last executing test programs: 2m42.757273281s ago: executing program 0 (id=22): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000380)=""/56, 0x38}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/23, 0x17}, {&(0x7f0000000640)=""/60, 0x3c}], 0x7, &(0x7f0000000700)=""/149, 0x95}, 0x9}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000ac0)=""/193, 0xc1}, {&(0x7f0000000940)=""/99, 0x63}, {&(0x7f0000000bc0)=""/137, 0x89}, {&(0x7f0000000c80)=""/251, 0xfb}, {&(0x7f0000000d80)=""/226, 0xe2}, {&(0x7f0000000e80)=""/216, 0xd8}, {&(0x7f0000000f80)=""/123, 0x7b}, {&(0x7f0000001000)=""/76, 0x4c}, {&(0x7f00000009c0)=""/62, 0x3e}, {&(0x7f0000001080)=""/127, 0x7f}], 0xa, &(0x7f00000011c0)=""/100, 0x64}, 0x310}, {{&(0x7f0000001240)=@tipc=@name, 0x80, &(0x7f0000001600)=[{&(0x7f00000012c0)=""/212, 0xd4}, {&(0x7f00000013c0)=""/219, 0xdb}, {&(0x7f00000014c0)=""/148, 0x94}, {&(0x7f0000001580)=""/101, 0x65}], 0x4, &(0x7f0000001640)=""/58, 0x3a}, 0x3}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa0d, 0xfffffffb}, 0x0) unshare(0x8000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @local}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000a00)={0x400007f, {{0xa, 0x4e23, 0x130e25a2, @local, 0x7}}}, 0x88) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setrlimit(0x4, &(0x7f0000000800)={0x6, 0x7753}) (async) shmctl$IPC_RMID(0x0, 0x0) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ptrace$getsig(0x4202, r3, 0x6, &(0x7f00000000c0)) (async) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000840)=""/242) (async) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe}, 0x1c) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r4, @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf251000000008000300ddda8d137b966720fbe0f1cca2f83db4648f3d5656de1927fd35002e6058dc2810f510145246cbfe59ec7acf333b650144b7f59e23d84142dc45eb7662b3dbf98fe114e923bb0ec24d258e310d7b646464", @ANYRES32=0x0, @ANYBLOB], 0xfffffcc4}, 0x1, 0x0, 0x0, 0x20048048}, 0x0) (async) socket(0x28, 0x1, 0x0) (async) syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x1, 0x8, 0x40}, &(0x7f0000000240), &(0x7f0000000040)) 2m42.347906323s ago: executing program 0 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}]}, 0x38}}, 0x24040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f00000017c0)=[{0x6, 0xff, 0x0, 0x7ffffffc}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x20003, 0x1, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 2m40.642052673s ago: executing program 0 (id=28): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) 2m40.38322806s ago: executing program 0 (id=32): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) 2m40.187684876s ago: executing program 0 (id=33): socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3ff, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x92) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) clock_gettime(0x0, &(0x7f0000000140)) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f00f804dc9c9d060000", 0xfffffffffffffd8a) 2m38.730003343s ago: executing program 0 (id=38): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) munmap(&(0x7f00003a9000/0x1000)=nil, 0x1000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000002440)=0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000004080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001007767310000000000000000000000000014000000110001"], 0x80}}, 0x4000000) close(r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getlink={0x64, 0x12, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x10100}, [@IFLA_BROADCAST={0xa, 0x2, @random="2271592cdc41"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @empty}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xffffffff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x660a0}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x64}, 0x1, 0x0, 0x0, 0x8801}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) munmap(&(0x7f00003a9000/0x1000)=nil, 0x1000) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0x6) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220}) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000002440)=0xd) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000004080001400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001007767310000000000000000000000000014000000110001"], 0x80}}, 0x4000000) (async) close(r2) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getlink={0x64, 0x12, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x10100}, [@IFLA_BROADCAST={0xa, 0x2, @random="2271592cdc41"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @empty}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xffffffff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x660a0}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x64}, 0x1, 0x0, 0x0, 0x8801}, 0x80) (async) 2m23.277804733s ago: executing program 32 (id=38): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) munmap(&(0x7f00003a9000/0x1000)=nil, 0x1000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000002440)=0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000004080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001007767310000000000000000000000000014000000110001"], 0x80}}, 0x4000000) close(r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getlink={0x64, 0x12, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x10100}, [@IFLA_BROADCAST={0xa, 0x2, @random="2271592cdc41"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @empty}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xffffffff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x660a0}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x64}, 0x1, 0x0, 0x0, 0x8801}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) munmap(&(0x7f00003a9000/0x1000)=nil, 0x1000) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0x6) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220}) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000002440)=0xd) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000004080001400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001007767310000000000000000000000000014000000110001"], 0x80}}, 0x4000000) (async) close(r2) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getlink={0x64, 0x12, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x10100}, [@IFLA_BROADCAST={0xa, 0x2, @random="2271592cdc41"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @empty}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xffffffff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x660a0}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x64}, 0x1, 0x0, 0x0, 0x8801}, 0x80) (async) 15.54487801s ago: executing program 4 (id=573): r0 = socket$inet6(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) r11 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f00000005c0)={"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"}) r12 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f00000002c0)={"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"}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f00000001c0), 0x0}, 0x20) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0xa394, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 11.811393849s ago: executing program 4 (id=593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, 0x90) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x182) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, &(0x7f00000010c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="226cdabcfc2e15226bb14b629262825cce88f34db49e1cf651922b77fa613ab6e2c5a86e08169542a60708bab15c2ffe39f2daefd382c92deb97fe08808265a528c4318c09e06033826d5ec2"], 0x28}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40094}, 0x20000804) write$binfmt_elf64(r7, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x4, 0x2}]}, 0x78) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 10.817424037s ago: executing program 4 (id=596): r0 = syz_usbip_server_init(0x1) r1 = socket$inet6(0xa, 0x800000000000002, 0x7f) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet_opts(r1, 0x0, 0x1a, &(0x7f00000008c0)=';', 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000027ae9140ac055902b2f0000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) 9.621187864s ago: executing program 3 (id=601): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) r0 = syz_io_uring_setup(0x230, &(0x7f00000001c0)={0x0, 0x20, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r0, 0x7a98, 0xe0a9, 0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000000)="cef5", 0x2}], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000382000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x40}) ioctl$UI_DEV_CREATE(r3, 0x5501) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0}]) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x10) socket$inet6(0xa, 0x2, 0xfffffff9) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) (async) syz_io_uring_setup(0x230, &(0x7f00000001c0)={0x0, 0x20, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000040), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) (async) io_uring_enter(r0, 0x7a98, 0xe0a9, 0x0, 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) (async) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000000)="cef5", 0x2}], 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000382000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x40}) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) io_setup(0x222, &(0x7f0000000180)) (async) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0}]) (async) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x10) (async) socket$inet6(0xa, 0x2, 0xfffffff9) (async) 9.414906944s ago: executing program 3 (id=603): socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) pipe(&(0x7f00000001c0)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{0x0}], 0x1) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) recvfrom(r5, &(0x7f0000000440)=""/76, 0x4c, 0x2000, &(0x7f00000004c0)=@ll={0x11, 0x1c, r6, 0x1, 0x2, 0x6, @multicast}, 0x80) shutdown(r4, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r9, &(0x7f0000004400), 0x3fffffffffffff2, 0x6000000, 0x0) 7.738791991s ago: executing program 3 (id=604): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file1\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x4) listen(r0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r2, &(0x7f0000000240), 0x80000dd, 0x10003, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000002c0)=ANY=[@ANYBLOB='filter\x00'/28], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x80, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000010", @ANYRES32=0x0, @ANYRES64=r4], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x24000805) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@remote, @multicast2, @loopback}, 0xc) 7.590967319s ago: executing program 4 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1) write$binfmt_elf64(r3, 0x0, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}]}, 0x38}}, 0x24040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f00000017c0)=[{0x6, 0xff, 0x0, 0x7ffffffc}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r10}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0xa219, 0x20003, 0x1, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) 6.160383933s ago: executing program 4 (id=606): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000090000000000009e8f21cc193a336bab6a6315b4137a3d0000"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109b000000000006000000000000009500400000000000"], 0x0, 0x5}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) r7 = socket(0x11, 0x3, 0x0) setsockopt(r7, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg(r7, &(0x7f0000000100)={&(0x7f00000003c0)=@xdp={0x2c, 0x8, r9, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000006c0)="000502000b00000000002d3922ff65b4355e953d23d254f09cd2893ffd966d3b07110a5fb45458ac3384f783ba19c9067555bde4f9ea32fe7d51103f1ee93a87f99eefefafbd19acd55e1abfbe5c299f", 0x50}], 0x1}, 0x818) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000), &(0x7f0000000000)) 5.899143793s ago: executing program 3 (id=609): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r3 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xbf, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0xc8, 0x1, 0x7, 0x1, 0x2, 0xd, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x8, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x3, 0x7}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2a, 0x1, 0x4, 0xff, 0x9}, 0x35, &(0x7f0000000140)={0x5, 0xf, 0x35, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x5, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "a4d0e26eab4942c7f5d498a56d00770e"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x0, 0x0, 0xfff8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x1, 0x4, 0x3, 0xf8}, @ptm_cap={0x3}]}, 0x2, [{0x2e, &(0x7f0000000180)=@string={0x2e, 0x3, "e3fb188541b5290987cf271c577d96a1f4e64a3c849fe219ee68917b9f375e9c51eea601df26f4f27f732e33"}}, {0x5f, &(0x7f00000001c0)=@string={0x5f, 0x3, "e89af1003e87f27ed31ce4b8bf301d478a587fb5c3322f00b39b49ae9bc47641101e7e97f0c86f0de7bd0f6c614061cff5dda118e2c073c38c93a3acf99d05f4791b2d47fffc1e859220ac2d2c29ed838fd3a1838493a38337bbcc95c7"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x0, 0x8, 0x7f, {0x7f, 0xb, "7517621745c06380467ddf799960782bd21cf5c840549d51e0ca03394be7b6ee39a516ee542f90f0baacb6a285ef3005ac1334d6c7520f2d353463b16c7c90501ae88df8ce45c57788bec6e6f66755f505c0ea363b5d83171ee434ff3e22bd5afc022d329739a106e8b32c1ccb54205b4f1d41f7218656f28f491c9083"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, &(0x7f0000000640)={0x34, &(0x7f00000003c0)={0x20, 0x30, 0xa, "8f05d2d96a00017845ec"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000480)={0x20, 0x0, 0xfc, {0xfa, "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"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0xe}}) 4.284459257s ago: executing program 5 (id=615): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000120001002cad700000000000ff010000000000000000000000000001000400000000100014000d00fe8000000000000000000000000000bb0c001500fdffffff00000000"], 0x48}, 0x1, 0x0, 0x0, 0x40085}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) unshare(0xc000400) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') (async, rerun: 64) unshare(0x28000600) (rerun: 64) close_range(r1, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9f2faf794e7ee7b3163b90010000305200001c00128009000100626f6e64000000000c00"], 0x3c}}, 0x0) (async) r2 = fsopen(&(0x7f0000000200)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) unshare(0x10000100) getsockopt$inet6_int(r3, 0x29, 0x18, 0x0, &(0x7f0000000640)) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000340)) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESDEC=r3], 0x50}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'bridge_slave_1\x00', {}, 0xff}) 4.118418123s ago: executing program 1 (id=616): sync() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000340)=0x8006) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x5, 0x200004, 0x1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty, 0xfffffffe}, 0x1c) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'macvtap0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x1, 0x4000000b, 0xe0, "51756fa0d073"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)}) lsm_get_self_attr(0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a0000009500000000000000910f001083f7b8033157ad3a9ec3e0a154dde8e516b33d49cd6d8ea1ef44e26a9689047dc810523bb6cb646edac69057131e1be7162eed1f07ba5e28f6fe1cb93967ef2f0ef2d0df01ab65f8f730d2851251b7cda33d6e3116f566927744a6e23559db48c03d567c61c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0xff}, 0x3}, r6, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x15, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x3f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 3.983034671s ago: executing program 5 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000008000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) userfaultfd(0x80000) (async, rerun: 32) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 3.834137082s ago: executing program 1 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000080000000000010000000900030073797a30000000000900010073797a300000000074000000060a010400000000000000000100000008000b40000000000900010073797a30000000004c0004801c0001800a00010071756575650000000c00028006000140040000002c0001800a00010071756f74610000001c0002800c00044000000000000000070c000140000000000013"], 0xe8}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x200006e64, 0x80040) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r11, 0x80045530, 0x0) pipe(&(0x7f0000000080)) 2.988720836s ago: executing program 4 (id=621): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRESDEC=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES8=r0], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x1f, 0x15, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ffffff7f000000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000fc0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x8000, 0x87, 0x7b4, 0x6, {{0x15, 0x4, 0x2, 0x4, 0x54, 0x64, 0x0, 0x6c, 0x29, 0x0, @remote, @private=0xa010101, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x13, 0x0, 0x5, [0x1, 0xffffffff, 0x1, 0xfffffffe, 0x21]}, @timestamp_addr={0x44, 0x24, 0x67, 0x1, 0xb, [{@remote, 0x4}, {@empty, 0x7}, {@rand_addr=0x64010100, 0x4}, {@broadcast, 0x6d64}]}]}}}}}) (async) fsmount(0xffffffffffffffff, 0x1, 0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5], 0x6c}}, 0x0) epoll_create(0x76f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000002440)=""/181, 0xb5) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4044010}, 0x20000000) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r9, 0x0, 0x0, 0x8004, 0x0, 0x0) 2.921560682s ago: executing program 3 (id=622): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$kcm(0x15, 0x5, 0x0) (async) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x22e02, 0x0) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000980)={0x1, 0x70, 0x4, &(0x7f0000000940)={0x19, "79b8142115db2c05f171f5306c0c14f1e37ef9335b6e140c0afd2077a025abe98e"}}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 2.786769153s ago: executing program 1 (id=623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0x4) (async) ioctl$SIOCNRDECOBS(r1, 0x89e2) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r2, &(0x7f00000001c0)) (async) ioctl$RTC_UIE_OFF(r0, 0x7004) (async) setregid(r3, r3) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r4, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000280)={0x28, 0x10000, r4, r4, 0x24d763, 0x4, 0x8, 0x25694c}) socket$packet(0x11, 0x3, 0x300) (async) connect$rxrpc(r1, &(0x7f00000002c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000340)={0x0, 0xf, 0x80000001, 0x1, 0x18, "f2307b87d6882c1f65fa35447a8c0f5ea5ebbf"}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000380)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x29, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0x7, 0x5, 0x8, 0x4, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcfb3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x1, 0x1, 0x6, 0x8, 0x8, 0x100, 0xfffffffffffffffc}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x72f8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000600)='syzkaller\x00', 0x2c7e, 0x7b, &(0x7f0000000640)=""/123, 0x41100, 0x4, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xa, 0x200, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r5, r1, r5, r1, r5, r1], &(0x7f00000007c0)=[{0x1, 0x1, 0x10, 0x2}, {0x3, 0x1, 0x9, 0x9}]}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={@dev={0xac, 0x14, 0x14, 0x1e}, 0x1, 0x0, 0x60, 0x0, [{}, {@loopback}, {@dev}, {@loopback}, {@private}, {@local}]}}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) r9 = syz_io_uring_complete(r8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000dc0)={'ip6_vti0\x00', r7, 0x4, 0x81, 0x1, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x1, 0x8020, 0x1, 0x1}}) sendmmsg$inet6(r1, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000980)="674df89e2f57204976f4b1013804bf0597e1d2446d370df0434607197d66e17babcdb63a2d3fd6a06990056da5", 0x2d}, {&(0x7f00000009c0)="cb26569ab17f45f1d80d8e24663d672a072aa71babf1cd9a5a14d9df17a9e62701b704c04682cae1ddccf9d613fdc9ad98b4e8fc5632800794cd0f4518f6fb69fa816182a5607384873ee0c055187222c675691688596a310f8d8815a3fccae18bf2929865f9c548c9176e4cc663511fc3e285fddde20950d808d11ad2ebe935c2bf1d2df2dd8657701bb9f0d88009e5a1a55af1abc25561503caaf5194f8f925cc29926c79b400dec37a9797605bb985d04db322598a08126", 0xb9}, {&(0x7f0000000a80)="ddedf206438bf71737eee71ea173441d35caf3d2707f2f40ce54b9cdcfa6087d0036086a59bab001399b7a2d8c3a6f068caf807fdd5289343e8f4bb8353a24800847ba145c03998f892467dbfbc8f9f82eb6586220f65c43db654e5deef81d0ff98a9ae4b02caecf1fd5b0248888324b61d5743c4f9f6870197ff578acdd160a257ac9ac9fdb4225dfc6208a3778474472d68ddd4509238123ab798f1f5e46f808d0cac409ebf1fae030089990dea7e80bfa91be6f1163842f2fbf806331ff1ffd33ef3fbc", 0xc5}, {&(0x7f0000000b80)="23c8458057c5b086b5e9153c2e1c70e53506181d61c7b9c5c861d051fc4d5cfae24b0bb09e", 0x25}, {&(0x7f0000000bc0)="808ff3820c8f162bef5d2a1fdaa489fdd932bbdaac4f696f8c12b52f28e483c8c9d3d03b03900089b3899f2d22f8f1b0c2278682068def5de7242a936a56c72fdff00237580c269fbccad7a3b8613fb2d6c69a7b0b44e6f19e4cfcaa392fa3513ebd050a510622477cae59e5c605152f0f79e727d78a3ba7eb4b6fb3974598b685a7b80231a9cade27401f26183a8a6a4f21db0c1d21e3d5a8276f38bfb3f6947107f5757955166f64b667891a3ce6", 0xaf}, {&(0x7f0000000c80)="9059039ba3", 0x5}, {&(0x7f0000000cc0)="9d519cad82ad3570fad1efb1069debaeca62ad6abebf91f221937674d2a907f9109c4c5c07121dc7e187f3a4390757a4d0da4e670bc87db05210bd909e1646a98a9f5c42870fde3b8396c76663e5544d7d1b3e277fb4ac4a707e749f277b24b5a6f33748f150602b52", 0x69}], 0x7, &(0x7f0000000e80)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r10}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r7}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0xd}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x87, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xa8}}, {{&(0x7f0000000f40)={0xa, 0x4e24, 0x291, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000f80)="e5ec29fc72bd7963672d8de673806336c919cd772e075296ab7e9f0a8d9819e112c2c1c038aafda33b90dfa8ff8d81b86044155de60dfae5108aaf3e09e090d72457aae4350a253668ee834f6a0ebc6d5770109716ba53e781b43fc9f038ae6b07f3f97f5643d602a2b22b011d0975855b61e72bed24e4e1c4cb7072f18fef101d224c651cb168645fb4e9746b0b48e956031e3f6ef607cc7ebf540f6cc7d896d3d1e3d591eff34abae571808552e59563b22e2639849521cea38af0c56b1ee38266ce5146260da13a17dcb44cacfc4598f46e619d19d4163572bce0366d", 0xde}, {&(0x7f0000001080)="604eeeb157686743458e8c183e3b8b07cacaaa025dd1e2704224f0d18654c87ca86692c2ea8e754a054170134c9217b38d13983532716ff7d934825cedd57aa62ecf34014944398344832f639034bdb6122b5f11d45780507000", 0x5a}, {&(0x7f0000001100)="3e88554bf2e0bf9378b8a5a27dd0d27f5462812b50bb8082672d4985b565d75eb3f674af15e07165215fb0fe6592d9aec94d814e9c841fb3865e1180edaf97e56fd86ab0ae64472b4b64967116e1f0662e178b42d7f25953fa59b4c0e03bf3283d9531a99982cda6f0072232725ea267e996893a0bc5e4daccdd14ebb27ea8aeb2633183f0b4a10999e0034d120d4fbf5d50d1bd63a6142189e857f3a83badcc93735122343b84e5cfc99674a38028ccb776f48fc41be90a618bb23e48dae4be440695046fe3e95cfc957b5ed036028e69feccf64ad43e2372ce8b63d5e22871f3e9391880f23da816a56ed20551", 0xee}, {&(0x7f0000001200)="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", 0xff}], 0x4}}, {{&(0x7f0000001340)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x36}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001380)="069b644fbc3eff57217911dbd93f0867145ba9b0c11fbd3319aabcf8d41d11c761435ef5ea69dca78f58c816bbb43cabe077298c2dfd7f11617f6c835eb046ed3ba220a9869ea731f0caa3db7aa1f31b105fcc28eaf9b6fd6c15829e16e3c07ebff1a78f64abd3e7fe9ee7aafca60a451b23b2155e803e7021f4d511609e533f2508d9158f1aeeee7cef84b5f8f69dbe737df60924ea80cfc255b06acb565abe4a107dd351d73aa97d7c5b3c848be7930ff22f4a2294d480fb4926763197edc4539e4930d7ba6a0723a2677cde2d852ca879ccb2015f81184a139e5500", 0xdd}, {&(0x7f0000001480)="c8415cb184331ca18ea3c4ed219708ae12e3ff04dadb55c0bbacdc0876a263e9df8412b71a8a6edf08b6980c6e22d4fc4dea84c14c51b95e28587ca045d80cfeb2e999cd2290aa2108fbd22eebbd562a485481070b8fd8aface02c9c1676cf77a6410e7deaa74ca8474c60207471ec37502c8d7c389b9c3072454f1b673a50bc02d593769c18d1f0a6175788fb4f326ba78269a0743206a9542884223f7ab64d6c5f0b77112b5d8e7913", 0xaa}, {&(0x7f0000001540)="3bad974ef936f76b5009df18692b9e53c7131ccc07f0371b80d9c67fe11631a81ec490e5580dfb5db42073b9c8c60bd21a9229d4bf2f50d89450367c5ee076482321717eb5a7040d4549aaf3f42b85afedf29edb8752529d5f0bf5d84eb0dd247be460cd4898da376dd15d09a3ebbaa40c0e7810b6158cb528644044cbf4dd6c00ea3c4e358ff00d37fc929fd6e2626016db9926f652033f178abfacbefb9c1131", 0xa1}], 0x3, &(0x7f0000001640)=[@hoplimit={{0x14, 0x29, 0x34, 0xffff}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2, 0xa, 0x0, 0x6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x2}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1]}}}, @dstopts={{0x48, 0x29, 0x37, {0x6c, 0x5, '\x00', [@pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0xf9, 0x6, [0x5, 0xfffffffffffffeff, 0x9, 0xb99b]}}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x29, 0x2, '\x00', [@pad1, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001740)="e3247c992fdb30d27e45dc017f2d15689d83818ce772a7309c1e11a172c3b1dc5fae4c87d48ed01704712b526f40159c63477958ca361ffc33c59a78aa237b4cab661cd191763d", 0x47}, {&(0x7f00000017c0)="4a88b87c337e3a2f714a1beab171164ed964df6f468b9f1d6a400037208aa95f896a4126755ac43eda976667aa773e20350652c190e6428412f2a85362c02fd5d34a13fb0e54db06e8a2f46a19ae7105b6fd18ab8fed26aee1a46a3a6e1b1864b03ef115fb6f5a71bdb30b1599a76c6edff5a1e39e33689cde5675c89b74951b1626246601676e544eb17aa8e5407a54e66e91fbe9fb365fe8300d83e3e20087752fb955b6a6f3ccd7d212d6dfc139840b6e060bef661e7916c6ebdb583144f43ffad6abe19003e6fa0f0fcbf402", 0xce}, {&(0x7f00000018c0)="33897b7c47d34506ea2c5ca4addaf04695c4b23d6829cb0d58ffe6b92ea67d854b1c117bc333b140b04f368728dc4c2ec616feeb8f69786d0c08acf716e4adaf61ba619bf70e1f877f46789ed1e4d0169f70b28ad8b574dc9a90d9cc70", 0x5d}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="ff5d68e844d5c10824ccff4cb1390fc6dec0bb22e148f8ab204b8e868a7d06dcf135a7c692edb9bce3342db2eabef10b16e5981aa5bf6e992ca33bef528a9dcb883a7a3d188eec4f0796161e3037a1e9", 0x50}, {&(0x7f00000029c0)="84b9adf55ac0ac72bb981dd404d2e3dbc3fad6410ff2a9d709b2818d4be7f18be5779734e76c233c63262ac255d3a7e384d0e140919e7d4466fc504d296c9bfff186ae8f8b594d1def4291a10abad62179d54034fcf52c7f4d47766d57695146f7462d1ef9467a7ace306c9812ef77ca35a4870b0738c1c88558332e6d637dd29d82d038a02bb3621e77d81473faa16f15304fcb1926c0462d45a8bdf295dc8d39e7cd2f3ba79808bc82a4207c3e5038b181bd72b0527e655ffe2ba54895165d48de2a473a5155c0a5f0d7", 0xcb}, {&(0x7f0000002ac0)="7ed82651bb00506c62c5fb5d1cbc4864f1adb5aaf04464d2dfb889fb799a5b02614f23da14820001bb17b679a70e32154f414c1513aa20e17a78e5185148ae4c82c1b4619532b09d0314957e7b48e9f0e2dfe0c8eeda005bc1cf3cf29a552838190cd6763be61d531c1f74ab847a023a4cbf6a9b90748f71ae7ed7d600338ef5bbaaf600f02ce421c6a9ddea801ebee32c2d7791", 0x94}], 0x7}}, {{&(0x7f0000002c00)={0xa, 0x4e23, 0x4, @local, 0xb8f}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000002c40)="cf245993285c806cccf2378a42e1e51f70d8b5b846cab481a48222316146d728049d2a47e116c6c5de4d813e423dc93abb0af65f3737", 0x36}, {&(0x7f0000002c80)="92b302f178fb723ff63390c7c009f7b129e976e1ff71f75dd9a290c5fc7d9895d0ddb58d29306a1a34def59dc88d7ed8d3f4a4426927fa281cfcae5c22a69d641a484340192e87aef874f311d600276dd69ff70d8f7d378522d71cceece0c6291e2718276e08a5a2fd5a4153fc2c899f128557391e97a971cd", 0x79}, {&(0x7f0000002d00)="348873bafbe3a66c0dd134b195e4d413c08e0c72fe4950023cb58ad7f987df7c2588cdae0f77e96c50c14063a4f64bec91938241fbbe84f0a1bff0274ed3b155093a5fd1b13a189efcf6f31f634f804f1183b27841b50d4ff0b98806b165eb31a6a1e7691d3f61f7dde1d7a61f67401193e8a4c436242dec386751fd44d1263c0e96130c55bbd9a79483c180e829f0a5b2b1dfc5e62bc5f269433017c6013bc888898e50e55856da5ed10f7a2d1142bc795e9c106ee450b02e98459b6a", 0xbd}, {&(0x7f0000002dc0)="5e0ebbc48191e6391ff761e2f64c3856f42b6320083bc5819052df", 0x1b}], 0x4, &(0x7f0000002e40)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x33, 0x8, 0x0, 0xe9, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @local]}}}, @tclass={{0x14}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x67, 0x4, '\x00', [@ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x80}, @hao={0xc9, 0x10, @private1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xf163}}, @flowinfo={{0x14, 0x29, 0xb, 0x154}}, @dstopts={{0x58, 0x29, 0x37, {0x73, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x1}, @pad1, @generic={0xf7, 0x16, "28d30d16d977516b076251b808cd6a5a4a6dd46c30f7"}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x10}]}}}], 0x138}}], 0x5, 0x40805) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000003240)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000003200)={&(0x7f0000003100)={0xd8, 0x0, 0x1, 0x205, 0x0, 0x0, {0xa}, [@CTA_NAT_SRC={0x78, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7aa}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_LABELS_MASK={0x28, 0x17, [0x0, 0x1, 0xffffffff, 0x12, 0x0, 0x8, 0xfffffff5, 0x8ca, 0x7ff]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8015}, 0x4004901) setrlimit(0x0, &(0x7f0000003280)={0x0, 0x8}) (async) r11 = openat$null(0xffffffffffffff9c, &(0x7f00000032c0), 0x400000, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000003480)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003440)={&(0x7f0000003340)=@newtfilter={0xdc, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x3, 0xffff}, {0x2, 0x1}, {0xfff3, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x94, 0x2, [@TCA_BASIC_EMATCHES={0x90, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x26}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3fee}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xc}, {0x2, 0x8, 0x1}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x8}, {0x8, 0x10001, 0x3, 0xa, 0x9, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xdb, 0x3, 0x5}, {0x3, 0x2, 0x7, 0x3}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8000, 0x1, 0x400}, {0x8, 0x1, 0x0, 0x4, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x4) 2.763117901s ago: executing program 1 (id=624): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x2488e0de, 0xa, 0x0, 0x3}, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) poll(0x0, 0x0, 0x7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r10, 0x0, 0x41}, 0x38) read$FUSE(r9, &(0x7f0000002d80)={0x2020}, 0x2025) socket(0x25, 0x3, 0x0) socket(0x10, 0x3, 0x0) 2.744011354s ago: executing program 5 (id=625): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @null}, [@netrom, @bcast, @null, @default, @remote, @default, @default, @bcast]}, &(0x7f0000000080)=0x48, 0x100000) pipe(&(0x7f00000000c0)) socket$kcm(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) io_uring_setup(0x3ef, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r3, 0x0) socket$netlink(0x10, 0x3, 0x8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x0, {}, {0xee00}, 0x8, 0x7fffffff}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0xfffffffc, 0xa, 0x2}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000001340)=@userptr={0x6, 0xa, 0x4, 0x70000, 0x6, {0x0, 0x2710}, {0x4, 0xc, 0xce, 0x9, 0x77, 0x0, "0080ca4f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x5}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r5, &(0x7f00000003c0)={0x8, {"ac4b292b84bd72a8d758c2b2ff1c72004134668d5e310b7d0088b3d7afc4ce236d4ac7c0365d389808a78b05023561f45af31a93113ba5f725e7e28370eee47ad75feff31d8835c190aa0f8e1a70095d64a50cc8cda17f827ba53540a6bb426526e912ab7f941dd459ab9bfcd6432eaf3598e278858b1e87554a958e31c2625045b8843a2853ea7f22be915fb9fb47c83624b3fa2be5c12acbe5eb4b2a67ecd5af46c393e88329deb4af45ebbe41f0e197245ca0b4b69c0168803c9fd27ac61b79bacb0da740f3aade73ecf04f363c4dfc691d939c573bb1222b0eb8e165d6d6edfbc770ce067bbef32856c6f514b0a38ce4cf86b89b5a4dca3dd0f48a4253cd3547f9a898f29836a51c60949ee877b24ecdb330ad61b5833a24e4e31d990dbf3a5195784d6dcd13cdad3869526b3531c5987dac7444d60e4b5334859825d5de308ade959d81e72f5593ce8adf26513d3a2c6037ac9c77c45ccae6d1de257b4dee8283fe2f47e8744ba7fd648697d55bd8582d9aba94a5caee75bad49b35f9465085d8f44b75a77515b6309bd284c305fd3a78c6526105c5d49e12d4d56938d259cebd663b6bf8e8b052be7e90c7c5a184c41068b14ec261b736e59b5a75a4f1db359971e653dc9ecdedb8ae9928fc6ca04d99995539be8ccc144dd3e0fdf46fa00638cff0e3f0ff92ae49cfe9a88c815971c52fff59935ed679fb7500b71bca52d5885c9d22fc5148b89c59bdc366786928c13430069666e03e42731c93c47508ff053d1193b15dfa6133dc3a3db587bc5ca05c697f498cb17496b5e8f6629164996f1b67f3aeb7aa282f5716d0d5bf8b9d0e674ebec3e6beccdd4e457254fd886457e4f51e454f1c1e7ce5ee5125bc825410e1303ac4e9fcff7eac2955bb43a6a01863f7f32cae717a7abc0afd2953396a19e930f06dcc5cf73aa089b6ff9b65ec2e954e87229670e42c2d44dfc79d7866968b08baee738ee6936539d22dec8a966f90fcce231c0c5232bbde8925da8abdae1efd04da31e9627bea70fb7941242588c2ed40b8e14a5d7406cf28c62b94530064b4b10dbce57ef97436d57e3cc81d05adb22838470e1c64bab7f198b3efaf753d12392465d285586fd484dfe0323536687523b175dacd2e91a959e1c0df2593a2954c44d489081915421114a38284cc6e62e43e3cb5073a8bc9989aef76332028b7c24178f47b1cba9a6a9e0a068445a75ae6f568031f617c37bc24a3ca3c950546aba27f7400029a7ffc11600e17cd5e4efd4e91963468d1185e8780db244c8da8ce027801a6ff13e2dfdb5add1800b66a1720c35f2a8219c7dbf439c7c524da32c64c7e6056b60b53c02cb620fb64c6d2f12f391a8b4a19fc0f2e0644b8302a24a2991291c726cef1d8cf765f63b1f994a479f0e81afd4e6e3300767c9debda23f2058d7f5d31497008fb1ff951ba3bcfac9abe0ea3fc8a3cfc770200d885b6fc758aef7df4b8bf305ce373e888205b90eed8f1528b33f198d0f0802eccce8ca133af7d8a27a00f8e9ec981c618f48486864cd782d3d803bdce926e1447b3ccc8f64314b6b07d3b42e563ecc4fe8fbe4ab414893191d5da7d00e30733c7b975aef14dd5a745927d10fb322ca2d079a698f8089ce1a7dd3cd83484cebdae7437dd988a00062ce950c77bf0eb1a4b40b4815685ada031fd16e4b89f66f7ec804e752efede8f3d79c78c1bd97d9e1eaa19f87715689ddc3ba55d787cae0b30dd950197da2b389838746fb853d5a65d1b281d51500b8c0c8430cc1b2b09e1794ce2ea0171d6e822ba87056dcf6663aa33396245897572ac8a762838a5738690dcc3f6bd2028a4a108355d69e801996f68828420919741b0af974856366d3196a71e606b20c153ce75a3ec121215a5b68ebccc5a15fadbfe2e703754c95dd5c77ca935944231557c480ed83b0b5a8b19f566f5003d51301a6b342cda98529b3a3ba2f76f19e70e8900a95e5de1153d6a302f985f6627a3d5d63cd7f1bc125236730ff3ddcc92a5fbbd1f4decd70752891dd71b1cd53f0841b8b3e9616b661f3b73f776c2ce7928bdeb978182c2a6eb3c94da356a9601fdf0b9b084b0bfa4b93323f0c49bf789699f77baa26ed98ac6d88e2c924f28715fa16a50d2f6382ef9f3eac4f71fc952b18c1f6710a8750921e130b7f90ac5d0006a3c8163f9a7962c87856600aec4e9cb28b7de3655eec56feb56afb525f63ab4efbb05458b702cb9c9998c241d33235e687fa16f17cc95d1e3903bc2da5b08dc511de3d7ed898eb29090b2afd2e894580c479e783374c2ae90034b55d05251d45106840b503e0b3211d0f2db7ff0bb45e9da9b900f4e80dabc95cc90d0606c72417a99794edd0fe10bf6d26248ddf04f43e565daa073832b47baf9953fb44e657dfe7beedf5bec4f0556e5cd5e308bf0857cfa984d4e2f65aff9beab8b4b000bfd9769986489f66ea5b242cb83403e47906ecaacb7dd627533d9bce8cd37d83147dc4fee263c96393a0f6cc41d502e9e49f232cbc3e2537a3aa76c1a7ccc6a83aea3041faf0f6df6a12fa6e6f7e9540e7a31c89d3c7645b5d6a17ede151761c607ce1456b303f9f64c80574690502ed3ec632bbd9860168ad5f2b7de7528c02fe2984bbc9b20ae0f1ec57a3d33b0432a96d92251a653ec39e6caf3f738485a41e38370d71da6fa538b54fa0976f9f7f3dd8763eef351d77b9b9354136d16326cf58022f1c67d801781daf637b092b43be7e467ab8b6382c570c8c32c7843b8ee7eb31db9a4fd484ba7f0f08dd87109caad8cd7b6f93ae606446b4be60baf61a65bbaa8d5309fea6aa151f12dc5725a890ba6f6c67a7ac6609ed44ba231aae3131ecc45bb69c92f98e843cc99b45fddd3ee672a3cc62d8e2056112b88995c586f56fcdb93362a018eee321e2ee9f6f5276f462486e255faaa8a7b65117cf9e744c82ab5795ce13078d8c76519d59f81013dc17083303dcad1847812a76f01b0d03d3c3621f6c75a0a749ae9d7a7c7da4d4f49a9f432a5418f40d5be850204b1ae66183c1bf83c7f74be4ccba2bc211383f9c1b9c6c5e216e5a93b091fffb0aee6aee2ccef5e200ba11428b8724690749aeb96ef39be5c4e63a7bd9dd093b96e0658cbbc54341a161356227795140d9bc5361c2c502e67acd84ef346c1e029465bd1329727f5056df7d63747cbd7c6f54a80f74bb824b07aa7006de2c18e31e49b04a52045a3895cd2567137937f22fa27f983a7e52eecf47652e2d80c4e03c55ad269550a97b37c94763cdf89b9244cddeb509429e2668fb088acdda97aea01f3bfd8df8910d8c39f5ccd46e851bb4077b392d66d56be56645295af3251aed0c8dd8cb097bfc77705e1f13c2ff79da0f9c26f08f903494295b1e1b566a4124b88f0536858039f9be3bfe7bcb66e57122bdf2fb679923ef156153d2ae1ba1de71a510d186dc9bed86265018299702e849a4ad99f655075aae194cc062d9b07c0573337538a5a6d6c6d2921fbd181d6e305df7a1d62a82154fcde4a1aafdd6f4e7e49a7f349f628ba372d49fcbcbbd71c23e234218b79cd80088b2b4ab4e20932eacaa2e91236a4c7fc82f6a49354436dcc806b50aca9264fcd9b199eafd6381178db163d4ce377389c67436fb07d58cd73e6a9204f447eb9c100c223ea391bcba8989426c5c8cdd0300279daa31bd5730d9ab69e5904d7386273a76f779335ce5e44f84d3f3686573ea71f2e64922e82bf2f08c877c54ee7cd160c79d68c500df6f69d033f2304d830c7cf109f5c993abacf15d94baefe49265e24f838af559cdb5695a8135ac2b6ca1d7b5600803b1f24dcc29148aa94905dda78a9f19b21fec2d780fb962dab7f1f7c7ea4aef475540fa0dc2b852f9cfdad43e8a6fed633854a1e1b96169f28961349a9ecd6d0f1f2473f036db92c0c0e64733668fc6d69becb06af2480ac856e9431439d914557a31e80badca76f85086fba1fc7374cc249c5983cc085c7bf3aa5ef12afb3bc72fe479507666bb38f50878fad0450dac4b39ea57ed01654b17590f9478dfab02e664ba0e34d4a764374d09de43b69d5007077b2bafb42e260aa8fd4aa3bef9a8d5dc8e2ecde7c2c2bfdaa21802b7d67588854288512602a41e25e09f59633fbd92df9478bc6e6a6b3b560dca5798a895e8dfa93ae9fea23729da6f3a40d4af3efcd4f6d2d02ffd2b0270960cdaea8af5004fdb18c5a510f2199724f17a8a18f3b1bc132df7affdf6f40310131e448c040fe446309352e24cb7fbc94ff9e1555e85f6479d4952854917eab50738aa6f4b70c445557703778056f7465f5d0d92bf10308a5a61574f5576702613770399805aed655d3443715dbf23190b6f0480e30c82840b59f69a71bbc19f00ac18d220af047ef89515d946dc77dd08c6abf28f6e796d3c70a4ae3d4ba01bb44fc6f03e31831ee89f583ef3d40f6c742778fac42ccf1e30367a469322d45a9725a1228ab0639de1f38c1f365c765ed9131a9d535cb6ffe49d556dee403e2202de0d04ec682c58e6d508fb377e3b7d9b748955ffc6b27b03207a3c15cd5114e631ca080c24e1147bb6d398629efcf288e3240d6311034057a031f9ff7efb07fc8ee34f19c32115f361f9e03b89f080111d141e2fbfbcd5a3d54e32c6ef1dde18c384d6bf2c4b5fa21e7efeb0b5c9c27a7740be213dce807e6a01acb09634aec0fe66bfb2ab4da89a13c42207577e38105e665afed154fb3805974d31289351937b4c67b937ae644d6cb3f913d2e05c3dce1917e1551304a5c437d69a2d13ab33989d729e6c2ed45f847b6cf5169ec4459d541c7a70199ebca316408f7adfb168e7ac452f507652ea3892e64a4d81d575825168426f39c41448beb5044ec5712f2e10b6d88d471eecf5f29085474fd2aae2791ffb41222a9dbb8c6d32847819c15201e95d0741ee1ab75ea046beca9bc8952b62ddd8a30fe2637996483d3104f540c9a985f8638ba17da2e618255f9a615fce90e1f96799d261cc551b9187cad7a9c5a9f6ff58e7cf9277856ca14e582efd62c3d384131e2fc21b9a01314bc69d54f235ce6118d756137b03c657bb26194b175a716ebe6ba03a01cb161a77815654da6a5ad327859e8af7d3f53cf1d34b84c0aafdbf8f3badaff20d010e97f794d83d5498b59a787ba94bb82d91637308313b4c92def68945b6d3d0e3654cb24b4926e46757e576d30024640fa293db106d789f41a1e481ace0c314920bdc82819e64720746ee22592a11f5917c1bde47db20902551fa838f81942fec3552f41261e2b7418e500ab9e5ea704141f0fc414a5cc6062c257214950de1c32b1951b169c7a613417695036e72bff2ce9c1a180fde1cf64cf85828f6eb9126465762686e64ab090e524e7edb6d03c3571f233f60ffc570b96a5c0839ce8d42bdc62499f8f56ee8c4a89ec4f35a7e38fe23c4b9b1625546c1a16087980d7a72c15fb7b50c9a212d9284a1cdaa1a4d45169a98ae6a730a2a07b8cb5adccdceb3131b1aa6c06b8fc7390f215a2c9ea2b2cac1026ed5965e92673608d28d55fc4e623034716ef0edf7d077809d09d8db38519d5d00a1a415b5bc431d8c6a4d558c930437565cd531c6e01631ee60d9e6e782580a409ab645c72a4b93f68100bc22a5275f66d54dbefc44365a07fafe99368b09a891767e5d376b1d0cbdc02679fb10f359d3ed8f7c268c7f0fbab77b483f44f08ee412c20a155d058addb21376fec84fbb3838c6b6aa4d5bd54e1b9770d87628f244e17e5ffc2b28eff9fb489f984b7", 0x1000}}, 0x1006) 2.185944554s ago: executing program 5 (id=626): creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) dup3(r4, r3, 0x0) (async) dup3(r4, r3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2200c851, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x7000000) 1.934107016s ago: executing program 5 (id=627): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000680)={[{@name={'name', 0x3d, '+$!&%]-[(+\xfc\xe3T\xcd\x87\xca\x1b:\x17\x8a\x8fM\xe5\xc9\xaa\xaf|\xd4\xe2\xce\v\x0fAV\xedc7V\xef\xea\xa1\xe3\x1d\xff\x10\xe0\xa2\x10\'\xfa\xe7\x97\x86\xdc\xdf}\xd0Ddhp\xb9\vl\x85\xd5H\"\v\'\xaa\xe7$\x91\xf2\xc8\x81\xeb\x03\xf3\xe7\xd5\r\xb6\x00\xd6\x05;G\x84\x02x\x0f\xc3\xa7\xf2\x10Hp\xffDz\x06\xb0\xf8?\"\xdc@h\xf3D\x84j8\x88s\x00\x85\xae\x98x>7\xf1I\x0eI\x86\xb6g\xd9N\x9e\xd2\x9d\xab\x9e\xc78\xa2\xaa(tWMO\xe2\xc8\xd4I\xe8S\xc4\xc9\xc49W\x9a\xd4J\xd3\xc3\x90\xe2\xd9Z?\xa5\x8b\xb4]d\x9cL^\x1b\xf6\f\xe0\xf7N\xaf\x17\x13\xdaN\x7f\xebU\x06\xccz\xc9\xf6RY\xa1\xc7\xa5|E\xfa\xea[\xe3\x06ME\xb2z\x00[z(s>m\xfd\xe5wYP\xb1\x00*R\xa0\t\x9abF\xbb7\xe5\xc9'}}]}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x11, 0x80000, 0x2009) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r2, &(0x7f0000000780)=""/185, 0xb9, 0x3c) accept4$bt_l2cap(r2, 0x0, 0x0, 0x80000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x2, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x31a39, 0x59629}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40060880}, 0x240408c0) 1.933641287s ago: executing program 3 (id=628): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0) 1.424266317s ago: executing program 2 (id=629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000814000001"], 0x50) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000540)={0x7, 0xfffd, 0x10, 0x0, 0x2, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000000"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, 0x0, &(0x7f0000000180)}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0xe}, {0x2, 0x7, 0x9, 0x1d85, [0x1, 0x8f74, 0x4]}}}}, 0x1b) 1.234422456s ago: executing program 2 (id=630): socket$nl_netfilter(0x10, 0x3, 0xc) 1.229428874s ago: executing program 5 (id=631): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x30, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xe088}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') unshare(0x6a040000) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xe7, 0xd7, 0x7f, 0x40, 0x12d6, 0x444, 0x293d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x0, 0x0, 0x8b, 0xa, 0x2e}}]}}]}}, 0x0) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000140)=0x7) write$P9_RRENAMEAT(r2, &(0x7f0000000200)={0x7, 0x4b, 0x2}, 0x7) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x1e7f, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) syz_emit_ethernet(0x4ef, &(0x7f00000003c0)=ANY=[@ANYBLOB="e727dc071f80ffffffffffff86dd609907a604b92c03cb697a653e336f000000500000000000ff0200000000000000000000000000016204002e"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102002803"], 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r8, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0xcc96bc0a1e192885}) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000b5a6d6443165b0e8010073797a11000000004800d5aef81ad953a288000000000000010000000900030073797a32000000000900010073797a3100000000080007006e61740014000480080001080002400ce0556214000000050a0102000000000000000001000000140000001100010000000000000000000000000a"], 0xa4}}, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r9, 0x6b, 0x3, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x6e, 0x6, 0x5, 0x8, 0x1bc7, 0x1101, 0xb85, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0xd, 0x0, 0x4, [{{0x9, 0x4, 0x3, 0xf, 0x0, 0xff, 0xd6, 0x7c, 0x7}}]}}]}}, 0x0) 1.142878559s ago: executing program 1 (id=632): socket(0xa, 0x5, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x5c, 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sched_switch\x00', r2, 0x0, 0x1000000000004}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmdt(0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pidfd_send_signal(r6, 0x0, 0x0, 0x2) 1.075695336s ago: executing program 2 (id=633): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x62903, 0x0) ioctl$TIOCCONS(r1, 0x541d) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x25, 0x1a3, @mcast1, 0xff}, 0x1c) 938.065763ms ago: executing program 2 (id=634): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) (async) sendmsg(r3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000240)) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000240)) r4 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x4000e7a9, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0x200ffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2161, 0x1, {0x2}}) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2161, 0x1, {0x2}}) io_uring_enter(r4, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) (async) io_uring_enter(r4, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) write$sysctl(r1, &(0x7f0000000040)='7\x00', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) preadv(r8, &(0x7f0000001500)=[{&(0x7f0000000000)=""/97, 0x61}], 0x1, 0x4, 0x70) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="14005a800c0001a3"], 0x30}}, 0x2000c000) 491.870208ms ago: executing program 2 (id=635): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clock_adjtime(0x3, &(0x7f0000000140)={0x3, 0x6, 0x5, 0x0, 0x101, 0x1, 0xfffffffffffffffb, 0x3688, 0xdd, 0x6, 0xfff, 0x6, 0x80000001, 0x81, 0x5, 0x5, 0xffffffffffffff80, 0x12d, 0x2bf, 0x7, 0x400, 0x8000000000000001, 0x8, 0x9, 0x4, 0x6}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4048aecb, &(0x7f00000034c0)={{0x2, 0x0, 0x80, {0x2, 0x2, 0x2}}, "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", "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"}) (async, rerun: 32) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901) (rerun: 32) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x80901) unshare(0x24060400) (async) move_mount(r4, 0x0, r5, 0x0, 0x46) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000280)=0xf, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x204031, 0xffffffffffffffff, 0xffffd000) fsync(0xffffffffffffffff) 123.715814ms ago: executing program 1 (id=636): socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) pipe(&(0x7f00000001c0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) recvfrom(r4, &(0x7f0000000440)=""/76, 0x4c, 0x2000, &(0x7f00000004c0)=@ll={0x11, 0x1c, r5, 0x1, 0x2, 0x6, @multicast}, 0x80) shutdown(0xffffffffffffffff, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r8, &(0x7f0000004400), 0x3fffffffffffff2, 0x6000000, 0x0) 0s ago: executing program 2 (id=637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffffc}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) memfd_create(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000240)={0x4, 0xfffffffffffffffd, 0x381, 0x0, 0x0, 0x9e25, 0x4000000000000000}, 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000140)={0x84, 0x3, 0x7f}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ptrace$setopts(0x4200, r0, 0xfdd1, 0x7e) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x4008040, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) kernel console output (not intermixed with test programs): : Mfr=1, Product=2, SerialNumber=3 [ 138.280324][ T30] audit: type=1400 audit(1766712613.370:331): avc: denied { bind } for pid=6992 comm="syz.5.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.299613][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 138.302968][ T5811] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 138.309059][ T5892] usb 2-1: Product: syz [ 138.319420][ T5892] usb 2-1: Manufacturer: syz [ 138.324158][ T5892] usb 2-1: SerialNumber: syz [ 138.325723][ T5811] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 138.329487][ T30] audit: type=1400 audit(1766712613.380:332): avc: denied { name_bind } for pid=6992 comm="syz.5.204" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 138.360902][ T5811] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.367460][ T5892] usb 2-1: config 0 descriptor?? [ 138.389646][ T5811] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 138.390176][ T30] audit: type=1400 audit(1766712613.380:333): avc: denied { node_bind } for pid=6992 comm="syz.5.204" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 138.425346][ T5892] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 138.436879][ T30] audit: type=1400 audit(1766712613.380:334): avc: denied { connect } for pid=6992 comm="syz.5.204" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.443560][ T5811] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.460593][ T30] audit: type=1400 audit(1766712613.380:335): avc: denied { write } for pid=6992 comm="syz.5.204" path="socket:[13559]" dev="sockfs" ino=13559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.509786][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.538044][ T5811] usbtmc 4-1:16.0: bulk endpoints not found [ 138.582344][ T30] audit: type=1400 audit(1766712613.390:336): avc: denied { read } for pid=6992 comm="syz.5.204" path="socket:[13559]" dev="sockfs" ino=13559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.613731][ T5892] usb 2-1: qt2_attach - failed to power on unit: -71 [ 138.686338][ T5892] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 138.711498][ T5892] usb 2-1: USB disconnect, device number 5 [ 138.723270][ T30] audit: type=1400 audit(1766712613.390:337): avc: denied { read } for pid=6992 comm="syz.5.204" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 138.880015][ T30] audit: type=1400 audit(1766712613.390:338): avc: denied { open } for pid=6992 comm="syz.5.204" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 138.919545][ T5922] usb 4-1: USB disconnect, device number 13 [ 139.077666][ T5892] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.094018][ T5864] usb 3-1: USB disconnect, device number 8 [ 139.103276][ T5864] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 139.123223][ T5864] ftdi_sio 3-1:0.0: device disconnected [ 139.230396][ T7019] ======================================================= [ 139.230396][ T7019] WARNING: The mand mount option has been deprecated and [ 139.230396][ T7019] and is ignored by this kernel. Remove the mand [ 139.230396][ T7019] option from the mount to silence this warning. [ 139.230396][ T7019] ======================================================= [ 139.267460][ T5892] usb 2-1: config 0 has an invalid interface number: 108 but max is 0 [ 139.278595][ T7020] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 139.287180][ T5892] usb 2-1: config 0 has no interface number 0 [ 139.293281][ T5892] usb 2-1: config 0 interface 108 altsetting 253 bulk endpoint 0xE has invalid maxpacket 1024 [ 139.309687][ T7020] overlayfs: overlapping lowerdir path [ 139.333816][ T5892] usb 2-1: config 0 interface 108 has no altsetting 0 [ 139.346463][ T30] audit: type=1400 audit(1766712614.640:339): avc: denied { mount } for pid=7018 comm="syz.2.208" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 139.378869][ T5892] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= e.b7 [ 139.395743][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.414483][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.427865][ T5892] usb 2-1: config 0 descriptor?? [ 139.434210][ T6978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.444268][ T5892] usbserial_generic 2-1:0.108: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 139.456151][ T5892] usbserial_generic 2-1:0.108: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 139.467630][ T5892] usbserial_generic 2-1:0.108: generic converter detected [ 139.481889][ T5892] usb 2-1: generic converter now attached to ttyUSB0 [ 139.545061][ T7029] kvm: pic: non byte write [ 139.555668][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 139.562665][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.573889][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.585319][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 139.594757][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 139.602983][ T10] usb 4-1: SerialNumber: syz [ 139.611489][ T10] usb 4-1: config 0 descriptor?? [ 139.622865][ T10] hso 4-1:0.0: Can't find BULK IN endpoint [ 139.795724][ T7035] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 140.309862][ T10] usb 2-1: USB disconnect, device number 6 [ 140.331288][ T10] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 140.349444][ T10] usbserial_generic 2-1:0.108: device disconnected [ 140.391417][ T7046] fuse: Bad value for 'group_id' [ 140.396568][ T7046] fuse: Bad value for 'group_id' [ 140.479009][ T7051] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 140.485714][ T7051] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 140.521101][ T7051] vhci_hcd vhci_hcd.0: Device attached [ 140.541470][ T7054] vhci_hcd vhci_hcd.0: port 0 already used [ 140.581875][ T7054] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 140.588415][ T7054] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 140.658578][ T7054] vhci_hcd vhci_hcd.0: Device attached [ 140.752063][ T7051] vhci_hcd vhci_hcd.0: port 1 already used [ 140.758326][ T7057] vhci_hcd: connection closed [ 140.759415][ T7052] vhci_hcd: connection closed [ 140.765182][ T6078] vhci_hcd vhci_hcd.2: stop threads [ 140.786602][ T6078] vhci_hcd vhci_hcd.2: release socket [ 140.835852][ T5932] usb 38-1: SetAddress Request (2) to port 0 [ 140.886457][ T7069] erofs (device nbd4): cannot find valid erofs superblock [ 140.923368][ T5932] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 141.176292][ T7053] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 141.178960][ T6078] vhci_hcd vhci_hcd.2: disconnect device [ 141.216214][ T6078] vhci_hcd vhci_hcd.2: stop threads [ 141.221562][ T6078] vhci_hcd vhci_hcd.2: release socket [ 141.227135][ T6078] vhci_hcd vhci_hcd.2: disconnect device [ 141.251814][ T5811] usb 4-1: USB disconnect, device number 14 [ 141.715662][ T5811] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 141.885682][ T5922] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 141.900222][ T7097] netlink: 296 bytes leftover after parsing attributes in process `syz.4.225'. [ 141.912980][ T7097] netlink: 'syz.4.225': attribute type 3 has an invalid length. [ 141.920666][ T7097] netlink: 244 bytes leftover after parsing attributes in process `syz.4.225'. [ 141.932517][ T5811] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 141.941599][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.949765][ T6260] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 141.957503][ T5811] usb 4-1: Product: syz [ 141.963042][ T5811] usb 4-1: Manufacturer: syz [ 141.968248][ T5811] usb 4-1: SerialNumber: syz [ 141.984677][ T5811] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 142.010734][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 142.041170][ T5922] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 142.051080][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.064402][ T5922] usb 3-1: Product: syz [ 142.068953][ T5922] usb 3-1: Manufacturer: syz [ 142.074457][ T5922] usb 3-1: SerialNumber: syz [ 142.094388][ T5922] usb 3-1: config 0 descriptor?? [ 142.099501][ T6260] usb 6-1: device descriptor read/64, error -71 [ 142.336482][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.348300][ T6260] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 142.349546][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.393227][ T5812] Bluetooth: hci4: unknown advertising packet type: 0x17 [ 142.393861][ T5812] Bluetooth: hci4: unknown advertising packet type: 0x5f [ 142.406384][ T5812] Bluetooth: hci4: Dropping invalid advertising data [ 142.421162][ T5812] Bluetooth: hci4: Malformed LE Event: 0x02 [ 142.436088][ T5922] usb-storage 3-1:0.0: USB Mass Storage device detected [ 142.506116][ T6260] usb 6-1: device descriptor read/64, error -71 [ 142.568095][ T5922] usb 3-1: USB disconnect, device number 9 [ 142.691051][ T6260] usb usb6-port1: attempt power cycle [ 142.887397][ T7079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.907501][ T7079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.045739][ T6260] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 143.075802][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 143.083108][ T24] ath9k_htc: Failed to initialize the device [ 143.095625][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 143.095644][ T30] audit: type=1400 audit(1766712618.290:356): avc: denied { egress } for pid=7106 comm="syz.4.228" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 143.100631][ T6260] usb 6-1: device descriptor read/8, error -71 [ 143.148967][ T30] audit: type=1400 audit(1766712618.290:357): avc: denied { sendto } for pid=7106 comm="syz.4.228" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 143.150131][ T7079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.190460][ T7079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.218943][ T10] usb 4-1: USB disconnect, device number 15 [ 143.229974][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 143.578014][ T6260] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 143.585900][ T5892] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.616183][ T6260] usb 6-1: device descriptor read/8, error -71 [ 143.725955][ T6260] usb usb6-port1: unable to enumerate USB device [ 143.745825][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 143.753133][ T5892] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 143.764436][ T5892] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 143.776957][ T5892] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.787070][ T5892] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.816863][ T5892] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.843707][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.115072][ T5892] usbtmc 3-1:16.0: bulk endpoints not found [ 144.175419][ T30] audit: type=1400 audit(1766712619.470:358): avc: denied { append } for pid=7141 comm="syz.1.234" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 144.369227][ T24] usb 3-1: USB disconnect, device number 10 [ 144.455661][ T5892] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 144.562756][ T7152] random: crng reseeded on system resumption [ 144.577824][ T30] audit: type=1400 audit(1766712619.860:359): avc: denied { write } for pid=7150 comm="syz.4.237" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 144.601539][ T30] audit: type=1400 audit(1766712619.860:360): avc: denied { open } for pid=7150 comm="syz.4.237" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 144.625440][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 144.626024][ T30] audit: type=1400 audit(1766712619.870:361): avc: denied { setopt } for pid=7150 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.679660][ T5892] usb 2-1: config 1 interface 0 has no altsetting 0 [ 144.688428][ T5892] usb 2-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.40 [ 144.697866][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.706175][ T5892] usb 2-1: Product: ïµ–á»è¨ºí‰Žâ¬¦ë°‘粶ä˜è¡·ã«¥ä®»ïŠ†ïš†à½¦ä ’兖딢鮒옒í€ç•îž®ä­½ë›œå´’ʅ硯 [ 144.706197][ T5892] usb 2-1: Manufacturer: â° [ 144.706211][ T5892] usb 2-1: SerialNumber: 餢蚬爼枮巚쒄뵪럊ãŽÜ´ã‚¸ì¹™éŸ¾â í¨ì¤œì½ì•–ᤄ镔渌刭廽碚ꉋ滪墡Ḇ쌊漭ꙇڤ셛阈èŠè–¡ê±œèªœæ±•è± ê¿ºêµ‚찭铦Ẫ噞﬛﯈臰鬂ꔼ鰯뾿㸰씨ä´ì’€è Ÿå”½ä‡¡î¶‘移ᯬ赖㚄摬䶮ੰ寳æ€âŽã…¥æŒ˜ì¶‰ä˜¹Ó´á¦¬ä¸¸ [ 144.787107][ T30] audit: type=1400 audit(1766712620.080:362): avc: denied { append } for pid=7156 comm="syz.5.238" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.945698][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 145.072989][ T7167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.241'. [ 145.105806][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 145.123678][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.127978][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.241'. [ 145.255984][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 145.365894][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.396803][ T5924] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 145.515945][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 145.525141][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.533601][ T10] usb 3-1: SerialNumber: syz [ 145.549005][ T10] usb 3-1: config 0 descriptor?? [ 145.569337][ T10] hso 3-1:0.0: Can't find BULK IN endpoint [ 145.671823][ T5924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.691193][ T5924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 145.702520][ T5924] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 145.717793][ T5924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.727122][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.735184][ T5924] usb 4-1: SerialNumber: syz [ 145.744619][ T7166] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 145.755933][ T5811] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 145.757822][ T5924] hub 4-1:1.0: bad descriptor, ignoring hub [ 145.780953][ T5924] hub 4-1:1.0: probe with driver hub failed with error -5 [ 145.789123][ T5924] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 145.928907][ T5811] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 145.938296][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.946439][ T5811] usb 6-1: Product: syz [ 145.951471][ T5811] usb 6-1: Manufacturer: syz [ 145.965661][ T5811] usb 6-1: SerialNumber: syz [ 145.967898][ T5924] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 145.988749][ T5811] usb 6-1: config 0 descriptor?? [ 146.030990][ T5924] usb 4-1: USB disconnect, device number 16 [ 146.187277][ T5932] usb 38-1: device descriptor read/8, error -110 [ 146.212401][ T5960] usb 6-1: USB disconnect, device number 7 [ 146.285661][ T5811] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 146.437101][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.448827][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.459957][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.471175][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.484862][ T5811] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.493971][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.519407][ T5811] usb 5-1: config 0 descriptor?? [ 146.681615][ T5932] usb usb38-port1: attempt power cycle [ 146.948519][ T5924] usb 3-1: USB disconnect, device number 11 [ 147.177205][ T7180] binder: BINDER_SET_CONTEXT_MGR already set [ 147.195110][ T7180] binder: 7179:7180 ioctl 4018620d 200000000040 returned -16 [ 147.237250][ T5892] usbhid 2-1:1.0: can't add hid device: -71 [ 147.257423][ T7180] binder: 7179:7180 ioctl c0306201 200000000300 returned -11 [ 147.269103][ T5892] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 147.312796][ T5811] usbhid 5-1:0.0: can't add hid device: -71 [ 147.319047][ T5811] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 147.329275][ T5811] usb 5-1: USB disconnect, device number 13 [ 147.336426][ T5892] usb 2-1: USB disconnect, device number 7 [ 147.735854][ T5892] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 147.925853][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 147.991815][ T5892] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 148.011743][ T5932] usb usb38-port1: unable to enumerate USB device [ 148.018305][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 148.046043][ T5892] usb 2-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 148.068169][ T5892] usb 2-1: config 0 has no interface number 0 [ 148.080076][ T5892] usb 2-1: config 0 interface 212 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.099027][ T5892] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a4d, bcdDevice=bc.74 [ 148.109656][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.117741][ T5892] usb 2-1: Product: syz [ 148.122078][ T5892] usb 2-1: Manufacturer: syz [ 148.127287][ T5892] usb 2-1: SerialNumber: syz [ 148.136638][ T5892] usb 2-1: config 0 descriptor?? [ 148.186428][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 148.237666][ T24] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.272669][ T24] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 148.291417][ T24] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 148.305001][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 148.313456][ T5811] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 148.386880][ T24] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 148.399297][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.408893][ T5892] usb 2-1: USB disconnect, device number 8 [ 148.419467][ T24] usb 6-1: config 0 descriptor?? [ 148.595920][ T5811] usb 5-1: Using ep0 maxpacket: 16 [ 148.608020][ T5811] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 148.619682][ T5811] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.646372][ T5811] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.656397][ T5811] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 148.669434][ T5811] usb 5-1: config 7 interface 0 has no altsetting 0 [ 148.676271][ T5811] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 148.978121][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.000536][ T24] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 149.036945][ T24] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 149.113429][ T24] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 149.195708][ T24] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 149.203901][ T24] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 149.377470][ T24] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 149.406188][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.453149][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.475201][ T24] hid-thrustmaster 0003:044F:B65D.0004: Unexpected non-int endpoint [ 149.529807][ C1] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71 [ 149.932610][ T7200] Bluetooth: hci0: invalid len left 7, exp >= 91 [ 149.943775][ T24] usb 6-1: USB disconnect, device number 8 [ 150.000581][ T30] audit: type=1400 audit(1766712625.290:363): avc: denied { bind } for pid=7214 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.024317][ T7215] fido_id[7215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 150.027699][ T30] audit: type=1400 audit(1766712625.290:364): avc: denied { write } for pid=7214 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.219146][ T30] audit: type=1400 audit(1766712625.290:365): avc: denied { name_connect } for pid=7214 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 150.320430][ T30] audit: type=1400 audit(1766712625.420:366): avc: denied { create } for pid=7222 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 150.455535][ T30] audit: type=1400 audit(1766712625.420:367): avc: denied { ioctl } for pid=7222 comm="syz.3.257" path="socket:[13920]" dev="sockfs" ino=13920 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 150.492191][ T5811] usbhid 5-1:7.0: can't add hid device: -71 [ 150.560880][ T5811] usbhid 5-1:7.0: probe with driver usbhid failed with error -71 [ 150.582816][ T5811] usb 5-1: USB disconnect, device number 14 [ 150.613005][ T30] audit: type=1400 audit(1766712625.840:368): avc: denied { lock } for pid=7236 comm="syz.1.259" path="socket:[13943]" dev="sockfs" ino=13943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.216088][ T5932] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 151.235095][ T30] audit: type=1400 audit(1766712626.530:369): avc: denied { watch watch_reads } for pid=7239 comm="syz.2.261" path="/50" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 151.266040][ T7244] openvswitch: netlink: Tunnel attr 39 out of range max 16 [ 151.319582][ T7244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'. [ 151.352525][ T7244] netdevsim netdevsim2: Direct firmware load for / [ 151.352525][ T7244] failed with error -2 [ 151.375653][ T5932] usb 6-1: Using ep0 maxpacket: 8 [ 151.938187][ T5932] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 151.949044][ T5932] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 151.960890][ T30] audit: type=1400 audit(1766712627.260:370): avc: denied { firmware_load } for pid=7239 comm="syz.2.261" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 151.963004][ T7244] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 151.963004][ T7244] [ 152.007268][ T5932] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.017416][ T5932] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 152.030300][ T5932] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 152.057877][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.132463][ T5932] usbtmc 6-1:16.0: bulk endpoints not found [ 152.493957][ T5932] usb 6-1: USB disconnect, device number 9 [ 154.029431][ T7270] capability: warning: `syz.5.269' uses 32-bit capabilities (legacy support in use) [ 154.283832][ T30] audit: type=1400 audit(1766712629.570:371): avc: denied { name_bind } for pid=7275 comm="syz.2.272" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 154.341157][ T30] audit: type=1400 audit(1766712629.630:372): avc: denied { name_connect } for pid=7275 comm="syz.2.272" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 155.301348][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 155.301380][ T30] audit: type=1400 audit(1766712630.560:378): avc: denied { create } for pid=7284 comm="syz.5.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 155.621829][ T30] audit: type=1400 audit(1766712630.560:379): avc: denied { bind } for pid=7284 comm="syz.5.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 155.749678][ T30] audit: type=1400 audit(1766712630.570:380): avc: denied { create } for pid=7284 comm="syz.5.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 155.987648][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.281'. [ 156.099600][ T5924] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 156.165779][ T5960] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.274081][ T30] audit: type=1326 audit(1766712631.570:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa1e4146c47 code=0x7ffc0000 [ 156.318275][ T30] audit: type=1326 audit(1766712631.570:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e418f749 code=0x7ffc0000 [ 156.342051][ T5960] usb 2-1: Using ep0 maxpacket: 8 [ 156.348581][ T30] audit: type=1326 audit(1766712631.570:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e418f749 code=0x7ffc0000 [ 156.350148][ T5924] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 156.373346][ T30] audit: type=1326 audit(1766712631.570:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa1e4146357 code=0x7ffc0000 [ 156.395608][ T5948] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 156.406264][ T5960] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 156.425353][ T5960] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 156.432948][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.435941][ T5960] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.454205][ T30] audit: type=1326 audit(1766712631.570:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa1e41463b6 code=0x7ffc0000 [ 156.477878][ T5960] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.479554][ T5924] usb 4-1: config 0 descriptor?? [ 156.498240][ T5960] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.511265][ T30] audit: type=1326 audit(1766712631.570:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e418f749 code=0x7ffc0000 [ 156.537502][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.575374][ T5960] usbtmc 2-1:16.0: bulk endpoints not found [ 156.585740][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 156.593138][ T5948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.600535][ T30] audit: type=1326 audit(1766712631.610:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e418f749 code=0x7ffc0000 [ 156.603822][ T5948] usb 5-1: config 0 has no interfaces? [ 156.603853][ T5948] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 156.603874][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.606093][ T5948] usb 5-1: config 0 descriptor?? [ 156.865176][ T7328] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.951514][ T5932] usb 2-1: USB disconnect, device number 9 [ 157.003861][ T7333] fuse: Bad value for 'user_id' [ 157.018279][ T7333] fuse: Bad value for 'user_id' [ 157.034776][ T7332] SELinux: failed to load policy [ 157.087931][ T5960] usb 5-1: USB disconnect, device number 15 [ 157.225001][ T7338] netlink: 144 bytes leftover after parsing attributes in process `syz.2.287'. [ 157.405631][ T5948] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.547427][ T5924] ath6kl: Failed to submit usb control message: -110 [ 157.555666][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 157.567782][ T5924] ath6kl: unable to send the bmi data to the device: -110 [ 157.578160][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.595757][ T5924] ath6kl: Unable to send get target info: -110 [ 157.615732][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.634030][ T5924] ath6kl: Failed to init ath6kl core: -110 [ 157.646085][ T5924] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 157.664902][ T5948] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 157.700221][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 157.721339][ T5948] usb 2-1: SerialNumber: syz [ 157.740576][ T5948] usb 2-1: config 0 descriptor?? [ 157.761903][ T5948] hso 2-1:0.0: Can't find BULK IN endpoint [ 158.065648][ T5948] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 158.227598][ T5948] usb 3-1: config 0 has no interfaces? [ 158.233569][ T5948] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 158.244218][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.260374][ T5948] usb 3-1: config 0 descriptor?? [ 158.474729][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.485329][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.687239][ T5948] usb 4-1: USB disconnect, device number 17 [ 158.983027][ T24] usb 2-1: USB disconnect, device number 10 [ 159.036380][ T5948] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 159.095643][ T5923] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 159.195860][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 159.204133][ T5948] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 159.213751][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.222075][ T5948] usb 4-1: Product: syz [ 159.231842][ T5948] usb 4-1: Manufacturer: syz [ 159.240603][ T5948] usb 4-1: SerialNumber: syz [ 159.248809][ T5923] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 159.259220][ T5948] usb 4-1: config 0 descriptor?? [ 159.268967][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.283468][ T5923] usb 5-1: config 0 descriptor?? [ 159.570856][ T5948] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 159.583629][ T5948] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 159.603906][ T5948] usb 4-1: USB disconnect, device number 18 [ 160.168992][ T7393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.176476][ T7393] IPv6: NLM_F_CREATE should be set when creating new route [ 160.190017][ T7393] netlink: 44 bytes leftover after parsing attributes in process `syz.5.301'. [ 160.862682][ T5924] usb 3-1: USB disconnect, device number 12 [ 160.944099][ T7402] Cannot find add_set index 0 as target [ 160.983658][ T5923] usb 5-1: Cannot read MAC address [ 161.116212][ T5923] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 161.596251][ T5923] usb 5-1: USB disconnect, device number 16 [ 161.673475][ T7409] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 161.871101][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 161.961896][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 161.961913][ T30] audit: type=1800 audit(1766712637.260:498): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.306" name="bus" dev="overlay" ino=407 res=0 errno=0 [ 161.983632][ T7415] ISOFS: Unable to identify CD-ROM format. [ 162.097231][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.119806][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 162.138389][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.189854][ T24] usb 3-1: config 0 descriptor?? [ 162.243470][ T7418] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 162.250118][ T7418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.265664][ T7418] vhci_hcd vhci_hcd.0: Device attached [ 162.284885][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 162.779860][ T6260] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 162.817064][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 162.879774][ T7427] ubi: mtd0 is already attached to ubi31 [ 163.230326][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 163.312999][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 163.320279][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 163.359404][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 164.289037][ T7419] vhci_hcd: connection reset by peer [ 164.296897][ T3530] vhci_hcd vhci_hcd.4: stop threads [ 164.299123][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 164.311255][ T3530] vhci_hcd vhci_hcd.4: release socket [ 164.311691][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 164.323502][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 164.331716][ T3530] vhci_hcd vhci_hcd.4: disconnect device [ 164.751419][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 164.758275][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 164.765045][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 164.771847][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 164.794666][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 164.820775][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 164.827735][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 164.839889][ T7431] netlink: 'syz.1.311': attribute type 2 has an invalid length. [ 164.850243][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 164.861174][ T7432] netlink: 'syz.1.311': attribute type 2 has an invalid length. [ 164.872387][ T24] pwc: Registered as video103. [ 164.887658][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 164.911719][ T24] usb 3-1: USB disconnect, device number 13 [ 164.930929][ T7440] netlink: 96 bytes leftover after parsing attributes in process `syz.5.309'. [ 165.445729][ T30] audit: type=1400 audit(1766712640.740:499): avc: denied { read } for pid=7447 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.492619][ T30] audit: type=1400 audit(1766712640.790:500): avc: denied { create } for pid=7453 comm="syz.5.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 165.556107][ T7458] team_slave_0: entered promiscuous mode [ 165.562002][ T7458] team_slave_1: entered promiscuous mode [ 165.594188][ T7458] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.606425][ T30] audit: type=1400 audit(1766712640.910:501): avc: denied { setopt } for pid=7447 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.669169][ T7464] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 165.688436][ T30] audit: type=1400 audit(1766712640.980:502): avc: denied { map } for pid=7447 comm="syz.3.314" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 165.762186][ T30] audit: type=1400 audit(1766712641.060:503): avc: denied { module_load } for pid=7442 comm="syz.2.312" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=14826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 165.800296][ T30] audit: type=1400 audit(1766712641.100:504): avc: denied { getopt } for pid=7466 comm="syz.5.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 166.255862][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 166.516741][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 167.494564][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 167.565624][ T24] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 167.606895][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.636273][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 167.651530][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.675608][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.706910][ T24] usbtmc 6-1:16.0: bulk endpoints not found [ 167.857396][ T30] audit: type=1400 audit(1766712643.160:505): avc: denied { execute } for pid=7492 comm="syz.2.328" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 167.913374][ T24] usb 6-1: USB disconnect, device number 11 [ 168.055712][ T5923] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 168.335656][ T6260] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 168.409885][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 168.426138][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 168.432640][ T5923] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 168.447251][ T5923] usb 5-1: config 179 has no interface number 0 [ 168.459976][ T5923] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 168.485449][ T5923] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 168.509418][ T5923] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.535709][ T5923] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 168.562518][ T5923] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 168.586013][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 168.592430][ T5923] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 168.592994][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.612533][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.620686][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.635177][ T24] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 168.642353][ T7491] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 168.676961][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 168.690214][ T30] audit: type=1400 audit(1766712643.980:506): avc: denied { read } for pid=7515 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.713267][ T24] usb 6-1: SerialNumber: syz [ 168.740770][ T24] usb 6-1: config 0 descriptor?? [ 168.812486][ T24] hso 6-1:0.0: Can't find BULK IN endpoint [ 168.877947][ T5948] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input18 [ 168.907616][ T30] audit: type=1400 audit(1766712644.200:507): avc: denied { read } for pid=7527 comm="syz.3.335" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 168.959038][ T30] audit: type=1400 audit(1766712644.210:508): avc: denied { open } for pid=7527 comm="syz.3.335" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.032875][ T24] usb 6-1: USB disconnect, device number 12 [ 169.047791][ T30] audit: type=1400 audit(1766712644.210:509): avc: denied { ioctl } for pid=7527 comm="syz.3.335" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.159352][ T5948] usb 5-1: USB disconnect, device number 17 [ 169.165265][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 169.165290][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 169.380339][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 169.698668][ T30] audit: type=1326 audit(1766712645.000:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm="syz.5.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e418f749 code=0x7ffc0000 [ 169.744610][ T5948] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 169.762768][ T30] audit: type=1326 audit(1766712645.020:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm="syz.5.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e418f749 code=0x7ffc0000 [ 169.788504][ T30] audit: type=1326 audit(1766712645.030:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm="syz.5.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa1e418f749 code=0x7ffc0000 [ 169.836040][ T7550] mkiss: ax0: crc mode is auto. [ 169.841129][ T30] audit: type=1326 audit(1766712645.030:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm="syz.5.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e418f749 code=0x7ffc0000 [ 169.935725][ T30] audit: type=1326 audit(1766712645.030:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm="syz.5.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e418f749 code=0x7ffc0000 [ 170.213858][ T7557] pim6reg1: entered promiscuous mode [ 170.220165][ T7557] pim6reg1: entered allmulticast mode [ 170.235618][ T5948] usb 4-1: Using ep0 maxpacket: 8 [ 170.428506][ T5948] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.475958][ T5948] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 170.476290][ T6260] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 170.510285][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.540181][ T5948] usb 4-1: Product: syz [ 170.551093][ T5948] usb 4-1: Manufacturer: syz [ 170.565632][ T5948] usb 4-1: SerialNumber: syz [ 170.580603][ T5948] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 170.597055][ T5948] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 170.647552][ T6260] usb 2-1: device descriptor read/64, error -71 [ 170.745871][ T5811] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 170.783294][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.801579][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.830834][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.868660][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.895882][ T6260] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 170.905635][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 170.928116][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.947601][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.975720][ T5811] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 171.005101][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.025010][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.055964][ T6260] usb 2-1: device descriptor read/64, error -71 [ 171.058310][ T5948] usb 4-1: USB disconnect, device number 19 [ 171.080941][ T5811] usb 3-1: config 0 descriptor?? [ 171.147031][ T5811] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 171.194460][ T6260] usb usb2-port1: attempt power cycle [ 171.275663][ T5923] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 171.338305][ T7565] netlink: 'syz.2.344': attribute type 2 has an invalid length. [ 171.352508][ T7565] !9: entered promiscuous mode [ 171.576075][ T6260] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 171.649778][ T5168] bcm5974 3-1:0.0: could not read from device [ 171.652042][ T5923] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 171.666837][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.675243][ T5923] usb 6-1: Product: syz [ 171.687320][ T5923] usb 6-1: Manufacturer: syz [ 171.692457][ T5923] usb 6-1: SerialNumber: syz [ 171.699373][ T5168] bcm5974 3-1:0.0: could not read from device [ 171.707466][ T6260] usb 2-1: device descriptor read/8, error -71 [ 171.712303][ T5923] usb 6-1: config 0 descriptor?? [ 171.716356][ T5811] usb 3-1: USB disconnect, device number 14 [ 171.736320][ T5813] bcm5974 3-1:0.0: could not read from device [ 171.743048][ T5168] bcm5974 3-1:0.0: could not read from device [ 171.752259][ T5168] bcm5974 3-1:0.0: could not read from device [ 171.968129][ T5923] usb 6-1: Firmware: major: 0, minor: 113, hardware type: ATUSB (0) [ 171.979364][ T5923] usb 6-1: Firmware: build ':¦3çI–œJ9üPwà[—ZDwq²ìù,Í_‹Û˜™ƒ@ÅA'2Bãì»›^Rû¤.…‘– [ 172.125679][ T6260] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 172.147990][ T6260] usb 2-1: device descriptor read/8, error -71 [ 172.180643][ T5923] usb 6-1: failed to fetch extended address, random address set [ 172.242200][ T5923] usb 6-1: USB disconnect, device number 13 [ 172.258705][ T6260] usb usb2-port1: unable to enumerate USB device [ 172.904735][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 172.904752][ T30] audit: type=1400 audit(1766712648.200:544): avc: denied { ioctl } for pid=7598 comm="syz.2.353" path="socket:[15947]" dev="sockfs" ino=15947 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.026000][ T5811] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 173.057977][ T7621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.357'. [ 173.209365][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.222308][ T5811] usb 6-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 173.234270][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.273323][ T5811] usb 6-1: config 0 descriptor?? [ 173.846133][ T30] audit: type=1400 audit(1766712648.600:545): avc: denied { create } for pid=7627 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.873924][ T7633] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 173.896137][ T30] audit: type=1400 audit(1766712648.600:546): avc: denied { setopt } for pid=7627 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.925622][ T5923] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 173.947124][ T30] audit: type=1400 audit(1766712648.600:547): avc: denied { read } for pid=7627 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.085880][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 174.093377][ T5923] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 174.106151][ T5923] usb 4-1: config 0 has no interface number 0 [ 174.112908][ T5923] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 174.146365][ T5923] usb 4-1: config 0 interface 196 has no altsetting 0 [ 174.163435][ T5923] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 174.177516][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.186422][ T5923] usb 4-1: Product: syz [ 174.190667][ T5923] usb 4-1: Manufacturer: syz [ 174.195525][ T5923] usb 4-1: SerialNumber: syz [ 174.443281][ T7607] netlink: 36 bytes leftover after parsing attributes in process `syz.5.354'. [ 174.466614][ T5923] usb 4-1: config 0 descriptor?? [ 174.473342][ T7626] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 174.503636][ T7649] openvswitch: netlink: IP tunnel dst address not specified [ 174.535902][ T5811] apple 0003:05AC:8102.0005: hidraw0: USB HID v0.00 Device [HID 05ac:8102] on usb-dummy_hcd.5-1/input0 [ 174.733109][ T5924] usb 6-1: USB disconnect, device number 14 [ 175.222223][ T7665] fuse: Unknown parameter 'fd¿0x0000000000000007' [ 175.248932][ T5923] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 175.249135][ T5923] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 175.264661][ T5923] usb 4-1: USB disconnect, device number 20 [ 175.335907][ T5811] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 175.480867][ T7677] kernel read not supported for file /eth0 (pid: 7677 comm: syz.3.369) [ 175.486142][ T30] audit: type=1400 audit(1766712650.780:548): avc: denied { bind } for pid=7678 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.508621][ T5811] usb 5-1: Using ep0 maxpacket: 8 [ 175.515139][ T5811] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 175.533679][ T30] audit: type=1800 audit(1766712650.790:549): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.369" name=6574683004 dev="mqueue" ino=15205 res=0 errno=0 [ 175.560907][ T5811] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 175.576611][ T5811] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.607342][ T5811] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 175.627634][ T5811] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.637438][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.675287][ T5811] usbtmc 5-1:16.0: bulk endpoints not found [ 175.818014][ T7691] binder: 7690:7691 ioctl c0306201 200000000080 returned -22 [ 175.857147][ T5948] usb 5-1: USB disconnect, device number 18 [ 176.020450][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 176.029370][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'. [ 176.038374][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'. [ 176.487137][ T7703] 9pnet_virtio: no channels available for device syz [ 176.581224][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 176.636975][ T5864] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 176.648188][ T5948] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 176.914508][ T7709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.980206][ T5864] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 177.005621][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.041463][ T5864] usb 4-1: config 0 has no interface number 0 [ 177.071793][ T5864] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 177.080946][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 177.088094][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.105675][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.116109][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.135773][ T5864] usb 4-1: Product: syz [ 177.141161][ T5864] usb 4-1: Manufacturer: syz [ 177.149089][ T5811] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 177.157922][ T5948] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 177.186191][ T5864] usb 4-1: SerialNumber: syz [ 177.192793][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.208017][ T5864] usb 4-1: config 0 descriptor?? [ 177.225811][ T5948] usb 5-1: SerialNumber: syz [ 177.249595][ T30] audit: type=1400 audit(1766712652.550:550): avc: denied { mounton } for pid=7715 comm="syz.1.382" path="/file0" dev="ramfs" ino=15244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 177.249639][ T7716] fuse: Bad value for 'fd' [ 177.272338][ T5948] usb 5-1: config 0 descriptor?? [ 177.313689][ T5948] hso 5-1:0.0: Can't find BULK IN endpoint [ 177.365350][ T5812] Bluetooth: hci4: connection err: -111 [ 177.372629][ T5811] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.392667][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 177.413927][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.444079][ T5811] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 177.486866][ T5811] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.524014][ T5864] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 177.532325][ T5811] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.534340][ T5864] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 177.555710][ T5864] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 177.560840][ T5811] usb 6-1: Manufacturer: syz [ 177.563726][ T5864] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 177.578123][ T5864] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 177.579139][ T5811] usb 6-1: config 0 descriptor?? [ 177.681483][ T30] audit: type=1400 audit(1766712652.950:551): avc: denied { mount } for pid=7718 comm="syz.2.383" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 177.970904][ T5864] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 178.042762][ T7726] 9p: Bad value for 'wfdno' [ 178.070269][ T30] audit: type=1400 audit(1766712653.030:552): avc: denied { name_bind } for pid=7698 comm="syz.3.375" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 178.093025][ T5932] IPVS: starting estimator thread 0... [ 178.102394][ T5932] usb 4-1: USB disconnect, device number 21 [ 178.115623][ T5932] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 178.129883][ T5932] keyspan 4-1:0.133: device disconnected [ 178.136133][ T30] audit: type=1400 audit(1766712653.280:553): avc: denied { bind } for pid=7720 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.185957][ T7727] IPVS: using max 41 ests per chain, 98400 per kthread [ 178.247281][ T30] audit: type=1400 audit(1766712653.550:554): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 178.421297][ T7729] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.622944][ T5811] rc_core: IR keymap rc-hauppauge not found [ 178.635641][ T5948] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 178.645421][ T5811] Registered IR keymap rc-empty [ 178.658755][ T5932] usb 5-1: USB disconnect, device number 19 [ 178.667584][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 178.704976][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 178.777137][ T5811] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 178.810764][ T5811] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 178.825903][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 178.833135][ T5948] usb 3-1: config 0 has an invalid interface number: 209 but max is 0 [ 178.842683][ T5948] usb 3-1: config 0 has no interface number 0 [ 178.849181][ T5948] usb 3-1: config 0 interface 209 has no altsetting 0 [ 178.859579][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 178.958306][ T30] audit: type=1400 audit(1766712654.180:555): avc: denied { getopt } for pid=7738 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.978693][ T5948] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 178.987814][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.995934][ T5948] usb 3-1: Product: syz [ 178.998865][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 179.000091][ T5948] usb 3-1: Manufacturer: syz [ 179.000108][ T5948] usb 3-1: SerialNumber: syz [ 179.065719][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 179.128308][ T5948] usb 3-1: config 0 descriptor?? [ 179.145692][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 179.177490][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 179.205734][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 179.232474][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 179.400094][ T5948] usb 3-1: USB disconnect, device number 15 [ 179.411619][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 179.435691][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 179.455738][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 179.922568][ T5811] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 179.930793][ T5811] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 179.945009][ T5811] usb 6-1: USB disconnect, device number 15 [ 179.968453][ T30] audit: type=1400 audit(1766712655.270:556): avc: denied { connect } for pid=7738 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.343133][ T7762] fuse: Unknown parameter 'group_i00000000000000000000' [ 180.375701][ T5811] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 180.547125][ T5811] usb 6-1: config 0 has an invalid interface number: 99 but max is 0 [ 180.560506][ T5811] usb 6-1: config 0 has no interface number 0 [ 180.721185][ T5811] usb 6-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 180.731952][ T5811] usb 6-1: config 0 interface 99 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 180.741949][ T5811] usb 6-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 181.287686][ T30] audit: type=1400 audit(1766712656.170:557): avc: denied { write } for pid=7769 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.328489][ T5811] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 181.367892][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.399649][ T5811] usb 6-1: Product: syz [ 181.409744][ T5811] usb 6-1: Manufacturer: syz [ 181.414358][ T5811] usb 6-1: SerialNumber: syz [ 181.549630][ T5811] usb 6-1: config 0 descriptor?? [ 181.555155][ T7734] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 181.563988][ T5811] ftdi_sio 6-1:0.99: FTDI USB Serial Device converter detected [ 181.581425][ T5811] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 181.601165][ T30] audit: type=1400 audit(1766712656.900:558): avc: denied { ioctl } for pid=7777 comm="syz.1.396" path="socket:[16489]" dev="sockfs" ino=16489 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.709477][ T5811] usb 6-1: USB disconnect, device number 16 [ 181.965873][ T5811] ftdi_sio 6-1:0.99: device disconnected [ 182.116448][ T7798] tmpfs: Unknown parameter '01777777777777777777777' [ 182.765936][ T5811] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 183.373923][ T5811] usb 6-1: config index 0 descriptor too short (expected 36440, got 27) [ 183.383861][ T5811] usb 6-1: config 80 has too many interfaces: 123, using maximum allowed: 32 [ 183.393885][ T7815] capability: warning: `syz.1.406' uses deprecated v2 capabilities in a way that may be insecure [ 183.406026][ T5811] usb 6-1: config 80 has an invalid descriptor of length 0, skipping remainder of the config [ 183.429941][ T5892] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 183.430264][ T5811] usb 6-1: config 80 has 0 interfaces, different from the descriptor's value: 123 [ 183.457592][ T5811] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 183.466996][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.475000][ T5811] usb 6-1: Product: syz [ 183.479618][ T5811] usb 6-1: Manufacturer: syz [ 183.484260][ T5811] usb 6-1: SerialNumber: syz [ 183.575631][ T5892] usb 4-1: device descriptor read/64, error -71 [ 183.585618][ T5864] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 183.603386][ T7821] netlink: 256 bytes leftover after parsing attributes in process `syz.4.409'. [ 183.729994][ T5864] usb 3-1: device descriptor read/64, error -71 [ 183.785183][ T5811] usb 6-1: USB disconnect, device number 17 [ 183.825933][ T5892] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 183.955675][ T5892] usb 4-1: device descriptor read/64, error -71 [ 183.975757][ T5864] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 183.994958][ T30] audit: type=1400 audit(1766712659.290:559): avc: denied { write } for pid=7843 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 184.021953][ T30] audit: type=1400 audit(1766712659.320:560): avc: denied { read } for pid=7843 comm="syz.4.415" dev="sockfs" ino=16635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 184.068022][ T5892] usb usb4-port1: attempt power cycle [ 184.901929][ T5864] usb 3-1: device descriptor read/64, error -71 [ 185.029096][ T5864] usb usb3-port1: attempt power cycle [ 185.175635][ T5892] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 185.196689][ T5892] usb 4-1: device descriptor read/8, error -71 [ 185.214141][ T30] audit: type=1400 audit(1766712660.510:561): avc: denied { create } for pid=7851 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 185.405679][ T5864] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 185.444287][ T5864] usb 3-1: device descriptor read/8, error -71 [ 185.457528][ T5892] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 185.515645][ T5811] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 185.574125][ T5892] usb 4-1: device descriptor read/8, error -71 [ 185.686381][ T5892] usb usb4-port1: unable to enumerate USB device [ 185.697598][ T5864] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 185.725612][ T5811] usb 6-1: device descriptor read/64, error -71 [ 185.734234][ T5864] usb 3-1: device descriptor read/8, error -71 [ 185.886161][ T5864] usb usb3-port1: unable to enumerate USB device [ 185.912516][ T7867] binder: 7864:7867 ioctl 400c620e 200000001380 returned -22 [ 185.933754][ T30] audit: type=1400 audit(1766712661.230:562): avc: denied { read } for pid=7864 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.977881][ T7868] netlink: zone id is out of range [ 185.983123][ T5811] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 185.984824][ T7868] netlink: zone id is out of range [ 185.996108][ T7868] netlink: zone id is out of range [ 186.001807][ T7868] netlink: zone id is out of range [ 186.007025][ T7868] netlink: zone id is out of range [ 186.012191][ T7868] netlink: zone id is out of range [ 186.017416][ T7868] netlink: zone id is out of range [ 186.022652][ T7868] netlink: zone id is out of range [ 186.031102][ T7868] netlink: zone id is out of range [ 186.037009][ T7868] netlink: zone id is out of range [ 186.079245][ T30] audit: type=1400 audit(1766712661.360:563): avc: denied { setopt } for pid=7862 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.175654][ T5811] usb 6-1: device descriptor read/64, error -71 [ 186.476564][ T5811] usb usb6-port1: attempt power cycle [ 186.809039][ T7879] netlink: 208 bytes leftover after parsing attributes in process `syz.2.423'. [ 187.245967][ T5811] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 187.270935][ T7881] fuse: Bad value for 'fd' [ 187.296436][ T5811] usb 6-1: device descriptor read/8, error -71 [ 187.500352][ T7886] IPVS: length: 24 != 31457592 [ 187.557081][ T5811] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 187.606094][ T5811] usb 6-1: device descriptor read/8, error -71 [ 187.627770][ T30] audit: type=1400 audit(1766712662.930:564): avc: denied { read write } for pid=7889 comm="syz.2.428" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 187.780573][ T30] audit: type=1400 audit(1766712662.960:565): avc: denied { open } for pid=7889 comm="syz.2.428" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 187.810421][ T5811] usb usb6-port1: unable to enumerate USB device [ 187.894057][ T7894] kAFS: unable to lookup cell '(' [ 188.391459][ T7898] libceph: resolve '. [ 188.391459][ T7898] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 188.391459][ T7898] ' (ret=-3): failed [ 188.772750][ T7913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.781396][ T7913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.837292][ T30] audit: type=1400 audit(1766712664.140:566): avc: denied { connect } for pid=7915 comm="syz.5.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.840609][ T5871] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 188.895666][ T5892] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 188.965641][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 189.035867][ T5892] usb 4-1: device descriptor read/64, error -71 [ 189.055629][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 189.062181][ T5871] usb 3-1: config 1 has an invalid interface number: 96 but max is 0 [ 189.090830][ T5871] usb 3-1: config 1 has no interface number 0 [ 189.097964][ T5871] usb 3-1: config 1 interface 96 has no altsetting 0 [ 189.106811][ T5871] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=77.d3 [ 189.116199][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.125954][ T5871] usb 3-1: Product: syz [ 189.130404][ T5871] usb 3-1: Manufacturer: syz [ 189.135987][ T5871] usb 3-1: SerialNumber: syz [ 189.175729][ T5966] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 189.316885][ T5892] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 189.402580][ T5871] mdc800 3-1:1.96: probe fails -> wrong Interface [ 189.471234][ T5871] usb 3-1: USB disconnect, device number 20 [ 189.535831][ T5892] usb 4-1: device descriptor read/64, error -71 [ 189.567532][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.578573][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.588285][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.597540][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.605662][ T24] usb 5-1: SerialNumber: syz [ 189.655820][ T5892] usb usb4-port1: attempt power cycle [ 189.695646][ T5966] usb 6-1: Using ep0 maxpacket: 16 [ 189.702328][ T5966] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.712752][ T5966] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.723695][ T5966] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.732999][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.741109][ T5966] usb 6-1: Product: syz [ 189.745461][ T5966] usb 6-1: Manufacturer: syz [ 189.750128][ T5966] usb 6-1: SerialNumber: syz [ 190.005658][ T5892] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 190.036834][ T5892] usb 4-1: device descriptor read/8, error -71 [ 190.586884][ T7925] virt_wifi0 speed is unknown, defaulting to 1000 [ 190.815694][ T5892] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 190.836395][ T5892] usb 4-1: device descriptor read/8, error -71 [ 190.976842][ T5892] usb usb4-port1: unable to enumerate USB device [ 191.088015][ T7923] evm: overlay not supported [ 191.345021][ T30] audit: type=1400 audit(1766712666.640:567): avc: denied { append } for pid=7932 comm="syz.2.437" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 191.880206][ T5966] usb 6-1: 0:2 : does not exist [ 191.901027][ T5966] usb 6-1: unit 9 not found! [ 191.914620][ T5966] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 191.936541][ T5966] usb 6-1: 4:0: cannot get min/max values for control 2 (id 4) [ 191.953508][ T5966] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4) [ 191.978703][ T5966] usb 6-1: 4:0: cannot get min/max values for control 4 (id 4) [ 192.074030][ T24] usb 5-1: 0:2 : does not exist [ 192.092783][ T5966] usb 6-1: USB disconnect, device number 22 [ 192.135894][ T6260] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 192.144639][ T24] usb 5-1: USB disconnect, device number 20 [ 192.232489][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 192.242791][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.441'. [ 192.364165][ T6260] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 192.386669][ T6260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.394678][ T6260] usb 4-1: Product: syz [ 192.422165][ T6260] usb 4-1: Manufacturer: syz [ 192.427121][ T6260] usb 4-1: SerialNumber: syz [ 192.441772][ T6260] usb 4-1: config 0 descriptor?? [ 192.480106][ T30] audit: type=1400 audit(1766712667.780:568): avc: denied { create } for pid=7951 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 192.503728][ T30] audit: type=1400 audit(1766712667.800:569): avc: denied { ioctl } for pid=7951 comm="syz.1.442" path="socket:[16796]" dev="sockfs" ino=16796 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 192.504586][ T7952] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 192.566436][ T24] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 192.582445][ T5966] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 192.592166][ T7952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.755779][ T5966] usb 6-1: Using ep0 maxpacket: 16 [ 192.762614][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 192.784458][ T5966] usb 6-1: unable to get BOS descriptor or descriptor too short [ 192.799641][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.820178][ T5966] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 192.829064][ T5966] usb 6-1: config 13 has no interface number 0 [ 192.835488][ T5966] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 192.854266][ T5966] usb 6-1: config 13 interface 50 has no altsetting 0 [ 192.862637][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 192.875980][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 192.884281][ T6260] airspy 4-1:0.0: Board ID: 00 [ 192.889212][ T6260] airspy 4-1:0.0: Firmware version: [ 192.894573][ T24] usb 5-1: Product: syz [ 192.899697][ T24] usb 5-1: Manufacturer: syz [ 192.908456][ T5966] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 192.928301][ T24] usb 5-1: SerialNumber: syz [ 192.934202][ T24] usb 5-1: config 0 descriptor?? [ 192.945617][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.953999][ T5966] usb 6-1: Product: syz [ 192.961439][ T24] usb 5-1: selecting invalid altsetting 0 [ 192.977359][ T5966] usb 6-1: Manufacturer: syz [ 192.981982][ T5966] usb 6-1: SerialNumber: syz [ 193.006942][ T7947] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 193.292719][ T5923] usb 5-1: USB disconnect, device number 21 [ 193.695044][ T30] audit: type=1400 audit(1766712668.990:570): avc: denied { remount } for pid=7946 comm="syz.5.440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 193.727473][ T7947] netlink: 220 bytes leftover after parsing attributes in process `syz.5.440'. [ 193.799844][ T30] audit: type=1400 audit(1766712669.100:571): avc: denied { name_bind } for pid=7973 comm="syz.1.446" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 193.892916][ T6260] airspy 4-1:0.0: usb_control_msg() failed -71 request 10 [ 193.911618][ T6260] airspy 4-1:0.0: Registered as swradio24 [ 193.925813][ T6260] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 193.938276][ T7978] netlink: 'syz.4.448': attribute type 11 has an invalid length. [ 193.982174][ T6260] usb 4-1: USB disconnect, device number 30 [ 194.197464][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.210021][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.335638][ T5923] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 194.465629][ T5923] usb 5-1: device descriptor read/64, error -71 [ 194.700025][ T5966] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.713955][ T5966] usb 6-1: MIDIStreaming interface descriptor not found [ 194.714511][ T5923] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 194.733735][ T7997] kAFS: No cell specified [ 194.735974][ T5871] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 194.754138][ T6037] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.814642][ T5966] usb 6-1: USB disconnect, device number 23 [ 194.841216][ T30] audit: type=1400 audit(1766712670.140:572): avc: denied { bind } for pid=7995 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.899661][ T5923] usb 5-1: device descriptor read/64, error -71 [ 194.925663][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 194.933108][ T5871] usb 4-1: config 0 has an invalid interface number: 193 but max is 0 [ 194.945859][ T5871] usb 4-1: config 0 has no interface number 0 [ 194.991474][ T5871] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7c.ce [ 195.025446][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.044913][ T30] audit: type=1400 audit(1766712670.340:573): avc: denied { listen } for pid=7995 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.085685][ T5923] usb usb5-port1: attempt power cycle [ 195.102463][ T5871] usb 4-1: Product: syz [ 195.120133][ T5871] usb 4-1: Manufacturer: syz [ 195.125203][ T30] audit: type=1400 audit(1766712670.400:574): avc: denied { accept } for pid=7995 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.155873][ T5871] usb 4-1: SerialNumber: syz [ 195.172868][ T5871] usb 4-1: config 0 descriptor?? [ 195.210239][ T6037] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.226204][ T8003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8003 comm=syz.1.457 [ 195.352602][ T6037] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.485981][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.525806][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.563621][ T5923] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 195.579883][ T30] audit: type=1400 audit(1766712670.670:575): avc: denied { lock } for pid=7995 comm="syz.2.454" path="socket:[17747]" dev="sockfs" ino=17747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.619571][ T5871] usb_ehset_test 4-1:0.193: probe with driver usb_ehset_test failed with error -32 [ 195.638301][ T5923] usb 5-1: device descriptor read/8, error -71 [ 195.646287][ T5871] usb 4-1: USB disconnect, device number 31 [ 195.846680][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.856479][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.864642][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.872393][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.879482][ T5923] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 195.905697][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.917065][ T5923] usb 5-1: device descriptor read/8, error -71 [ 195.939737][ T6037] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.005116][ T8010] virt_wifi0 speed is unknown, defaulting to 1000 [ 196.042243][ T5923] usb usb5-port1: unable to enumerate USB device [ 196.272422][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 196.272456][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 196.284537][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 196.290620][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 196.308022][ T8015] veth0_vlan: entered allmulticast mode [ 196.727130][ T6037] bridge_slave_1: left allmulticast mode [ 196.733255][ T6037] bridge_slave_1: left promiscuous mode [ 196.739287][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.751636][ T6037] bridge_slave_0: left allmulticast mode [ 196.760153][ T6037] bridge_slave_0: left promiscuous mode [ 196.771440][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.093262][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.163122][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.185368][ T6037] bond0 (unregistering): Released all slaves [ 197.196986][ T5822] Bluetooth: hci1: unknown advertising packet type: 0x6b [ 197.466321][ T5966] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 197.518189][ T8010] chnl_net:caif_netlink_parms(): no params data found [ 197.655587][ T30] audit: type=1400 audit(1766712672.910:576): avc: denied { ioctl } for pid=8042 comm="syz.4.464" path="socket:[17978]" dev="sockfs" ino=17978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.703208][ T5966] usb 4-1: config 0 has no interfaces? [ 197.711145][ T5966] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 197.727791][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.822170][ T5966] usb 4-1: config 0 descriptor?? [ 197.965749][ T5822] Bluetooth: hci0: command tx timeout [ 198.175512][ T8023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.198692][ T8023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.251416][ T5966] usb 4-1: USB disconnect, device number 32 [ 198.370103][ T6037] hsr_slave_0: left promiscuous mode [ 198.391180][ T6037] hsr_slave_1: left promiscuous mode [ 198.395642][ T5923] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 198.416404][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.423814][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.442515][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.463998][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.546494][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 198.559835][ T5923] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 198.570460][ T5923] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 198.579810][ T5923] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 198.589782][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.628890][ T6037] team_slave_0: left promiscuous mode [ 198.634469][ T6037] team_slave_1: left promiscuous mode [ 198.640044][ T6037] veth1_macvtap: left promiscuous mode [ 198.646037][ T6037] veth0_macvtap: left promiscuous mode [ 198.651568][ T6037] veth1_vlan: left promiscuous mode [ 198.657235][ T6037] veth0_vlan: left promiscuous mode [ 198.866558][ T5966] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 199.058738][ T5966] usb 4-1: Using ep0 maxpacket: 16 [ 199.085988][ T5966] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 199.106637][ T5966] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.135666][ T5966] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 199.158713][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.175053][ T5966] usb 4-1: Product: syz [ 199.183019][ T5966] usb 4-1: Manufacturer: syz [ 199.197092][ T5966] usb 4-1: SerialNumber: syz [ 199.347690][ T6037] team0 (unregistering): Port device team_slave_1 removed [ 199.379307][ T6037] team0 (unregistering): Port device team_slave_0 removed [ 199.624303][ T5966] usb 4-1: 0:2 : does not exist [ 199.665907][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.673651][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.681085][ T8010] bridge_slave_0: entered allmulticast mode [ 199.688555][ T8010] bridge_slave_0: entered promiscuous mode [ 199.717035][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.741460][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.751678][ T8010] bridge_slave_1: entered allmulticast mode [ 199.760458][ T8010] bridge_slave_1: entered promiscuous mode [ 199.775031][ T8093] virt_wifi0 speed is unknown, defaulting to 1000 [ 199.848701][ T8010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.858403][ T30] audit: type=1400 audit(1766712675.130:577): avc: denied { write } for pid=8096 comm="syz.4.474" path="socket:[17316]" dev="sockfs" ino=17316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.931283][ T8010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.999889][ T8010] team0: Port device team_slave_0 added [ 200.008064][ T8010] team0: Port device team_slave_1 added [ 200.056089][ T5822] Bluetooth: hci0: command tx timeout [ 200.161228][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.168696][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.197784][ T8010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.244902][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.263987][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.325053][ T8010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.362041][ T5966] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 200.384100][ T5966] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 200.396281][ T5966] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 200.420104][ T5966] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 200.434347][ T8010] hsr_slave_0: entered promiscuous mode [ 200.441831][ T5966] usb 4-1: USB disconnect, device number 33 [ 200.470693][ T8010] hsr_slave_1: entered promiscuous mode [ 200.477847][ T8010] debugfs: 'hsr0' already exists in 'hsr' [ 200.490519][ T7965] udevd[7965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.506482][ T8010] Cannot create hsr debugfs directory [ 200.771995][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 200.980067][ T30] audit: type=1400 audit(1766712676.280:578): avc: denied { mounton } for pid=8124 comm="syz.4.478" path="/proc/396/cgroup" dev="proc" ino=18382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 201.066401][ T5811] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 201.093232][ T30] audit: type=1400 audit(1766712676.310:579): avc: denied { remount } for pid=8124 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 201.170281][ T5966] usb 3-1: USB disconnect, device number 21 [ 201.235923][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 201.262816][ T5811] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.290238][ T8010] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.296769][ T5811] usb 4-1: config 0 has no interface number 0 [ 201.324060][ T8010] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.334064][ T5811] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 201.359140][ T8010] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.393061][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.405311][ T5811] usb 4-1: Product: syz [ 201.415604][ T5811] usb 4-1: Manufacturer: syz [ 201.420710][ T5811] usb 4-1: SerialNumber: syz [ 201.436634][ T5811] usb 4-1: config 0 descriptor?? [ 201.450699][ T5811] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 201.532111][ T8010] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 202.107205][ T5822] Bluetooth: hci0: command tx timeout [ 202.287471][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.340573][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.791535][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.877096][ T8010] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.117993][ T30] audit: type=1400 audit(1766712678.410:580): avc: denied { block_suspend } for pid=8119 comm="syz.3.476" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.151772][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.157820][ T5811] gspca_spca1528: reg_w err -110 [ 203.158908][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.182226][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.189408][ T6078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.201726][ T5811] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 203.268637][ T30] audit: type=1400 audit(1766712678.570:581): avc: denied { getopt } for pid=8166 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.505678][ T5923] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 203.653925][ T8010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.662647][ T5923] usb 3-1: device descriptor read/64, error -71 [ 203.917234][ T5923] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 203.949324][ T8187] overlayfs: failed to clone upperpath [ 204.117043][ T5923] usb 3-1: device descriptor read/64, error -71 [ 204.185706][ T5822] Bluetooth: hci0: command tx timeout [ 204.246611][ T5923] usb usb3-port1: attempt power cycle [ 204.276724][ T8198] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.314079][ T8010] veth0_vlan: entered promiscuous mode [ 204.373667][ T8010] veth1_vlan: entered promiscuous mode [ 204.472706][ T5960] usb 4-1: USB disconnect, device number 34 [ 204.501409][ T8010] veth0_macvtap: entered promiscuous mode [ 204.507688][ T5966] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 204.562810][ T8010] veth1_macvtap: entered promiscuous mode [ 204.573819][ T30] audit: type=1400 audit(1766712679.870:582): avc: denied { getopt } for pid=8209 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 204.787354][ T5923] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 204.811542][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.902170][ T5966] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 204.911210][ T5966] usb 5-1: config 0 has no interface number 0 [ 205.033881][ T5966] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 205.036129][ T5923] usb 3-1: device descriptor read/8, error -71 [ 205.048563][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.066013][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.083212][ T8219] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 205.128867][ T5966] usb 5-1: Product: syz [ 205.221923][ T5966] usb 5-1: Manufacturer: syz [ 205.239818][ T8227] fuse: Bad value for 'fd' [ 205.252221][ T5966] usb 5-1: SerialNumber: syz [ 205.270614][ T8219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.285643][ T4841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.347484][ T5923] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 205.357859][ T4841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.370454][ T5966] usb 5-1: config 0 descriptor?? [ 205.392142][ T5966] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 205.396082][ T5923] usb 3-1: device descriptor read/8, error -71 [ 205.432690][ T5966] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 205.518061][ T8220] bond2: (slave ip6erspan0): making interface the new active one [ 205.542631][ T8220] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 205.554446][ T4841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.564198][ T5923] usb usb3-port1: unable to enumerate USB device [ 205.614739][ T4841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.643224][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.656238][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.764334][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.782467][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.867573][ T4841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.878836][ T4841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.900253][ T30] audit: type=1400 audit(1766712681.200:583): avc: denied { mounton } for pid=8010 comm="syz-executor" path="/root/syzkaller.0MeFuc/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 205.964239][ T30] audit: type=1400 audit(1766712681.230:584): avc: denied { mounton } for pid=8010 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 206.081350][ T8245] netlink: 'syz.3.490': attribute type 4 has an invalid length. [ 206.250155][ T30] audit: type=1400 audit(1766712681.550:585): avc: denied { mounton } for pid=8246 comm="syz.5.491" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 206.685703][ T5892] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 206.716410][ T8252] virt_wifi0 speed is unknown, defaulting to 1000 [ 206.922890][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 207.139852][ T5892] usb 4-1: config 0 has no interfaces? [ 207.151180][ T5892] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 207.164807][ T5892] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 207.210067][ T89] usb 5-1: USB disconnect, device number 26 [ 207.288141][ T5892] usb 4-1: Manufacturer: syz [ 207.335230][ T5892] usb 4-1: config 0 descriptor?? [ 207.349638][ T8265] fuse: Bad value for 'group_id' [ 207.354576][ T8265] fuse: Bad value for 'group_id' [ 207.568803][ T30] audit: type=1400 audit(1766712682.860:586): avc: denied { bind } for pid=8264 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 208.398185][ T30] audit: type=1400 audit(1766712683.700:587): avc: denied { write } for pid=8273 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.536082][ T8277] futex_wake_op: syz.4.497 tries to shift op by -1; fix this program [ 208.872529][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 208.888172][ T8278] team1: entered promiscuous mode [ 208.893193][ T8278] team1: entered allmulticast mode [ 208.905524][ T8277] netlink: 68 bytes leftover after parsing attributes in process `syz.4.497'. [ 209.946440][ T8292] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 210.021094][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.030101][ T8292] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.081772][ T5948] usb 4-1: USB disconnect, device number 35 [ 210.236119][ T6260] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 210.389253][ T30] audit: type=1400 audit(1766712685.680:588): avc: denied { getopt } for pid=8293 comm="syz.5.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.658718][ T6260] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 210.689722][ T6260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.718892][ T6260] usb 5-1: Product: syz [ 210.728371][ T6260] usb 5-1: Manufacturer: syz [ 210.736318][ T6260] usb 5-1: SerialNumber: syz [ 210.811181][ T6260] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 210.831509][ T5966] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 211.671879][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 211.836318][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 211.917577][ T24] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 211.928080][ T24] usb 6-1: config 0 has no interface number 0 [ 211.936722][ T5966] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 211.943652][ T24] usb 6-1: config 0 interface 12 has no altsetting 0 [ 211.952634][ T5966] ath9k_htc: Failed to initialize the device [ 211.965729][ T24] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 211.978098][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.988024][ T24] usb 6-1: Product: syz [ 211.993541][ T24] usb 6-1: Manufacturer: syz [ 211.999871][ T24] usb 6-1: SerialNumber: syz [ 212.230111][ T5966] usb 5-1: ath9k_htc: USB layer deinitialized [ 212.283715][ T24] usb 6-1: config 0 descriptor?? [ 212.297824][ T24] f81534 6-1:0.12: required endpoints missing [ 212.504191][ T5948] usb 6-1: USB disconnect, device number 24 [ 213.240858][ T8325] infiniband syz2: set down [ 213.245744][ T8325] infiniband syz2: added ipvlan0 [ 213.843105][ T8325] RDS/IB: syz2: added [ 213.850407][ T8325] smc: adding ib device syz2 with port count 1 [ 213.857881][ T8325] smc: ib device syz2 port 1 has no pnetid [ 215.283113][ T5948] usb 5-1: USB disconnect, device number 27 [ 215.355649][ T5963] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 215.657405][ T5963] usb 3-1: device descriptor read/64, error -71 [ 215.672231][ T30] audit: type=1400 audit(1766712690.950:589): avc: denied { connect } for pid=8335 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.910029][ T8344] kAFS: unable to lookup cell '(,c¾ûL' [ 217.085964][ T30] audit: type=1400 audit(1766712692.390:590): avc: denied { sys_module } for pid=8342 comm="syz.1.512" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 217.364792][ T8358] Bluetooth: MGMT ver 1.23 [ 217.746605][ T8372] 9pnet_fd: Insufficient options for proto=fd [ 218.120757][ T30] audit: type=1400 audit(1766712693.410:591): avc: denied { setattr } for pid=8377 comm="syz.4.519" name="AF_VSOCK" dev="sockfs" ino=19137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 218.451731][ T8305] syz.3.503 (8305): drop_caches: 3 [ 218.518221][ T8389] xt_socket: unknown flags 0x50 [ 218.965909][ T5932] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 219.075620][ T8392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.087926][ T8392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.115620][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 219.122352][ T5932] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 219.130981][ T5932] usb 3-1: config 0 has no interface number 0 [ 219.155229][ T5932] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 219.179759][ T5932] usb 3-1: config 0 interface 196 has no altsetting 0 [ 219.189513][ T5932] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 219.215588][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.223600][ T5932] usb 3-1: Product: syz [ 219.241033][ T5932] usb 3-1: Manufacturer: syz [ 219.252126][ T5932] usb 3-1: SerialNumber: syz [ 219.263483][ T5932] usb 3-1: config 0 descriptor?? [ 219.270748][ T30] audit: type=1400 audit(1766712701.570:592): avc: denied { read write } for pid=8396 comm="syz.5.525" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 219.271434][ T8381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 219.325643][ T30] audit: type=1400 audit(1766712701.600:593): avc: denied { open } for pid=8396 comm="syz.5.525" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 219.530113][ T5932] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 219.540303][ T5932] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 219.566149][ T5921] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 219.569577][ T5932] usb 3-1: USB disconnect, device number 28 [ 219.728640][ T5921] usb 6-1: Invalid ep0 maxpacket: 16 [ 219.913215][ T5921] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 220.095591][ T5921] usb 6-1: Invalid ep0 maxpacket: 16 [ 220.125732][ T5921] usb usb6-port1: attempt power cycle [ 220.371919][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'. [ 220.697259][ T5921] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 220.716556][ T5921] usb 6-1: Invalid ep0 maxpacket: 16 [ 220.817802][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.530'. [ 221.255621][ T5921] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 221.316555][ T5921] usb 6-1: Invalid ep0 maxpacket: 16 [ 221.322495][ T5921] usb usb6-port1: unable to enumerate USB device [ 221.510698][ T8427] virt_wifi0 speed is unknown, defaulting to 1000 [ 222.450855][ T8438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.531'. [ 222.617910][ T30] audit: type=1400 audit(1766712704.900:594): avc: denied { shutdown } for pid=8436 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.785460][ T8445] ceph: No mds server is up or the cluster is laggy [ 222.961119][ T30] audit: type=1400 audit(1766712705.040:595): avc: denied { write } for pid=8442 comm="syz.2.537" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 223.050111][ T30] audit: type=1400 audit(1766712705.040:596): avc: denied { open } for pid=8442 comm="syz.2.537" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 224.017768][ T30] audit: type=1400 audit(1766712706.320:597): avc: denied { write } for pid=8463 comm="syz.2.541" name="ip6_flowlabel" dev="proc" ino=4026533451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 224.187035][ T8399] syz.3.523 (8399) used greatest stack depth: 20216 bytes left [ 225.299211][ T8473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'. [ 225.308489][ T8473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59670 sclass=netlink_route_socket pid=8473 comm=syz.1.544 [ 225.535638][ T5864] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 225.755634][ T5864] usb 6-1: Using ep0 maxpacket: 32 [ 225.936048][ T5864] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.958296][ T5864] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 226.063627][ T5864] usb 6-1: config 0 interface 0 has no altsetting 0 [ 226.076692][ T5864] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c06, bcdDevice= 0.00 [ 226.086154][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.095872][ T8493] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 226.642718][ T5864] usb 6-1: config 0 descriptor?? [ 226.774181][ T6260] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 226.912458][ T6260] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 227.720407][ T30] audit: type=1400 audit(1766712710.020:598): avc: denied { getattr } for pid=8470 comm="syz.5.543" name="/" dev="nsfs" ino=4026533064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 227.919716][ T30] audit: type=1400 audit(1766712710.220:599): avc: denied { ioctl } for pid=8470 comm="syz.5.543" path="uts:[4026533064]" dev="nsfs" ino=4026533064 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 227.975343][ T5864] usbhid 6-1:0.0: can't add hid device: -71 [ 227.983836][ T5864] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 228.013771][ T5864] usb 6-1: USB disconnect, device number 29 [ 228.849326][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 229.723556][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.562'. [ 230.116597][ T8541] random: crng reseeded on system resumption [ 230.141849][ T30] audit: type=1400 audit(1766712712.440:600): avc: denied { ioctl } for pid=8538 comm="syz.2.563" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 230.542778][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.580584][ T8541] netlink: 44 bytes leftover after parsing attributes in process `syz.2.563'. [ 230.642448][ T8545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.652854][ T8545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.822448][ T473] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.868118][ T473] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.890789][ T473] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.988426][ T473] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.581749][ T8556] Bluetooth: Invalid esc byte 0xcb [ 231.603358][ T473] Bluetooth: (null): Invalid header checksum [ 232.206085][ T30] audit: type=1400 audit(1766712714.500:601): avc: denied { append } for pid=8569 comm="syz.4.569" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 232.255854][ T8571] usb usb1: usbfs: process 8571 (syz.4.569) did not claim interface 0 before use [ 232.305615][ T5921] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 232.395194][ T8571] bond0: (slave bond_slave_0): Releasing backup interface [ 232.439270][ T8577] x_tables: duplicate underflow at hook 1 [ 232.459747][ T30] audit: type=1400 audit(1766712714.760:602): avc: denied { accept } for pid=8576 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.479603][ T30] audit: type=1400 audit(1766712714.760:603): avc: denied { map } for pid=8576 comm="syz.2.571" path="socket:[20589]" dev="sockfs" ino=20589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.514055][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.532223][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 232.554659][ T5921] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 232.564622][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.587016][ T5921] usb 4-1: config 0 descriptor?? [ 232.598510][ T30] audit: type=1400 audit(1766712714.900:604): avc: denied { module_load } for pid=8580 comm="syz.4.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 232.618165][ T8581] Invalid ELF header type: 3 != 1 [ 233.055624][ T6260] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 233.085973][ T5921] usbhid 4-1:0.0: can't add hid device: -71 [ 233.095638][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 233.127672][ T5921] usb 4-1: USB disconnect, device number 36 [ 233.227703][ T6260] usb 5-1: Using ep0 maxpacket: 16 [ 233.240094][ T6260] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.262987][ T6260] usb 5-1: config 0 has no interface number 0 [ 233.280930][ T6260] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 233.312111][ T6260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.337111][ T6260] usb 5-1: Product: syz [ 233.346990][ T6260] usb 5-1: Manufacturer: syz [ 233.358145][ T6260] usb 5-1: SerialNumber: syz [ 233.372868][ T6260] usb 5-1: config 0 descriptor?? [ 233.389477][ T6260] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 233.733374][ T8610] overlayfs: failed to clone lowerpath [ 233.852531][ T8615] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.578'. [ 233.949929][ T30] audit: type=1400 audit(1766712716.250:605): avc: denied { watch } for pid=8625 comm="syz.2.581" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 233.984037][ T30] audit: type=1400 audit(1766712716.270:606): avc: denied { watch_sb watch_reads } for pid=8625 comm="syz.2.581" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 234.065710][ T10] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 234.233114][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 234.281343][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 234.291812][ T10] usb 6-1: config 8 has an invalid interface number: 138 but max is 1 [ 234.302324][ T10] usb 6-1: config 8 has an invalid interface number: 136 but max is 1 [ 234.311451][ T10] usb 6-1: config 8 has no interface number 0 [ 234.317713][ T10] usb 6-1: config 8 has no interface number 1 [ 234.323894][ T10] usb 6-1: config 8 interface 136 has no altsetting 0 [ 234.332814][ T10] usb 6-1: New USB device found, idVendor=0b62, idProduct=0059, bcdDevice=c1.2e [ 234.341931][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.350163][ T10] usb 6-1: Product: syz [ 234.354350][ T10] usb 6-1: Manufacturer: syz [ 234.359009][ T10] usb 6-1: SerialNumber: syz [ 234.367793][ T30] audit: type=1400 audit(1766712716.670:607): avc: denied { append } for pid=8647 comm="syz.2.585" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 234.410741][ T8649] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 234.631104][ T10] usb 6-1: USB disconnect, device number 30 [ 235.359473][ T8583] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=394033392 (6304534272 ns) > initial count (5490469600 ns). Using initial count to start timer. [ 235.418844][ T6260] gspca_spca1528: reg_r err -71 [ 235.436485][ T30] audit: type=1326 audit(1766712717.720:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892ef8f749 code=0x7ffc0000 [ 235.445993][ T6260] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 235.468864][ T30] audit: type=1326 audit(1766712717.760:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f892ef8f749 code=0x7ffc0000 [ 235.509205][ T30] audit: type=1400 audit(1766712717.810:610): avc: denied { getopt } for pid=8674 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.574834][ T10] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 235.679462][ T5963] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 235.691271][ T6260] usb 5-1: USB disconnect, device number 28 [ 235.865806][ T5963] usb 4-1: Using ep0 maxpacket: 8 [ 235.929316][ T5963] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 236.038434][ T5963] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 236.170874][ T10] usb 6-1: LPM exit latency is zeroed, disabling LPM. [ 236.178842][ T10] usb 6-1: config 0 has no interfaces? [ 236.182788][ T5963] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.187020][ T10] usb 6-1: string descriptor 0 read error: -22 [ 236.210802][ T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice= 7.1c [ 236.214739][ T5963] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 236.221434][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.258142][ T5963] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 236.273645][ T10] usb 6-1: config 0 descriptor?? [ 236.276756][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.320217][ T5963] usbtmc 4-1:16.0: bulk endpoints not found [ 236.522851][ T10] usb 6-1: USB disconnect, device number 31 [ 236.610677][ T5893] usb 4-1: USB disconnect, device number 37 [ 237.381153][ T8704] netlink: 'syz.2.594': attribute type 2 has an invalid length. [ 237.388888][ T8704] netlink: 'syz.2.594': attribute type 1 has an invalid length. [ 237.400136][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.516213][ T5893] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 238.024607][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 238.040436][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.052206][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.064061][ T5893] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 238.073591][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 238.082239][ T5893] usb 4-1: SerialNumber: syz [ 238.090579][ T5893] usb 4-1: config 0 descriptor?? [ 238.106582][ T5893] hso 4-1:0.0: Can't find BULK IN endpoint [ 238.395767][ T5963] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 238.550239][ T5893] usb 4-1: USB disconnect, device number 38 [ 238.607910][ T5963] usb 5-1: device descriptor read/64, error -71 [ 238.728596][ T30] audit: type=1400 audit(1766712721.030:611): avc: denied { audit_write } for pid=8730 comm="syz.2.600" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 239.704987][ T8751] virt_wifi0 speed is unknown, defaulting to 1000 [ 240.329040][ T30] audit: type=1400 audit(1766712722.020:612): avc: denied { read } for pid=8749 comm="syz.3.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.355896][ T5963] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 240.500585][ T6260] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 240.735655][ T6260] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 240.743755][ T6260] usb 3-1: config 0 has no interface number 0 [ 242.037601][ T6260] usb 3-1: config 0 interface 17 has no altsetting 0 [ 242.186019][ T6260] usb 3-1: string descriptor 0 read error: -71 [ 242.192338][ T6260] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 242.315777][ T6260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.536960][ T6260] usb 3-1: config 0 descriptor?? [ 242.563295][ T6260] usb 3-1: can't set config #0, error -71 [ 243.043127][ T6260] usb 3-1: USB disconnect, device number 29 [ 243.085806][ T5921] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 243.132215][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 243.235681][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 243.244361][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.268228][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.326590][ T5921] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 243.336721][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.379378][ T5921] usb 4-1: config 0 descriptor?? [ 243.507000][ T30] audit: type=1400 audit(1766712725.800:613): avc: denied { unmount } for pid=8010 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 243.865626][ T5921] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 243.940693][ T8812] netlink: 'syz.4.606': attribute type 4 has an invalid length. [ 244.114788][ T8820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.166974][ T8820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.178376][ T8789] IPVS: Scheduler module ip_vs_sip not found [ 244.232782][ T5921] corsair 0003:1B1C:1B02.0007: Failed to get K90 initial state (error -71). [ 244.260487][ T5921] usb 4-1: USB disconnect, device number 39 [ 244.736030][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 245.370321][ T5878] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 245.525801][ T5963] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 245.573085][ T30] audit: type=1400 audit(1766712727.870:614): avc: denied { create } for pid=8850 comm="syz.5.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 245.595664][ T5921] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 245.633084][ T8853] use of bytesused == 0 is deprecated and will be removed in the future, [ 245.642132][ T8853] use the actual size instead. [ 245.859142][ T5878] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.886022][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.915625][ T5963] usb 5-1: device descriptor read/64, error -71 [ 245.925957][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 245.932494][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.946970][ T5878] usb 3-1: config 0 descriptor?? [ 245.961372][ T5921] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 245.962386][ T5878] cp210x 3-1:0.0: cp210x converter detected [ 245.971603][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.004057][ T5921] usb 4-1: config 0 descriptor?? [ 246.080694][ T30] audit: type=1804 audit(1766712728.380:615): pid=8859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.626" name="/newroot/25/file0" dev="tmpfs" ino=151 res=1 errno=0 [ 246.165653][ T5963] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 246.174492][ T5878] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 246.195441][ T5878] cp210x 3-1:0.0: querying part number failed [ 246.235424][ T5878] usb 3-1: cp210x converter now attached to ttyUSB0 [ 246.243458][ T5921] usbhid 4-1:0.0: can't add hid device: -71 [ 246.253496][ T5878] usb 3-1: USB disconnect, device number 30 [ 246.253586][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 246.307350][ T5878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.325268][ T5963] usb 5-1: device descriptor read/64, error -71 [ 246.341789][ T5878] cp210x 3-1:0.0: device disconnected [ 246.351511][ T8866] cgroup: Name too long [ 246.439457][ T5921] usb 4-1: USB disconnect, device number 40 [ 246.457783][ T5963] usb usb5-port1: attempt power cycle [ 246.732855][ T8870] bond1: Removing last arp target with arp_interval on [ 246.778721][ T8870] bond1: entered allmulticast mode [ 246.784376][ T8870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.815653][ T5963] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 246.836339][ T5963] usb 5-1: device descriptor read/8, error -71 [ 246.845634][ T5921] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 246.883601][ T5822] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 246.975711][ T5921] usb 4-1: device descriptor read/64, error -71 [ 247.063223][ T8879] virt_wifi0 speed is unknown, defaulting to 1000 [ 247.085681][ T5963] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 247.106661][ T5963] usb 5-1: device descriptor read/8, error -71 [ 247.229142][ T5921] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 247.269679][ T30] audit: type=1400 audit(1766712729.500:616): avc: denied { node_bind } for pid=8883 comm="syz.2.633" saddr=ff01::1 src=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 247.292844][ T5963] usb usb5-port1: unable to enumerate USB device [ 247.335722][ T5893] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 247.375735][ T5921] usb 4-1: device descriptor read/64, error -71 [ 247.496190][ T5921] usb usb4-port1: attempt power cycle [ 247.507357][ T5893] usb 6-1: config 0 has an invalid interface number: 204 but max is 0 [ 247.517034][ T5893] usb 6-1: config 0 has no interface number 0 [ 247.540299][ T5893] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 247.549501][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.557995][ T5893] usb 6-1: Product: syz [ 247.562718][ T5893] usb 6-1: Manufacturer: syz [ 247.567576][ T5893] usb 6-1: SerialNumber: syz [ 247.573656][ T5893] usb 6-1: config 0 descriptor?? [ 247.603636][ T5893] ems_usb 6-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 247.616050][ T5893] ems_usb 6-1:0.204: probe with driver ems_usb failed with error -22 [ 247.791534][ T30] audit: type=1400 audit(1766712730.090:617): avc: denied { mounton } for pid=8892 comm="syz.2.635" path="/" dev="tmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 247.828853][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.631'. [ 247.846625][ T30] audit: type=1400 audit(1766712730.150:618): avc: denied { getopt } for pid=8878 comm="syz.5.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 247.849276][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.874542][ T5921] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 247.891164][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.906309][ T5921] usb 4-1: device descriptor read/8, error -71 [ 248.156587][ T5921] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 248.206086][ T5921] usb 4-1: device descriptor read/8, error -71 [ 317.068565][ C0] net_ratelimit: 28 callbacks suppressed [ 317.068580][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.035635][ C1] ------------[ cut here ]------------ [ 358.041861][ C1] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#1: swapper/1/0 [ 358.053252][ C1] Modules linked in: [ 358.057517][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.068014][ C1] Tainted: [L]=SOFTLOCKUP [ 358.072323][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.082364][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 358.089296][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 b0 3a 85 00 b8 01 00 00 00 87 05 25 c5 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e5 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 358.109608][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046 [ 358.115685][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38d90 [ 358.123649][ C1] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 358.131608][ C1] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 358.139568][ C1] R10: 0000000000000003 R11: ffff88801dab2ff0 R12: 1ffffffff1c02250 [ 358.147523][ C1] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b853bc52 [ 358.155482][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 358.164405][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.170974][ C1] CR2: 00007f59952c01c8 CR3: 000000000e184000 CR4: 00000000003526f0 [ 358.178931][ C1] Call Trace: [ 358.182193][ C1] [ 358.185025][ C1] rcu_core+0x4cf/0x15f0 [ 358.189272][ C1] ? tmigr_handle_remote+0x132/0x380 [ 358.194545][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 358.200168][ C1] ? __pfx_rcu_core+0x10/0x10 [ 358.204840][ C1] ? run_timer_base+0x121/0x190 [ 358.209683][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 358.214874][ C1] handle_softirqs+0x219/0x950 [ 358.219638][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 358.224921][ C1] __irq_exit_rcu+0x109/0x170 [ 358.229592][ C1] irq_exit_rcu+0x9/0x30 [ 358.233828][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 358.239453][ C1] [ 358.242366][ C1] [ 358.245279][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.251249][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 358.256878][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 358.276487][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 358.282556][ C1] RAX: 000000000089d8e7 RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 358.290520][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 358.298491][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 358.306462][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 358.314432][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 358.322408][ C1] ? ct_kernel_exit+0x139/0x190 [ 358.327270][ C1] default_idle+0x13/0x20 [ 358.331599][ C1] default_idle_call+0x6c/0xb0 [ 358.336366][ C1] do_idle+0x38d/0x510 [ 358.340440][ C1] ? __pfx_do_idle+0x10/0x10 [ 358.345035][ C1] cpu_startup_entry+0x4f/0x60 [ 358.349812][ C1] start_secondary+0x21d/0x2d0 [ 358.354576][ C1] ? __pfx_start_secondary+0x10/0x10 [ 358.359864][ C1] common_startup_64+0x13e/0x148 [ 358.364816][ C1] [ 358.367831][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 358.375114][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.385621][ C1] Tainted: [L]=SOFTLOCKUP [ 358.389938][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.399983][ C1] Call Trace: [ 358.403256][ C1] [ 358.406086][ C1] dump_stack_lvl+0x3d/0x1f0 [ 358.410677][ C1] vpanic+0x640/0x6f0 [ 358.414654][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 358.420976][ C1] panic+0xca/0xd0 [ 358.424693][ C1] ? __pfx_panic+0x10/0x10 [ 358.429112][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 358.434220][ C1] check_panic_on_warn+0xab/0xb0 [ 358.439155][ C1] __warn+0x108/0x3c0 [ 358.443138][ C1] __report_bug+0x2a0/0x520 [ 358.447635][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 358.453966][ C1] ? __pfx___report_bug+0x10/0x10 [ 358.458990][ C1] ? find_held_lock+0x2b/0x80 [ 358.463700][ C1] ? rcu_is_watching+0x12/0xc0 [ 358.468493][ C1] ? __lock_acquire+0x436/0x2890 [ 358.473434][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 358.479759][ C1] report_bug+0xb2/0x220 [ 358.483994][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 358.490311][ C1] handle_bug+0x127/0x260 [ 358.494666][ C1] exc_invalid_op+0x17/0x50 [ 358.499203][ C1] asm_exc_invalid_op+0x1a/0x20 [ 358.504182][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 358.511146][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 b0 3a 85 00 b8 01 00 00 00 87 05 25 c5 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e5 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 358.530761][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046 [ 358.536823][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38d90 [ 358.544785][ C1] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 358.552745][ C1] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 358.560704][ C1] R10: 0000000000000003 R11: ffff88801dab2ff0 R12: 1ffffffff1c02250 [ 358.568668][ C1] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b853bc52 [ 358.576635][ C1] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 358.582965][ C1] rcu_core+0x4cf/0x15f0 [ 358.587204][ C1] ? tmigr_handle_remote+0x132/0x380 [ 358.592482][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 358.598107][ C1] ? __pfx_rcu_core+0x10/0x10 [ 358.602785][ C1] ? run_timer_base+0x121/0x190 [ 358.607629][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 358.612826][ C1] handle_softirqs+0x219/0x950 [ 358.617597][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 358.622880][ C1] __irq_exit_rcu+0x109/0x170 [ 358.627553][ C1] irq_exit_rcu+0x9/0x30 [ 358.631789][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 358.637416][ C1] [ 358.640335][ C1] [ 358.643253][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.649226][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 358.654862][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 358.674462][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 358.680528][ C1] RAX: 000000000089d8e7 RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 358.688487][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 358.696445][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 358.704402][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 358.712359][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 358.720320][ C1] ? ct_kernel_exit+0x139/0x190 [ 358.725170][ C1] default_idle+0x13/0x20 [ 358.729492][ C1] default_idle_call+0x6c/0xb0 [ 358.734251][ C1] do_idle+0x38d/0x510 [ 358.738322][ C1] ? __pfx_do_idle+0x10/0x10 [ 358.742922][ C1] cpu_startup_entry+0x4f/0x60 [ 358.747683][ C1] start_secondary+0x21d/0x2d0 [ 358.752438][ C1] ? __pfx_start_secondary+0x10/0x10 [ 358.757713][ C1] common_startup_64+0x13e/0x148 [ 358.762661][ C1] [ 358.765931][ C1] Kernel Offset: disabled [ 358.770230][ C1] Rebooting in 86400 seconds..