73.480088][ T5802] Zero length message leads to an empty skb [ 73.594334][ T10] libceph: connect (1)[c::]:6789 error -101 [ 73.648667][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 73.912106][ T50] Bluetooth: hci1: command tx timeout [ 73.917589][ T5595] Bluetooth: hci0: command tx timeout [ 73.984171][ T10] libceph: connect (1)[c::]:6789 error -101 [ 73.991501][ T5595] Bluetooth: hci4: command tx timeout [ 73.996961][ T50] Bluetooth: hci2: command tx timeout [ 73.999960][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 74.071566][ T50] Bluetooth: hci3: command tx timeout [ 74.150761][ T5793] ceph: No mds server is up or the cluster is laggy [ 74.518919][ T5809] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 74.605837][ T5701] libceph: connect (1)[c::]:6789 error -101 [ 74.684361][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 74.684376][ T30] audit: type=1400 audit(1786063510.386:213): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 74.694042][ T5701] libceph: mon0 (1)[c::]:6789 connect error [ 74.831420][ T30] audit: type=1400 audit(1786063510.536:214): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 74.867202][ T5813] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 74.909825][ T30] audit: type=1400 audit(1786063510.606:215): avc: denied { create } for pid=5811 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.968016][ T30] audit: type=1400 audit(1786063510.636:216): avc: denied { ioctl } for pid=5811 comm="syz.2.3" path="socket:[9502]" dev="sockfs" ino=9502 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.018554][ T30] audit: type=1400 audit(1786063510.716:217): avc: denied { name_bind } for pid=5815 comm="syz.0.10" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 75.064206][ T30] audit: type=1400 audit(1786063510.716:218): avc: denied { unlink } for pid=5814 comm="syz.3.8" name="#1" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.103443][ T30] audit: type=1400 audit(1786063510.796:219): avc: denied { create } for pid=5811 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.179460][ T30] audit: type=1400 audit(1786063510.796:220): avc: denied { bind } for pid=5811 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.198983][ T5708] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.207938][ T30] audit: type=1400 audit(1786063510.806:221): avc: denied { accept } for pid=5811 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.228138][ T30] audit: type=1400 audit(1786063510.806:222): avc: denied { setopt } for pid=5811 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.295888][ T5821] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8'. [ 75.355066][ T5708] usb 5-1: Using ep0 maxpacket: 8 [ 75.364323][ T5708] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 75.374148][ T5708] usb 5-1: config 179 has no interface number 0 [ 75.380685][ T5708] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 75.423094][ T5708] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 75.466331][ T5708] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.512507][ T5708] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 75.568819][ T5708] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 75.659907][ T5708] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 75.733695][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.150657][ T5819] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 76.444981][ T5693] usb 2-1: USB disconnect, device number 2 [ 76.502569][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 76.564728][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 76.621077][ T5829] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 76.650361][ T5829] iwpm_mapping_info_cb: Unable to parse nlmsg [ 76.663296][ T5834] tmpfs: Bad value for 'size' [ 76.672778][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 76.866189][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 77.299782][ T5831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'. [ 78.144395][ T5843] tmpfs: Bad value for 'size' [ 78.151734][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'. [ 78.295051][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 78.637039][ T5848] tmpfs: Bad value for 'size' [ 78.643533][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 78.784790][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 79.109572][ T5845] Set syz1 is full, maxelem 14 reached [ 79.141467][ T5851] fuse: Bad value for 'fd' [ 79.593214][ T10] IPVS: starting estimator thread 0... [ 79.630940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 79.669051][ T10] usb 5-1: USB disconnect, device number 2 [ 79.670434][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 79.683335][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 79.751351][ T5855] IPVS: using max 42 ests per chain, 100800 per kthread [ 79.828333][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 79.828348][ T30] audit: type=1400 audit(1786063515.526:270): avc: denied { create } for pid=5858 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.869760][ T5861] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 79.978135][ T5863] netlink: 76 bytes leftover after parsing attributes in process `syz.3.19'. [ 80.515116][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.895460][ T30] audit: type=1400 audit(1786063515.646:271): avc: denied { write } for pid=5858 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.916210][ T30] audit: type=1400 audit(1786063516.356:272): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 80.958557][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.983383][ T10] usb 4-1: config 0 has no interfaces? [ 81.006789][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 81.094019][ T30] audit: type=1400 audit(1786063516.776:273): avc: denied { nlmsg_write } for pid=5864 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 81.193138][ T5874] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 82.145398][ T30] audit: type=1400 audit(1786063516.876:274): avc: denied { connect } for pid=5867 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.166951][ T29] cfg80211: failed to load regulatory.db [ 82.738250][ T30] audit: type=1400 audit(1786063518.426:275): avc: denied { create } for pid=5878 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.826017][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.844464][ T10] usb 4-1: Product: syz [ 82.852517][ T10] usb 4-1: Manufacturer: syz [ 82.862022][ T10] usb 4-1: SerialNumber: syz [ 82.886102][ T10] usb 4-1: config 0 descriptor?? [ 82.950719][ T30] audit: type=1400 audit(1786063518.646:276): avc: denied { create } for pid=5877 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.970015][ T10] usb 4-1: can't set config #0, error -71 [ 82.990338][ T10] usb 4-1: USB disconnect, device number 2 [ 83.017450][ T30] audit: type=1400 audit(1786063518.686:277): avc: denied { bind } for pid=5877 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.115442][ T30] audit: type=1400 audit(1786063518.686:278): avc: denied { accept } for pid=5877 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.234429][ T30] audit: type=1400 audit(1786063518.686:279): avc: denied { setopt } for pid=5877 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.343841][ T5888] tmpfs: Bad value for 'size' [ 83.352270][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 83.534248][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 83.696796][ T5884] netlink: 84 bytes leftover after parsing attributes in process `syz.0.25'. [ 84.211366][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.384327][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.446724][ T5900] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 84.600162][ T5890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.26'. [ 84.925795][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 84.925811][ T30] audit: type=1400 audit(1786063520.626:323): avc: denied { module_request } for pid=5902 comm="syz.1.30" kmod="net-cls-+" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.317288][ T30] audit: type=1400 audit(1786063520.726:324): avc: denied { connect } for pid=5902 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.551198][ T30] audit: type=1400 audit(1786063521.146:325): avc: denied { shutdown } for pid=5902 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.576762][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.585732][ T10] usb 1-1: config 1 has no interface number 0 [ 85.592963][ T10] usb 1-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 85.606692][ T10] usb 1-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 85.615771][ T10] usb 1-1: config 1 interface 2 has no altsetting 1 [ 85.624352][ T10] usb 1-1: string descriptor 0 read error: -71 [ 85.625689][ T30] audit: type=1400 audit(1786063521.246:326): avc: denied { create } for pid=5902 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.630610][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.663147][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.695360][ T30] audit: type=1400 audit(1786063521.246:327): avc: denied { write } for pid=5902 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.723369][ T30] audit: type=1400 audit(1786063521.306:328): avc: denied { map_read map_write } for pid=5909 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.769660][ T30] audit: type=1400 audit(1786063521.316:329): avc: denied { prog_run } for pid=5909 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.820410][ T30] audit: type=1400 audit(1786063521.516:330): avc: denied { read write } for pid=5909 comm="syz.4.31" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 85.844907][ T30] audit: type=1400 audit(1786063521.516:331): avc: denied { open } for pid=5909 comm="syz.4.31" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 85.850830][ T5910] 9p: Bad value for 'rfdno' [ 85.871124][ T10] usb 1-1: can't set config #1, error -71 [ 85.892080][ T10] usb 1-1: USB disconnect, device number 2 [ 86.034024][ T30] audit: type=1400 audit(1786063521.736:332): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 86.492504][ T5918] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.351128][ T5594] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.574225][ T5594] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.584752][ T5594] usb 5-1: config 0 has no interfaces? [ 88.598567][ T5594] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 88.654969][ T5594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.680257][ T5594] usb 5-1: Product: syz [ 88.697525][ T5594] usb 5-1: Manufacturer: syz [ 88.727022][ T5594] usb 5-1: SerialNumber: syz [ 88.878729][ T5594] usb 5-1: config 0 descriptor?? [ 90.827829][ T5916] netdevsim netdevsim4: Firmware load for '../file0/file0' refused, path contains '..' component [ 90.865916][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 90.865946][ T30] audit: type=1400 audit(1786063525.446:352): avc: denied { create } for pid=5933 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.906609][ T30] audit: type=1400 audit(1786063526.086:353): avc: denied { setopt } for pid=5931 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.043611][ T30] audit: type=1400 audit(1786063526.956:354): avc: denied { read } for pid=5935 comm="syz.1.39" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.089400][ T30] audit: type=1400 audit(1786063526.956:355): avc: denied { open } for pid=5935 comm="syz.1.39" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.116270][ T30] audit: type=1400 audit(1786063527.106:356): avc: denied { read write } for pid=5935 comm="syz.1.39" dev="sockfs" ino=8961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.182432][ T30] audit: type=1400 audit(1786063527.126:357): avc: denied { audit_write } for pid=5935 comm="syz.1.39" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 92.357414][ T5594] usb 5-1: USB disconnect, device number 3 [ 92.381404][ T30] audit: type=1400 audit(1786063528.076:358): avc: denied { create } for pid=5947 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.435643][ T30] audit: type=1400 audit(1786063528.086:359): avc: denied { ioctl } for pid=5947 comm="syz.0.40" path="socket:[8970]" dev="sockfs" ino=8970 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.885037][ T30] audit: type=1400 audit(1786063528.136:360): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.965398][ T30] audit: type=1400 audit(1786063528.616:361): avc: denied { allowed } for pid=5947 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.904262][ T5964] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 95.944079][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 95.944118][ T30] audit: type=1400 audit(1786063531.616:375): avc: denied { write } for pid=5978 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.460456][ T30] audit: type=1400 audit(1786063531.616:376): avc: denied { nlmsg_write } for pid=5978 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.497141][ T30] audit: type=1400 audit(1786063532.056:377): avc: denied { create } for pid=5979 comm="syz.3.49" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.525906][ T30] audit: type=1400 audit(1786063532.056:378): avc: denied { map } for pid=5979 comm="syz.3.49" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.585841][ T30] audit: type=1400 audit(1786063532.056:379): avc: denied { read write } for pid=5979 comm="syz.3.49" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.703046][ T30] audit: type=1400 audit(1786063532.346:380): avc: denied { mount } for pid=5992 comm="syz.2.53" name="/" dev="autofs" ino=9902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 96.821815][ T30] audit: type=1400 audit(1786063532.496:381): avc: denied { read append } for pid=5990 comm="syz.4.52" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 96.884509][ T5999] netlink: 76 bytes leftover after parsing attributes in process `syz.3.54'. [ 96.918644][ T30] audit: type=1400 audit(1786063532.496:382): avc: denied { open } for pid=5990 comm="syz.4.52" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.129524][ T30] audit: type=1400 audit(1786063532.826:383): avc: denied { ioctl } for pid=6003 comm="syz.1.42" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.206473][ T30] audit: type=1400 audit(1786063532.826:384): avc: denied { execute } for pid=6003 comm="syz.1.42" name="file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.228658][ T5708] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.393132][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.435801][ T5708] usb 4-1: config 0 has no interfaces? [ 97.457099][ T5708] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 97.477661][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.496622][ T5708] usb 4-1: Product: syz [ 97.509760][ T5708] usb 4-1: Manufacturer: syz [ 97.522894][ T5708] usb 4-1: SerialNumber: syz [ 97.567435][ T5708] usb 4-1: config 0 descriptor?? [ 97.663015][ T188] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.672511][ T6008] process 'syz.0.55' launched '/dev/fd/7' with NULL argv: empty string added [ 97.858291][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 97.874782][ T188] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 97.890362][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.930454][ T188] usb 5-1: config 0 descriptor?? [ 97.947186][ T188] smsusb:smsusb_probe: board id=8, interface number 0 [ 97.961631][ T188] smsusb:smsusb_probe: Device initialized with return code -19 [ 98.173728][ T6002] netdevsim netdevsim3: Firmware load for '../file0/file0' refused, path contains '..' component [ 98.333771][ T5700] usb 5-1: USB disconnect, device number 4 [ 99.436399][ T6023] fuse: Bad value for 'fd' [ 99.786339][ T6026] tmpfs: Bad value for 'size' [ 99.798624][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 100.249344][ T188] usb 4-1: USB disconnect, device number 3 [ 101.143380][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 101.229355][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 101.229373][ T30] audit: type=1400 audit(1786063536.816:396): avc: denied { mount } for pid=6024 comm="syz.1.60" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 101.438858][ T30] audit: type=1400 audit(1786063536.896:397): avc: denied { mount } for pid=6024 comm="syz.1.60" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 101.687921][ T6044] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.747346][ T188] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.946007][ T188] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.130553][ T188] usb 3-1: config 0 has no interfaces? [ 103.257388][ T188] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 103.389720][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.476066][ T188] usb 3-1: Product: syz [ 103.539299][ T188] usb 3-1: Manufacturer: syz [ 103.633675][ T188] usb 3-1: SerialNumber: syz [ 103.664620][ T188] usb 3-1: config 0 descriptor?? [ 104.355783][ T30] audit: type=1400 audit(1786063540.056:398): avc: denied { create } for pid=6064 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.559277][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 104.713244][ T30] audit: type=1400 audit(1786063540.246:399): avc: denied { connect } for pid=6064 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.746588][ T6068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.767794][ T6065] l2tp_ppp: sess 2/0: no socket in recv [ 104.832476][ T6068] netlink: 76 bytes leftover after parsing attributes in process `syz.1.72'. [ 105.032237][ T6044] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 105.201044][ T5708] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.433711][ T5708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.540187][ T5708] usb 2-1: config 0 has no interfaces? [ 105.603269][ T30] audit: type=1400 audit(1786063540.456:400): avc: denied { name_bind } for pid=6064 comm="syz.0.71" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 105.630454][ T30] audit: type=1400 audit(1786063540.466:401): avc: denied { setopt } for pid=6064 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.632632][ T5708] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 105.650492][ T30] audit: type=1400 audit(1786063540.476:402): avc: denied { shutdown } for pid=6064 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.660120][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.682190][ T30] audit: type=1400 audit(1786063540.486:403): avc: denied { getopt } for pid=6064 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.707781][ T30] audit: type=1400 audit(1786063540.486:404): avc: denied { name_connect } for pid=6064 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 105.743675][ T5708] usb 2-1: Product: syz [ 105.747897][ T5708] usb 2-1: Manufacturer: syz [ 105.754954][ T5708] usb 2-1: SerialNumber: syz [ 105.831446][ T6081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 106.433453][ T5708] usb 2-1: config 0 descriptor?? [ 106.510817][ T5708] usb 3-1: USB disconnect, device number 2 [ 106.565392][ T30] audit: type=1400 audit(1786063542.266:405): avc: denied { mount } for pid=6083 comm="syz.3.75" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 106.611561][ T6084] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 106.631862][ T30] audit: type=1400 audit(1786063542.286:406): avc: denied { read write } for pid=6083 comm="syz.3.75" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 106.657019][ T30] audit: type=1400 audit(1786063542.286:407): avc: denied { open } for pid=6083 comm="syz.3.75" path="/17/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 106.681535][ T30] audit: type=1400 audit(1786063542.296:408): avc: denied { ioctl } for pid=6083 comm="syz.3.75" path="/17/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 106.733978][ T30] audit: type=1400 audit(1786063542.436:409): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 107.125281][ T6097] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 108.057936][ T30] audit: type=1400 audit(1786063543.756:410): avc: denied { append } for pid=6108 comm="syz.4.81" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.233977][ T6109] Set syz1 is full, maxelem 14 reached [ 108.548754][ T6117] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 109.661749][ T5700] usb 2-1: USB disconnect, device number 3 [ 110.554790][ T30] audit: type=1400 audit(1786063546.246:411): avc: denied { create } for pid=6122 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.776697][ T5708] IPVS: starting estimator thread 0... [ 110.901077][ T6136] IPVS: using max 42 ests per chain, 100800 per kthread [ 110.957882][ T30] audit: type=1400 audit(1786063546.656:412): avc: denied { setopt } for pid=6137 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.989417][ T6140] ubi0: attaching mtd0 [ 111.015270][ T6140] ubi0: scanning is finished [ 111.020617][ T30] audit: type=1400 audit(1786063546.686:413): avc: denied { mount } for pid=6137 comm="syz.4.89" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 111.043847][ T6140] ubi0: empty MTD device detected [ 111.077582][ T30] audit: type=1400 audit(1786063546.766:414): avc: denied { search } for pid=6137 comm="syz.4.89" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.198728][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 112.198841][ T30] audit: type=1400 audit(1786063547.896:417): avc: denied { search } for pid=5258 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.002689][ T30] audit: type=1400 audit(1786063547.896:418): avc: denied { search } for pid=5258 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.025237][ T30] audit: type=1400 audit(1786063547.896:419): avc: denied { search } for pid=5258 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.047151][ T30] audit: type=1400 audit(1786063547.936:420): avc: denied { read } for pid=5258 comm="dhcpcd" name="n31" dev="tmpfs" ino=2284 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.195235][ T30] audit: type=1400 audit(1786063547.936:421): avc: denied { open } for pid=5258 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=2284 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.273546][ T6140] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 114.366298][ T30] audit: type=1400 audit(1786063547.946:422): avc: denied { getattr } for pid=5258 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=2284 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.709173][ T30] audit: type=1400 audit(1786063550.406:423): avc: denied { read } for pid=6167 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.796250][ T6170] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.803492][ T30] audit: type=1400 audit(1786063550.406:424): avc: denied { read open } for pid=6167 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.908592][ T6170] netlink: 76 bytes leftover after parsing attributes in process `syz.2.97'. [ 114.978072][ T30] audit: type=1400 audit(1786063550.406:425): avc: denied { getattr } for pid=6167 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.003724][ T30] audit: type=1400 audit(1786063550.436:426): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 115.025650][ T6177] tmpfs: Bad value for 'size' [ 115.031591][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'. [ 115.786753][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 115.822563][ T5700] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.176581][ T5700] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.208515][ T5700] usb 3-1: config 0 has no interfaces? [ 116.259061][ T5700] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 116.323435][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.831560][ T5700] usb 3-1: Product: syz [ 116.835790][ T5700] usb 3-1: Manufacturer: syz [ 116.840517][ T5700] usb 3-1: SerialNumber: syz [ 116.853551][ T5700] usb 3-1: config 0 descriptor?? [ 116.865217][ T6200] fuse: Bad value for 'fd' [ 117.300131][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 117.300148][ T30] audit: type=1400 audit(1786063552.996:429): avc: denied { watch } for pid=6206 comm="syz.3.106" path="/25" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.434934][ T30] audit: type=1400 audit(1786063553.136:430): avc: denied { sys_module } for pid=6194 comm="syz.0.104" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.024068][ T6179] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 118.080059][ T30] audit: type=1400 audit(1786063553.776:431): avc: denied { write } for pid=6165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.169836][ T30] audit: type=1400 audit(1786063553.776:432): avc: denied { add_name } for pid=6165 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.193504][ T5700] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.233212][ T30] audit: type=1400 audit(1786063553.776:433): avc: denied { create } for pid=6165 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.447028][ T6226] wlan0 speed is unknown, defaulting to 1000 [ 118.453836][ T6226] wlan0 speed is unknown, defaulting to 1000 [ 118.462373][ T6226] wlan0 speed is unknown, defaulting to 1000 [ 118.469606][ T6226] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 118.483953][ T6226] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 118.501754][ T6226] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 118.529562][ T6226] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.588303][ T6226] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 119.217297][ T30] audit: type=1400 audit(1786063553.776:434): avc: denied { write } for pid=6165 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2329 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.367080][ T6226] wlan0 speed is unknown, defaulting to 1000 [ 119.382185][ T6226] wlan0 speed is unknown, defaulting to 1000 [ 119.396527][ T6226] wlan0 speed is unknown, defaulting to 1000 [ 119.409091][ T6226] wlan0 speed is unknown, defaulting to 1000 [ 119.422217][ T6226] wlan0 speed is unknown, defaulting to 1000 [ 119.553527][ T5708] usb 3-1: USB disconnect, device number 3 [ 119.577291][ T6230] smbdirect: ib_dev[syz0] removed [ 119.585914][ T30] audit: type=1400 audit(1786063553.776:435): avc: denied { append } for pid=6165 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2329 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.610176][ T30] audit: type=1400 audit(1786063553.776:436): avc: denied { create } for pid=6215 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.629507][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 119.634713][ T30] audit: type=1400 audit(1786063553.806:437): avc: denied { bind } for pid=6215 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.664248][ T5700] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.676275][ T5700] usb 4-1: config 4 interface 0 has no altsetting 0 [ 119.704724][ T30] audit: type=1400 audit(1786063553.816:438): avc: denied { listen } for pid=6215 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.744419][ T5700] usb 4-1: string descriptor 0 read error: -22 [ 119.760257][ T5700] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 119.786717][ T6238] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 119.810625][ T5700] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 119.867599][ T5700] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 120.033329][ T5700] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 120.299416][ T5700] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 120.479289][ T5700] usb 4-1: media controller created [ 120.559301][ T6252] tmpfs: Bad value for 'size' [ 120.579524][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 120.614491][ T6254] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 120.740796][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.981098][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 121.205854][ T5700] zl10353_read_register: readreg error (reg=127, ret==0) [ 121.363398][ T6268] kAFS: unable to lookup cell '(,c¾Ì' [ 121.525171][ T6273] dlm: Unknown command passed to DLM device : 3 [ 121.525171][ T6273] [ 121.548396][ T5700] usb 4-1: USB disconnect, device number 4 [ 122.272237][ T6282] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 122.284852][ T6282] netlink: 76 bytes leftover after parsing attributes in process `syz.1.123'. [ 122.639840][ T188] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.646021][ T6287] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 122.691041][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 122.691084][ T30] audit: type=1400 audit(1786063558.376:450): avc: denied { write } for pid=6283 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.099128][ T30] audit: type=1400 audit(1786063558.686:451): avc: denied { ioctl } for pid=6266 comm="syz.3.120" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 123.428001][ T30] audit: type=1400 audit(1786063558.736:452): avc: denied { setopt } for pid=6266 comm="syz.3.120" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.532684][ T188] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.557099][ T188] usb 2-1: config 0 has no interfaces? [ 123.565146][ T188] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 123.576029][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.588006][ T188] usb 2-1: Product: syz [ 123.593186][ T188] usb 2-1: Manufacturer: syz [ 123.600984][ T188] usb 2-1: SerialNumber: syz [ 123.613713][ T188] usb 2-1: config 0 descriptor?? [ 124.660404][ T30] audit: type=1400 audit(1786063560.336:453): avc: denied { map } for pid=6296 comm="syz.2.129" path="socket:[10723]" dev="sockfs" ino=10723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 124.698334][ T6304] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 124.981023][ T188] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 125.052225][ T5701] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.061607][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 126.073796][ T188] usb 3-1: not running at top speed; connect to a high speed hub [ 126.087570][ T6317] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.090584][ T5701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.107077][ T6317] netlink: 76 bytes leftover after parsing attributes in process `syz.4.133'. [ 126.122280][ T188] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 126.141968][ T5701] usb 4-1: config 4 interface 0 has no altsetting 0 [ 126.160077][ T5701] usb 4-1: string descriptor 0 read error: -22 [ 126.170331][ T5594] usb 2-1: USB disconnect, device number 4 [ 126.179230][ T5701] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 126.189061][ T188] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 126.214923][ T5701] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 126.223576][ T188] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 126.257975][ T188] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 126.277311][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.287482][ T6319] Set syz1 is full, maxelem 14 reached [ 126.298917][ T5701] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 126.335047][ T6302] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 126.365882][ T188] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 126.390122][ T5701] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.400987][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.408373][ T188] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 126.424771][ T5701] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 126.436546][ T188] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 126.444624][ T5701] usb 4-1: media controller created [ 126.467325][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.500212][ T6309] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 126.600546][ T188] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 126.656669][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.685864][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.135'. [ 127.252302][ T5701] zl10353_read_register: readreg error (reg=127, ret==0) [ 127.283220][ T188] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 127.301003][ T29] usb 5-1: config 0 has no interfaces? [ 127.308785][ T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 127.319283][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.328038][ T29] usb 5-1: Product: syz [ 127.381908][ T188] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 127.430448][ T188] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 127.455528][ T5701] usb 4-1: USB disconnect, device number 5 [ 127.462869][ T29] usb 5-1: Manufacturer: syz [ 127.487002][ T29] usb 5-1: SerialNumber: syz [ 127.503288][ T188] usb 3-1: USB disconnect, device number 4 [ 127.610863][ T29] usb 5-1: config 0 descriptor?? [ 127.630094][ T188] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 128.245094][ T188] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 128.274550][ T188] keyspan 3-1:1.0: device disconnected [ 128.608878][ T6320] netdevsim netdevsim4: Firmware load for '../file0/file0' refused, path contains '..' component [ 128.731704][ T6345] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 130.233083][ T6356] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.932309][ T188] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 130.962354][ T6356] netlink: 76 bytes leftover after parsing attributes in process `syz.2.145'. [ 131.136869][ T5701] usb 5-1: USB disconnect, device number 5 [ 131.377357][ T6371] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 132.080902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 132.110528][ T29] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.171230][ T188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.541952][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.663865][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.679730][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.698024][ T29] usb 3-1: config 0 has no interfaces? [ 132.699049][ T188] usb 1-1: not running at top speed; connect to a high speed hub [ 132.712468][ T188] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 132.725444][ T188] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 132.734661][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.742693][ T188] usb 1-1: Product: syz [ 132.748804][ T188] usb 1-1: Manufacturer: syz [ 132.783288][ T29] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 132.792496][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.801610][ T29] usb 3-1: Product: syz [ 132.806409][ T29] usb 3-1: Manufacturer: syz [ 132.814717][ T29] usb 3-1: SerialNumber: syz [ 132.820106][ T188] usb 1-1: SerialNumber: syz [ 132.829630][ T29] usb 3-1: config 0 descriptor?? [ 133.620472][ T30] audit: type=1400 audit(1786063569.316:454): avc: denied { bind } for pid=6349 comm="syz.0.142" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.643249][ T29] usb 3-1: USB disconnect, device number 5 [ 133.725661][ T30] audit: type=1400 audit(1786063569.316:455): avc: denied { node_bind } for pid=6349 comm="syz.0.142" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 133.803705][ T188] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 133.839963][ T188] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 133.856392][ T6391] tmpfs: Bad value for 'size' [ 133.862748][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 133.887968][ T188] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 134.097508][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 134.191478][ T188] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 134.206930][ T188] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 136.275134][ T188] usb 1-1: USB disconnect, device number 3 [ 137.504355][ T6430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.515786][ T6430] netlink: 76 bytes leftover after parsing attributes in process `syz.0.163'. [ 137.538266][ T6428] fuse: Bad value for 'fd' [ 137.981712][ T188] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.057633][ T6437] tmpfs: Bad value for 'size' [ 138.063548][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 138.202281][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 138.452451][ T188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.473657][ T188] usb 1-1: config 0 has no interfaces? [ 138.492067][ T188] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 138.515858][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.546055][ T188] usb 1-1: Product: syz [ 138.557193][ T188] usb 1-1: Manufacturer: syz [ 138.564488][ T188] usb 1-1: SerialNumber: syz [ 138.573440][ T188] usb 1-1: config 0 descriptor?? [ 139.359512][ T30] audit: type=1400 audit(1786063575.056:456): avc: denied { write } for pid=6431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.728852][ T6467] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 140.687362][ T30] audit: type=1400 audit(1786063576.256:457): avc: denied { write } for pid=6460 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.803265][ T188] usb 1-1: USB disconnect, device number 4 [ 141.124961][ T6489] tmpfs: Bad value for 'size' [ 141.157991][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 141.575379][ T6492] tmpfs: Bad value for 'size' [ 141.593024][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 142.000737][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 143.229703][ T6511] fuse: Bad value for 'fd' [ 144.872686][ T6528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.184'. [ 145.525069][ T30] audit: type=1400 audit(1786063581.216:458): avc: denied { write } for pid=6482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.533644][ T6541] tmpfs: Bad value for 'size' [ 146.565115][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 147.679072][ T30] audit: type=1400 audit(1786063583.376:459): avc: denied { write } for pid=6548 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.186083][ T6592] tmpfs: Bad value for 'size' [ 150.195367][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'. [ 150.352272][ T5708] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.371130][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 151.479144][ T5708] usb 4-1: Using ep0 maxpacket: 16 [ 151.610740][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.735787][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 153.697364][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 153.710392][ T5708] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 153.720243][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.753401][ T30] audit: type=1400 audit(1786063589.446:460): avc: denied { write } for pid=6583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.782769][ T5708] usb 4-1: config 0 descriptor?? [ 153.835931][ T5708] usb 4-1: can't set config #0, error -71 [ 154.036974][ T5708] usb 4-1: USB disconnect, device number 6 [ 155.664364][ T30] audit: type=1400 audit(1786063591.366:461): avc: denied { write } for pid=6632 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.399438][ T6649] tmpfs: Bad value for 'size' [ 156.413106][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 156.648423][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 158.344907][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 159.468953][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.220'. [ 161.156818][ T30] audit: type=1400 audit(1786063596.856:462): avc: denied { write } for pid=6655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.118131][ T6726] tmpfs: Bad value for 'size' [ 162.125577][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 162.335237][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 162.918765][ T30] audit: type=1400 audit(1786063598.606:463): avc: denied { write } for pid=6722 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.570981][ T5686] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 163.606751][ T6740] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.642809][ T6740] netlink: 76 bytes leftover after parsing attributes in process `syz.1.234'. [ 163.730981][ T5686] usb 4-1: Using ep0 maxpacket: 16 [ 164.936210][ T5686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.982801][ T5686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 164.995206][ T5686] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 165.018365][ T5686] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 165.036829][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.053615][ T5686] usb 4-1: config 0 descriptor?? [ 165.070931][ T6749] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 165.103586][ T6749] netlink: 76 bytes leftover after parsing attributes in process `syz.0.237'. [ 165.120972][ T5708] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.284592][ T30] audit: type=1400 audit(1786063600.986:464): avc: denied { ioctl } for pid=6731 comm="syz.3.231" path="socket:[13017]" dev="sockfs" ino=13017 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.343268][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 165.364321][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 165.401107][ T5700] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.451006][ T188] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 165.579662][ T5700] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.592375][ T5700] usb 1-1: config 0 has no interfaces? [ 165.621009][ T188] usb 3-1: Using ep0 maxpacket: 16 [ 165.632625][ T5700] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 165.646117][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.659117][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.672744][ T5700] usb 1-1: Product: syz [ 165.677091][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 165.690734][ T5700] usb 1-1: Manufacturer: syz [ 165.697428][ T5700] usb 1-1: SerialNumber: syz [ 165.704554][ T188] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 165.736190][ T5700] usb 1-1: config 0 descriptor?? [ 165.759050][ T188] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 165.799932][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.837370][ T5708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.857766][ T188] usb 3-1: config 0 descriptor?? [ 166.317533][ T5708] usb 2-1: config 0 has no interfaces? [ 166.324963][ T5708] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 166.335624][ T5686] nintendo 0003:057E:2019.0001: collection stack underflow [ 166.344243][ T5686] nintendo 0003:057E:2019.0001: item 0 2 0 12 parsing failed [ 166.352272][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.362035][ T5686] nintendo 0003:057E:2019.0001: HID parse failed [ 166.369508][ T5708] usb 2-1: Product: syz [ 166.373467][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 166.374276][ T5708] usb 2-1: Manufacturer: syz [ 166.383092][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 166.388414][ T5686] nintendo 0003:057E:2019.0001: probe - fail = -22 [ 166.403569][ T5708] usb 2-1: SerialNumber: syz [ 166.412228][ T5686] nintendo 0003:057E:2019.0001: probe with driver nintendo failed with error -22 [ 166.422537][ T5708] usb 2-1: config 0 descriptor?? [ 166.505686][ T5686] usb 2-1: USB disconnect, device number 5 [ 166.742418][ T6770] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 166.761762][ T188] nintendo 0003:057E:2019.0002: collection stack underflow [ 166.769323][ T188] nintendo 0003:057E:2019.0002: item 0 2 0 12 parsing failed [ 166.777319][ T188] nintendo 0003:057E:2019.0002: HID parse failed [ 166.789970][ T188] nintendo 0003:057E:2019.0002: probe - fail = -22 [ 166.797765][ T188] nintendo 0003:057E:2019.0002: probe with driver nintendo failed with error -22 [ 167.375949][ T5700] usb 4-1: USB disconnect, device number 7 [ 168.946825][ T5700] usb 1-1: USB disconnect, device number 5 [ 169.131558][ T5594] usb 3-1: USB disconnect, device number 6 [ 170.279122][ T6801] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.400850][ T6801] netlink: 76 bytes leftover after parsing attributes in process `syz.3.252'. [ 170.831477][ T5594] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 171.187245][ T5594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.300776][ T29] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 171.606462][ T5594] usb 4-1: config 0 has no interfaces? [ 171.664227][ T5594] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 171.683327][ T5594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.701708][ T5594] usb 4-1: Product: syz [ 171.710158][ T5594] usb 4-1: Manufacturer: syz [ 171.722314][ T5594] usb 4-1: SerialNumber: syz [ 171.746969][ T5594] usb 4-1: config 0 descriptor?? [ 171.910452][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 171.924827][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.949663][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 172.456402][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 172.486519][ T29] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 172.496939][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.565715][ T29] usb 1-1: config 0 descriptor?? [ 172.884224][ T6803] netdevsim netdevsim3: Firmware load for '../file0/file0' refused, path contains '..' component [ 173.336811][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 173.386874][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 173.424130][ T30] audit: type=1400 audit(1786063609.126:465): avc: denied { write } for pid=6796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.017875][ T29] nintendo 0003:057E:2019.0003: collection stack underflow [ 174.159901][ T29] nintendo 0003:057E:2019.0003: item 0 2 0 12 parsing failed [ 174.293668][ T29] nintendo 0003:057E:2019.0003: HID parse failed [ 174.393272][ T29] nintendo 0003:057E:2019.0003: probe - fail = -22 [ 174.511502][ T29] nintendo 0003:057E:2019.0003: probe with driver nintendo failed with error -22 [ 174.522837][ T6849] tmpfs: Bad value for 'size' [ 174.528367][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'. [ 174.601262][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 174.725678][ T5594] usb 4-1: USB disconnect, device number 8 [ 174.748640][ T30] audit: type=1400 audit(1786063610.416:466): avc: denied { write } for pid=6851 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.117520][ T6860] tmpfs: Bad value for 'size' [ 175.123673][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 175.281361][ T5594] usb 1-1: USB disconnect, device number 6 [ 175.784935][ T6875] fuse: Bad value for 'fd' [ 176.528638][ T5594] IPVS: starting estimator thread 0... [ 176.709611][ T6887] IPVS: using max 38 ests per chain, 91200 per kthread [ 177.135423][ T6896] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.283037][ T6896] netlink: 76 bytes leftover after parsing attributes in process `syz.0.274'. [ 177.573255][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'. [ 178.131690][ T6905] tmpfs: Bad value for 'size' [ 178.204277][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 178.270948][ T29] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 178.338548][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 179.022462][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.163219][ T30] audit: type=1400 audit(1786063614.856:467): avc: denied { write } for pid=6873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.186435][ T29] usb 1-1: config 0 has no interfaces? [ 179.194259][ T29] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 179.203405][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.211621][ T29] usb 1-1: Product: syz [ 179.215833][ T29] usb 1-1: Manufacturer: syz [ 179.226102][ T29] usb 1-1: SerialNumber: syz [ 179.242543][ T29] usb 1-1: config 0 descriptor?? [ 179.761531][ T6930] tmpfs: Bad value for 'size' [ 179.767203][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 179.859676][ T6937] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 180.254311][ T30] audit: type=1400 audit(1786063615.946:468): avc: denied { write } for pid=6929 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.217330][ T6950] fuse: Bad value for 'fd' [ 181.332859][ T5700] usb 1-1: USB disconnect, device number 7 [ 182.131014][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.361176][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 182.500271][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.598755][ T10] usb 5-1: config 4 interface 0 has no altsetting 0 [ 182.671801][ T6966] tmpfs: Bad value for 'size' [ 182.683472][ T10] usb 5-1: string descriptor 0 read error: -22 [ 182.689925][ T10] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 182.699190][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 182.703590][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 182.725686][ T10] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 182.742978][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 182.753543][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 182.761954][ T10] usb 5-1: media controller created [ 182.867497][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 182.908831][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.951785][ T6955] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 184.281894][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 184.397423][ T10] usb 5-1: USB disconnect, device number 6 [ 186.276410][ T6993] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 186.287758][ T6993] netlink: 76 bytes leftover after parsing attributes in process `syz.4.297'. [ 186.342813][ T6995] tmpfs: Bad value for 'size' [ 186.350377][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'. [ 186.542484][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 186.574755][ T5686] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 186.832449][ T5686] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.868081][ T5686] usb 5-1: config 0 has no interfaces? [ 186.897513][ T5686] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 186.986012][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.034630][ T5686] usb 5-1: Product: syz [ 187.089796][ T5686] usb 5-1: Manufacturer: syz [ 187.115205][ T5686] usb 5-1: SerialNumber: syz [ 187.145594][ T7006] overlayfs: failed to resolve './file0': -2 [ 187.271363][ T5686] usb 5-1: config 0 descriptor?? [ 187.343614][ T7010] fuse: Bad value for 'fd' [ 187.539460][ T5686] IPVS: starting estimator thread 0... [ 188.219368][ T7015] IPVS: using max 38 ests per chain, 91200 per kthread [ 188.674664][ T7021] netdevsim netdevsim4: Firmware load for '../file0/file0' refused, path contains '..' component [ 188.709274][ T7020] tmpfs: Bad value for 'size' [ 188.728031][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 190.998237][ T5611] Bluetooth: hci1: command 0x0406 tx timeout [ 191.014818][ T7029] Bluetooth: hci2: command 0x0406 tx timeout [ 191.023484][ T5611] Bluetooth: hci3: command 0x0406 tx timeout [ 191.023832][ T7029] Bluetooth: hci0: command 0x0406 tx timeout [ 193.201539][ T7046] fuse: Bad value for 'fd' [ 193.231431][ T10] usb 5-1: USB disconnect, device number 7 [ 193.261792][ T5708] IPVS: starting estimator thread 0... [ 193.402572][ T7047] IPVS: using max 44 ests per chain, 105600 per kthread [ 193.552944][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 193.921693][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.928238][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.711774][ T5594] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 195.030981][ T5594] usb 4-1: Using ep0 maxpacket: 8 [ 195.038006][ T5594] usb 4-1: unable to get BOS descriptor or descriptor too short [ 195.055759][ T5594] usb 4-1: config 4 interface 0 has no altsetting 0 [ 195.066081][ T5594] usb 4-1: string descriptor 0 read error: -22 [ 195.082556][ T5594] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 195.127822][ T5594] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 195.165078][ T7072] tmpfs: Bad value for 'size' [ 195.194912][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 195.736569][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 195.750423][ T5594] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 196.032423][ T5594] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 196.136749][ T7057] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 196.151248][ T5594] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 197.029238][ T5594] usb 4-1: media controller created [ 197.044727][ T5594] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.066098][ T5594] zl10353_read_register: readreg error (reg=127, ret==0) [ 197.112776][ T7085] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.129479][ T7085] netlink: 76 bytes leftover after parsing attributes in process `syz.4.323'. [ 197.145145][ T5594] usb 4-1: USB disconnect, device number 9 [ 197.179249][ T7087] overlayfs: failed to resolve './file0': -2 [ 197.411032][ T5686] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 197.992497][ T5686] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.009218][ T5686] usb 5-1: config 0 has no interfaces? [ 198.020008][ T5686] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 198.034576][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.045955][ T5686] usb 5-1: Product: syz [ 198.050207][ T5686] usb 5-1: Manufacturer: syz [ 198.055910][ T5686] usb 5-1: SerialNumber: syz [ 198.066270][ T5686] usb 5-1: config 0 descriptor?? [ 199.343980][ T7111] netdevsim netdevsim4: Firmware load for '../file0/file0' refused, path contains '..' component [ 200.621720][ T7124] tmpfs: Bad value for 'size' [ 200.680530][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 200.765266][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 201.873910][ T5594] usb 5-1: USB disconnect, device number 8 [ 202.246439][ T7134] overlayfs: failed to resolve './file0': -2 [ 202.289074][ T7138] fuse: Bad value for 'fd' [ 202.841628][ T188] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.610964][ T188] usb 5-1: Using ep0 maxpacket: 8 [ 203.637963][ T188] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.663899][ T188] usb 5-1: config 4 interface 0 has no altsetting 0 [ 203.688924][ T188] usb 5-1: string descriptor 0 read error: -22 [ 203.714100][ T188] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 203.735145][ T188] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 204.421072][ T188] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 204.515098][ T7142] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 204.521499][ T188] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 204.588412][ T188] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 204.619032][ T188] usb 5-1: media controller created [ 204.670410][ T188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.830418][ T188] zl10353_read_register: readreg error (reg=127, ret==0) [ 205.798392][ T188] usb 5-1: USB disconnect, device number 9 [ 205.989994][ T7173] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 206.132613][ T7173] netlink: 76 bytes leftover after parsing attributes in process `syz.0.349'. [ 206.651324][ T188] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 206.818073][ T7179] tmpfs: Bad value for 'size' [ 206.854534][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 206.887315][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 207.147450][ T188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.702490][ T188] usb 1-1: config 0 has no interfaces? [ 207.712063][ T188] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 207.721527][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.729762][ T188] usb 1-1: Product: syz [ 207.748325][ T188] usb 1-1: Manufacturer: syz [ 207.755375][ T188] usb 1-1: SerialNumber: syz [ 207.763994][ T188] usb 1-1: config 0 descriptor?? [ 208.372860][ T7176] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 208.807925][ T7198] overlayfs: failed to resolve './file0': -2 [ 208.815803][ T7200] tmpfs: Bad value for 'size' [ 208.826723][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 208.972390][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 210.295178][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 210.357946][ T188] usb 1-1: USB disconnect, device number 8 [ 210.502321][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 210.621533][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.721157][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 211.782985][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 211.870993][ T7228] fuse: Bad value for 'fd' [ 211.886797][ T9] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 211.918574][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.979561][ T9] usb 3-1: config 0 descriptor?? [ 212.394149][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 212.486252][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 212.991538][ T9] nintendo 0003:057E:2019.0004: collection stack underflow [ 213.109212][ T9] nintendo 0003:057E:2019.0004: item 0 2 0 12 parsing failed [ 213.720354][ T9] nintendo 0003:057E:2019.0004: HID parse failed [ 213.755415][ T9] nintendo 0003:057E:2019.0004: probe - fail = -22 [ 213.821077][ T9] nintendo 0003:057E:2019.0004: probe with driver nintendo failed with error -22 [ 213.832660][ T7249] tmpfs: Bad value for 'size' [ 213.838162][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'. [ 214.341662][ T30] audit: type=1400 audit(1786063650.046:469): avc: denied { write } for pid=7256 comm="syz.1.375" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.363835][ T7257] comedi comedi3: comedi_config --init_data is deprecated [ 214.441199][ T30] audit: type=1400 audit(1786063650.146:470): avc: denied { shutdown } for pid=7256 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.528852][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.715479][ T30] audit: type=1400 audit(1786063650.166:471): avc: denied { write } for pid=7256 comm="syz.1.375" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 214.803157][ T5594] usb 3-1: USB disconnect, device number 7 [ 214.893015][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.908587][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 214.927632][ T9] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 214.936948][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.945622][ T9] usb 1-1: Product: syz [ 214.954661][ T9] usb 1-1: Manufacturer: syz [ 214.959727][ T9] usb 1-1: SerialNumber: syz [ 215.225795][ T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 215.292981][ T7267] netlink: 4540 bytes leftover after parsing attributes in process `syz.2.376'. [ 215.938152][ T5594] usb 1-1: USB disconnect, device number 9 [ 216.534631][ T5594] usblp0: removed [ 216.614459][ T30] audit: type=1400 audit(1786063652.316:472): avc: denied { ioctl } for pid=7264 comm="syz.4.377" path="socket:[16964]" dev="sockfs" ino=16964 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 216.638245][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.377'. [ 219.192126][ T7302] tmpfs: Bad value for 'size' [ 219.200464][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 219.332793][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'. [ 219.611867][ T5700] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 219.794333][ T5700] usb 4-1: Using ep0 maxpacket: 16 [ 219.803835][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.815126][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 219.827145][ T5700] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 219.845321][ T5700] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 219.901545][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.913479][ T5700] usb 4-1: config 0 descriptor?? [ 220.273986][ T5594] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 220.964027][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 220.973622][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 220.992157][ T5594] usb 3-1: Using ep0 maxpacket: 16 [ 221.015039][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.058510][ T7323] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 221.077416][ T7323] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 221.084953][ T30] audit: type=1400 audit(1786063656.696:473): avc: denied { mount } for pid=7320 comm="syz.1.393" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 221.173215][ T7325] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 221.215192][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 221.360100][ T5594] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 221.413885][ T5594] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 221.553117][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.059459][ T7325] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 222.088075][ T5594] usb 3-1: config 0 descriptor?? [ 222.164586][ T5700] nintendo 0003:057E:2019.0005: collection stack underflow [ 222.176881][ T5700] nintendo 0003:057E:2019.0005: item 0 2 0 12 parsing failed [ 222.194798][ T5700] nintendo 0003:057E:2019.0005: HID parse failed [ 222.683176][ T5700] nintendo 0003:057E:2019.0005: probe - fail = -22 [ 222.725526][ T5700] nintendo 0003:057E:2019.0005: probe with driver nintendo failed with error -22 [ 223.354287][ T5594] nintendo 0003:057E:2019.0006: collection stack underflow [ 223.371981][ T5686] usb 4-1: USB disconnect, device number 10 [ 223.381715][ T5594] nintendo 0003:057E:2019.0006: item 0 2 0 12 parsing failed [ 223.398300][ T5594] nintendo 0003:057E:2019.0006: HID parse failed [ 223.416020][ T5594] nintendo 0003:057E:2019.0006: probe - fail = -22 [ 223.437578][ T7326] bond1: entered promiscuous mode [ 223.439740][ T5594] nintendo 0003:057E:2019.0006: probe with driver nintendo failed with error -22 [ 224.187132][ T30] audit: type=1400 audit(1786063659.886:474): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 224.223232][ T5700] usb 3-1: USB disconnect, device number 8 [ 224.455726][ T7354] tmpfs: Bad value for 'size' [ 224.461296][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'. [ 224.582221][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 226.962076][ T30] audit: type=1400 audit(1786063662.616:475): avc: denied { read } for pid=7370 comm="syz.2.405" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 228.034921][ T7376] ceph: No mds server is up or the cluster is laggy [ 229.127217][ T30] audit: type=1400 audit(1786063662.616:476): avc: denied { ioctl } for pid=7370 comm="syz.2.405" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 229.512627][ T5686] libceph: connect (1)[c::]:6789 error -101 [ 229.637381][ T5686] libceph: mon0 (1)[c::]:6789 connect error [ 231.944160][ T7406] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 232.104957][ T7406] netlink: 76 bytes leftover after parsing attributes in process `syz.1.414'. [ 233.151027][ T5686] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 233.323668][ T5686] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.163048][ T5686] usb 2-1: config 0 has no interfaces? [ 235.378881][ T5686] usb 2-1: string descriptor 0 read error: -71 [ 235.385473][ T5686] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 235.444129][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.593975][ T5686] usb 2-1: config 0 descriptor?? [ 236.196281][ T5686] usb 2-1: can't set config #0, error -71 [ 236.247509][ T5686] usb 2-1: USB disconnect, device number 6 [ 237.079030][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 237.089013][ T7446] fuse: Bad value for 'fd' [ 237.853761][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 238.743452][ T7461] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.754255][ T7461] netlink: 76 bytes leftover after parsing attributes in process `syz.3.429'. [ 239.490611][ T188] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 241.132122][ T7487] tmpfs: Bad value for 'size' [ 241.137433][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 241.240229][ T188] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.064504][ T188] usb 4-1: config 0 has no interfaces? [ 242.109180][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 242.253571][ T188] usb 4-1: string descriptor 0 read error: -71 [ 242.259851][ T188] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 242.274772][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.432477][ T7502] fuse: Bad value for 'fd' [ 243.353194][ T188] usb 4-1: config 0 descriptor?? [ 243.478528][ T188] usb 4-1: can't set config #0, error -71 [ 243.724429][ T188] usb 4-1: USB disconnect, device number 11 [ 244.544982][ T5686] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 244.968048][ T5686] usb 1-1: Using ep0 maxpacket: 16 [ 244.984800][ T5686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.996333][ T5693] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 245.020755][ T5686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 245.045751][ T5686] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 245.345111][ T5686] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 245.357161][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.524424][ T5686] usb 1-1: config 0 descriptor?? [ 245.560895][ T5693] usb 5-1: Using ep0 maxpacket: 8 [ 245.567931][ T5693] usb 5-1: unable to get BOS descriptor or descriptor too short [ 245.576611][ T5693] usb 5-1: config 4 interface 0 has no altsetting 0 [ 246.028822][ T5693] usb 5-1: string descriptor 0 read error: -22 [ 246.060094][ T5693] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 246.110200][ T5693] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 246.161878][ T5693] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 246.239918][ T5693] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 246.270820][ T7544] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 246.302903][ T5693] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 246.342351][ T7544] netlink: 76 bytes leftover after parsing attributes in process `syz.2.449'. [ 246.357383][ T5693] usb 5-1: media controller created [ 246.426049][ T7514] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 246.751196][ T5700] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 246.930495][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.012208][ T5700] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.078267][ T5700] usb 3-1: config 0 has no interfaces? [ 247.183779][ T5700] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 247.286643][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.379442][ T5700] usb 3-1: Product: syz [ 247.420789][ T5686] nintendo 0003:057E:2019.0007: collection stack underflow [ 247.429299][ T5686] nintendo 0003:057E:2019.0007: item 0 2 0 12 parsing failed [ 247.438870][ T5686] nintendo 0003:057E:2019.0007: HID parse failed [ 247.450310][ T5686] nintendo 0003:057E:2019.0007: probe - fail = -22 [ 247.456930][ T5700] usb 3-1: Manufacturer: syz [ 247.456952][ T5700] usb 3-1: SerialNumber: syz [ 247.473845][ T5686] nintendo 0003:057E:2019.0007: probe with driver nintendo failed with error -22 [ 247.477655][ T5693] zl10353_read_register: readreg error (reg=127, ret==0) [ 247.506821][ T5700] usb 3-1: config 0 descriptor?? [ 247.588223][ T7553] tmpfs: Bad value for 'size' [ 247.596148][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 247.918994][ T5700] usb 1-1: USB disconnect, device number 10 [ 248.101020][ T5693] usb 5-1: USB disconnect, device number 10 [ 248.150203][ T7544] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 248.210324][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 248.433206][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 248.981748][ T7566] l2tp_ppp: sess 2/0: no socket in recv [ 249.008763][ T7569] tmpfs: Bad value for 'size' [ 249.016439][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'. [ 249.165129][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 251.526589][ T983] usb 3-1: USB disconnect, device number 9 [ 255.354607][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.361398][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.453233][ T7637] tmpfs: Bad value for 'size' [ 256.460748][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.474'. [ 257.104505][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 263.554705][ T29] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 265.131156][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 265.146265][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 265.324611][ T29] usb 1-1: config 4 interface 0 has no altsetting 0 [ 265.357574][ T29] usb 1-1: string descriptor 0 read error: -22 [ 265.381373][ T29] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 265.397219][ T29] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 265.610129][ T29] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 265.647901][ T29] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 267.942304][ T29] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 268.008900][ T29] usb 1-1: media controller created [ 268.104123][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.394032][ T29] zl10353_read_register: readreg error (reg=127, ret==0) [ 269.567053][ T29] usb 1-1: USB disconnect, device number 11 [ 269.697622][ T7751] tmpfs: Bad value for 'size' [ 269.880422][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 270.021065][ T7750] tmpfs: Bad value for 'size' [ 270.193122][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 273.454188][ T30] audit: type=1400 audit(1786063709.116:477): avc: denied { write } for pid=7730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.103912][ T30] audit: type=1400 audit(1786063710.806:478): avc: denied { write } for pid=7813 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.558521][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 276.570374][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 276.580300][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 276.664680][ T7837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7837 comm=syz.0.522 [ 276.741980][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 276.797420][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 276.974045][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 277.022760][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.040195][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 277.063151][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 277.141883][ T9] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 277.284024][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.444607][ T9] usb 5-1: config 0 descriptor?? [ 277.596720][ T30] audit: type=1400 audit(1786063713.286:479): avc: denied { write } for pid=7821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.710457][ T5700] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 278.761310][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 278.762345][ T30] audit: type=1400 audit(1786063713.526:480): avc: denied { write } for pid=7860 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.900876][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 279.043250][ T5700] usb 4-1: unable to get BOS descriptor or descriptor too short [ 279.089970][ T5700] usb 4-1: config 4 interface 0 has no altsetting 0 [ 279.200222][ T5700] usb 4-1: string descriptor 0 read error: -22 [ 279.213818][ T9] nintendo 0003:057E:2019.0008: collection stack underflow [ 279.230746][ T5700] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 279.253955][ T9] nintendo 0003:057E:2019.0008: item 0 2 0 12 parsing failed [ 279.272690][ T5700] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 279.285292][ T9] nintendo 0003:057E:2019.0008: HID parse failed [ 279.310069][ T9] nintendo 0003:057E:2019.0008: probe - fail = -22 [ 279.321603][ T5700] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 281.193632][ T9] nintendo 0003:057E:2019.0008: probe with driver nintendo failed with error -22 [ 281.240210][ T7882] fuse: Bad value for 'fd' [ 281.245343][ T5700] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.255971][ T5700] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 281.283080][ T5700] usb 4-1: media controller created [ 281.285261][ T5594] usb 5-1: USB disconnect, device number 11 [ 281.297163][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.317933][ T5700] zl10353_read_register: readreg error (reg=127, ret==0) [ 282.052838][ T5700] usb 4-1: USB disconnect, device number 12 [ 286.173993][ T7916] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 286.891162][ T7916] netlink: 76 bytes leftover after parsing attributes in process `syz.2.541'. [ 287.410996][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 287.760720][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.390602][ T24] usb 3-1: config 0 has no interfaces? [ 290.629649][ T24] usb 3-1: string descriptor 0 read error: -71 [ 290.763097][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 290.791873][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.844059][ T24] usb 3-1: config 0 descriptor?? [ 293.241021][ T24] usb 3-1: can't set config #0, error -71 [ 295.302469][ T24] usb 3-1: USB disconnect, device number 10 [ 295.452395][ T7953] tmpfs: Bad value for 'size' [ 295.601067][ T5700] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 295.728127][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 295.859549][ T7960] tmpfs: Bad value for 'size' [ 295.866751][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 295.952531][ T5700] usb 2-1: Using ep0 maxpacket: 8 [ 296.148649][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 296.228122][ T5700] usb 2-1: unable to get BOS descriptor or descriptor too short [ 296.241995][ T5700] usb 2-1: config 4 interface 0 has no altsetting 0 [ 296.265445][ T5700] usb 2-1: string descriptor 0 read error: -22 [ 296.295880][ T5700] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 296.326556][ T5700] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 296.480914][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 296.495156][ T5700] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 296.704002][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 296.774582][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.978755][ T7971] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 296.989478][ T7971] netlink: 76 bytes leftover after parsing attributes in process `syz.2.557'. [ 297.017886][ T5700] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 297.033607][ T9] usb 1-1: config 4 interface 0 has no altsetting 0 [ 297.042440][ T5700] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 297.056755][ T5700] usb 2-1: media controller created [ 297.063074][ T9] usb 1-1: string descriptor 0 read error: -22 [ 297.070710][ T9] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 297.087703][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.096359][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 297.590188][ T9] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 297.672204][ T5700] zl10353_read_register: readreg error (reg=127, ret==0) [ 297.680024][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 297.700807][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 297.746329][ T9] usb 1-1: media controller created [ 297.765780][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 297.796779][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.805275][ T7956] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 298.363457][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 298.415611][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.416697][ T5700] usb 2-1: USB disconnect, device number 7 [ 298.936644][ T24] usb 3-1: config 0 has no interfaces? [ 298.944000][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 298.953789][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.961934][ T24] usb 3-1: Product: syz [ 298.966126][ T24] usb 3-1: Manufacturer: syz [ 298.970743][ T24] usb 3-1: SerialNumber: syz [ 298.978090][ T24] usb 3-1: config 0 descriptor?? [ 299.086394][ T9] usb 1-1: USB disconnect, device number 12 [ 299.092543][ T5701] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 299.177750][ T7985] fuse: Bad value for 'fd' [ 299.300977][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 299.312068][ T5701] usb 5-1: unable to get BOS descriptor or descriptor too short [ 299.747257][ T7988] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 299.777503][ T5701] usb 5-1: config 4 interface 0 has no altsetting 0 [ 299.799444][ T5701] usb 5-1: string descriptor 0 read error: -22 [ 299.806486][ T5701] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 299.818060][ T5701] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 299.858412][ T5701] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 299.874602][ T5701] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 299.885478][ T5701] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 299.892992][ T5701] usb 5-1: media controller created [ 299.908272][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.671802][ T5701] zl10353_read_register: readreg error (reg=127, ret==0) [ 301.671853][ T7980] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 301.732847][ T8003] fuse: Bad value for 'fd' [ 301.750943][ T5701] usb 5-1: USB disconnect, device number 12 [ 301.756050][ T24] usb 3-1: USB disconnect, device number 11 [ 301.953056][ T8007] tmpfs: Bad value for 'size' [ 302.119728][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'. [ 302.505530][ T8011] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 302.529212][ T8011] netlink: 76 bytes leftover after parsing attributes in process `syz.2.568'. [ 302.801400][ T5701] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 302.815692][ T30] audit: type=1400 audit(1786063738.516:481): avc: denied { bind } for pid=8017 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.855454][ T8020] tmpfs: Bad value for 'size' [ 302.861018][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 303.174208][ T30] audit: type=1400 audit(1786063738.516:482): avc: denied { listen } for pid=8017 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.222258][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.235794][ T5701] usb 3-1: config 0 has no interfaces? [ 303.258350][ T30] audit: type=1400 audit(1786063738.516:483): avc: denied { accept } for pid=8017 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.288529][ T5701] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 303.773785][ T30] audit: type=1400 audit(1786063738.726:484): avc: denied { search } for pid=8019 comm="syz.1.572" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 304.126601][ T30] audit: type=1400 audit(1786063738.726:485): avc: denied { write } for pid=8019 comm="syz.1.572" name="nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 304.403919][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.421552][ T5701] usb 3-1: Product: syz [ 304.430901][ T5701] usb 3-1: Manufacturer: syz [ 304.436216][ T5701] usb 3-1: SerialNumber: syz [ 304.446028][ T30] audit: type=1400 audit(1786063738.726:486): avc: denied { open } for pid=8019 comm="syz.1.572" path="/125/nfsd/nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 304.451304][ T5701] usb 3-1: config 0 descriptor?? [ 304.490360][ T8032] tmpfs: Bad value for 'size' [ 304.504016][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 305.247405][ T8041] netlink: 76 bytes leftover after parsing attributes in process `syz.4.578'. [ 306.408643][ T8052] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 306.443585][ T5701] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 306.483382][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 306.614132][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.645284][ T5701] usb 5-1: config 0 has no interfaces? [ 306.673346][ T5701] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 306.693882][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.755039][ T8059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 306.774767][ T8059] netlink: 76 bytes leftover after parsing attributes in process `syz.1.582'. [ 306.870939][ T5701] usb 5-1: Product: syz [ 306.875159][ T5701] usb 5-1: Manufacturer: syz [ 306.879750][ T5701] usb 5-1: SerialNumber: syz [ 306.893170][ T5701] usb 5-1: config 0 descriptor?? [ 307.405696][ T5686] usb 3-1: USB disconnect, device number 12 [ 307.481233][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 307.493511][ T8078] tmpfs: Bad value for 'size' [ 307.499130][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 307.814542][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.945906][ T9] usb 2-1: config 0 has no interfaces? [ 307.998993][ T8041] netdevsim netdevsim4: Firmware load for '../file0/file0' refused, path contains '..' component [ 308.011749][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 308.028985][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.055301][ T9] usb 2-1: Product: syz [ 308.076970][ T9] usb 2-1: Manufacturer: syz [ 308.148245][ T9] usb 2-1: SerialNumber: syz [ 308.281141][ T5700] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 308.318127][ T9] usb 2-1: config 0 descriptor?? [ 308.413943][ T30] audit: type=1400 audit(1786063744.106:487): avc: denied { write } for pid=8056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.491275][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 308.556396][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.706633][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 308.854047][ T5700] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 309.017487][ T5700] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 309.125018][ T8089] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 309.319650][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.541562][ T5700] usb 1-1: config 0 descriptor?? [ 309.978946][ T30] audit: type=1400 audit(1786063745.676:488): avc: denied { write } for pid=8093 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.020303][ T9] usb 5-1: USB disconnect, device number 13 [ 310.046594][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 310.376081][ T5700] nintendo 0003:057E:2019.0009: collection stack underflow [ 310.385290][ T5700] nintendo 0003:057E:2019.0009: item 0 2 0 12 parsing failed [ 310.398345][ T5700] nintendo 0003:057E:2019.0009: HID parse failed [ 310.412988][ T5700] nintendo 0003:057E:2019.0009: probe - fail = -22 [ 310.425558][ T5700] nintendo 0003:057E:2019.0009: probe with driver nintendo failed with error -22 [ 310.510167][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 310.751012][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 310.784380][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 310.801352][ T30] audit: type=1400 audit(1786063746.496:489): avc: denied { write } for pid=8101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.861248][ T9] usb 5-1: config 4 interface 0 has no altsetting 0 [ 310.882045][ T9] usb 5-1: string descriptor 0 read error: -22 [ 310.890169][ T9] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 310.904976][ T5700] usb 2-1: USB disconnect, device number 8 [ 310.914689][ T30] audit: type=1400 audit(1786063746.586:490): avc: denied { write } for pid=8119 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.945509][ T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 310.997285][ T9] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 311.136674][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 311.206972][ T8102] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 311.215326][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 311.754350][ T9] usb 5-1: media controller created [ 311.769646][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.794491][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 311.801128][ T30] audit: type=1400 audit(1786063747.496:491): avc: denied { setopt } for pid=8126 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 311.826604][ T30] audit: type=1400 audit(1786063747.496:492): avc: denied { listen } for pid=8126 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 311.893695][ T30] audit: type=1400 audit(1786063747.526:493): avc: denied { ioctl } for pid=8126 comm="syz.2.594" path="socket:[21934]" dev="sockfs" ino=21934 ioctlcmd=0x6440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 311.960320][ T8132] tmpfs: Bad value for 'size' [ 311.967214][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.595'. [ 311.986769][ T9] usb 5-1: USB disconnect, device number 14 [ 311.987651][ T29] usb 1-1: USB disconnect, device number 13 [ 312.234659][ T8138] fuse: Bad value for 'fd' [ 314.243883][ T8154] Bluetooth: MGMT ver 1.23 [ 314.249656][ T30] audit: type=1400 audit(1786063749.946:494): avc: denied { bind } for pid=8152 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 314.330202][ T30] audit: type=1400 audit(1786063749.946:495): avc: denied { write } for pid=8152 comm="syz.1.602" path="socket:[21980]" dev="sockfs" ino=21980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 314.436601][ T30] audit: type=1400 audit(1786063749.956:496): avc: denied { read } for pid=8152 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 314.471675][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 316.550966][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 316.811766][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.818254][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.982339][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.010187][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 317.022554][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 317.042265][ T10] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 317.051619][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.062673][ T10] usb 5-1: config 0 descriptor?? [ 317.107624][ T5700] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 317.558845][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 317.574105][ T5700] usb 1-1: Using ep0 maxpacket: 8 [ 317.603907][ T5700] usb 1-1: unable to get BOS descriptor or descriptor too short [ 317.619443][ T5700] usb 1-1: config 4 interface 0 has no altsetting 0 [ 317.634308][ T5700] usb 1-1: string descriptor 0 read error: -22 [ 317.661564][ T5700] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 317.692720][ T5700] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 317.769200][ T5700] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 317.782124][ T5700] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 317.799569][ T5700] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 317.809183][ T5700] usb 1-1: media controller created [ 317.830318][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.013163][ T10] nintendo 0003:057E:2019.000A: collection stack underflow [ 318.022758][ T8175] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 318.991395][ T10] nintendo 0003:057E:2019.000A: item 0 2 0 12 parsing failed [ 319.004846][ T10] nintendo 0003:057E:2019.000A: HID parse failed [ 319.280073][ T5700] zl10353_read_register: readreg error (reg=127, ret==0) [ 319.288406][ T10] nintendo 0003:057E:2019.000A: probe - fail = -22 [ 319.311132][ T10] nintendo 0003:057E:2019.000A: probe with driver nintendo failed with error -22 [ 319.385474][ T10] usb 5-1: USB disconnect, device number 15 [ 319.399701][ T8201] tmpfs: Bad value for 'size' [ 319.416115][ T5700] usb 1-1: USB disconnect, device number 14 [ 319.461079][ T8203] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 319.628910][ T8203] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 320.199445][ T8210] syzkaller0: entered promiscuous mode [ 320.206064][ T8210] syzkaller0: entered allmulticast mode [ 320.247655][ T8210] tipc: Started in network mode [ 320.252879][ T8210] tipc: Node identity 02643a65bd06, cluster identity 4711 [ 320.260340][ T8210] tipc: Enabled bearer , priority 0 [ 321.029523][ T8216] tipc: Resetting bearer [ 321.228513][ T8216] tipc: Disabling bearer [ 321.241500][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 321.633561][ T10] tipc: Node number set to 3210885733 [ 322.085641][ T8221] tipc: Enabled bearer , priority 0 [ 322.098474][ T8221] syzkaller0: entered promiscuous mode [ 322.104885][ T8221] syzkaller0: entered allmulticast mode [ 322.402960][ T30] audit: type=1400 audit(1786063758.106:497): avc: denied { write } for pid=8220 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 322.425998][ T8221] syzkaller0: mtu less than device minimum [ 322.438751][ T8220] tipc: Resetting bearer [ 322.460588][ T8220] tipc: Disabling bearer [ 323.411278][ T8249] tmpfs: Bad value for 'size' [ 324.000893][ T5686] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 324.270408][ T30] audit: type=1400 audit(1786063759.966:498): avc: denied { name_bind } for pid=8257 comm="syz.0.632" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 325.398734][ T5686] usb 3-1: Using ep0 maxpacket: 16 [ 326.261110][ T30] audit: type=1400 audit(1786063760.076:499): avc: denied { node_bind } for pid=8257 comm="syz.0.632" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 326.391007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 326.783968][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 326.967740][ T5686] usb 3-1: device descriptor read/all, error -71 [ 327.895792][ T30] audit: type=1400 audit(1786063762.746:500): avc: denied { ioctl } for pid=8259 comm="syz.4.635" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 327.962780][ T8261] binder: BINDER_SET_CONTEXT_MGR already set [ 328.346629][ T8261] binder: 8259:8261 ioctl 4018620d 200000004a80 returned -16 [ 328.736778][ T30] audit: type=1400 audit(1786063763.166:501): avc: denied { set_context_mgr } for pid=8259 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 329.072596][ T30] audit: type=1400 audit(1786063763.166:502): avc: denied { write } for pid=8259 comm="syz.4.635" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 329.095533][ T30] audit: type=1400 audit(1786063763.626:503): avc: denied { map } for pid=8259 comm="syz.4.635" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 329.177110][ T30] audit: type=1400 audit(1786063764.466:504): avc: denied { mount } for pid=8257 comm="syz.0.632" name="/" dev="rpc_pipefs" ino=22766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 329.494421][ T30] audit: type=1400 audit(1786063764.956:505): avc: denied { write } for pid=8279 comm="syz.3.638" name="xfrm_stat" dev="proc" ino=4026532951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 332.057030][ T8287] netlink: 64 bytes leftover after parsing attributes in process `syz.3.638'. [ 333.424624][ T30] audit: type=1400 audit(1786063769.036:506): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 343.491071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 346.051047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 348.610975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 354.760833][ C0] sched: DL replenish lagged too much [ 356.291025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 358.850983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 363.971047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 369.090834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 378.232650][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.249925][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.313922][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 439.673625][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.972744][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.340789][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 459.347773][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8299/1:b..l P5593/1:b..l P6159/1:b..l P8295/1:b..l [ 459.359479][ C1] rcu: (detected by 1, t=10502 jiffies, g=30153, q=1201559 ncpus=2) [ 459.367548][ C1] task:syz.2.640 state:R running task stack:26488 pid:8295 tgid:8288 ppid:5603 task_flags:0x400140 flags:0x00080002 [ 459.381976][ C1] Call Trace: [ 459.385272][ C1] [ 459.388225][ C1] __schedule+0x125c/0x6730 [ 459.392767][ C1] ? __pfx___schedule+0x10/0x10 [ 459.397627][ C1] ? rcu_is_watching+0x12/0xc0 [ 459.402397][ C1] preempt_schedule_irq+0x50/0x90 [ 459.407437][ C1] irqentry_exit+0x205/0xa00 [ 459.412032][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 459.418016][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x3b/0x90 [ 459.424533][ C1] Code: 53 48 8b 46 08 48 83 f8 20 74 63 77 48 48 83 f8 08 74 63 41 be 03 00 00 00 48 83 f8 10 75 29 4c 8b 6d 00 31 db 4d 85 ed 74 1e <48> 8b 74 dd 10 48 8b 4c 24 28 4c 89 e2 4c 89 f7 48 83 c3 01 e8 8c [ 459.444146][ C1] RSP: 0018:ffffc90003faf7c8 EFLAGS: 00000202 [ 459.450223][ C1] RAX: 0000000000000002 RBX: 000000000000000b RCX: ffffffff822c3245 [ 459.458190][ C1] RDX: 0000000000000006 RSI: 000000000000000b RDI: ffff8880268c4a80 [ 459.466178][ C1] RBP: ffffffff8bdab740 R08: 0000000000000005 R09: 000000000000000b [ 459.474160][ C1] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000000006 [ 459.482147][ C1] R13: 000000000000000c R14: 0000000000000005 R15: 0000000039745855 [ 459.490125][ C1] ? jhash+0x1d5/0x610 [ 459.494209][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 459.500111][ C1] jhash+0x1d5/0x610 [ 459.504010][ C1] htab_lru_map_update_elem+0xbf3/0xea0 [ 459.509561][ C1] ? __pfx_htab_lru_map_update_elem+0x10/0x10 [ 459.515625][ C1] ? bpf_map_update_value+0x86c/0xff0 [ 459.521003][ C1] bpf_map_update_value+0x83b/0xff0 [ 459.526205][ C1] ? __might_fault+0xc5/0x140 [ 459.530879][ C1] ? __pfx_bpf_map_update_value+0x10/0x10 [ 459.536612][ C1] generic_map_update_batch+0x50d/0x800 [ 459.542180][ C1] ? __pfx_generic_map_update_batch+0x10/0x10 [ 459.548258][ C1] ? __pfx_generic_map_update_batch+0x10/0x10 [ 459.554334][ C1] bpf_map_do_batch+0x66f/0x6d0 [ 459.559194][ C1] __sys_bpf+0x4ce/0x4e80 [ 459.563529][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 459.568289][ C1] ? __pfx_futex_hash+0x10/0x10 [ 459.573151][ C1] ? futex_wait+0x11e/0x370 [ 459.577659][ C1] ? __pfx_futex_wait+0x10/0x10 [ 459.582535][ C1] ? __x64_sys_futex+0x34f/0x4d0 [ 459.587480][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 459.592422][ C1] ? xfd_validate_state+0x129/0x190 [ 459.597626][ C1] ? __x64_sys_bpf+0xce/0x140 [ 459.602297][ C1] __x64_sys_bpf+0xce/0x140 [ 459.606801][ C1] ? do_syscall_64+0x90/0x870 [ 459.611478][ C1] do_syscall_64+0x115/0x870 [ 459.616062][ C1] ? clear_bhb_loop+0x40/0x90 [ 459.620737][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.626624][ C1] RIP: 0033:0x7f0dc3d9e0d9 [ 459.631040][ C1] RSP: 002b:00007f0dc4c99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.639457][ C1] RAX: ffffffffffffffda RBX: 00007f0dc4026180 RCX: 00007f0dc3d9e0d9 [ 459.647431][ C1] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 000000000000001a [ 459.655412][ C1] RBP: 00007f0dc3e35024 R08: 0000000000000000 R09: 0000000000000000 [ 459.663383][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.671348][ C1] R13: 00007f0dc4026218 R14: 00007f0dc4026180 R15: 00007ffe4da19ec8 [ 459.679329][ C1] [ 459.682343][ C1] task:kworker/u8:10 state:R running task stack:23416 pid:6159 tgid:6159 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 459.695918][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 459.702168][ C1] Call Trace: [ 459.705452][ C1] [ 459.708389][ C1] __schedule+0x125c/0x6730 [ 459.712928][ C1] ? __lock_acquire+0x49f/0x1a40 [ 459.717881][ C1] ? __pfx___schedule+0x10/0x10 [ 459.722738][ C1] ? mark_held_locks+0x40/0x70 [ 459.727502][ C1] preempt_schedule_irq+0x50/0x90 [ 459.732533][ C1] irqentry_exit+0x205/0xa00 [ 459.737126][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 459.743105][ C1] RIP: 0010:stack_access_ok+0x24/0x1d0 [ 459.748567][ C1] Code: 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 55 41 54 49 89 d4 48 89 fa 55 48 c1 ea 03 48 89 f5 53 48 89 fb 48 83 ec 08 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 3f 01 00 00 8b 13 85 d2 74 65 [ 459.768183][ C1] RSP: 0018:ffffc9000432eef8 EFLAGS: 00000292 [ 459.774253][ C1] RAX: dffffc0000000000 RBX: ffffc9000432ef98 RCX: ffffffff91c56314 [ 459.782223][ C1] RDX: 1ffff92000865df3 RSI: ffffc9000432fe58 RDI: ffffc9000432ef98 [ 459.790187][ C1] RBP: ffffc9000432fe58 R08: ffffffff91c56318 R09: 0000000000000007 [ 459.798152][ C1] R10: 0000000000000200 R11: 000000000000cfa1 R12: 0000000000000008 [ 459.806122][ C1] R13: ffffc9000432ef98 R14: ffffc9000432fe60 R15: ffffc9000432efcc [ 459.814114][ C1] unwind_next_frame+0xcf5/0x2090 [ 459.819149][ C1] ? worker_thread+0x5ef/0xe50 [ 459.823928][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 459.830078][ C1] arch_stack_walk+0x94/0xf0 [ 459.834689][ C1] ? worker_thread+0x5ef/0xe50 [ 459.839462][ C1] stack_trace_save+0x8e/0xc0 [ 459.844135][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 459.849501][ C1] ? ret_from_fork+0x72b/0xd50 [ 459.854279][ C1] kasan_save_stack+0x30/0x50 [ 459.858957][ C1] ? kasan_save_stack+0x30/0x50 [ 459.863802][ C1] ? kasan_save_track+0x14/0x30 [ 459.868650][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 459.873408][ C1] ? __kmalloc_noprof+0x322/0x820 [ 459.878469][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 459.884932][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 459.890735][ C1] ? cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 459.896971][ C1] ? ieee80211_bss_info_update+0x310/0xab0 [ 459.902779][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 459.909029][ C1] ? ieee80211_iface_work+0xa9a/0x1070 [ 459.914494][ C1] ? cfg80211_wiphy_work+0x2b7/0x550 [ 459.919786][ C1] ? process_one_work+0xa23/0x1940 [ 459.924898][ C1] ? worker_thread+0x5ef/0xe50 [ 459.929690][ C1] kasan_save_track+0x14/0x30 [ 459.934369][ C1] __kasan_kmalloc+0xaa/0xb0 [ 459.938973][ C1] __kmalloc_noprof+0x322/0x820 [ 459.943835][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 459.950255][ C1] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 459.956498][ C1] ? unwind_next_frame+0x3be/0x2090 [ 459.961742][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 459.968426][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 459.973387][ C1] ? stack_trace_save+0x8e/0xc0 [ 459.978237][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 459.983613][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 459.989423][ C1] cfg80211_inform_bss_data+0x230/0x3b60 [ 459.995061][ C1] ? __kmalloc_noprof+0x322/0x820 [ 460.000081][ C1] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 460.006188][ C1] ? cfg80211_wiphy_work+0x2b7/0x550 [ 460.011471][ C1] ? process_one_work+0xa23/0x1940 [ 460.016581][ C1] ? worker_thread+0x5ef/0xe50 [ 460.021347][ C1] ? kthread+0x370/0x450 [ 460.025581][ C1] ? ret_from_fork+0x72b/0xd50 [ 460.030346][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 460.035310][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 460.041407][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 460.047309][ C1] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 460.053478][ C1] ? __lock_acquire+0x49f/0x1a40 [ 460.058449][ C1] ? __lock_acquire+0x49f/0x1a40 [ 460.063402][ C1] ? __lock_acquire+0x49f/0x1a40 [ 460.068343][ C1] ? find_held_lock+0x2b/0x80 [ 460.073021][ C1] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 460.079524][ C1] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 460.086035][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 460.092110][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 460.097755][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 460.103923][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 460.109740][ C1] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 460.115820][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 460.122336][ C1] ieee80211_iface_work+0xa9a/0x1070 [ 460.127630][ C1] cfg80211_wiphy_work+0x2b7/0x550 [ 460.132754][ C1] process_one_work+0xa23/0x1940 [ 460.137708][ C1] ? __pfx_process_one_work+0x10/0x10 [ 460.143080][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 460.148722][ C1] worker_thread+0x5ef/0xe50 [ 460.153321][ C1] ? __pfx_worker_thread+0x10/0x10 [ 460.158434][ C1] ? kthread+0x13a/0x450 [ 460.162670][ C1] ? __pfx_worker_thread+0x10/0x10 [ 460.167777][ C1] kthread+0x370/0x450 [ 460.171848][ C1] ? __pfx_kthread+0x10/0x10 [ 460.176445][ C1] ret_from_fork+0x72b/0xd50 [ 460.181037][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 460.186148][ C1] ? __switch_to+0x800/0x10f0 [ 460.190821][ C1] ? __pfx_kthread+0x10/0x10 [ 460.195414][ C1] ret_from_fork_asm+0x1a/0x30 [ 460.200201][ C1] [ 460.203211][ C1] task:syz-executor state:R running task stack:22808 pid:5593 tgid:5593 ppid:5587 task_flags:0x400140 flags:0x00080000 [ 460.216696][ C1] Call Trace: [ 460.219970][ C1] [ 460.222900][ C1] __schedule+0x125c/0x6730 [ 460.227404][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 460.232780][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 460.238852][ C1] ? put_task_struct_rcu_user+0x6c/0xc0 [ 460.244412][ C1] ? release_task+0xdbb/0x1ab0 [ 460.249199][ C1] ? __pfx___schedule+0x10/0x10 [ 460.254057][ C1] ? mark_held_locks+0x40/0x70 [ 460.258828][ C1] preempt_schedule_irq+0x50/0x90 [ 460.263881][ C1] irqentry_exit+0x205/0xa00 [ 460.268469][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 460.274447][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 460.279645][ C1] Code: 05 bb 4b 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 46 11 3c 0f 0f 82 ac 02 00 00 8b 35 0e 45 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d 4b 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 460.299264][ C1] RSP: 0018:ffffc900039ff8d0 EFLAGS: 00000206 [ 460.305353][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 460.313317][ C1] RDX: 0000000000000000 RSI: ffffffff8e1810a7 RDI: ffffffff8c3ffa80 [ 460.321283][ C1] RBP: ffffffff8ebe8200 R08: 00000000ef68a4f1 R09: 0000000000000007 [ 460.329263][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 460.337257][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 460.345243][ C1] ? unwind_next_frame+0x3be/0x2090 [ 460.350450][ C1] ? unwind_next_frame+0x3be/0x2090 [ 460.355649][ C1] unwind_next_frame+0xd1/0x2090 [ 460.360586][ C1] ? unwind_next_frame+0xbd/0x2090 [ 460.365690][ C1] ? arch_stack_walk+0x73/0xf0 [ 460.370466][ C1] __unwind_start+0x3cd/0x7e0 [ 460.375146][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 460.381303][ C1] arch_stack_walk+0x73/0xf0 [ 460.385902][ C1] ? arch_stack_walk+0x73/0xf0 [ 460.390682][ C1] stack_trace_save+0x8e/0xc0 [ 460.395362][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 460.400731][ C1] ? __lock_acquire+0x49f/0x1a40 [ 460.405670][ C1] ? __lock_acquire+0x49f/0x1a40 [ 460.410611][ C1] save_stack+0x162/0x1e0 [ 460.414938][ C1] ? __pfx_save_stack+0x10/0x10 [ 460.419794][ C1] ? page_ext_put+0x3e/0xd0 [ 460.424301][ C1] __reset_page_owner+0x84/0x190 [ 460.429249][ C1] __free_frozen_pages+0x79f/0x1090 [ 460.434457][ C1] ? __free_slab+0xd0/0x220 [ 460.438964][ C1] qlist_free_all+0x47/0xf0 [ 460.443467][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 460.448928][ C1] __kasan_slab_alloc+0x69/0x90 [ 460.453785][ C1] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 460.459245][ C1] ? do_getname+0x35/0x390 [ 460.463675][ C1] do_getname+0x35/0x390 [ 460.467931][ C1] user_path_at+0x26/0x60 [ 460.472264][ C1] __x64_sys_umount+0x10a/0x1a0 [ 460.477111][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 460.482485][ C1] do_syscall_64+0x115/0x870 [ 460.487075][ C1] ? clear_bhb_loop+0x40/0x90 [ 460.491754][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.497642][ C1] RIP: 0033:0x7fbf3a39f317 [ 460.502048][ C1] RSP: 002b:00007ffee6f3c188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 460.510455][ C1] RAX: ffffffffffffffda RBX: 00007fbf3a434474 RCX: 00007fbf3a39f317 [ 460.518420][ C1] RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ffee6f3d2d0 [ 460.526388][ C1] RBP: 00007ffee6f3d2bc R08: 0000000000000000 R09: 0000000000000000 [ 460.534363][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6f3d2d0 [ 460.542327][ C1] R13: 00007fbf3a434474 R14: 0000000000052033 R15: 00007ffee6f3d310 [ 460.550316][ C1] [ 460.553339][ C1] task:syz.4.641 state:R running task stack:24280 pid:8299 tgid:8290 ppid:5601 task_flags:0x40054c flags:0x00080002 [ 460.566829][ C1] Call Trace: [ 460.570113][ C1] [ 460.573060][ C1] __schedule+0x125c/0x6730 [ 460.577599][ C1] ? __pfx___schedule+0x10/0x10 [ 460.582455][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 460.588005][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 460.593411][ C1] preempt_schedule_common+0x42/0xc0 [ 460.598714][ C1] preempt_schedule_thunk+0x16/0x40 [ 460.603912][ C1] _raw_spin_unlock+0x3e/0x50 [ 460.608589][ C1] __zap_vma_range+0x24df/0x4a40 [ 460.613559][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 460.618867][ C1] ? find_held_lock+0x2b/0x80 [ 460.623574][ C1] unmap_vmas+0x299/0x5f0 [ 460.627908][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 460.632758][ C1] ? mas_next_slot+0x10a3/0x1960 [ 460.637714][ C1] exit_mmap+0x1ef/0xa00 [ 460.641979][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 460.646739][ C1] ? rcu_is_watching+0x12/0xc0 [ 460.651515][ C1] ? uprobe_clear_state+0x49/0x260 [ 460.656634][ C1] ? find_held_lock+0x2b/0x80 [ 460.661322][ C1] ? uprobe_clear_state+0x5f/0x260 [ 460.666446][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 460.672088][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 460.677734][ C1] __mmput+0x12a/0x410 [ 460.681815][ C1] mmput+0x67/0x80 [ 460.685574][ C1] do_exit+0x8b1/0x2ae0 [ 460.689730][ C1] ? fput+0x79/0x100 [ 460.693625][ C1] ? __pfx_do_exit+0x10/0x10 [ 460.698222][ C1] ? do_raw_spin_lock+0x128/0x260 [ 460.703272][ C1] ? find_held_lock+0x2b/0x80 [ 460.707981][ C1] ? get_signal+0x7e0/0x21e0 [ 460.712600][ C1] do_group_exit+0xd5/0x2a0 [ 460.717107][ C1] get_signal+0x1ec7/0x21e0 [ 460.721613][ C1] ? __might_fault+0xc5/0x140 [ 460.726295][ C1] ? __pfx_get_signal+0x10/0x10 [ 460.731182][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 460.736857][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 460.743023][ C1] ? __fget_files+0x215/0x3d0 [ 460.747705][ C1] ? selinux_file_ioctl+0x13b/0x290 [ 460.752915][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 460.758300][ C1] ? rcu_is_watching+0x12/0xc0 [ 460.763078][ C1] do_syscall_64+0x666/0x870 [ 460.767668][ C1] ? clear_bhb_loop+0x40/0x90 [ 460.772365][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.778311][ C1] RIP: 0033:0x7f951459e0d9 [ 460.782720][ C1] RSP: 002b:00007f95127f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.791131][ C1] RAX: fffffffffffffffc RBX: 00007f9514826090 RCX: 00007f951459e0d9 [ 460.799106][ C1] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 460.807091][ C1] RBP: 00007f9514635024 R08: 0000000000000000 R09: 0000000000000000 [ 460.815059][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.823030][ C1] R13: 00007f9514826128 R14: 00007f9514826090 R15: 00007ffe9128bd08 [ 460.831031][ C1] [ 460.834043][ C1] rcu: rcu_preempt kthread starved for 1867 jiffies! g30153 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 460.845144][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 460.855114][ C1] rcu: RCU grace-period kthread stack dump: [ 460.860999][ C1] task:rcu_preempt state:R running task stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 460.874512][ C1] Call Trace: [ 460.877784][ C1] [ 460.880712][ C1] __schedule+0x125c/0x6730 [ 460.885236][ C1] ? __pfx___schedule+0x10/0x10 [ 460.890179][ C1] ? find_held_lock+0x2b/0x80 [ 460.894867][ C1] ? schedule+0x225/0x2c0 [ 460.899203][ C1] schedule+0xdd/0x2c0 [ 460.903275][ C1] schedule_timeout+0x127/0x280 [ 460.908131][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 460.913513][ C1] ? __pfx_process_timeout+0x10/0x10 [ 460.918884][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 460.924698][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 460.930164][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 460.934926][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 460.940211][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 460.945162][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 460.950355][ C1] ? rcu_is_watching+0x12/0xc0 [ 460.955122][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 460.960939][ C1] rcu_gp_kthread+0x179/0x230 [ 460.965656][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 460.970855][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 460.976673][ C1] ? __kthread_parkme+0x18c/0x230 [ 460.981713][ C1] ? kthread+0x13a/0x450 [ 460.985950][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 460.991146][ C1] kthread+0x370/0x450 [ 460.995212][ C1] ? __pfx_kthread+0x10/0x10 [ 460.999809][ C1] ret_from_fork+0x72b/0xd50 [ 461.004410][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 461.009531][ C1] ? __switch_to+0x800/0x10f0 [ 461.014216][ C1] ? __pfx_kthread+0x10/0x10 [ 461.018811][ C1] ret_from_fork_asm+0x1a/0x30 [ 461.023602][ C1] [ 461.026611][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 461.032924][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 461.041853][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 461.051905][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 461.057538][ C1] Code: e6 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 7f 12 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 461.077145][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 461.083215][ C1] RAX: 0000000001cb8549 RBX: ffff88801eac2540 RCX: ffffffff8bb922d5 [ 461.091221][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a6eb5 RDI: ffffffff8c3ffa80 [ 461.099200][ C1] RBP: ffffed1003d584a8 R08: 0000000000000001 R09: ffffed10170a678d [ 461.107169][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 461.115148][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 461.123122][ C1] FS: 0000000000000000(0000) GS:ffff888123eed000(0000) knlGS:0000000000000000 [ 461.132056][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.138644][ C1] CR2: 0000561505bb4008 CR3: 000000005aae0000 CR4: 00000000003526f0 [ 461.146622][ C1] Call Trace: [ 461.149897][ C1] [ 461.152827][ C1] default_idle+0x9/0x10 [ 461.157076][ C1] default_idle_call+0x6c/0xb0 [ 461.161835][ C1] do_idle+0x3a7/0x5b0 [ 461.165905][ C1] ? __pfx_do_idle+0x10/0x10 [ 461.170497][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 461.176402][ C1] cpu_startup_entry+0x4f/0x60 [ 461.181175][ C1] start_secondary+0x21d/0x2d0 [ 461.185944][ C1] ? __pfx_start_secondary+0x10/0x10 [ 461.191252][ C1] common_startup_64+0x13e/0x158 [ 461.196215][ C1]