last executing test programs: 2m2.887534609s ago: executing program 2 (id=156): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@gettaction={0x28, 0x32, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, 0x0, 0x0) r8 = syz_open_procfs(r4, &(0x7f0000000040)='stat\x00') read$FUSE(r8, &(0x7f0000001300)={0x2020}, 0x2020) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x4080, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f00000000c0)) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r0, 0x0, 0x0, 0x2002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,', @ANYBLOB=',group_id', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d03041d9254305f2ec55716cb7f1e988177cb02ec66008ce258d67b06d67e7b17973939f4b1cc88f245f325d464d58c4f4a1035869ef17be1d69bc9b96cf10c651012372ecb0c621658239382f16ae15a6c6a66894651581c057fe34884", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 2m1.990076119s ago: executing program 2 (id=160): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3b, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="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", 0x13c}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82000, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syslog(0x3, &(0x7f00000003c0)=""/234, 0xea) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xdb) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x7f) getdents(r0, &(0x7f0000000ec0)=""/4096, 0x1000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000440)={0x1f, 0x400, @none, 0x0, 0x2}, 0xe) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f6010203010902240002010050040904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000300), 0x5, 0x200) 2m0.990633856s ago: executing program 2 (id=168): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0xfe}, {0x0, 0x0, 0x3, 0x7, 0x1, 0x0, 0x0, 0xf4}}, {{@in6=@local, 0x0, 0x1e7}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0xe8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000080000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000e600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280), 0x700}, 0x20) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000080)=""/178) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) prlimit64(r2, 0x9, 0x0, &(0x7f0000000140)) 2m0.070014061s ago: executing program 2 (id=174): syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001739e6108d90f060102050000001b000107d440000904650001be866d010905010240000103090ecd8f46c1198213b172e1ef94ca6a6025c82509e0c581ca09322697909370af2f2c55dffd8741625a3b54646f89d4ab60c83673810d68b2"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$getownex(r0, 0x10, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x4}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x0, 0x1000000}, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 1m55.796585567s ago: executing program 2 (id=187): socket(0x1e, 0x4, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='.\x00'], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x4, r1}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x85, 0x1, 0x40}}]}}]}}]}}, 0x0) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 1m54.147472896s ago: executing program 2 (id=195): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) (async) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000680)="b395af31", 0x4}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000680)="b395af31", 0x4}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000040000000400000000000000268bc77696de4b5c0d3853bc2669a1eac3e6670d58e8db0f6a99d539e051d12ae81d279a2849868fd941ce1efa9e1a3d259c5743d036d86b9c15e9dc9a3fea64d7f8b333a0b476a5131748cebadeb24476f7f6d0829f44d2fe300d308500000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000003c0)={r5, &(0x7f0000000680), 0x20000000}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) (async) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r6, &(0x7f0000000040), &(0x7f0000000480)=ANY=[@ANYBLOB="0407d97dcd"], 0x2, 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) write$char_usb(r7, &(0x7f0000001680)="f3", 0x1) writev(r7, &(0x7f0000000000), 0x0) syz_usb_disconnect(r0) 1m39.122279813s ago: executing program 32 (id=195): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) (async) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000680)="b395af31", 0x4}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000680)="b395af31", 0x4}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000040000000400000000000000268bc77696de4b5c0d3853bc2669a1eac3e6670d58e8db0f6a99d539e051d12ae81d279a2849868fd941ce1efa9e1a3d259c5743d036d86b9c15e9dc9a3fea64d7f8b333a0b476a5131748cebadeb24476f7f6d0829f44d2fe300d308500000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000003c0)={r5, &(0x7f0000000680), 0x20000000}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) (async) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r6, &(0x7f0000000040), &(0x7f0000000480)=ANY=[@ANYBLOB="0407d97dcd"], 0x2, 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) write$char_usb(r7, &(0x7f0000001680)="f3", 0x1) writev(r7, &(0x7f0000000000), 0x0) syz_usb_disconnect(r0) 51.335413797s ago: executing program 0 (id=455): r0 = syz_io_uring_setup(0x22f, 0x0, &(0x7f0000000300), 0x0) io_setup(0x9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008004"]) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)=[0xff, 0x92], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000500)={0x60, 0x0, &(0x7f0000159000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x9, 0x0, 0x0, 0x7, 0x5b, 0x52, 0x5f, 0x50}) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 50.802497805s ago: executing program 5 (id=458): r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffff, 0x106}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000000), 0x1, 0x40}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 50.798508008s ago: executing program 0 (id=459): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0200120f0a001100000007dd8378626c5e43c93e7b1e469e0000000000", 0x27) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000000000000050000000000000084000000000000000900000000000000050000000000000008080007000000000200000000000000000000000000000000000000000000000000000000000000020000000000000000800000000000000100000000000000071d020e000000000900000000000000000000000000000000000000000000000000000000000000100000000000000039050000000000004004000000000000080c000700000000ff03000000000000000000000000000000000000000000010000000100000094232564000000000000000000000000020109060000000009000000000000000000000000000ee057365c0e8e8d00f5ffffffffffffff00c20000000000000004000000000000000200000000000000f2050506000000000100"/327]) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaede, 0x0, 0x200001, 0x36e}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r4, 0x47f6, 0xc001, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) migrate_pages(r7, 0x1, &(0x7f0000000000)=0x4, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r8 = fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005780)=[{{&(0x7f0000000300)=@vsock, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/217, 0xd9}, {&(0x7f00000009c0)=""/234, 0xea}, {&(0x7f0000000900)=""/81, 0x51}, {&(0x7f0000000400)=""/25, 0x19}, {&(0x7f0000000ac0)=""/202, 0xca}], 0xa}, 0x9}, {{&(0x7f0000000c80)=@isdn, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000d00)=""/149, 0x95}, {&(0x7f0000000dc0)=""/192, 0xc0}, {&(0x7f0000000e80)=""/191, 0xbf}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/196, 0xc4}, {&(0x7f0000002040)=""/200, 0xc8}, {&(0x7f0000002140)=""/110, 0x6e}], 0x7, &(0x7f0000002240)=""/219, 0xdb}, 0xfffffd09}, {{&(0x7f0000002340)=@tipc=@name, 0x80, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/74, 0x4a}, {&(0x7f0000003440)=""/100, 0x64}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/225, 0xe1}, {&(0x7f00000045c0)=""/238, 0xee}, {&(0x7f00000046c0)=""/30, 0x1e}], 0x7, &(0x7f0000004780)=""/4096, 0x1000}, 0x5}], 0x3, 0x2, 0x0) add_key$user(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000100)=0xffffffff, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x82002, 0x0) 50.687596677s ago: executing program 5 (id=461): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) r3 = syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) syz_usb_disconnect(r2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x1800001c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0x9}, {0x1, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x84, 0x2, {{0x0, 0x0, 0x0, 0x1, 0x5, 0x800000f}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xe520626fc9c70ee9}, @TCA_NETEM_DELAY_DIST={0x5c, 0x2, "59ba5cb6ea4ff0abe0a1d801a1bb63b3b50cf02b6e91119fb4c5655e254f8ab9327b47946cb58f6035e59a164ff76f99879071b361e1f9d5a0b19131f7a129f731e915a69160848dd9dcdf1bbeae225e3c8ac02ee7914af5"}]}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000007}, 0x20008050) 49.909590862s ago: executing program 0 (id=466): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$hiddev(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x400, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x593400, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r3, &(0x7f00000000c0)={0x22, 0xba, 0x61, 0x4, 0x3}, 0x6) fsopen(&(0x7f0000000700)='affs\x00', 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r6 = syz_io_uring_setup(0x60df, &(0x7f00000004c0)={0x0, 0x1cf2, 0x2, 0x1003, 0x2fb, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000340)=0xfffffff8, 0x0, 0x4) io_uring_enter(r6, 0x179a, 0xcba2, 0x49, 0x0, 0x0) io_uring_enter(r6, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 49.004110205s ago: executing program 1 (id=470): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103", @ANYBLOB="011dc1a332467ae244ccf0af5251b34db4d5b3f37b8278ea32d69db635021dfe1d1aee3bd7b569c31771edf5c349d83b2d220d7c8dd64b86433aeab4eabb6c24278cb58bb09e5247fc8058014d75145990734de79eeb7fd0096d3976860051741953b8ddf72ebf1ee107a0f5fb81fe0df4765e5fe3be34251f05e9506e1a1cc56120a2ea3788f790197a725c166085561b70594010b726ff670fc7d863e400f26016d1ef00c4ce073432d94af2801b81f62d88d66ebb56979f861e642b8ae24ee1b0"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x200}) syz_usb_control_io(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7077, 0x1, 0x1, 0x170}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = semget(0x2, 0x2, 0xe) semctl$SEM_INFO(r7, 0x1, 0x13, &(0x7f0000000200)=""/50) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r9, &(0x7f0000001d40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xff, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001480)=[@flowinfo={{0x14, 0x29, 0xb, 0x1000}}, @hopopts={{0x18, 0x29, 0x36, {0x77}}}], 0x30}}], 0x1, 0x1000) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000800000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001e02d6f352d28cc7e146bce2fc5da0bf2b8aabfdb4054c28f87b8e7ff54664e7bcb5c1bfedc6246ac8f26e759f31c88f8776f7e33013402c3f4e71481b28d29637e255b67606d481fd3f757ef6a14fbb59165e3b565b9c3be4272d8b91f18282d2bc79aeaa0d97f247ce0f7672ac78e9ba3d5a42753f3e91566d877f1197de3e8aa55cc45c71f36"], 0xb8}}, 0x0) r10 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r10, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x4, @dev, 0x9}, 0x1c, 0x0}, 0x6008bd4) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) 48.899521827s ago: executing program 5 (id=471): removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', '\x00'}) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x8, 0x4) r2 = syz_io_uring_setup(0x5429, &(0x7f0000000240)={0x0, 0x8c2e, 0x200, 0x0, 0x350}, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000000780)={0x5, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000480)=""/56, 0x38}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/173, 0xad}, {&(0x7f00000005c0)=""/228, 0xe4}], &(0x7f0000000740)=[0x9, 0x5, 0x48b, 0x7], 0x6}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000) r4 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/protocols\x00') ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000800)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000840)={0x2, 'veth0_virt_wifi\x00', {0x7}, 0x7}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x80, 0x0) io_uring_enter(r4, 0x33d0, 0x7493, 0x10, &(0x7f00000008c0)={[0x200]}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000900)={r5, r4}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x4500, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000980)=0x0) bind$nfc_llcp(r4, &(0x7f00000009c0)={0x27, r7, 0xffffffffffffffff, 0x4, 0x50, 0x8, "3036d8f5af2bf8b805e158f0d0eb229aecea9074d6de3e9b2253d35a141ce513a13f6b76d3db564861036998d4b49c3ee674908c3f1f3eefa5cff87a6730f3", 0x26}, 0x60) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000a40)={{r6}, "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"}) getsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000001ac0)=""/67, &(0x7f0000001b40)=0x43) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000001b80)=0x14) openat$uinput(0xffffffffffffff9c, &(0x7f0000001bc0), 0x802, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r3) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x70, r8, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14e}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_OPER_CLASS={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) mount(&(0x7f0000001d80)=@loop={'/dev/loop', 0x0}, &(0x7f0000001dc0)='./file0/../file0\x00', &(0x7f0000001e00)='9p\x00', 0x1060002, &(0x7f0000001e40)='-s}-\x00') syz_usb_control_io(0xffffffffffffffff, &(0x7f0000003bc0)={0x2c, &(0x7f0000003a00)={0x0, 0x7, 0x7b, {0x7b, 0x4, "2a3e1b4ebbf6629bd696a5c25b093cef3a5720d6c204ae589d85940454e4c4b5f4f4226d6168ad84250b2cb14a4218902566ce5510d0dbf249150ba9772590a9fc63f58f47635f798ca8f604877787255fa1d30005e4c5bca9b56bb2fab1975ba5b292e350b939d8e06e0c0fb791de438a7b9d7daa6da949f9"}}, &(0x7f0000003ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, &(0x7f0000003b00)={0x0, 0xf, 0x17, {0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xe3, 0x8, 0x1, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0xa, 0xe}]}}, &(0x7f0000003b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x10, 0x4, 0x24, "e88c84c1", "36157c5a"}}, &(0x7f0000003b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x8, 0x5, 0x8, 0x8, 0x2, 0x7}}}, &(0x7f0000004080)={0x84, &(0x7f0000003c00)={0x40, 0xf, 0xa8, "b827def502358e1e09353abb73d97f7ccf916ffd3d08f5a49a43c0270f20f0cf358f47a7d7c85ab494e837e855f1f7d9de4d3beaa827bc68063801ac615fc81b90a3ef35c99238c69c41917d7c183fe15a7a1de114f4ad7e6bcf52ee741a6181944cd0155682ac413e98c5914bc08627c15544d054a6418fbae97bf87990b8680b7a50ba06613a36269c74140071755f8fc5ad8987e4112ff7712c5c4eab72517a5bbd19248c79d6"}, &(0x7f0000003cc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000003d00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000003d40)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000003d80)={0x20, 0x0, 0x8, {0x40, 0x2, [0xf]}}, &(0x7f0000003dc0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000003e00)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000003e40)={0x40, 0xb, 0x2, "8ed8"}, &(0x7f0000003e80)={0x40, 0xf, 0x2, 0xc5b}, &(0x7f0000003ec0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000003f00)={0x40, 0x17, 0x6, @random="9fd485d5c6bd"}, &(0x7f0000003f40)={0x40, 0x19, 0x2, "d022"}, &(0x7f0000003f80)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000003fc0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000004000)={0x40, 0x1e, 0x1, 0x56}, &(0x7f0000004040)={0x40, 0x21, 0x1, 0x9}}) 48.22707127s ago: executing program 0 (id=473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b40)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46040700030d0000000000000003000300060000000903000038000000000000000e00000000002000030005000000ff0f0000000002000000000000800900000000000100010000002d09000004000000fa00000000000068144f5b0003000000000400000700000002000000000000000d00000003"], 0x98) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x7, 0x9, 0x9, 0x6, 0x80000000000, 0x1}, &(0x7f00000000c0)={0x9, 0x7, 0x5, 0x8, 0x0, 0x7, 0x3, 0x7ff}, 0x0, 0x0, 0x0) 48.045410919s ago: executing program 0 (id=475): syz_usb_connect(0x0, 0x3b, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) read$msr(r5, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x10) fchdir(r4) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) r7 = syz_open_procfs(r1, &(0x7f0000000500)='net/ip6_tables_matches\x00') preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x1000000, 0xc19) sendmsg$nl_xfrm(r0, 0x0, 0x0) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) setsockopt$inet6_tcp_int(r8, 0x6, 0x0, &(0x7f0000000080)=0x3, 0x4) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000407d1e242c000000000001090201000000000000000400000103000000092100000001220700090581034000000004"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000f8009606daab4a73e46f6b44fd4aff98f00610da8ae9db936af3b14a21c328c502929eca89f7db5119fdc5f7eefca52a91c8c7cba9a456c2d3e861d6c054a9981117ee0591711dc8cd94f2917afc9834f4b216b3ab19f14c517b655ca9b9bcee2b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 47.751570314s ago: executing program 5 (id=477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e22, 0xfffffff8, @empty, 0x8f}}, 0x0, 0x0, 0x4c, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x88800) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000100)={0xfffffff8, 0x7, "6fd1f5f37dc04e164fdae9c163ddfe33aede52c4f86699fde2507386bdabede7", 0x7, 0x8, 0xfff, 0x8078, 0x3}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)=ANY=[@ANYBLOB="400012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 46.960307327s ago: executing program 4 (id=481): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x101, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) listen(r2, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00'}) listen(r1, 0x0) r3 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x3, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r3, 0x47f6, 0x880e, 0x0, 0x0, 0x0) shutdown(r1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r8, 0x1, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x28, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x10, "9606053d0006ff00800000b61af9"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000840}, 0xc4) syz_usb_connect(0x2, 0xdf, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x31, 0x52, 0x97, 0x40, 0x5c6, 0x9245, 0xfee4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x1, 0x81, 0x4, 0x0, 0x4f, [{{0x9, 0x4, 0x37, 0x6, 0x9, 0x37, 0xb9, 0x56, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0xb0a, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x4, 0x96}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9c, "fe"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x80, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf7, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x64, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xbbbf}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xa, 0x41, 0x3, [@generic={0x2f, 0x8, "1354e80f5032add4f55f49e52a87d57d48949161ea2c379918abc5dbe4799e6ff392d612b804e5a86a626a9b98"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x27, 0x3, 0x8}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x4e, 0x9, 0xc6}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x5, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xd0}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x0, 0xb4, 0xac}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x4, 0x3b, 0x10}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 46.063190381s ago: executing program 1 (id=482): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000dc0)={0x0, 0x6, 0x0, {0x1, @pix_mp={0x0, 0x0, 0x36314d4e, 0x5, 0x0, [{0x5, 0x2}, {0x0, 0x80000000}, {}, {0x0, 0x2}, {0x0, 0xf0}, {0x0, 0x6}, {0xc6e6}, {0x0, 0x4000}], 0x1, 0x0, 0x0, 0x1}}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000dc0)={0x0, 0x6, 0x0, {0x1, @pix_mp={0x0, 0x0, 0x36314d4e, 0x5, 0x0, [{0x5, 0x2}, {0x0, 0x80000000}, {}, {0x0, 0x2}, {0x0, 0xf0}, {0x0, 0x6}, {0xc6e6}, {0x0, 0x4000}], 0x1, 0x0, 0x0, 0x1}}}) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x7, 0x1, 0x7, '\x00', 0x5}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_io_uring_setup(0x7d5e, &(0x7f0000000200)={0x0, 0xfad4, 0x100}, &(0x7f00000029c0)=0x0, &(0x7f0000002a00)) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x6, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) socket$kcm(0x2, 0x200000000000003, 0x106) (async) socket$kcm(0x2, 0x200000000000003, 0x106) io_uring_enter(0xffffffffffffffff, 0x6312, 0x0, 0x3b, 0x0, 0x23) (async) io_uring_enter(0xffffffffffffffff, 0x6312, 0x0, 0x3b, 0x0, 0x23) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2b, &(0x7f0000000380), &(0x7f0000000280)=0x4) (async) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2b, &(0x7f0000000380), &(0x7f0000000280)=0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x3a) r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) sync() (async) sync() r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000180)=0x100000005) 45.855370747s ago: executing program 1 (id=483): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000eeff00000000000000000000711250000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) (rerun: 32) 45.704659132s ago: executing program 5 (id=484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r6, &(0x7f0000002080)={0x60, 0x0, r7, {{0x7, 0x9, 0x800, 0xe6, 0x5, 0x8, 0x8, 0x80000000}}}, 0x60) (async) write$FUSE_STATFS(r6, &(0x7f0000002080)={0x60, 0x0, r7, {{0x7, 0x9, 0x800, 0xe6, 0x5, 0x8, 0x8, 0x80000000}}}, 0x60) 45.63153781s ago: executing program 1 (id=485): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf8, 0x2a, 0x81, 0x40, 0xc45, 0x60af, 0x6f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7b, 0x9, 0x80, 0x1, [{{0x9, 0x4, 0x59, 0xa, 0x0, 0x94, 0x11, 0x5f, 0x1c}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x94, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xbf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0x8, 0x28, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "107ad044a8d4"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0xf, 0x2}, [@acm={0x4, 0x24, 0x2, 0x2}, @country_functional={0x10, 0x24, 0x7, 0x8, 0x7, [0x7, 0x0, 0x401, 0x0, 0x7ff]}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x24, 0x5, 0x2}, @obex={0x5, 0x24, 0x15, 0xd6}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x35, 0x6, 0xc9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x36, 0x62}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x4, 0x9}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x1, 0x40, 0x81, 0x8, 0x9}, 0x126, &(0x7f0000000140)={0x5, 0xf, 0x126, 0x3, [@generic={0xfd, 0x10, 0x4, "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"}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x7, 0xf, 0x1, [0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "1f6f62cbbac2e214d2cdf006aca94146"}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x5c, &(0x7f0000000300)=@string={0x5c, 0x3, "a42f69dd04af40a32052584cf6d09a3d0e362a0518e9eee9c08588018c5d0fc97220838748d416a908ad4676132ad64b177c9ac5fad6e32f7fe81faf789e0ed3953892b12f54fd55fbfc6a97708b5fd62270f706cdafdbb5e780"}}, {0xf5, &(0x7f0000000380)=@string={0xf5, 0x3, "45d9cd6150a2e19b91acdc7e9ae9b50730b72a8cdb6500edd4aeae404c1c1cedbeaba3d5f92ff3a760610642a2ff68c9fee93bb2fa7bd1662c65bc4b94d9c78beabc73ba9efe184e7c7ccbe2bcb50a865fa76ac192d4324d3353a33a39567dd5dacf819680c10a60b9cc4d677b1b6d4a8a23b0514b17a40ad44109b2cd1e8d3ebc514a38d5a0741695de74db2bb3640fe780a05bff651a2d850c3c06025307ef581d2df5bef14ba755b51500873e5354fcb7735ba905f09e1039dae03a82d666ccb53fc824f503e033599043b9d3a8b20ce7731c4cdfb47cf619967f80bc308612962a3722c034c009627dbd49b63d54037ab8"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x110992ee23645ff3}}]}) 45.604774892s ago: executing program 5 (id=487): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) readv(r1, &(0x7f00000018c0)=[{0x0}, {&(0x7f0000001700)=""/221, 0xdd}], 0x2) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x7ffffffd, 0x348, 0x0, 0x250, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) mount$bind(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x882602, 0x0) 45.471090312s ago: executing program 4 (id=489): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141142) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000007c0)={0x52}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xc000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x804a, &(0x7f0000000200)={[{@redirect_dir_follow}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r1, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 42.666056105s ago: executing program 3 (id=490): r0 = syz_clone(0x0, &(0x7f0000000200)="27cd512bd2981d6518314342808aff6aea8677657e1e1b0b7584caa9de8b2b1ec40aa234c2404de0142d53309826cee0947eee5ab6725799546d9476c8579a4d681516990dd5971265c00a248ee68bd1258de7cac488419328463d983627579465d45d92eaed8edd125065d7c25f6c1185dbbb7082b6e243e249a3ed62d5cd7083bb28db542e8025af9a41def11289f833ed86757c1625df", 0x98, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="a2c4dc53fc6b39b44748be1da78fe0793aac30dada53c436093d462b13ff0f607e614baeb543a1bd2764dd1daa764dec180b78415a443780445308c655c8e1031db7c38950767ec2") sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0xff) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000002c0)=[{}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x2}) (async) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000300)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="60820000", @ANYRES16=r12, @ANYBLOB="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"/602], 0x260}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000007c0), 0x0, 0x2, 0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000300)={0x1, 0x1, &(0x7f0000000180)=[r10], &(0x7f00000000c0)=[0x2], &(0x7f0000000240)=[r14, r13], &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x7, 0x1, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000640)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0xabababab}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000680)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0)=[r3, r4, r5, r7, 0x0, r10, r15, r16, r17], 0x9, 0xc0000}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100006e40b740e1092151c14001020301090212000100000000090400007138bfee268e000000000000007f003cac264a889b314699b2298a863444677ef1f4d54ff275837cb42cc54a5ae775c75644f2a5959be19eb7efda200e"], 0x0) 42.382171207s ago: executing program 0 (id=491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="2ef2dd050080000048b84441000000000000b9130b00000f320f21f8350000ce00010123f836362e6726af4b0f20c1350e000000440f22c0b805000000b9009800000f01d97c0f01c9c947338c01c4c40f79d226660f013b", 0x58}], 0x1, 0x50, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @local}}, 0x3d, 0x6}, &(0x7f0000000000)=0x90) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41.635449751s ago: executing program 1 (id=492): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="000f060000060000000000000003513dd5a3120f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) syz_usb_connect(0x0, 0x458, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x94, 0xf8, 0xab, 0x8, 0x4dd, 0x8005, 0x818a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x446, 0x1, 0xe1, 0x67, 0x80, 0x4, [{{0x9, 0x4, 0x39, 0x96, 0xe, 0x2, 0xa, 0x0, 0x20, [], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x6d, 0x4, 0x43}}, {{0x9, 0x5, 0xb, 0x4, 0x10, 0x1, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x8}]}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0x53, 0x4, 0x40, [@generic={0x91, 0x7, "0b52281e4c790cf6e8cef13daa74c4f91d16e020d3fa44341ad8b180decd92e1c445bccd05083417574a794f5c33a57f452f255a4bf7f81b3602dc7391830d98d866192ffc721f74263029a6bbadce25bba14663869c3c4bbd2fa0c7cd04c90d15c1a96e8c63ba8bdb3530f89c8cec9c28b3fe249a39b976396cf924d33d5d3133e7a746fd2b5323ff2a1edebd4700"}, @generic={0x39, 0x24, "97690869d7eb557031ba0980d12d6d323bffb64d8830a078de554d9b2b271efa46985e5961d786171261d0b5b2eeaf4b76cada50ed1419"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x3, 0x4b, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x6, 0x1, 0x40}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0xf, 0x9, 0x3, [@generic={0xb2, 0x4, "3270469da79220d9eaf7c03d2a8da29f73d5b3947aba4f32604a41be1b49dc76f6aff3405934ce7a3cca92c127d2d0e606bebcd5d6f8bdd09a5f05b98651c8f1f6d717e058be4da9e2bc16a07d3bf88c336c528af6d6f4621fe4965b4ab247b979e694c858ea88aa2b561d47faa71150ab3d291db3063eac090d5bd746bf18ae098e60bf770a530ef12b9765a5be953e8c39f7bc9320c801df943cd1c8ac575c9fd99d93a5652169ad795ba90ee999a5"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x0, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xe, 0x8, 0x5, [@generic={0xe4, 0x31, "cd384ca06f9f6be126b0941e37890c9932d796857b367dbfcadc310319b3f1d1c25ea5183a42158edf5bdb01d5eb596e4f6fdb6ff71b06b62cf125f72128ac279c05954328ff364202bfb8e73e57bb45e8b006dab80009f0d06f50792d989b4b9784befcdf4cf8af09c7f83ef0bc20c26a1ee67f644ba62dd8d0d6b168a3f4231961e87558b43c7f1ab151e704eb6cb54958b332da65687136df74d61225e55c80c11c96f21b4a524083078eb88402ce7193632672b132cc8cc225b3d19a02fb94fea29c04f0b6a48f3f476bc05bc8855fe18d741b5b6f203d6d30832da42c043a71"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x230, 0x81, 0x3, 0x1, [@generic={0xb5, 0xe, "67071febb6bca90fcfc7ac8c699154eb993dd676df1a11b86f633fc0b143cea9bba0d98752affbeb82f1ea9e4b705ea6b2ac5898f7f09ac30232bb43ae59b86679b26498a1ec678e6884633cf22c81ebaf6ed32494a0ba65a78750fb9f710bb2502a87c9f5049a86de1889f3beb97c1b49c262def49a13df05f560391b177083edd19a0f10dbb6b2e80bf9577ce3a92cbd3c9c50166f08b05d2641d13f79909977ad4d779934774bda98fb22401e2e35bffb5a"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x7f, 0x1, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x9, 0xc, 0x6b, [@generic={0x30, 0xb, "85f907be11fb6c6deb6a2bc1159092440b07ad331e8e418a3d72a933a700ac2ac9e0945f44d32044649d8d9e1b89"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x100}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x80, 0x6c, 0x3}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x6, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x9}, @generic={0x55, 0x8, "313d4debb5199531e686313c3f1cab89d72f5239dbecf4ebcbb13ebb3a6471a6eda22bce7012a12e95924a6c112be50e310c7478806ffae360f46131da4ff82a1941246400569760f7045d0f5f033f66ab9d84"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0xfd, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xdea8}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x8, 0x10, 0x2, 0x10, 0x2}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x3, [{0x81, &(0x7f00000000c0)=@string={0x81, 0x3, "b9a256fa6c09bb0b26178410adf81094eee021b77947bf3bce39a8d8ebc80806d1682162ce9e051f5380a33873a775846ca7bc33a16de2205b9a1c1c9d89b0144fca5b582484bbc8469c643315c5cd62e09d5c9adbdddd1bcaa1ff5cbfd553395782e232292ee8afb74c517594dfe9a2b9cf0f22781cbac743715828bddebf"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x427}}, {0x42, &(0x7f0000000200)=@string={0x42, 0x3, "f2293403551e62566cd827110efe5f8883d71eaede4c24115a080ddb3843064bf899121cce924cd5d976bb783af0d4add54b6c834cc60e5c0d9d48f946aa781f"}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000640)={0x40, 0xd, 0x2, "9de1"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x40, 0x7, 0x70, {0x70, 0x5, "d24c8f1201f030b49db14dc8bcdd2205a6ff559afa4cf80c451c2837b2ae532d80c8d3903d734e7e4dcaa516c356f3c91b62fb656ed64b393ee2c12d75e651a92c6d54e7fc820242652fbb61803a164e30d8b6343b0107d08bdee068cb7c6ffaa14b15592e2579ab364b5f6c6c5d"}}, &(0x7f0000000500)={0x0, 0x3, 0xbd, @string={0xbd, 0x3, "66a98f1590752da8f9c55ce58a4000bac05b8aa88e37d3a55183e7944c2bcc19ae75911a1d598afd7427ed2853a174df9aba5659be141dfce8cbb253b5d6bd429856f99151d937327eca4f5bea3dd5ac09c9f55426e5bf78878a28bdb138b449b0c81769594ba7b514b339ccd90c371f2ad11984c138b93393feec11bf896f728727d30c9cf89258bea873ad3319b8230e3bb257e748c793c70dff3ec82a1f7f1850fa0b2af4353f8ee64a8f62d58b072475ed4833afbf9741780d"}}, &(0x7f0000000380)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "08eb873836815b2286c5f130467ecfaf"}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0xe7, 0x0, 0x1, [0xc0c0, 0xf0, 0x0, 0x0, 0xffc000]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0x1, 0x1e, "79bcbe1e", "b8ef6cc6"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x0, 0xf0, 0x3, 0x8d07, 0x6}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)={0x0, 0x6, 0x86, "49bc905141dd3835d0e47880625f1612e8f02c6ada7606f909f32fdf8775a32b941e13004a59c54c2437bdc71197a4844a769e0c4a9472b84ff3e8a728c72b1e074d5c5278e99d790a5ee0a4366a9651e9c235eb86665aad9af87c669c8ceba15238561538cd2d8710f245517eb6955bb80faf2ce94b1822d04621ce6f3603514a1047a13db5"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x9f}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0xa0, 0x4}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "f155"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000dc0)={0x40, 0x13, 0x6}, &(0x7f0000000e00)={0x40, 0x17, 0x6}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "321f"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x8a}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x71}}) 41.635068917s ago: executing program 4 (id=493): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r4}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r4, 0x0, &(0x7f0000390000/0x1000)=nil, 0x1000, 0xab1d}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x749bc}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0) (async) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000002c0)=0x100101, 0x4) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) (async) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0x18) ioctl$BTRFS_IOC_LOGICAL_INO(r9, 0xc0389424, &(0x7f0000000140)={0x5, 0x40, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 41.4910995s ago: executing program 3 (id=494): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000180)={0x6, 0x20, 0xed, 0x20, 0x8000000000000001}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 41.440762816s ago: executing program 4 (id=495): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0) syz_pidfd_open(r0, 0x0) io_destroy(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800900010068617368000000000c00028008000740000000000900010073797a30000000000900020073797a32"], 0x74}, 0x1, 0x0, 0x0, 0x801}, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 41.271519345s ago: executing program 3 (id=496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000500)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f00000002c0)='0\x00', 0x1) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0x303, 0x4, 0x25dfdbfe, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x400c044}, 0x4004) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) capset(&(0x7f0000000000)={0x19980330}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r9, 0xae9a) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x3, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7]}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7004fbdbdf25256b070008000300", @ANYRES32=r6, @ANYBLOB="0a0006000e7668d28bc70000040034000800350005000000080026006c090000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) 40.983258474s ago: executing program 4 (id=497): socket(0x1d, 0x6, 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) clock_gettime(0x3, &(0x7f0000001840)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r2, 0xc0606610, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000001c0)={0x3ff, 0x8, 0x2, {0x9, @vbi={0x801, 0x1001, 0x6, 0x41415270, [0x1000008, 0x9], [0xffff, 0x100a0c], 0x2}}, 0x7}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000016c0)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000001300)=""/249, 0xf9}, {&(0x7f0000001400)=""/252, 0xfc}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f0000001500)=""/190, 0xbe}, {&(0x7f00000015c0)=""/15, 0xf}], 0x7, &(0x7f0000001680)=""/34, 0x22}, 0x7}], 0x1, 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x4921, &(0x7f0000001700)={0x0, 0x879, 0x4000, 0x1, 0x28c, 0x0, r0}, &(0x7f0000001780)=0x0, &(0x7f00000017c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x81b78fa4133197d4, &(0x7f0000001800)=0x8001, 0x0, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 40.968388104s ago: executing program 3 (id=498): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46040700030d0000000000000003000300060000000903000038000000000000000e00000000002000030005000000ff0f0000000002000000000000800900000000000100010000002d09000004000000fa00000000000068144f5b0003000000000400000700000002000000000000000d00000003"], 0x98) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 40.755036691s ago: executing program 3 (id=499): io_setup(0x3, &(0x7f0000000000)=0x0) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r2 = eventfd2(0x1, 0x801) (async, rerun: 32) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder-control\x00', 0x800, 0x0) (rerun: 32) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x60000, 0x0) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f0000000080)="be509ef80467c942864dddaa62916f8651754096002a8d3de944bf71438c5421b7fb394554e76c713cdde3f0c2942a5bce61eb3ee33d5c380c4f24f907ef97906ae0d825e0e899159b264a5f8974cc1443e33c5ca0f9e2bc37ccce95", 0x5c, 0x9, 0x0, 0x1, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x8, r3, &(0x7f0000000180)="d2909caf26b2975c756c", 0xa, 0x2, 0x0, 0x3, r4}]) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) io_submit(r0, 0x4, &(0x7f00000007c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x8caf, r1, &(0x7f00000002c0)="4b07a8fb03f6338ff29ede0af8c9fd13ac760e5c13bb762acf026f36772ce1e9cfb815fe20a3855c0e5f7f1a1c075ca10dc6d032186130c0728486337dd3b648ade74f5088caffebaba0656277053e8a30ebd4a9b33725fb15c744f705a13324cb4dfbe6792f092fa501d2a5a4eff0bee4da60172b1521af8adcdd08042b1f7311c0c67404cf1ace569922157eed63047b2b98fafb8c9ff57a585962b89dbb57c3684636bb3ff3a8e8ad094df3f47f7e4df23f7556b4e74d33797100b65a7ab25e0b52d4b7505c75ca157e96bf7541a05a8322ccb3713f4532b56f1f4fdf8819201faa1ff83849cea0874eee", 0xec, 0x100000001, 0x0, 0x7, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000400)="4d59a81610f88efb6d7cc1fcdeca000b8494b967a136120c52ec28b020e11a5efd781e84d19f275aa47a94aad1b612e7c41c34a860f431f2a6c193151e20a2a6daabb65f71afc70ecfc46c486280c977b283db42fe6c311a71f5ee68c7999a85daf8868c89055a0a25bfa0a0e135f36e183aa8fd0ddbaade8e5cb5f1b865253a591c6f0ed926a015c6241c49ad28c0a9f1981b629d79f9a93b925491571e61d5313953fbcce7f70add20f7d0cd3d0c8f8e7ca6983878921f0cbc9d6c07d41919caffe0f016c3c6319a2a2cc3cd5b5d2b438039c4fd45d47c92144b2bb36710db30d1", 0xe2, 0x0, 0x0, 0x0, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x2, r5, &(0x7f0000000540)="7a5cb3109cef1e9139addbe705d848346e9f201d5a6fb0b03a8cb5a831df8bd7980e60f62c736502035092d675f3b850068d27dd2289f7ead6f02c1da6dc52df2a14399e8895acfbd9edaab7c7a411be80b0d274b4721d26d66be280e272328239ad29b0bc2bcd244719929874c4d5f81a9ff6ffe32e96cc2a3c3d21d06153b979a1960d5f45bbc3fa2e1726b4dd64068a9dd021ad99091274bf7a5c4144c3f005a1f7394e8768c6f490b4c25dc1fd20347bd62943bab0c25721093518805719ea9792a7c60b4a395893118bb83b5d6d3c2e49ed43f591ee5e2b96b6ccb948b4b68efc1ef51bc0", 0xe7, 0xfffffffffffffffe, 0x0, 0x2, r2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x6, r2, &(0x7f0000000680)="5a7e65101c28523c49a2b306614d274a0afda38def00a5738fcf5b5a84eef1ff80132587878cbbf661061e9b66db6b1c2f21295e276ad03599232be6ffdfe41890e567dda892194e5220599d80ba56c5b5f30cd959e884ac011993532cdf5ead733d06cd679152f33eda77334142b955df34f692be7ad08255f170a5d1e8f287733b7e95d63f6e5377ad69bbc22c44d47f0ae0355330935d6017e2392bc2bec20d3aa2887c3a38bab98337e97f1d89f75b82fa2c0163b24914bbe716c1a9174e73c632", 0xc3, 0xef, 0x0, 0x2}]) (async) r6 = geteuid() bind$qrtr(r4, &(0x7f0000000800)={0x2a, 0x2, 0x3fff}, 0xc) (async) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000840)={0x5, @capture={0x0, 0x0, {0x0, 0x9}, 0x8b02, 0x2}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000940)={'veth0_macvtap\x00', 0x1000}) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000980)) r7 = syz_open_dev$vim2m(&(0x7f00000009c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000a00)=0x1) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r4) (rerun: 64) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x2}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x1) (async) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000b80)={0x80, 0x6, {0xffffffffffffffff}, {r6}, 0xffffffff, 0xffffffffffffff50}) r10 = syz_open_procfs(r9, &(0x7f0000000bc0)='autogroup\x00') r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000d80)={&(0x7f0000000c00), 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r11, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="93cf43e98741"}]}, 0x44}, 0x1, 0x0, 0x0, 0xc801}, 0x8000) (async) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000dc0)=0x2, 0x4) (async) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000e00)={0x3, r10}) readahead(r10, 0x400, 0x6) (async) fcntl$setlease(r2, 0x400, 0x2) (async, rerun: 32) pselect6(0x40, &(0x7f0000000e40)={0x1, 0x1252, 0x5, 0x0, 0x5, 0xfffffffffffffffd, 0x5, 0x5}, &(0x7f0000000e80)={0x5, 0x2, 0x7, 0x3, 0x5a1bac53, 0x5, 0x6, 0x4}, &(0x7f0000000ec0)={0xfffffffffffff001, 0x4, 0x5, 0xee, 0x9, 0x2, 0x1, 0x8}, &(0x7f0000000f00)={0x0, 0x989680}, &(0x7f0000000f80)={&(0x7f0000000f40)={[0xfffffffffffff001]}, 0x8}) (async, rerun: 32) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) (async, rerun: 32) getsockopt$netlink(r10, 0x10e, 0x9, &(0x7f0000001000)=""/139, &(0x7f00000010c0)=0x8b) (rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xcc, r11, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2df647d766188791af6343ba572501604fe9c4210f6ebbb7"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1e7f292e18bf219bd0fac36093d4371082ec9dcd9a10d59c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "369d01374b1be609e1a71e416c5259e6ebed05c4310267d7"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4f94258907bc1b171c0f24354b863c1e49cae20c6f861cec"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2ba9bd97611e4638611f71ff04e65c5efa6eefdb69ca769a"}]]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x24004880) 40.223499734s ago: executing program 3 (id=500): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r0, r0, 0x2) (async) syz_io_uring_setup(0x4ee6, &(0x7f0000000180)={0x0, 0x7ca, 0x20, 0x3, 0x312, 0x0, r1}, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) (async, rerun: 32) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_sctp(0xa, 0x5, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async, rerun: 64) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) (rerun: 64) socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) (rerun: 64) syz_usb_control_io$printer(r5, 0x0, 0x0) (async, rerun: 32) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES64=r5]) (rerun: 32) listen(r4, 0x2) (async, rerun: 64) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000009a80)='/proc/crypto\x00', 0x0, 0x0) 38.397988454s ago: executing program 4 (id=501): fsopen(&(0x7f0000000080)='tmpfs\x00', 0x1) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x2, 0x8031, 0xffffffffffffffff, 0x3db3d000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) write$nbd(r3, &(0x7f0000000440)=ANY=[], 0xd6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000001000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='cq_alloc\x00', r4}, 0xfffffffffffffd82) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x39, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r8, 0x4048aecb, &(0x7f0000000200)) 34.606696971s ago: executing program 1 (id=502): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaabfaaaaaabb86dd6012000800103afffe8000000000000000000000000000bbff02000000000000000000000000000186009078010002000000000000000000", @ANYRES64, @ANYRESHEX], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8009000000000000000002000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000030000002b472e41e24b11f34b608816e5"], 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x75a8ab9eb95215f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8, @ANYRES32], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='svcrdma_decode_rqst\x00'}, 0x18) sendfile(r0, r1, 0x0, 0x1000004) 0s ago: executing program 33 (id=491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="2ef2dd050080000048b84441000000000000b9130b00000f320f21f8350000ce00010123f836362e6726af4b0f20c1350e000000440f22c0b805000000b9009800000f01d97c0f01c9c947338c01c4c40f79d226660f013b", 0x58}], 0x1, 0x50, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @local}}, 0x3d, 0x6}, &(0x7f0000000000)=0x90) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): usb 5-1: No valid video chain found. [ 122.797293][ T52] usb 5-1: USB disconnect, device number 12 [ 122.874952][ T30] audit: type=1400 audit(1744091371.358:567): avc: denied { nlmsg_read } for pid=6824 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 123.132783][ T30] audit: type=1400 audit(1744091371.358:568): avc: denied { read write } for pid=6824 comm="syz.1.237" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 123.271687][ T5825] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-ETIMEDOUT) [ 123.357852][ T30] audit: type=1400 audit(1744091371.368:569): avc: denied { open } for pid=6824 comm="syz.1.237" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 123.535502][ T6835] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 123.542033][ T6835] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 123.581539][ T30] audit: type=1400 audit(1744091371.838:570): avc: denied { setopt } for pid=6831 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.644993][ T6835] vhci_hcd vhci_hcd.0: Device attached [ 123.689624][ T6837] vhci_hcd: connection closed [ 123.691583][ T58] vhci_hcd: stop threads [ 123.738286][ T5825] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 123.744842][ T58] vhci_hcd: release socket [ 123.750752][ T30] audit: type=1400 audit(1744091372.068:571): avc: denied { getopt } for pid=6833 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.806509][ T58] vhci_hcd: disconnect device [ 123.868059][ T30] audit: type=1400 audit(1744091372.218:572): avc: denied { setopt } for pid=6836 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.115681][ T24] usb 1-1: USB disconnect, device number 18 [ 124.156607][ T30] audit: type=1400 audit(1744091372.808:573): avc: denied { getopt } for pid=6847 comm="syz.4.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.557856][ T6862] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 124.964379][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.971611][ T5825] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.980961][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.990032][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.998890][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.007622][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.018682][ T30] audit: type=1400 audit(1744091373.668:574): avc: denied { mounton } for pid=6864 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 125.150673][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 125.169371][ T5825] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 125.177739][ T5825] usb 5-1: config 0 has no interface number 0 [ 125.186504][ T5825] usb 5-1: config 0 interface 184 has no altsetting 0 [ 125.195770][ T5825] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.208801][ T6871] netlink: 156 bytes leftover after parsing attributes in process `syz.0.250'. [ 125.219304][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.221851][ T6864] chnl_net:caif_netlink_parms(): no params data found [ 125.234216][ T5825] usb 5-1: Product: syz [ 125.236221][ T5902] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 125.238359][ T5825] usb 5-1: Manufacturer: syz [ 125.256953][ T5825] usb 5-1: SerialNumber: syz [ 125.263936][ T5825] usb 5-1: config 0 descriptor?? [ 125.271348][ T5825] smsc75xx v1.0.0 [ 125.325335][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.338125][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.345428][ T6864] bridge_slave_0: entered allmulticast mode [ 125.356824][ T6864] bridge_slave_0: entered promiscuous mode [ 125.366223][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.373777][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.383642][ T6864] bridge_slave_1: entered allmulticast mode [ 125.390408][ T6864] bridge_slave_1: entered promiscuous mode [ 125.402783][ T5902] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.416845][ T5902] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 125.429143][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.437310][ T5902] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 125.448580][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.452276][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.471020][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.496822][ T5902] usb 2-1: config 0 descriptor?? [ 125.506701][ T6867] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 125.527191][ T6864] team0: Port device team_slave_0 added [ 125.536094][ T6864] team0: Port device team_slave_1 added [ 125.569553][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.576835][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.604372][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.691828][ T5825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 125.692625][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.702878][ T5825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 125.718608][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.719528][ T5825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 125.757020][ T5825] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 125.765616][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.820277][ T6864] hsr_slave_0: entered promiscuous mode [ 125.832292][ T6864] hsr_slave_1: entered promiscuous mode [ 125.841309][ T6864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.848879][ T6864] Cannot create hsr debugfs directory [ 125.925011][ T5902] logitech 0003:046D:C24F.0007: unbalanced collection at end of report description [ 125.953330][ T5902] logitech 0003:046D:C24F.0007: parse failed [ 125.975360][ T5902] logitech 0003:046D:C24F.0007: probe with driver logitech failed with error -22 [ 126.092116][ T6864] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.102026][ T6864] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.112166][ T6864] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.134781][ T6864] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.152867][ T5825] usb 2-1: USB disconnect, device number 11 [ 126.180230][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.187414][ T6864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.195069][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.202124][ T6864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.297133][ T6886] Invalid ELF header magic: != ELF [ 126.392046][ T30] audit: type=1400 audit(1744091374.918:575): avc: denied { module_load } for pid=6883 comm="syz.0.252" path="/54/bus" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 126.599178][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.607858][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.667412][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.687324][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.698231][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.705347][ T5917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.720061][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.727181][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.144173][ T5838] Bluetooth: hci5: command tx timeout [ 127.181754][ T6899] input: syz0 as /devices/virtual/input/input16 [ 127.401445][ T52] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 127.451776][ T6898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.475570][ T5825] usb 5-1: USB disconnect, device number 13 [ 127.532029][ T6906] netlink: 'syz.4.257': attribute type 1 has an invalid length. [ 127.539739][ T6906] netlink: 'syz.4.257': attribute type 4 has an invalid length. [ 127.547488][ T6906] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.257'. [ 127.620594][ T52] usb 1-1: device descriptor read/64, error -71 [ 128.096466][ T30] audit: type=1400 audit(1744091376.748:576): avc: denied { nlmsg_write } for pid=6911 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 128.200447][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.284828][ T52] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 128.427533][ T52] usb 1-1: device descriptor read/64, error -71 [ 128.492701][ T6928] xt_policy: neither incoming nor outgoing policy selected [ 128.744940][ T52] usb usb1-port1: attempt power cycle [ 128.963666][ T6864] veth0_vlan: entered promiscuous mode [ 128.983164][ T6864] veth1_vlan: entered promiscuous mode [ 129.007446][ T6864] veth0_macvtap: entered promiscuous mode [ 129.016394][ T6864] veth1_macvtap: entered promiscuous mode [ 129.031634][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.042359][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.052252][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.076015][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.096662][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.120416][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.130280][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.140936][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.151550][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.162732][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.172642][ T52] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 129.181777][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.211277][ T52] usb 1-1: device descriptor read/8, error -71 [ 129.216156][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.276134][ T5838] Bluetooth: hci5: command tx timeout [ 129.560873][ T52] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 129.593507][ T52] usb 1-1: device descriptor read/8, error -71 [ 129.667670][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.677924][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.688442][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.708752][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.721170][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.734519][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.745525][ T52] usb usb1-port1: unable to enumerate USB device [ 129.757238][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.767448][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.790550][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.813556][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.824899][ T6864] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.838176][ T6864] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.847138][ T6864] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.855986][ T6864] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.049336][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.075714][ T6947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.099617][ T30] audit: type=1400 audit(1744091378.728:577): avc: denied { mount } for pid=6895 comm="syz.0.255" name="/" dev="ramfs" ino=13046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 130.149064][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.198551][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.238076][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.328112][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.266'. [ 130.401669][ T30] audit: type=1400 audit(1744091379.048:578): avc: denied { mounton } for pid=6864 comm="syz-executor" path="/root/syzkaller.84EGNf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 130.573441][ T5872] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 130.734590][ T30] audit: type=1400 audit(1744091379.388:579): avc: denied { search } for pid=6959 comm="syz.5.246" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.760871][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 130.764480][ T30] audit: type=1400 audit(1744091379.388:580): avc: denied { read } for pid=6959 comm="syz.5.246" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.770666][ T5872] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 130.799463][ T30] audit: type=1400 audit(1744091379.388:581): avc: denied { open } for pid=6959 comm="syz.5.246" path="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.805957][ T5872] usb 2-1: config 0 has no interface number 0 [ 130.840807][ T52] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 130.850277][ T5872] usb 2-1: config 0 interface 184 has no altsetting 0 [ 130.858963][ T5872] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 130.880571][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.888556][ T5872] usb 2-1: Product: syz [ 130.900561][ T5872] usb 2-1: Manufacturer: syz [ 130.905156][ T5872] usb 2-1: SerialNumber: syz [ 130.921166][ T5872] usb 2-1: config 0 descriptor?? [ 130.927464][ T5872] smsc75xx v1.0.0 [ 131.001993][ T52] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 131.020606][ T52] usb 5-1: config 0 has no interface number 1 [ 131.026737][ T52] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 131.050731][ T52] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.076351][ T52] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 131.085552][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.093820][ T52] usb 5-1: SerialNumber: syz [ 131.103281][ T52] usb 5-1: config 0 descriptor?? [ 131.130605][ T5902] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 131.280813][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 131.292256][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.318864][ T5902] usb 6-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 131.330653][ T52] usb 5-1: Found UVC 0.00 device (0002:0000) [ 131.337563][ T52] usb 5-1: No valid video chain found. [ 131.343352][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.351625][ T5838] Bluetooth: hci5: command tx timeout [ 131.359879][ T5872] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 131.364514][ T5902] usb 6-1: config 0 descriptor?? [ 131.377194][ T52] usb 5-1: USB disconnect, device number 14 [ 131.385535][ T5872] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 131.386213][ T5902] cdc_acm 6-1:0.0: Zero length descriptor references [ 131.405247][ T5872] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 131.408642][ T5902] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 131.417745][ T5872] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 131.554685][ T30] audit: type=1400 audit(1744091380.208:582): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 131.640790][ T5875] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 131.735488][ T6970] 9pnet_fd: Insufficient options for proto=fd [ 131.790625][ T5875] usb 4-1: device descriptor read/64, error -71 [ 131.982967][ T5872] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 132.030667][ T5875] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 132.140690][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 132.150311][ T5872] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 132.161123][ T5875] usb 4-1: device descriptor read/64, error -71 [ 132.162436][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.178273][ T5872] usb 1-1: Product: syz [ 132.182544][ T5872] usb 1-1: Manufacturer: syz [ 132.187840][ T5872] usb 1-1: SerialNumber: syz [ 132.194519][ T5872] usb 1-1: config 0 descriptor?? [ 132.272897][ T5875] usb usb4-port1: attempt power cycle [ 132.370671][ T5902] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 132.394559][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.400965][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.411358][ T5872] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 132.422465][ T5872] usb 1-1: USB disconnect, device number 23 [ 132.510621][ T5902] usb 5-1: device descriptor read/64, error -71 [ 132.620645][ T5875] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 132.641036][ T5875] usb 4-1: device descriptor read/8, error -71 [ 132.750636][ T5902] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 132.880638][ T5875] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 132.888280][ T5902] usb 5-1: device descriptor read/64, error -71 [ 132.910990][ T5875] usb 4-1: device descriptor read/8, error -71 [ 133.001091][ T5902] usb usb5-port1: attempt power cycle [ 133.024489][ T5875] usb usb4-port1: unable to enumerate USB device [ 133.330219][ T5872] usb 2-1: USB disconnect, device number 12 [ 133.350799][ T5902] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 133.412810][ T5902] usb 5-1: device descriptor read/8, error -71 [ 133.441183][ T5838] Bluetooth: hci5: command tx timeout [ 133.663338][ T5872] usb 6-1: USB disconnect, device number 2 [ 133.671324][ T5902] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 133.773962][ T5902] usb 5-1: device descriptor read/8, error -71 [ 133.935207][ T5902] usb usb5-port1: unable to enumerate USB device [ 134.285387][ T30] audit: type=1400 audit(1744091382.938:583): avc: denied { mounton } for pid=6999 comm="syz.1.281" path="/66/file0" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 134.524672][ T7007] tipc: Started in network mode [ 134.535886][ T7007] tipc: Node identity ac14140f, cluster identity 4711 [ 134.544398][ T7007] tipc: New replicast peer: 255.255.255.255 [ 134.554640][ T7007] tipc: Enabled bearer , priority 10 [ 135.581014][ T5902] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 135.603129][ T30] audit: type=1400 audit(1744091384.258:584): avc: denied { read write } for pid=7030 comm="syz.1.289" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 135.664514][ T5872] tipc: Node number set to 2886997007 [ 135.681230][ T30] audit: type=1400 audit(1744091384.258:585): avc: denied { open } for pid=7030 comm="syz.1.289" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 135.685654][ T7033] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 135.704614][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.762151][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 135.770656][ T30] audit: type=1400 audit(1744091384.288:586): avc: denied { ioctl } for pid=7030 comm="syz.1.289" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 135.778917][ T5902] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 135.827487][ T7035] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 135.849950][ T5902] usb 5-1: config 0 has no interface number 0 [ 135.872063][ T5902] usb 5-1: config 0 interface 230 has no altsetting 0 [ 135.899008][ T5902] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 135.908349][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.938628][ T5902] usb 5-1: Product: syz [ 135.948718][ T5902] usb 5-1: Manufacturer: syz [ 135.958551][ T5902] usb 5-1: SerialNumber: syz [ 135.994714][ T5902] usb 5-1: config 0 descriptor?? [ 136.015360][ T5902] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 136.066691][ T5902] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 136.876525][ T30] audit: type=1400 audit(1744091385.528:587): avc: denied { read } for pid=7046 comm="syz.3.294" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.921957][ T30] audit: type=1400 audit(1744091385.558:588): avc: denied { open } for pid=7046 comm="syz.3.294" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.948853][ T30] audit: type=1400 audit(1744091385.598:589): avc: denied { ioctl } for pid=7046 comm="syz.3.294" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 137.093645][ T7053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.152934][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 137.160588][ T52] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 137.310618][ T5872] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 137.342751][ T52] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.370126][ T7063] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 137.370506][ T30] audit: type=1400 audit(1744091386.018:590): avc: denied { bind } for pid=7061 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.402115][ T52] usb 6-1: config 0 has no interface number 0 [ 137.411658][ T52] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 137.422555][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.434583][ T30] audit: type=1400 audit(1744091386.018:591): avc: denied { read } for pid=7061 comm="syz.1.300" path="socket:[13239]" dev="sockfs" ino=13239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.461720][ T52] usb 6-1: config 0 descriptor?? [ 137.461931][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 137.469610][ T52] usb 6-1: selecting invalid altsetting 1 [ 137.501847][ T52] dvb_ttusb_budget: ttusb_init_controller: error [ 137.508353][ T52] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 137.612079][ T5872] usb 4-1: config index 0 descriptor too short (expected 1828, got 36) [ 137.632274][ T5872] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 137.686291][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 137.695743][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.707720][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 137.729448][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 137.741591][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.751660][ T52] DVB: Unable to find symbol cx22700_attach() [ 137.767039][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.807834][ T5872] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 137.817030][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.825216][ T5872] usb 4-1: Product: syz [ 137.829504][ T5872] usb 4-1: Manufacturer: syz [ 137.834162][ T5872] usb 4-1: SerialNumber: syz [ 137.840932][ T5872] usb 4-1: config 0 descriptor?? [ 137.848813][ T5872] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 137.861576][ T5872] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 137.875556][ T5872] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 137.889088][ T5872] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 137.903791][ T5872] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 137.919586][ T5872] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 137.932655][ T5872] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 137.944687][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.962089][ T7060] xt_hashlimit: size too large, truncated to 1048576 [ 137.972496][ T5872] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 137.984891][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.032073][ T52] DVB: Unable to find symbol tda10046_attach() [ 138.042259][ T5872] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 138.045919][ T52] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 138.081704][ T5872] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 138.116829][ T5872] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 138.126421][ T5872] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 138.134435][ T5872] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 138.143435][ T5872] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 138.256445][ T24] usb 6-1: USB disconnect, device number 3 [ 138.337031][ T5872] usb 4-1: USB disconnect, device number 26 [ 138.348517][ T5872] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 138.378727][ T5872] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 138.389033][ T5872] keyspan 4-1:0.0: device disconnected [ 139.150707][ T30] audit: type=1400 audit(1744091387.428:592): avc: denied { create } for pid=7069 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.238035][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.246893][ T7082] batadv_slave_1: entered promiscuous mode [ 139.370825][ T5902] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 139.397121][ T7082] netlink: 'syz.5.303': attribute type 3 has an invalid length. [ 139.409719][ T5902] usb 5-1: USB disconnect, device number 19 [ 139.903732][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 139.903747][ T30] audit: type=1400 audit(1744091388.558:595): avc: denied { bind } for pid=7079 comm="syz.5.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.980677][ T30] audit: type=1400 audit(1744091388.588:596): avc: denied { connect } for pid=7079 comm="syz.5.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.054817][ T30] audit: type=1400 audit(1744091389.708:597): avc: denied { wake_alarm } for pid=7102 comm="syz.5.310" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.374833][ T7114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.382784][ T7114] batadv_slave_0: entered promiscuous mode [ 141.442522][ T30] audit: type=1400 audit(1744091390.098:599): avc: denied { getopt } for pid=7102 comm="syz.5.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.467290][ T30] audit: type=1400 audit(1744091390.098:598): avc: denied { getopt } for pid=7102 comm="syz.5.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.500628][ T5872] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 141.570645][ T5825] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 141.651114][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 141.669402][ T5872] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 141.683303][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.695052][ T5872] usb 4-1: Product: syz [ 141.700130][ T5872] usb 4-1: Manufacturer: syz [ 141.704937][ T5872] usb 4-1: SerialNumber: syz [ 141.711883][ T5872] usb 4-1: config 0 descriptor?? [ 141.713649][ T7118] sctp: [Deprecated]: syz.4.314 (pid 7118) Use of int in maxseg socket option. [ 141.713649][ T7118] Use struct sctp_assoc_value instead [ 141.730588][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 141.738134][ T30] audit: type=1400 audit(1744091390.388:600): avc: denied { name_connect } for pid=7116 comm="syz.4.314" dest=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 141.763017][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.773390][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.786981][ T5825] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.796528][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.805509][ T5825] usb 2-1: Product: syz [ 141.809788][ T5825] usb 2-1: Manufacturer: syz [ 141.814503][ T5825] usb 2-1: SerialNumber: syz [ 141.928618][ T5872] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 142.154257][ T30] audit: type=1400 audit(1744091390.808:601): avc: denied { mounton } for pid=7123 comm="syz.4.315" path="/57/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 142.186275][ T30] audit: type=1400 audit(1744091390.838:602): avc: denied { mount } for pid=7123 comm="syz.4.315" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 142.209676][ T30] audit: type=1400 audit(1744091390.848:603): avc: denied { setopt } for pid=7130 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.230220][ T5825] usb 2-1: cannot find UAC_HEADER [ 142.246747][ T5825] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 142.257572][ T5825] usb 2-1: USB disconnect, device number 13 [ 142.265443][ T7125] overlay: ./file0 is not a directory [ 142.280044][ T7132] syz.0.317: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 142.300829][ T7132] CPU: 1 UID: 0 PID: 7132 Comm: syz.0.317 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 142.300853][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.300863][ T7132] Call Trace: [ 142.300868][ T7132] [ 142.300874][ T7132] dump_stack_lvl+0x16c/0x1f0 [ 142.300901][ T7132] warn_alloc+0x248/0x3a0 [ 142.300921][ T7132] ? __pfx_warn_alloc+0x10/0x10 [ 142.300947][ T7132] ? __get_vm_area_node+0x1b9/0x300 [ 142.300969][ T7132] ? __get_vm_area_node+0x1e5/0x300 [ 142.300997][ T7132] __vmalloc_node_range_noprof+0x1110/0x1540 [ 142.301030][ T7132] ? xskq_create+0xfb/0x1d0 [ 142.301058][ T7132] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.301090][ T7132] ? xskq_create+0xfb/0x1d0 [ 142.301108][ T7132] vmalloc_user_noprof+0x6b/0x90 [ 142.301131][ T7132] ? xskq_create+0xfb/0x1d0 [ 142.301149][ T7132] xskq_create+0xfb/0x1d0 [ 142.301168][ T7132] xsk_setsockopt+0x684/0x840 [ 142.301185][ T7132] ? __pfx_xsk_setsockopt+0x10/0x10 [ 142.301208][ T7132] ? selinux_socket_setsockopt+0x6a/0x80 [ 142.301230][ T7132] ? __pfx_xsk_setsockopt+0x10/0x10 [ 142.301248][ T7132] do_sock_setsockopt+0x221/0x470 [ 142.301272][ T7132] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 142.301310][ T7132] __sys_setsockopt+0x1a0/0x230 [ 142.301334][ T7132] __x64_sys_setsockopt+0xbd/0x160 [ 142.301351][ T7132] ? do_syscall_64+0x91/0x260 [ 142.301379][ T7132] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.301400][ T7132] do_syscall_64+0xcd/0x260 [ 142.301424][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.301439][ T7132] RIP: 0033:0x7fdad678d169 [ 142.301454][ T7132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.301469][ T7132] RSP: 002b:00007fdad45d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.301485][ T7132] RAX: ffffffffffffffda RBX: 00007fdad69a6080 RCX: 00007fdad678d169 [ 142.301496][ T7132] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 142.301506][ T7132] RBP: 00007fdad680e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 142.301516][ T7132] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 142.301526][ T7132] R13: 0000000000000000 R14: 00007fdad69a6080 R15: 00007ffff1a56778 [ 142.301550][ T7132] [ 142.301629][ T7132] Mem-Info: [ 142.536885][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.553255][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.586781][ T7132] active_anon:4369 inactive_anon:0 isolated_anon:0 [ 142.586781][ T7132] active_file:4699 inactive_file:47902 isolated_file:0 [ 142.586781][ T7132] unevictable:768 dirty:463 writeback:0 [ 142.586781][ T7132] slab_reclaimable:11332 slab_unreclaimable:106239 [ 142.586781][ T7132] mapped:34322 shmem:1440 pagetables:853 [ 142.586781][ T7132] sec_pagetables:0 bounce:0 [ 142.586781][ T7132] kernel_misc_reclaimable:0 [ 142.586781][ T7132] free:1298589 free_pcp:2226 free_cma:0 [ 142.635911][ T7132] Node 0 active_anon:17376kB inactive_anon:0kB active_file:18752kB inactive_file:191524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141236kB dirty:1852kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11428kB pagetables:3412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.636050][ T5872] gspca_sunplus: reg_w_riv err -110 [ 142.679332][ T7132] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.712933][ T5872] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 142.724733][ T7132] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.751995][ T7132] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 142.757792][ T7132] Node 0 DMA32 free:1284708kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:17364kB inactive_anon:0kB active_file:18752kB inactive_file:189932kB unevictable:1536kB writepending:1848kB present:3129332kB managed:2541536kB mlocked:0kB bounce:0kB free_pcp:1420kB local_pcp:64kB free_cma:0kB [ 142.803183][ T7132] lowmem_reserve[]: 0 0 1 1 1 [ 142.808016][ T7132] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 142.849731][ T7132] lowmem_reserve[]: 0 0 0 0 0 [ 142.859837][ T7132] Node 1 Normal free:3895084kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6584kB local_pcp:6076kB free_cma:0kB [ 142.928189][ T7132] lowmem_reserve[]: 0 0 0 0 0 [ 142.935215][ T7132] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 142.953292][ T7132] Node 0 DMA32: 625*4kB (ME) 653*8kB (UME) 320*16kB (UM) 378*32kB (UME) 231*64kB (UME) 97*128kB (UME) 37*256kB (UME) 26*512kB (UME) 15*1024kB (UM) 16*2048kB (UME) 284*4096kB (UM) = 1286316kB [ 142.973152][ T7132] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 142.985747][ T7132] Node 1 Normal: 142*4kB (UME) 55*8kB (UME) 37*16kB (UE) 227*32kB (UME) 105*64kB (UME) 31*128kB (UME) 19*256kB (UME) 6*512kB (U) 5*1024kB (UE) 4*2048kB (UE) 941*4096kB (M) = 3895136kB [ 143.005770][ T7132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.015496][ T7132] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.025004][ T7132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.035518][ T7132] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.045303][ T7132] 54491 total pagecache pages [ 143.050050][ T7132] 0 pages in swap cache [ 143.054281][ T7132] Free swap = 124996kB [ 143.058431][ T7132] Total swap = 124996kB [ 143.062843][ T7132] 2097051 pages RAM [ 143.066705][ T7132] 0 pages HighMem/MovableOnly [ 143.071585][ T7132] 429625 pages reserved [ 143.075800][ T7132] 0 pages cma reserved [ 143.100635][ T52] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 143.143122][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 143.171302][ T7146] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 143.177842][ T7146] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 143.186982][ T7146] vhci_hcd vhci_hcd.0: Device attached [ 143.194799][ T7148] vhci_hcd: connection closed [ 143.196043][ T13] vhci_hcd: stop threads [ 143.205219][ T13] vhci_hcd: release socket [ 143.212997][ T13] vhci_hcd: disconnect device [ 143.271522][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 143.277879][ T52] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.288260][ T52] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 143.297650][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.306994][ T52] usb 6-1: config 0 descriptor?? [ 143.315629][ T52] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 143.480629][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 143.632478][ T24] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.646500][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.655146][ T24] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 143.664386][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.676149][ T24] usb 1-1: config 0 descriptor?? [ 143.831944][ T52] gspca_vc032x: reg_r err -110 [ 143.836915][ T52] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 144.030589][ T5825] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 144.119762][ T24] hid-alps 0003:044E:1215.0008: item fetching failed at offset 5/7 [ 144.131534][ T24] hid-alps 0003:044E:1215.0008: parse failed [ 144.144783][ T24] hid-alps 0003:044E:1215.0008: probe with driver hid-alps failed with error -22 [ 144.158996][ T52] usb 4-1: USB disconnect, device number 27 [ 144.170692][ T5977] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 144.185037][ T5825] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 144.196471][ T5825] usb 2-1: config 0 has no interface number 0 [ 144.203340][ T5825] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 144.215024][ T5825] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.228736][ T5825] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 144.246003][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.254107][ T5825] usb 2-1: Product: syz [ 144.259143][ T5825] usb 2-1: Manufacturer: syz [ 144.264212][ T5825] usb 2-1: SerialNumber: syz [ 144.278737][ T5825] usb 2-1: config 0 descriptor?? [ 144.284346][ T7156] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 144.293922][ T5825] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 144.304959][ T5825] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 144.333235][ T5977] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 144.342531][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.357626][ T5977] usb 5-1: config 0 descriptor?? [ 144.459038][ T5825] usb 1-1: USB disconnect, device number 24 [ 144.494578][ T24] usb 6-1: USB disconnect, device number 4 [ 144.971695][ T7164] bridge0: port 3(veth0_to_bridge) entered blocking state [ 144.979631][ T7164] bridge0: port 3(veth0_to_bridge) entered disabled state [ 144.986961][ T7164] veth0_to_bridge: entered allmulticast mode [ 144.994368][ T7164] veth0_to_bridge: entered promiscuous mode [ 145.000395][ T7164] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.038494][ T7164] bridge0: port 3(veth0_to_bridge) entered blocking state [ 145.046424][ T7164] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 145.105564][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.327'. [ 145.114904][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.327'. [ 145.196323][ T30] audit: type=1400 audit(1744091393.838:604): avc: denied { ioctl } for pid=7157 comm="syz.4.325" path="socket:[14295]" dev="sockfs" ino=14295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 145.239878][ T5977] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 145.511730][ T5977] usb 5-1: USB disconnect, device number 20 [ 145.584172][ T7179] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 145.632572][ T52] usb 2-1: USB disconnect, device number 14 [ 145.668701][ T52] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 145.729091][ T52] cyberjack 2-1:0.69: device disconnected [ 146.610752][ T30] audit: type=1400 audit(1744091395.218:605): avc: denied { create } for pid=7182 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 146.654297][ T7207] netlink: 798 bytes leftover after parsing attributes in process `syz.3.336'. [ 146.734667][ T30] audit: type=1400 audit(1744091395.388:606): avc: denied { bind } for pid=7209 comm="syz.5.337" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.755138][ T30] audit: type=1400 audit(1744091395.388:607): avc: denied { name_bind } for pid=7209 comm="syz.5.337" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 146.780019][ T30] audit: type=1400 audit(1744091395.388:608): avc: denied { node_bind } for pid=7209 comm="syz.5.337" saddr=255.255.255.255 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 147.143074][ T7229] process 'syz.0.343' launched '/dev/fd/3' with NULL argv: empty string added [ 147.156327][ T30] audit: type=1400 audit(1744091395.808:609): avc: denied { execute_no_trans } for pid=7228 comm="syz.0.343" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.320428][ T7232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=58 sclass=netlink_tcpdiag_socket pid=7232 comm=syz.0.344 [ 147.350789][ T5977] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 147.496785][ T5825] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 147.504301][ T30] audit: type=1400 audit(1744091396.148:610): avc: denied { mount } for pid=7236 comm="syz.0.345" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 147.535264][ T30] audit: type=1400 audit(1744091396.148:611): avc: denied { read } for pid=7236 comm="syz.0.345" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 147.562672][ T5977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.574545][ T5977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.666694][ T30] audit: type=1400 audit(1744091396.148:612): avc: denied { open } for pid=7236 comm="syz.0.345" path="/73/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 147.694561][ T5977] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 147.704157][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 147.712376][ T5977] usb 2-1: SerialNumber: syz [ 147.718354][ T5825] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.729727][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 147.737259][ T5825] usb 6-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 147.748634][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.762465][ T5825] usb 6-1: config 0 descriptor?? [ 147.920659][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 147.951119][ T7225] input: syz1 as /devices/virtual/input/input17 [ 148.026464][ T30] audit: type=1400 audit(1744091396.678:613): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 148.086473][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 148.105741][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.123992][ T24] usb 5-1: Product: syz [ 148.134805][ T24] usb 5-1: Manufacturer: syz [ 148.146068][ T24] usb 5-1: SerialNumber: syz [ 148.163753][ T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 148.183907][ T5902] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 148.213862][ T5825] hid-alps 0003:044E:1215.0009: item fetching failed at offset 5/7 [ 148.229427][ T5825] hid-alps 0003:044E:1215.0009: parse failed [ 148.240205][ T5825] hid-alps 0003:044E:1215.0009: probe with driver hid-alps failed with error -22 [ 149.255959][ T5874] usb 5-1: USB disconnect, device number 21 [ 149.273197][ T5902] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 149.292656][ T5902] ath9k_htc: Failed to initialize the device [ 149.304897][ T5874] usb 5-1: ath9k_htc: USB layer deinitialized [ 149.542583][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.552122][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.590797][ T5874] usb 6-1: USB disconnect, device number 5 [ 149.806717][ T5902] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 149.960601][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 149.967072][ T5902] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 149.976869][ T5902] usb 1-1: config 8 has no interface number 0 [ 149.983090][ T5902] usb 1-1: config 8 interface 206 has no altsetting 0 [ 149.994214][ T5902] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 150.003417][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.011512][ T5902] usb 1-1: Product: syz [ 150.015670][ T5902] usb 1-1: Manufacturer: syz [ 150.020250][ T5902] usb 1-1: SerialNumber: syz [ 150.111697][ T5977] usb 2-1: 0:2 : does not exist [ 150.116626][ T5977] usb 2-1: unit 5: unexpected type 0x09 [ 150.157962][ T5977] usb 2-1: USB disconnect, device number 15 [ 150.291538][ T5902] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 150.309107][ T5902] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 150.318950][ T5902] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 150.330009][ T5902] usb 1-1: USB disconnect, device number 25 [ 150.337426][ T5902] garmin_gps 1-1:8.206: device disconnected [ 150.771970][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 150.771985][ T30] audit: type=1400 audit(1744091399.428:620): avc: denied { listen } for pid=7277 comm="syz.5.358" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.894637][ T30] audit: type=1326 audit(1744091399.548:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9b78d169 code=0x7ffc0000 [ 150.921333][ T30] audit: type=1326 audit(1744091399.578:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9b78d169 code=0x7ffc0000 [ 151.230579][ T5977] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 151.270449][ T30] audit: type=1400 audit(1744091399.608:623): avc: denied { create } for pid=7279 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 151.713593][ T30] audit: type=1400 audit(1744091399.608:624): avc: denied { setopt } for pid=7279 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 151.791276][ T5977] usb 6-1: Using ep0 maxpacket: 16 [ 151.800126][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.819660][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.359'. [ 151.854867][ T5977] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.869611][ T5977] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.971757][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.232726][ T5977] usb 6-1: config 0 descriptor?? [ 152.545596][ T30] audit: type=1326 audit(1744091401.188:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde9b78cd6b code=0x7ffc0000 [ 152.596311][ T30] audit: type=1326 audit(1744091401.188:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde9b78cd6b code=0x7ffc0000 [ 152.621012][ T30] audit: type=1326 audit(1744091401.188:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde9b7bfa25 code=0x7ffc0000 [ 152.644549][ T30] audit: type=1400 audit(1744091401.198:628): avc: denied { ioctl } for pid=7305 comm="syz.0.366" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 152.646001][ T7308] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 152.739835][ T30] audit: type=1326 audit(1744091401.388:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9b78d169 code=0x7ffc0000 [ 152.855760][ T7269] delete_channel: no stack [ 153.127645][ T5977] usbhid 6-1:0.0: can't add hid device: -71 [ 153.133867][ T5825] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 153.141628][ T5977] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 153.154426][ T5977] usb 6-1: USB disconnect, device number 6 [ 153.191884][ T5874] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 153.305552][ T5825] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.327326][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.360627][ T52] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 153.587579][ T52] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 153.617091][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.635085][ T52] usb 4-1: Product: syz [ 153.648230][ T52] usb 4-1: Manufacturer: syz [ 153.659022][ T52] usb 4-1: SerialNumber: syz [ 153.712858][ T5825] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 153.718175][ T52] usb 4-1: config 0 descriptor?? [ 153.722267][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.735053][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 153.741610][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.754374][ T5825] usb 5-1: config 0 descriptor?? [ 153.759478][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.769302][ T5874] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 153.778554][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.791585][ T5874] usb 2-1: config 0 descriptor?? [ 154.148425][ T52] airspy 4-1:0.0: Board ID: 05 [ 154.163357][ T52] airspy 4-1:0.0: Firmware version:  [ 154.188299][ T5825] hid-alps 0003:044E:1215.000A: item fetching failed at offset 5/7 [ 154.198007][ T5825] hid-alps 0003:044E:1215.000A: parse failed [ 154.211088][ T5825] hid-alps 0003:044E:1215.000A: probe with driver hid-alps failed with error -22 [ 154.220749][ T5874] savu 0003:1E7D:2D5A.000B: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 154.349101][ T52] airspy 4-1:0.0: usb_control_msg() failed -32 request 11 [ 154.373537][ T52] airspy 4-1:0.0: Registered as swradio24 [ 154.379291][ T52] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 154.412491][ T24] usb 2-1: USB disconnect, device number 16 [ 154.634407][ T7348] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.662612][ T24] usb 5-1: USB disconnect, device number 22 [ 154.981456][ T5825] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 155.152825][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.163884][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.428917][ T5825] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 156.711606][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.743549][ T5825] usb 6-1: config 0 descriptor?? [ 156.788260][ T5902] usb 4-1: USB disconnect, device number 28 [ 156.917685][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 156.917718][ T30] audit: type=1400 audit(1744091405.568:634): avc: denied { connect } for pid=7364 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.020660][ T52] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 157.216288][ T7347] Illegal XDP return value 4294967262 on prog (id 111) dev N/A, expect packet loss! [ 157.439907][ T30] audit: type=1400 audit(1744091406.068:635): avc: denied { write } for pid=7364 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.490904][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 157.499388][ T52] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 157.510290][ T5825] usb 6-1: string descriptor 0 read error: -22 [ 157.517698][ T52] usb 5-1: config 0 has no interface number 0 [ 157.524035][ T52] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 157.534617][ T52] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 157.544758][ T52] usb 5-1: config 0 interface 41 has no altsetting 0 [ 157.555920][ T30] audit: type=1400 audit(1744091406.208:636): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 157.556677][ T52] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 157.585628][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.593798][ T52] usb 5-1: Product: syz [ 157.601795][ T52] usb 5-1: Manufacturer: syz [ 157.606426][ T52] usb 5-1: SerialNumber: syz [ 157.614874][ T52] usb 5-1: config 0 descriptor?? [ 157.621808][ T7358] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 157.629297][ T7358] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 157.747945][ T5825] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000C/input/input20 [ 157.774209][ T30] audit: type=1400 audit(1744091406.428:637): avc: denied { map } for pid=7375 comm="syz.3.386" path="socket:[14862]" dev="sockfs" ino=14862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.847594][ T7358] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 157.855002][ T7358] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 157.936416][ T30] audit: type=1400 audit(1744091406.428:638): avc: denied { getopt } for pid=7375 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.955897][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.964431][ T5825] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000C/input/input21 [ 158.032256][ T5825] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000C/input/input22 [ 158.087750][ T30] audit: type=1400 audit(1744091406.468:639): avc: denied { ioctl } for pid=7378 comm="syz.0.385" path="socket:[15696]" dev="sockfs" ino=15696 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.394962][ T5825] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000C/input/input23 [ 158.409007][ T30] audit: type=1400 audit(1744091406.478:640): avc: denied { ioctl } for pid=7375 comm="syz.3.386" path="socket:[14866]" dev="sockfs" ino=14866 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.541296][ T5825] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 158.582839][ T5825] usb 6-1: USB disconnect, device number 7 [ 159.052963][ T52] dm9601 5-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 159.097649][ T52] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 159.265997][ T52] usb 5-1: USB disconnect, device number 23 [ 159.484761][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.5.393'. [ 159.660628][ T5902] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 159.743932][ T5874] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 159.771034][ T30] audit: type=1400 audit(1744091408.428:641): avc: denied { getopt } for pid=7420 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 159.965228][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 159.980603][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 160.013256][ T5874] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 160.033132][ T5874] usb 4-1: config 0 has no interface number 0 [ 160.066531][ T5902] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.067478][ T5874] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.076645][ T5902] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 160.100822][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.107443][ T5902] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 160.116564][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.142715][ T5902] usb 2-1: config 0 descriptor?? [ 160.149050][ T5874] usb 4-1: config 0 interface 85 has no altsetting 0 [ 160.158491][ T5874] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 160.175989][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.186188][ T30] audit: type=1400 audit(1744091408.828:642): avc: denied { setopt } for pid=7425 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.206590][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.216564][ T5874] usb 4-1: Product: syz [ 160.220853][ T5874] usb 4-1: Manufacturer: syz [ 160.225659][ T5874] usb 4-1: SerialNumber: syz [ 160.242428][ T5874] usb 4-1: config 0 descriptor?? [ 160.644279][ T5902] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 160.748839][ T5902] corsair-cpro 0003:1B1C:0C10.000D: probe with driver corsair-cpro failed with error -38 [ 160.840975][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 160.860653][ T5874] appletouch 4-1:0.85: Geyser mode initialized. [ 160.891176][ T5874] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input24 [ 160.924647][ T5902] usb 2-1: USB disconnect, device number 17 [ 161.015922][ T24] usb 5-1: config 0 has no interfaces? [ 161.025701][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 161.037451][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.045696][ T24] usb 5-1: Product: syz [ 161.064232][ T2147] usb 4-1: USB disconnect, device number 29 [ 161.078184][ T24] usb 5-1: Manufacturer: syz [ 161.085133][ T2147] appletouch 4-1:0.85: input: appletouch disconnected [ 161.095764][ T24] usb 5-1: SerialNumber: syz [ 161.112583][ T24] usb 5-1: config 0 descriptor?? [ 162.225205][ T7469] netlink: 'syz.3.407': attribute type 2 has an invalid length. [ 162.271239][ T7462] netlink: 'syz.3.407': attribute type 2 has an invalid length. [ 162.720714][ T52] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 162.740733][ T5977] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 162.753036][ T30] audit: type=1400 audit(1744091411.408:643): avc: denied { connect } for pid=7480 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.881470][ T52] usb 1-1: not running at top speed; connect to a high speed hub [ 162.890188][ T52] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 162.901925][ T52] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 162.912874][ T52] usb 1-1: config 1 interface 0 has no altsetting 0 [ 162.923246][ T52] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 162.932747][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.940826][ T52] usb 1-1: Product: syz [ 162.945024][ T52] usb 1-1: Manufacturer: syz [ 162.952671][ T52] usb 1-1: SerialNumber: syz [ 163.009184][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 163.018801][ T7472] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 163.026105][ T7472] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 163.043262][ T5977] usb 2-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 163.059958][ T5977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 163.075700][ T5977] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.091123][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.5.417'. [ 163.103268][ T5977] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.114239][ T5977] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 163.123787][ T5977] usb 2-1: Product: syz [ 163.129014][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.417'. [ 163.137908][ T30] audit: type=1400 audit(1744091411.778:644): avc: denied { bind } for pid=7484 comm="syz.5.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.158091][ T5977] usb 2-1: Manufacturer: syz [ 163.162808][ T5977] usb 2-1: SerialNumber: syz [ 163.170041][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.194505][ T5977] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 163.202116][ T5977] cdc_mbim 2-1:1.0: bind() failure [ 163.214260][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 163.224038][ T24] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 163.227864][ T5977] usb 5-1: USB disconnect, device number 24 [ 163.233613][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.250211][ T7485] bridge_slave_1 (unregistering): left allmulticast mode [ 163.263124][ T7485] bridge_slave_1 (unregistering): left promiscuous mode [ 163.270164][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.317453][ T7487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.824413][ T52] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 26 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 164.047326][ T24] usb 4-1: Product: syz [ 164.051588][ T24] usb 4-1: Manufacturer: syz [ 164.056187][ T24] usb 4-1: SerialNumber: syz [ 164.063691][ T52] usb 1-1: USB disconnect, device number 26 [ 164.075412][ T24] usb 4-1: config 0 descriptor?? [ 164.081500][ T52] usblp1: removed [ 164.287937][ T5825] usb 4-1: USB disconnect, device number 30 [ 164.320755][ T5977] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 164.481628][ T5977] usb 5-1: Using ep0 maxpacket: 8 [ 164.487114][ T30] audit: type=1400 audit(1744091413.138:645): avc: denied { accept } for pid=7508 comm="syz.5.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.488230][ T5977] usb 5-1: config 0 has an invalid interface number: 171 but max is 0 [ 164.510553][ T52] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 164.515679][ T5977] usb 5-1: config 0 has no interface number 0 [ 164.530391][ T5977] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=50.60 [ 164.542439][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.553741][ T7509] netlink: 'syz.5.424': attribute type 3 has an invalid length. [ 164.561822][ T7509] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.424'. [ 164.574452][ T5977] usb 5-1: Product: syz [ 164.576880][ T30] audit: type=1400 audit(1744091413.228:646): avc: denied { read } for pid=7508 comm="syz.5.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.578611][ T5977] usb 5-1: Manufacturer: syz [ 164.606380][ T5977] usb 5-1: SerialNumber: syz [ 164.614400][ T5977] usb 5-1: config 0 descriptor?? [ 164.640241][ T7511] netlink: 'syz.5.425': attribute type 3 has an invalid length. [ 164.707173][ T52] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.720879][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.728885][ T52] usb 1-1: Product: syz [ 164.735044][ T52] usb 1-1: Manufacturer: syz [ 164.740166][ T52] usb 1-1: SerialNumber: syz [ 164.752519][ T52] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 164.767713][ T5875] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 164.798696][ T30] audit: type=1400 audit(1744091413.448:647): avc: denied { bind } for pid=7513 comm="syz.5.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.834470][ T5977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.872806][ T5977] snd-usb-audio 5-1:0.171: probe with driver snd-usb-audio failed with error -2 [ 164.902011][ T5977] usb 5-1: USB disconnect, device number 25 [ 164.944917][ T7521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.957340][ T7521] batadv_slave_1: entered promiscuous mode [ 164.969017][ T7521] netlink: 'syz.3.427': attribute type 3 has an invalid length. [ 165.143075][ T30] audit: type=1400 audit(1744091413.798:648): avc: denied { write } for pid=7526 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.236470][ T7528] Cannot find del_set index 0 as target [ 165.375449][ T30] audit: type=1400 audit(1744091413.968:649): avc: denied { write } for pid=7526 comm="syz.3.429" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 165.615637][ T5825] usb 1-1: USB disconnect, device number 27 [ 165.803614][ T7540] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 165.830751][ T5875] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 165.842700][ T5875] ath9k_htc: Failed to initialize the device [ 165.850870][ T5825] usb 1-1: ath9k_htc: USB layer deinitialized [ 166.012100][ T7548] sp0: Synchronizing with TNC [ 167.360167][ T7552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.590628][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.596693][ T5834] Bluetooth: hci5: command tx timeout [ 167.932258][ T5875] usb 2-1: USB disconnect, device number 18 [ 167.978182][ T30] audit: type=1400 audit(1744091416.628:650): avc: denied { write } for pid=7561 comm="syz.3.438" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.011200][ T30] audit: type=1400 audit(1744091416.658:651): avc: denied { checkpoint_restore } for pid=7561 comm="syz.3.438" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.096220][ T52] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 168.269395][ T7569] netlink: 'syz.0.439': attribute type 10 has an invalid length. [ 168.278156][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 168.288828][ T52] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 168.297127][ T52] usb 5-1: config 2 has no interface number 0 [ 168.313619][ T52] usb 5-1: config 2 interface 31 has no altsetting 0 [ 168.331469][ T52] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 168.345952][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.354398][ T52] usb 5-1: Product: syz [ 168.658075][ T52] usb 5-1: Manufacturer: syz [ 168.669139][ T52] usb 5-1: SerialNumber: syz [ 169.600684][ T5875] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 169.890924][ T30] audit: type=1400 audit(1744091418.548:652): avc: denied { read } for pid=7557 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.957752][ T5875] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 170.093122][ T5875] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 170.232138][ T5875] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 170.244078][ T5875] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 170.244539][ T7592] capability: warning: `syz.5.445' uses 32-bit capabilities (legacy support in use) [ 170.257361][ T5875] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 170.257419][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.434262][ T7595] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 170.465498][ T5902] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 170.709469][ T52] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 171.132160][ T5902] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.144147][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.158698][ T5902] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 171.167811][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.177774][ T5875] ath6kl: Failed to submit usb control message: -71 [ 171.188905][ T5875] ath6kl: unable to send the bmi data to the device: -71 [ 171.197123][ T5875] ath6kl: Unable to send get target info: -71 [ 171.249215][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 171.269416][ T5902] usb 4-1: config 0 descriptor?? [ 171.274687][ T5875] ath6kl: Failed to init ath6kl core: -71 [ 171.286628][ T5875] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 171.313336][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'. [ 171.316037][ T5875] usb 1-1: USB disconnect, device number 28 [ 171.489916][ T30] audit: type=1400 audit(1744091420.138:653): avc: denied { mounton } for pid=7609 comm="syz.5.450" path="/46/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 171.522167][ T7610] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 171.719133][ T5902] hid-alps 0003:044E:1215.000E: item fetching failed at offset 5/7 [ 171.730561][ T5902] hid-alps 0003:044E:1215.000E: parse failed [ 171.736891][ T5902] hid-alps 0003:044E:1215.000E: probe with driver hid-alps failed with error -22 [ 171.860025][ T5902] usb 5-1: USB disconnect, device number 26 [ 171.927635][ T5875] usb 4-1: USB disconnect, device number 31 [ 172.630430][ T7644] overlayfs: failed to resolve './file0': -2 [ 172.910653][ T52] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 172.968036][ T30] audit: type=1400 audit(1744091421.618:654): avc: denied { write } for pid=7639 comm="syz.0.459" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 173.198223][ T7661] program syz.1.463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.299062][ T52] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.300002][ T30] audit: type=1400 audit(1744091421.778:655): avc: denied { append } for pid=7658 comm="syz.1.463" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 173.337198][ T52] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 173.368515][ T52] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.385661][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.414419][ T7648] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 173.425940][ T52] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.434445][ T7670] netlink: 108 bytes leftover after parsing attributes in process `syz.1.465'. [ 173.808751][ T5825] usb 6-1: USB disconnect, device number 8 [ 173.823859][ T7671] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 173.914901][ T30] audit: type=1400 audit(1744091422.538:656): avc: denied { accept } for pid=7669 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 174.671694][ T5902] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 175.160620][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 175.170396][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 175.189168][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1281, setting to 1024 [ 175.201177][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.207838][ T5902] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 175.217004][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.227180][ T5902] usb 2-1: config 0 descriptor?? [ 175.234971][ T7692] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 175.940845][ T5825] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 176.100637][ T5874] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 176.120577][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 176.134958][ T5825] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 176.151090][ T5825] usb 6-1: config 0 has no interface number 0 [ 176.157419][ T5825] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 176.174001][ T5825] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 176.183798][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.191982][ T5825] usb 6-1: Product: syz [ 176.200755][ T5825] usb 6-1: Manufacturer: syz [ 176.208637][ T5825] usb 6-1: SerialNumber: syz [ 176.218353][ T5825] usb 6-1: config 0 descriptor?? [ 176.280262][ T5874] usb 1-1: config 0 has no interfaces? [ 176.300719][ T5872] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 176.313192][ T5874] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 176.351207][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.365682][ T5874] usb 1-1: config 0 descriptor?? [ 176.478575][ T30] audit: type=1400 audit(1744091425.128:657): avc: denied { read } for pid=7729 comm="syz.4.481" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 176.503845][ T5872] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 176.515736][ T30] audit: type=1400 audit(1744091425.128:658): avc: denied { open } for pid=7729 comm="syz.4.481" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 176.539944][ T5872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.546910][ T5872] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 176.556189][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.566171][ T5872] usb 4-1: config 0 descriptor?? [ 176.571921][ T7717] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 176.730624][ T52] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 176.754163][ T5902] usbhid 2-1:0.0: can't add hid device: -71 [ 176.760154][ T5902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 176.770771][ T5902] usb 2-1: USB disconnect, device number 19 [ 176.859452][ T5825] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.214/input/input25 [ 176.878694][ T5825] input: failed to attach handler mousedev to device input25, error: -5 [ 176.882143][ T52] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.896306][ T52] usb 5-1: not running at top speed; connect to a high speed hub [ 176.905083][ T52] usb 5-1: config 129 has an invalid interface number: 55 but max is 0 [ 176.913458][ T52] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 176.921702][ T52] usb 5-1: config 129 has an invalid descriptor of length 1, skipping remainder of the config [ 176.933410][ T52] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 176.942677][ T52] usb 5-1: config 129 has no interface number 0 [ 176.948935][ T52] usb 5-1: config 129 has no interface number 1 [ 176.955297][ T52] usb 5-1: config 129 interface 55 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 176.968424][ T52] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 176.979432][ T52] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 176.990230][ T5872] waterforce 0003:1044:7A4D.000F: unknown main item tag 0x0 [ 176.992671][ T52] usb 5-1: config 129 interface 55 has no altsetting 0 [ 177.006336][ T5872] waterforce 0003:1044:7A4D.000F: unknown main item tag 0x0 [ 177.006665][ T52] usb 5-1: config 129 interface 5 has no altsetting 0 [ 177.016721][ T5872] waterforce 0003:1044:7A4D.000F: unknown main item tag 0x0 [ 177.023046][ T52] usb 5-1: New USB device found, idVendor=05c6, idProduct=9245, bcdDevice=fe.e4 [ 177.028972][ T5872] waterforce 0003:1044:7A4D.000F: unknown main item tag 0x0 [ 177.038103][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.047740][ T5872] waterforce 0003:1044:7A4D.000F: unknown main item tag 0x0 [ 177.063802][ T52] usb 5-1: Product: syz [ 177.067975][ T52] usb 5-1: Manufacturer: syz [ 177.070949][ T5872] waterforce 0003:1044:7A4D.000F: hidraw0: USB HID v0.05 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 177.075196][ T52] usb 5-1: SerialNumber: syz [ 177.093909][ T5874] usb 6-1: USB disconnect, device number 9 [ 177.152767][ T5872] waterforce 0003:1044:7A4D.000F: fw version request failed with -38 [ 177.196689][ T30] audit: type=1400 audit(1744091425.848:659): avc: denied { name_bind } for pid=7716 comm="syz.3.479" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 177.199444][ T5825] usb 4-1: USB disconnect, device number 32 [ 177.320016][ T52] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.348053][ T52] usb 5-1: MIDIStreaming interface descriptor not found [ 177.384780][ T52] usb 5-1: USB disconnect, device number 27 [ 177.539923][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7738 comm=syz.1.483 [ 177.568310][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7738 comm=syz.1.483 [ 177.580907][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7738 comm=syz.1.483 [ 177.593374][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7738 comm=syz.1.483 [ 177.606533][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7738 comm=syz.1.483 [ 177.618924][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7738 comm=syz.1.483 [ 177.633961][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7738 comm=syz.1.483 [ 177.647486][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7738 comm=syz.1.483 [ 177.660173][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7738 comm=syz.1.483 [ 177.675822][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7738 comm=syz.1.483 [ 177.858249][ T7752] input: syz0 as /devices/virtual/input/input26 [ 177.960740][ T52] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 178.057666][ T7755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.183647][ T7759] xt_policy: neither incoming nor outgoing policy selected [ 178.356962][ T52] usb 2-1: config 123 has an invalid interface number: 89 but max is 0 [ 178.490928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 178.503144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.515284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.527709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 178.539899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.552039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.564224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 178.576422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.588546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.830559][ C1] net_ratelimit: 1233 callbacks suppressed [ 178.830572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 178.848531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.860663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.872838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 178.884948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.897026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.909169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 178.921288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.933335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.945445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 179.066269][ T52] usb 2-1: config 123 has no interface number 0 [ 179.471342][ T52] usb 2-1: config 123 interface 89 has no altsetting 0 [ 179.555358][ T52] usb 2-1: New USB device found, idVendor=0c45, idProduct=60af, bcdDevice= 6.f5 [ 179.575212][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.613070][ T5825] usb 1-1: USB disconnect, device number 29 [ 179.704844][ T52] usb 2-1: Product: syz [ 179.709127][ T52] usb 2-1: Manufacturer: syz [ 179.811321][ T52] usb 2-1: SerialNumber: syz [ 180.666611][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.775584][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.275270][ T52] gspca_main: sonixb-2.14.0 probing 0c45:60af [ 181.318248][ T52] sonixb 2-1:123.89: Error reading register 00: -71 [ 181.661207][ T52] usb 2-1: USB disconnect, device number 20 [ 181.859408][ T7774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.070585][ T5872] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 182.230689][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 182.245610][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.286719][ T5872] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 182.304714][ T52] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 182.316111][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.318518][ T5872] usb 1-1: config 0 descriptor?? [ 182.326814][ T5872] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 183.260258][ T30] audit: type=1400 audit(1744091431.908:660): avc: denied { write } for pid=7790 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 183.840633][ C1] net_ratelimit: 23325 callbacks suppressed [ 183.840651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.858768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.871038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 183.883262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.895477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.907849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 183.920088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.932308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.944612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 183.956833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.125823][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 184.131239][ T5872] gspca_vc032x: reg_w err -110 [ 184.131304][ T5872] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 184.263451][ T2147] usb 1-1: USB disconnect, device number 30 [ 188.850772][ C1] net_ratelimit: 16042 callbacks suppressed [ 188.850790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 188.868933][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.881196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.893477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 188.905722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.917942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.930203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 188.942438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.954659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.966929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 190.510519][ C1] sched: DL replenish lagged too much [ 193.860617][ C1] net_ratelimit: 16337 callbacks suppressed [ 193.860635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.878843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 193.891081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.903276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.915495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.927758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 193.939990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.952178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.964401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.976662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 196.663241][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.870691][ C1] net_ratelimit: 16191 callbacks suppressed [ 198.870710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 198.888856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.901049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.913279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.925557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 198.933121][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.937731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.959856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.972103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.984362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 198.996581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.880804][ C1] net_ratelimit: 16625 callbacks suppressed [ 203.880823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.899143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 203.911394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.923572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.935790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.948058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 203.960272][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.972462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.984695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.996958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 208.890599][ C1] net_ratelimit: 16856 callbacks suppressed [ 208.890617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.908725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.920953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.933223][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 208.945458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.957630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.969843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.982124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 208.994346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.006538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.900690][ C1] net_ratelimit: 16527 callbacks suppressed [ 213.900709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.918867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.931451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 213.943685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.955864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.968088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.980396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 213.992617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.004807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.017019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.910600][ C1] net_ratelimit: 16970 callbacks suppressed [ 218.910620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.928771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.941041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 218.953283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.965484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.977729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.990011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 219.002229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.014409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.026626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.920508][ C1] net_ratelimit: 17138 callbacks suppressed [ 223.920527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.938670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.950938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 223.963153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.975339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.987568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.999847][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 224.012076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.024257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.036481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.930530][ C1] net_ratelimit: 17545 callbacks suppressed [ 228.930549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.948627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.960859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.973124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 228.985333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.997514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.009749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.022012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 229.034239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.046405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.940658][ C1] net_ratelimit: 15603 callbacks suppressed [ 233.940683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.958819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.971088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 233.983331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.995510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.007744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.020020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 234.032240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.044419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.056644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.950599][ C1] net_ratelimit: 15570 callbacks suppressed [ 238.950617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.968748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.981032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 238.993259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.005447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.017669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.029948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 239.042180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.054352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.066588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.960597][ C1] net_ratelimit: 15670 callbacks suppressed [ 243.960618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.978751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.991044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 244.003280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.015460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.027683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.039954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 244.052187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.064369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.076602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.970697][ C1] net_ratelimit: 15546 callbacks suppressed [ 248.970715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.988856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.001125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 249.013365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.025544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.037767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.050027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 249.062264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.074444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.086672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.980606][ C1] net_ratelimit: 15605 callbacks suppressed [ 253.980625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.998729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.010952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.023197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 254.035471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.047681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.059916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.072200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 254.084433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.096611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.990543][ C1] net_ratelimit: 15505 callbacks suppressed [ 258.990563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 259.008710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.020898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.033123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.045422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 259.057648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.070273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.082521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.094790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 259.107031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.000657][ C1] net_ratelimit: 15546 callbacks suppressed [ 264.000675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 264.018800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.030982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.043208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.055494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 264.067727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.079905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.092127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.104389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 264.116613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.882259][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.897150][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.010605][ C1] net_ratelimit: 16002 callbacks suppressed [ 269.010623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 269.028780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.040988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.053270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.065570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 269.077817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.090019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.102270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.114586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 269.126854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.020555][ C1] net_ratelimit: 16259 callbacks suppressed [ 274.020573][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.038677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.050910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.063186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 274.075442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.087650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.099914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.112192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 274.124426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.136623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.030643][ C1] net_ratelimit: 17293 callbacks suppressed [ 279.030660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 279.048807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.060993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.073253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.085526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 279.097748][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.109924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.122132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.134425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 279.146920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.040720][ C1] net_ratelimit: 17636 callbacks suppressed [ 284.040740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.058879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.071145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 284.083376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.095565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.107796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.120051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 284.132272][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.144451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.156673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.050601][ C1] net_ratelimit: 17300 callbacks suppressed [ 289.050620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 289.068780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.080980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.093222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.105499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 289.117739][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.129965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.142198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.154473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 289.166582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.627486][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 294.060606][ C1] net_ratelimit: 17210 callbacks suppressed [ 294.060624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 294.078765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.090960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.103196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.115409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.127622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.139883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 294.152121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.164297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.176529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.070579][ C1] net_ratelimit: 16682 callbacks suppressed [ 299.070597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 299.088746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.100940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.113171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.125401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.137624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.149932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 299.162155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.174338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.186561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.080543][ C1] net_ratelimit: 15507 callbacks suppressed [ 304.080560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 304.098713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.110934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.123207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 304.135465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.147651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.159867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.172133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 304.184353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.196581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.500483][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 305.507445][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5873/1:b..l [ 305.515697][ C1] rcu: (detected by 1, t=10502 jiffies, g=19537, q=1787 ncpus=2) [ 305.523491][ C1] task:kworker/1:5 state:R running task stack:24216 pid:5873 tgid:5873 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 305.537746][ C1] Workqueue: events_power_efficient gc_worker [ 305.543831][ C1] Call Trace: [ 305.547106][ C1] [ 305.550038][ C1] __schedule+0x116f/0x5de0 [ 305.554546][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 305.559759][ C1] ? __pfx___schedule+0x10/0x10 [ 305.564606][ C1] ? __mod_timer+0x8ed/0xd30 [ 305.569189][ C1] ? rcu_is_watching+0x12/0xc0 [ 305.573960][ C1] ? mark_held_locks+0x49/0x80 [ 305.578722][ C1] preempt_schedule_irq+0x51/0x90 [ 305.583746][ C1] irqentry_exit+0x36/0x90 [ 305.588156][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 305.594129][ C1] RIP: 0010:gc_worker+0x2d5/0x16e0 [ 305.599239][ C1] Code: 00 00 48 c7 c7 a8 fe 86 90 e8 b7 c0 03 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 35 e2 26 f8 58 48 85 db 0f 85 d4 0f 00 00 b6 e6 26 f8 8b 1d 90 a7 f2 06 41 89 dc 31 ff 41 83 e4 01 44 89 [ 305.618844][ C1] RSP: 0018:ffffc9000307fb60 EFLAGS: 00000293 [ 305.624905][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89946249 [ 305.632867][ C1] RDX: ffff88802cc5c880 RSI: ffffffff89946258 RDI: 0000000000000007 [ 305.640826][ C1] RBP: ffffffff9afdab8c R08: 0000000000000007 R09: 0000000000000000 [ 305.648788][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888031800000 [ 305.656751][ C1] R13: 0000000000040000 R14: dffffc0000000000 R15: 0000000000001770 [ 305.664725][ C1] ? gc_worker+0xe19/0x16e0 [ 305.669227][ C1] ? gc_worker+0xe28/0x16e0 [ 305.673743][ C1] ? __pfx_gc_worker+0x10/0x10 [ 305.678504][ C1] ? rcu_is_watching+0x12/0xc0 [ 305.683269][ C1] process_one_work+0x9cc/0x1b70 [ 305.688210][ C1] ? __pfx_psi_avgs_work+0x10/0x10 [ 305.693314][ C1] ? __pfx_process_one_work+0x10/0x10 [ 305.698687][ C1] ? assign_work+0x1a0/0x250 [ 305.703275][ C1] worker_thread+0x6c8/0xf10 [ 305.707864][ C1] ? __kthread_parkme+0x19e/0x250 [ 305.712887][ C1] ? __pfx_worker_thread+0x10/0x10 [ 305.717992][ C1] kthread+0x3c2/0x780 [ 305.722060][ C1] ? __pfx_kthread+0x10/0x10 [ 305.726641][ C1] ? __pfx_kthread+0x10/0x10 [ 305.731220][ C1] ? __pfx_kthread+0x10/0x10 [ 305.735802][ C1] ? __pfx_kthread+0x10/0x10 [ 305.740383][ C1] ? rcu_is_watching+0x12/0xc0 [ 305.745145][ C1] ? __pfx_kthread+0x10/0x10 [ 305.749727][ C1] ret_from_fork+0x45/0x80 [ 305.754134][ C1] ? __pfx_kthread+0x10/0x10 [ 305.758715][ C1] ret_from_fork_asm+0x1a/0x30 [ 305.763491][ C1] [ 305.766502][ C1] rcu: rcu_preempt kthread starved for 823 jiffies! g19537 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 305.777514][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 305.787471][ C1] rcu: RCU grace-period kthread stack dump: [ 305.793345][ C1] task:rcu_preempt state:R running task stack:28856 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 305.806832][ C1] Call Trace: [ 305.810100][ C1] [ 305.813030][ C1] __schedule+0x116f/0x5de0 [ 305.817536][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 305.822474][ C1] ? __pfx___schedule+0x10/0x10 [ 305.827321][ C1] ? find_held_lock+0x2b/0x80 [ 305.831993][ C1] ? schedule+0x2d7/0x3a0 [ 305.836322][ C1] schedule+0xe7/0x3a0 [ 305.840384][ C1] schedule_timeout+0x123/0x290 [ 305.845225][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 305.850588][ C1] ? __pfx_process_timeout+0x10/0x10 [ 305.855872][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 305.861672][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 305.867133][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 305.871892][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 305.877171][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 305.882020][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 305.887823][ C1] rcu_gp_kthread+0x270/0x380 [ 305.892489][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 305.897674][ C1] ? rcu_is_watching+0x12/0xc0 [ 305.902436][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 305.907642][ C1] ? __kthread_parkme+0x19e/0x250 [ 305.912668][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 305.917857][ C1] kthread+0x3c2/0x780 [ 305.921919][ C1] ? __pfx_kthread+0x10/0x10 [ 305.926500][ C1] ? __pfx_kthread+0x10/0x10 [ 305.931082][ C1] ? __pfx_kthread+0x10/0x10 [ 305.935666][ C1] ? __pfx_kthread+0x10/0x10 [ 305.940246][ C1] ? rcu_is_watching+0x12/0xc0 [ 305.945011][ C1] ? __pfx_kthread+0x10/0x10 [ 305.949593][ C1] ret_from_fork+0x45/0x80 [ 305.953998][ C1] ? __pfx_kthread+0x10/0x10 [ 305.958592][ C1] ret_from_fork_asm+0x1a/0x30 [ 305.963367][ C1] [ 305.966376][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 305.972688][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 305.982566][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.992613][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 305.998243][ C1] Code: 95 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 bc 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 306.017845][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 306.023905][ C1] RAX: 000000000173e501 RBX: 0000000000000001 RCX: ffffffff8b723439 [ 306.031867][ C1] RDX: 0000000000000000 RSI: ffffffff8dbeeb26 RDI: ffffffff8bf46500 [ 306.039827][ C1] RBP: ffffed1003b5a488 R08: 0000000000000001 R09: ffffed10170a65bd [ 306.047789][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 306.055758][ C1] R13: ffff88801dad2440 R14: ffffffff90865310 R15: 0000000000000000 [ 306.063719][ C1] FS: 0000000000000000(0000) GS:ffff888124ab3000(0000) knlGS:0000000000000000 [ 306.072640][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.079217][ C1] CR2: 00007ffc5bd57e00 CR3: 000000002ac68000 CR4: 00000000003526f0 [ 306.087183][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 306.095145][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 306.103104][ C1] Call Trace: [ 306.106373][ C1] [ 306.109294][ C1] default_idle+0x13/0x20 [ 306.113622][ C1] default_idle_call+0x6d/0xb0 [ 306.118381][ C1] do_idle+0x391/0x510 [ 306.122449][ C1] ? __pfx_do_idle+0x10/0x10 [ 306.127037][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 306.132236][ C1] cpu_startup_entry+0x4f/0x60 [ 306.136996][ C1] start_secondary+0x21d/0x2b0 [ 306.141758][ C1] ? __pfx_start_secondary+0x10/0x10 [ 306.147037][ C1] common_startup_64+0x13e/0x148 [ 306.151985][ C1] [ 309.090540][ C1] net_ratelimit: 13896 callbacks suppressed [ 309.090559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.108671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.120916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.133181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 309.145411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.157683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.169969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 309.182216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.194403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.206625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.100646][ C1] net_ratelimit: 15603 callbacks suppressed [ 314.100666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 314.118813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.131052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.143319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 314.155549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.167742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.179989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.192272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:e5:ee:52:a1:78, vlan:0) [ 314.204499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.216728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)