last executing test programs: 2m21.066470212s ago: executing program 0 (id=890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="86707a9607d61b049442ac4a154292ca37df059da27eab224b4f957c5906ab3e51b11944326c061e306bd0bac96e5c9ca1bc6de3c711bcbba69ad990ecd9dc294602752e591b1c451ad730cf58b65f84f77aed86b432c0cadddaf64ea9a7f0683140304a6c368f09b603dc9f95d04e032d26c05acaa8d46d3b87bb", 0x7b}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="7800000000000000130000000800000010d8ad7d774bb174d3178a998e571d1cb7d983f5de19ddf2ee6f0615ceeee95e2d00efd6e089d27c98c0aa3bd2848b87985e93671a60af586b066ab44d10a710327f30d302f50decaacf03b4f16479fb8b8aefb2c0d9a8b63b0dd71a71be603592b0abe89b0d0000a8"], 0x120}, 0x4000041) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 2m20.907274197s ago: executing program 0 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r5}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_SET_TIME(r9, 0x4024700a, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) write$rfkill(r3, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904"], 0x0) 2m17.933745112s ago: executing program 0 (id=900): socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x52e6, 0x10100, 0x200000, 0x1000000, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000000c0)=ANY=[@ANYRES16=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m17.923548809s ago: executing program 1 (id=902): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="86707a9607d61b049442ac4a154292ca37df059da27eab224b4f957c5906ab3e51b11944326c061e306bd0bac96e5c9ca1bc6de3c711bcbba69ad990ecd9dc294602752e591b1c451ad730cf58b65f84f77aed86b432c0cadddaf64ea9a7f0683140304a6c368f09b603dc9f95d04e032d26c05acaa8d46d3b87bb", 0x7b}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="7800000000000000130000000800000010d8ad7d774bb174d3178a998e571d1cb7d983f5de19ddf2ee6f0615ceeee95e2d00efd6e089d27c98c0aa3bd2848b87985e93671a60af586b066ab44d10a710327f30d302f50decaacf03b4f16479fb8b8aefb2c0d9a8b63b0dd71a71be603592b0abe89b0d0000a8"], 0x120}, 0x4000041) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 2m17.719869485s ago: executing program 0 (id=903): socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000480)='\x00\x00\toup\x00C\xaf\x00\x00\x00\x04\x81fj:\xee\x03\xa6\xd3o\x02z\xc1\xbbI\xc2#\x19\xd8\xd6\x99\x91{\x8fI\xce\xe2-\xefv*\xd1\xf2\x0f\xa0\xa0T\xdbmpY\xe2\x83e\xff\xd2\xe2\xec+\xcc\x16\x1c`\xddv\x86_\x85\x18Fh\x83\n\xbc\xfc'}, 0x30) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0) 2m17.595270985s ago: executing program 1 (id=905): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8010, 0x3}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="cdba", 0x2, 0x20000000, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x44080) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) 2m17.531838342s ago: executing program 0 (id=907): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 2m16.458000029s ago: executing program 1 (id=911): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000200)={0x1, 0xfffffdfe, 0x7ff, 0x56c, 0x8, 0x79, 0x4, 0x1, 0x2, 0x0, 0x10, 0xffff8001, 0x8443, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000300)={'tunl0\x00', 0x5a, 0x401}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800202", 0x1001, r2) close(0x3) 2m15.98879255s ago: executing program 2 (id=912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r5}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_SET_TIME(r9, 0x4024700a, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) write$rfkill(r3, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904"], 0x0) 2m12.360641741s ago: executing program 1 (id=915): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x4, 0x0, 0x2, 0x6, 0xffff, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 2m8.39711625s ago: executing program 1 (id=918): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 2m8.283562901s ago: executing program 2 (id=919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1000000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x21) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno', @ANYRESHEX=r4]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 2m7.980008715s ago: executing program 0 (id=921): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000100)) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000340)=0x8, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 2m7.933995909s ago: executing program 2 (id=922): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x328}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000271000/0x5000)=nil, 0x5000}, 0x1}) 2m7.603000858s ago: executing program 2 (id=923): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x1, &(0x7f0000000000)) add_key(&(0x7f00000013c0)='big_key\x00', 0x0, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000400010002", 0x7) 2m6.502756669s ago: executing program 2 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009405, &(0x7f0000001440)) syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 2m4.046037593s ago: executing program 1 (id=926): syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000005c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x6b) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) close(r3) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x84, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x688}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2df3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, 0x0, 0x0) listen(r6, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 2m3.977130336s ago: executing program 2 (id=927): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000200)={{0xffffffffffffffff, 0x3, 0x5bce, 0x1, 0xe}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_mr_cache\x00') r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x6, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x4, @loopback}, 0x1c) 1m52.628899348s ago: executing program 32 (id=921): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000100)) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000340)=0x8, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 1m48.241813406s ago: executing program 33 (id=926): syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000005c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x6b) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) close(r3) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x84, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x688}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2df3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, 0x0, 0x0) listen(r6, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m42.461139024s ago: executing program 34 (id=927): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000200)={{0xffffffffffffffff, 0x3, 0x5bce, 0x1, 0xe}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_mr_cache\x00') r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x6, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x4, @loopback}, 0x1c) 1m40.039092228s ago: executing program 3 (id=951): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r1, 0x0, 0x0, 0x400, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, 0x0, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) write$9p(r6, &(0x7f0000002080)="e1a9652a3d4b48", 0x7) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) 1m35.589257955s ago: executing program 4 (id=957): r0 = socket(0x2, 0x3, 0x5) sendto$inet(r0, 0x0, 0x0, 0xc814, &(0x7f0000000600)={0x2, 0x4e23, @remote}, 0x10) 1m35.353821787s ago: executing program 4 (id=958): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 1m31.726931505s ago: executing program 4 (id=959): socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x52e6, 0x10100, 0x200000, 0x1000000, 0x0, r1}, 0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m31.472397023s ago: executing program 4 (id=960): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x8a, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m31.313782229s ago: executing program 3 (id=961): r0 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000001c0)=0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"3370491d", 0x8, 0x5, 0x2, 0x0, 0xdf, "001a0000008400", "00010b00", "8000", '\x00', ["0600", "3549fff7ff0000001e0200", "006a9cc1f000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x2, 0x6, 0x2, 0x401, 0x7, 0xa83c, "6c3677719085d7a8619ca3788f5ead5e", 0x8, 0x8, 0x4, 0x8, 0x6, 0x5b, 0x1}) 1m31.294329346s ago: executing program 4 (id=962): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000000)={0xd, 0x9}, 0x1) r5 = socket$isdn(0x22, 0x2, 0x22) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) 1m31.13853221s ago: executing program 3 (id=963): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) 1m31.067558775s ago: executing program 3 (id=964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000440), 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000480)={0x40000000, 0x0, "ef4d9d15508a8648b436d9d11ad947410f0e47afa9538a88f4bd95ad40a56063", 0x2, 0x80000000, 0x9, 0x3, 0x2, 0x5, 0x1ff, 0x8, [0x1, 0x3, 0x80, 0x9]}) 1m24.564455014s ago: executing program 3 (id=965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r4, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 1m19.545357204s ago: executing program 4 (id=966): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 1m15.537952904s ago: executing program 3 (id=967): socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x52e6, 0x10100, 0x200000, 0x1000000, 0x0, r1}, 0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 53.884170339s ago: executing program 35 (id=967): socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x52e6, 0x10100, 0x200000, 0x1000000, 0x0, r1}, 0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 53.288384868s ago: executing program 36 (id=966): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 8.501052853s ago: executing program 5 (id=1057): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{&(0x7f00000006c0)={0xa, 0xce23, 0x0, @empty, 0xb445}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="8000102ebf77d4", 0x7}], 0x1, &(0x7f0000000080)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x18}}], 0x1, 0x240080c4) 7.107670452s ago: executing program 5 (id=1061): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 6.408914878s ago: executing program 5 (id=1063): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x0, 0x2000, 0x0, 0x0}, {0x6, 0x2811, 0x5a, &(0x7f0000000040)="ffa673c1f06e7aa799011a8cd56b0e71304d5d739840fa2983f34c82d0089222bcb98562d943c56a92bd5a1ef18e30623ea8745d7bf0be68c0ea70d96bc415003a64a2804c0a381051d70fd55e53ef66644f4fcfc17f7f541abb"}, {0x9, 0x0, 0x48, &(0x7f0000000200)="3fbb034fda16b3bae6ae615a3f09e3184935939d158cc472d7d33b6575f110c515b34b46431aeb08551c19a212ab86176f32547cff5d60afbacfc69cdda522198e494d8455c38da2"}], 0x3}) 6.237632474s ago: executing program 9 (id=1064): syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f00001859c0)={0xfdfd, &(0x7f0000185780)=[{0x4000000, 0x4000, 0x0, 0x0, 0x3}]}) 5.417211339s ago: executing program 7 (id=1069): socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000005) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019380)=""/102400, 0x19000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x1, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) lsm_get_self_attr(0x66, &(0x7f0000000580)={0x0, 0x0, 0xbf, 0x9f, ""/159}, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2, 0x0, 0x9}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0xe, 0x0, "bc8feb13"}, 0x8, 0x2, {&(0x7f0000000440)=[{0x8001, 0x7fffffff, {0x0}, 0x1000}, {0x3, 0xdfd, {0x0}, 0xd90f}]}, 0x6}) 4.785485406s ago: executing program 7 (id=1070): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) arch_prctl$ARCH_GET_FS(0x1003, 0xfffffffffffffffe) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 4.330067853s ago: executing program 9 (id=1071): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000002c0)="0f79d6baf80c66b8a587398966efbafc0cec3626673e0fc7280f01c20faf4abc2e0f1da30020660fc2e90eb80a008ee0f30f1af92edf1d", 0x37}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000002c0)={'lo\x00', @broadcast}) 3.73733933s ago: executing program 9 (id=1072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800dd8d000100010000000002321b5aea00800000ce4ff6cc77001000fe0400010000002008001e0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000acd000/0x400000)=nil) 3.575687338s ago: executing program 7 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r5}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_SET_TIME(r9, 0x4024700a, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$rfkill(r3, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b00010000000009"], 0x0) 2.967444704s ago: executing program 5 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000017c0)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x6000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xd5dd0001, 0x800b, 0xfffdfffb, 0xfffffffc, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0x8, 0x10, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x4, '\x00', 0x27}, {0x0, 0x4, 0x5, '\x00', 0x7}, {0x1, 0x4, 0x80, '\x00', 0x4}, {0x3, 0xf5, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x4, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0xac, 0x8, 0xfa, '\x00', 0x42}]}}) 2.858436725s ago: executing program 8 (id=1076): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) 1.818611954s ago: executing program 8 (id=1077): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x0, 0x0, 0x23, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63d932a6fe97d"}, 0xd8) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.818385876s ago: executing program 6 (id=1078): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x4c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x26, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xc, 0x6}, @value=@ver_80211n={0x0, 0x62, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, {}, @void, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.6579532s ago: executing program 8 (id=1079): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x2fff, 0x0, 0x0, 0x1}) 1.650993722s ago: executing program 5 (id=1080): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x42301) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x204cc2, 0x0) socket$inet6(0xa, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000200)=ANY=[], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd(0xfe7ffff7) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.549798815s ago: executing program 6 (id=1081): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) 1.495914397s ago: executing program 8 (id=1082): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{&(0x7f00000006c0)={0xa, 0xce23, 0x0, @empty, 0xb445}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="8000102ebf77d401", 0x8}], 0x1}}], 0x1, 0x240080c4) 1.424595751s ago: executing program 6 (id=1083): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x402, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 1.363547324s ago: executing program 8 (id=1084): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.060287758s ago: executing program 8 (id=1085): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000600)={0x0, 0x18, 0x4, "a7c3ad4c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x30, 0x2, {0x2, 0x11}}, 0x0}, &(0x7f0000000380)={0x44, &(0x7f00000000c0)={0x20, 0x31, 0x8e, "79bfc5197268ec67cfaf0aa5417184292611f2dc61ae4ee1e9dfdaae9887e3ba62df50bed50bd6675976b6ebe71dd4b9abdacfe3438268429b9619de497ddbc230de0bd88c61a37ffcc36f6da56c77715201024b45918548094cbd822fc9b931a59436cbb6465127f04a7c7a0518be0cba189a3520d6af00bf71902e6d451ec4150e6868f41f32dedf1bc1431a38"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, 0x0, 0x0}) 806.946672ms ago: executing program 5 (id=1086): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0xfffffffffffffea8, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000040)='a0') 535.924457ms ago: executing program 9 (id=1087): r0 = openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x1, 0x80008000, 0x7, 0x6, 0x0, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x80, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x3, 0x3ff, 0x10000, 0x800, 0xe2df, 0x2, 0xfffffffd, 0x1, 0x3, 0x7, 0x5, 0x8005]}) 392.617773ms ago: executing program 7 (id=1088): unshare(0x400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x7, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r1, r0, 0x7}, 0x10) 391.44126ms ago: executing program 6 (id=1089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="86707a9607d61b049442", 0xa}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="7800000000000000130000000800000010d8ad7d774bb174d3178a998e571d1cb7d983f5de19ddf2ee6f0615ceeee95e2d00efd6e089d27c98c0aa3bd2848b87985e93671a60af586b066ab44d10a710327f30d302f50decaacf03b4f16479fb8b8aefb2c0d9a8b63b0dd71a71be603592b0abe89b0d0000a8"], 0x120}, 0x4000041) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 276.787533ms ago: executing program 6 (id=1090): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x0, 0x0, 0x23, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63d932a6fe97d"}, 0xd8) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 213.868456ms ago: executing program 9 (id=1091): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, 0x0) 213.729235ms ago: executing program 7 (id=1092): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x2fff, 0x0, 0x0, 0x1}) 124.350179ms ago: executing program 9 (id=1093): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0xf, 0xc, "44e84a6bde4d402947b80ecc"}, 0x0, 0x0}) 89.020679ms ago: executing program 6 (id=1094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000017c0)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x6000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xd5dd0001, 0x800b, 0xfffdfffb, 0xfffffffc, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0x8, 0x10, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x4, '\x00', 0x27}, {0x0, 0x4, 0x5, '\x00', 0x7}, {0x1, 0x4, 0x80, '\x00', 0x4}, {0x3, 0xf5, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x4, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0xac, 0x8, 0xfa, '\x00', 0x42}]}}) 0s ago: executing program 7 (id=1095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000300)={0x7dd, 0x4bf4, @value=0x3}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r5, r6, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000200000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r8, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r8, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0] usb 1-1: Using ep0 maxpacket: 8 [ 133.316850][ T5910] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 133.342974][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.373221][ T5910] usb 1-1: Product: syz [ 133.386594][ T5910] usb 1-1: Manufacturer: syz [ 133.408879][ T5910] usb 1-1: SerialNumber: syz [ 133.439710][ T5910] usb 1-1: bad CDC descriptors [ 134.464201][ T6985] bond0: (slave bond_slave_0): Releasing backup interface [ 135.211352][ T6985] bond0: (slave bond_slave_1): Releasing backup interface [ 135.404803][ T6985] team0: Port device team_slave_0 removed [ 135.424088][ T6985] team0: Port device team_slave_1 removed [ 135.499008][ T5969] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 135.552067][ T6985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.595023][ T6985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.645887][ T6985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.664988][ T6985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.745125][ T5969] usb 3-1: Using ep0 maxpacket: 16 [ 135.767294][ T5969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.811415][ T5969] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 135.837479][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.868003][ T5969] usb 3-1: Product: syz [ 135.882245][ T5969] usb 3-1: Manufacturer: syz [ 135.893788][ T5969] usb 3-1: SerialNumber: syz [ 135.927012][ T5969] usb 3-1: config 0 descriptor?? [ 136.012395][ T7004] fuse: Unknown parameter 'user00000000000000000000' [ 136.188862][ T5898] usb 3-1: USB disconnect, device number 3 [ 136.371790][ T5969] usb 1-1: USB disconnect, device number 4 [ 136.625816][ T30] audit: type=1400 audit(1753187586.713:299): avc: denied { mounton } for pid=7005 comm="syz.3.330" path="/proc/232/task" dev="proc" ino=11933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 136.648267][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.235576][ T7043] fuse: Unknown parameter 'user_i00000000000000000000' [ 139.950200][ T7051] bridge_slave_0: left allmulticast mode [ 139.984738][ T7051] bridge_slave_0: left promiscuous mode [ 140.010651][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.089519][ T7051] bridge_slave_1: left allmulticast mode [ 140.128181][ T7051] bridge_slave_1: left promiscuous mode [ 140.148600][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.378126][ T7051] bond0: (slave bond_slave_0): Releasing backup interface [ 140.680242][ T7051] bond0: (slave bond_slave_1): Releasing backup interface [ 140.720836][ T7051] team0: Port device team_slave_0 removed [ 140.727170][ T5910] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.740238][ T7051] team0: Port device team_slave_1 removed [ 140.753152][ T7051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.761692][ T7051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.781316][ T30] audit: type=1400 audit(1753187590.893:300): avc: denied { read } for pid=7060 comm="syz.2.346" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 140.782637][ T7051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.828856][ T7051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.836773][ T30] audit: type=1400 audit(1753187590.893:301): avc: denied { open } for pid=7060 comm="syz.2.346" path="/71/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 140.841047][ T7064] block device autoloading is deprecated and will be removed. [ 140.905019][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 140.911623][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.949696][ T5910] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 140.952847][ T7051] macvlan1: left allmulticast mode [ 140.966691][ T7051] veth1_vlan: left allmulticast mode [ 140.972021][ T7051] macvlan1: left promiscuous mode [ 140.978117][ T7051] bridge0: port 3(macvlan1) entered disabled state [ 140.989205][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.012099][ T7051] bond0: (slave wlan1): Releasing backup interface [ 141.025610][ T5910] usb 4-1: Product: syz [ 141.029807][ T5910] usb 4-1: Manufacturer: syz [ 141.055768][ T5910] usb 4-1: SerialNumber: syz [ 141.098890][ T5910] usb 4-1: config 0 descriptor?? [ 141.329217][ T5910] usb 4-1: USB disconnect, device number 3 [ 141.755135][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.354'. [ 141.764946][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 145.275879][ T7120] syzkaller0: entered promiscuous mode [ 145.301250][ T7120] syzkaller0: entered allmulticast mode [ 145.340881][ T30] audit: type=1400 audit(1753187595.453:302): avc: denied { relabelfrom } for pid=7119 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 145.424488][ T30] audit: type=1400 audit(1753187595.463:303): avc: denied { relabelto } for pid=7119 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 146.166485][ T5898] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.295261][ T5877] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.334790][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 146.481620][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.585444][ T5898] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 146.656557][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.668612][ T5898] usb 5-1: Product: syz [ 146.672827][ T5898] usb 5-1: Manufacturer: syz [ 146.680568][ T5898] usb 5-1: SerialNumber: syz [ 146.689848][ T5898] usb 5-1: config 0 descriptor?? [ 146.794711][ T5877] usb 2-1: device descriptor read/64, error -71 [ 147.046281][ T5877] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 147.537483][ T7144] bridge_slave_0: left allmulticast mode [ 147.543179][ T7144] bridge_slave_0: left promiscuous mode [ 147.549667][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.568851][ T5877] usb 2-1: device descriptor read/64, error -71 [ 147.576969][ T7144] bridge_slave_1: left allmulticast mode [ 147.582767][ T7144] bridge_slave_1: left promiscuous mode [ 147.588951][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.648604][ T7144] bond0: (slave bond_slave_0): Releasing backup interface [ 147.664774][ T7144] bond0: (slave bond_slave_1): Releasing backup interface [ 147.688288][ T5877] usb usb2-port1: attempt power cycle [ 147.792546][ T7144] team0: Port device team_slave_0 removed [ 148.167655][ T7144] team0: Port device team_slave_1 removed [ 148.266743][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.358382][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.424640][ T5877] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.511944][ T5877] usb 2-1: device descriptor read/8, error -71 [ 148.523838][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.569097][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 148.578888][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.793218][ T5898] usb 5-1: USB disconnect, device number 3 [ 148.797758][ T7175] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 148.814486][ T5877] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.845059][ T5877] usb 2-1: device descriptor read/8, error -71 [ 148.897447][ T30] audit: type=1400 audit(1753187599.003:304): avc: denied { create } for pid=7178 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.942944][ T30] audit: type=1400 audit(1753187599.013:305): avc: denied { connect } for pid=7178 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.967013][ T5877] usb usb2-port1: unable to enumerate USB device [ 148.983958][ T30] audit: type=1400 audit(1753187599.013:306): avc: denied { ioctl } for pid=7178 comm="syz.0.386" path="socket:[13331]" dev="sockfs" ino=13331 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.187964][ T30] audit: type=1400 audit(1753187599.013:307): avc: denied { write } for pid=7178 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.974480][ T30] audit: type=1400 audit(1753187599.913:308): avc: denied { bind } for pid=7200 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.191990][ T7204] bridge_slave_0: left allmulticast mode [ 150.207412][ T7204] bridge_slave_0: left promiscuous mode [ 150.226742][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.256787][ T7204] bridge_slave_1: left allmulticast mode [ 150.262480][ T7204] bridge_slave_1: left promiscuous mode [ 150.272571][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.403725][ T7204] bond0: (slave bond_slave_0): Releasing backup interface [ 150.431455][ T7204] bond0: (slave bond_slave_1): Releasing backup interface [ 150.451731][ T7204] team0: Port device team_slave_0 removed [ 150.466307][ T7204] team0: Port device team_slave_1 removed [ 150.472617][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.481094][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.490040][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.497915][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.517087][ T7219] netlink: 92 bytes leftover after parsing attributes in process `syz.4.398'. [ 150.624791][ T5910] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 150.776839][ T7231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7231 comm=syz.4.402 [ 150.792813][ T30] audit: type=1400 audit(1753187600.903:309): avc: denied { sqpoll } for pid=7227 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.795703][ T7231] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7231 comm=syz.4.402 [ 150.824713][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 150.833252][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.846130][ T5910] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 150.855296][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.869617][ T5910] usb 2-1: Product: syz [ 150.875148][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.402'. [ 150.884190][ T5910] usb 2-1: Manufacturer: syz [ 150.890198][ T5910] usb 2-1: SerialNumber: syz [ 150.900815][ T5910] usb 2-1: config 0 descriptor?? [ 151.210185][ T5888] usb 2-1: USB disconnect, device number 8 [ 151.648011][ T30] audit: type=1326 audit(1753187601.763:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 151.650474][ T7249] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 151.684152][ T30] audit: type=1326 audit(1753187601.763:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 151.750612][ T30] audit: type=1326 audit(1753187601.763:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 151.787164][ T30] audit: type=1326 audit(1753187601.763:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 151.984172][ T30] audit: type=1326 audit(1753187601.763:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 152.009039][ T30] audit: type=1326 audit(1753187601.763:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 152.032717][ T30] audit: type=1326 audit(1753187601.803:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 152.186791][ T30] audit: type=1326 audit(1753187601.803:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 152.275057][ T5877] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 152.446422][ T7262] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 152.458102][ T7262] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 152.908715][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.922305][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.932732][ T5877] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 152.942820][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.954327][ T5877] usb 1-1: config 0 descriptor?? [ 153.202908][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.418'. [ 153.214691][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 153.853416][ T5877] usbhid 1-1:0.0: can't add hid device: -71 [ 153.981518][ T5877] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 154.311581][ T5877] usb 1-1: USB disconnect, device number 5 [ 156.226660][ T5910] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.494616][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 156.502148][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.516988][ T5910] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 156.526151][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.534230][ T5910] usb 2-1: Product: syz [ 156.974282][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'. [ 156.986434][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 157.264539][ T5910] usb 2-1: Manufacturer: syz [ 157.305325][ T5910] usb 2-1: SerialNumber: syz [ 157.335216][ T5910] usb 2-1: config 0 descriptor?? [ 157.582058][ T5877] usb 2-1: USB disconnect, device number 9 [ 158.992990][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 160.390516][ T30] audit: type=1326 audit(1753187610.503:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 160.415354][ T30] audit: type=1326 audit(1753187610.503:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 160.440855][ T30] audit: type=1326 audit(1753187610.503:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 160.492092][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.445'. [ 160.502084][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 160.607241][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 161.007956][ T30] audit: type=1326 audit(1753187610.503:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 161.043184][ T30] audit: type=1326 audit(1753187610.503:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 161.078108][ T30] audit: type=1326 audit(1753187610.503:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7ffc0000 [ 161.374616][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 161.385136][ T24] usb 3-1: config 254 has an invalid interface number: 192 but max is 0 [ 161.395631][ T24] usb 3-1: config 254 has no interface number 0 [ 161.402098][ T24] usb 3-1: config 254 interface 192 has no altsetting 0 [ 161.509863][ T24] usb 3-1: New USB device found, idVendor=2001, idProduct=f115, bcdDevice=cf.83 [ 161.722487][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.743128][ T24] usb 3-1: Product: syz [ 163.240756][ T24] usb 3-1: Manufacturer: syz [ 163.271221][ T24] usb 3-1: SerialNumber: syz [ 163.815116][ T24] usb 3-1: can't set config #254, error -71 [ 163.827276][ T24] usb 3-1: USB disconnect, device number 4 [ 165.779715][ T30] audit: type=1326 audit(1753187615.893:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7ffc0000 [ 165.839912][ T30] audit: type=1326 audit(1753187615.893:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7ffc0000 [ 165.863435][ T30] audit: type=1326 audit(1753187615.923:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a36f8e929 code=0x7ffc0000 [ 165.930024][ T7400] vivid-007: ================= START STATUS ================= [ 165.960662][ T7400] vivid-007: Enable Output Cropping: true [ 165.967859][ T30] audit: type=1326 audit(1753187615.923:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7ffc0000 [ 165.991824][ T30] audit: type=1326 audit(1753187615.923:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7ffc0000 [ 166.020387][ T7400] vivid-007: Enable Output Composing: true [ 166.046545][ T7400] vivid-007: Enable Output Scaler: true [ 166.061591][ T7400] vivid-007: Tx RGB Quantization Range: Automatic [ 166.070442][ T7400] vivid-007: Transmit Mode: HDMI [ 166.076049][ T7400] vivid-007: Hotplug Present: 0x00000000 [ 166.081845][ T7400] vivid-007: RxSense Present: 0x00000000 [ 166.089627][ T7400] vivid-007: EDID Present: 0x00000000 [ 166.292133][ T7411] syz_tun: entered allmulticast mode [ 166.884845][ T7396] syz_tun: left allmulticast mode [ 166.935738][ T30] audit: type=1326 audit(1753187615.923:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a36f8e929 code=0x7ffc0000 [ 167.048789][ T30] audit: type=1326 audit(1753187615.923:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7ffc0000 [ 167.083704][ T7400] vivid-007: ================== END STATUS ================== [ 167.099268][ T30] audit: type=1326 audit(1753187615.923:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7ffc0000 [ 167.174722][ T6969] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 167.344468][ T6969] usb 1-1: Using ep0 maxpacket: 8 [ 167.363459][ T6969] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 167.398325][ T6969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.448458][ T6969] usb 1-1: Product: syz [ 167.452664][ T6969] usb 1-1: Manufacturer: syz [ 167.757028][ T6969] usb 1-1: SerialNumber: syz [ 167.772563][ T6969] usb 1-1: bad CDC descriptors [ 171.034655][ T5910] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.174604][ T5910] usb 5-1: device descriptor read/64, error -71 [ 172.055355][ T5910] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 172.194023][ T5910] usb 5-1: device descriptor read/64, error -71 [ 172.319982][ T5910] usb usb5-port1: attempt power cycle [ 172.738786][ T5910] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 173.037471][ T5910] usb 5-1: device descriptor read/8, error -71 [ 173.304953][ T5910] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.341650][ T5910] usb 5-1: device descriptor read/8, error -71 [ 173.388277][ T43] usb 1-1: USB disconnect, device number 6 [ 173.459992][ T30] audit: type=1400 audit(1753187623.563:332): avc: denied { name_bind } for pid=7504 comm="syz.1.486" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 173.484997][ T5910] usb usb5-port1: unable to enumerate USB device [ 175.499696][ T7536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7536 comm=syz.2.492 [ 175.770725][ T7536] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7536 comm=syz.2.492 [ 176.268089][ T7546] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 176.279658][ T7546] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 176.534929][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 176.549928][ T30] audit: type=1400 audit(1753187626.663:333): avc: denied { write } for pid=7534 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 179.909235][ T7596] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.920803][ T7596] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 181.784130][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 183.152323][ T7643] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 183.164222][ T7643] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 185.184486][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 185.354709][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 185.368005][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.395466][ T30] audit: type=1400 audit(1753187635.503:334): avc: denied { ioctl } for pid=7664 comm="syz.1.532" path="socket:[14052]" dev="sockfs" ino=14052 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.477687][ T7666] netlink: 892 bytes leftover after parsing attributes in process `syz.1.532'. [ 185.642993][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 185.679382][ T24] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 185.742654][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 185.742735][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 185.764580][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.785601][ T30] audit: type=1400 audit(1753187635.613:335): avc: denied { write } for pid=7664 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.821568][ T7669] overlayfs: missing 'lowerdir' [ 185.824479][ T24] usb 3-1: Product: syz [ 185.835705][ T24] usb 3-1: Manufacturer: syz [ 185.851186][ T24] usb 3-1: SerialNumber: syz [ 185.935924][ T24] usb 3-1: config 0 descriptor?? [ 186.035814][ T30] audit: type=1400 audit(1753187636.153:336): avc: denied { setopt } for pid=7670 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.183767][ T5910] usb 3-1: USB disconnect, device number 5 [ 186.237448][ T30] audit: type=1400 audit(1753187636.343:337): avc: denied { write } for pid=7670 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.920361][ T30] audit: type=1326 audit(1753187637.033:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 187.144472][ T30] audit: type=1326 audit(1753187637.033:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 187.168025][ T30] audit: type=1326 audit(1753187637.033:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 187.191479][ T30] audit: type=1326 audit(1753187637.033:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 187.217384][ T30] audit: type=1326 audit(1753187637.033:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 187.241223][ T30] audit: type=1326 audit(1753187637.063:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 187.706912][ T5839] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 188.773790][ T7706] overlayfs: missing 'lowerdir' [ 188.809272][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 188.910675][ T7709] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.989748][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.114479][ T43] usb 4-1: config 0 has no interfaces? [ 189.125503][ T43] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06 [ 189.142725][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 189.161794][ T43] usb 4-1: SerialNumber: syz [ 189.202117][ T43] usb 4-1: config 0 descriptor?? [ 189.635674][ T24] usb 4-1: USB disconnect, device number 4 [ 191.785189][ T5839] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 191.794310][ T5839] Bluetooth: hci1: Injecting HCI hardware error event [ 191.805287][ T5839] Bluetooth: hci1: hardware error 0x00 [ 193.853189][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.859568][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.866998][ T5839] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 194.022373][ T7762] netlink: 224 bytes leftover after parsing attributes in process `syz.2.561'. [ 194.425894][ T7778] binder: 7776:7778 ioctl c0306201 200000000040 returned -14 [ 195.294184][ T7791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7791 comm=syz.4.570 [ 196.292628][ T7791] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7791 comm=syz.4.570 [ 196.306517][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.570'. [ 196.511702][ T7809] netlink: 224 bytes leftover after parsing attributes in process `syz.0.578'. [ 196.677237][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 196.677253][ T30] audit: type=1326 audit(1753187646.793:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8838e929 code=0x7ffc0000 [ 196.785907][ T30] audit: type=1326 audit(1753187646.823:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f8838e929 code=0x7ffc0000 [ 196.810257][ T30] audit: type=1326 audit(1753187646.823:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8838e929 code=0x7ffc0000 [ 196.837580][ T30] audit: type=1326 audit(1753187646.823:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f8838e929 code=0x7ffc0000 [ 196.886510][ T30] audit: type=1326 audit(1753187646.823:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8838e929 code=0x7ffc0000 [ 196.910824][ T30] audit: type=1326 audit(1753187646.823:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8838e929 code=0x7ffc0000 [ 200.468690][ T30] audit: type=1400 audit(1753187650.583:404): avc: denied { ioctl } for pid=7866 comm="syz.3.596" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15442 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 203.040189][ T30] audit: type=1400 audit(1753187653.153:405): avc: denied { getopt } for pid=7905 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.247495][ T7911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7911 comm=syz.4.608 [ 203.263260][ T7908] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 203.291275][ T7911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7911 comm=syz.4.608 [ 203.293237][ T7908] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 203.324549][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.608'. [ 204.007154][ T7923] Illegal XDP return value 2119312599 on prog (id 179) dev syz_tun, expect packet loss! [ 208.574565][ T30] audit: type=1400 audit(1753187658.643:406): avc: denied { accept } for pid=7982 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.964640][ T30] audit: type=1326 audit(1753187659.073:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 209.152566][ T7999] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 209.166518][ T7999] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 209.551154][ T30] audit: type=1326 audit(1753187659.073:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 209.621122][ T30] audit: type=1326 audit(1753187659.073:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 209.687960][ T30] audit: type=1326 audit(1753187659.073:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 209.751767][ T30] audit: type=1326 audit(1753187659.073:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 209.862495][ T30] audit: type=1326 audit(1753187659.073:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 210.214774][ T30] audit: type=1326 audit(1753187659.073:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 210.374087][ T30] audit: type=1326 audit(1753187659.073:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 210.764622][ T30] audit: type=1326 audit(1753187659.073:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.4.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab218e929 code=0x7fc00000 [ 210.840967][ T8017] overlayfs: missing 'lowerdir' [ 211.994546][ T5910] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 212.159988][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.183642][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.196919][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.211536][ T5910] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.223364][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.318316][ T5910] usb 5-1: config 0 descriptor?? [ 213.310959][ T5910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.329758][ T5910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.388558][ T5910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.403865][ T5910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.453774][ T5910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.469508][ T5910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.479701][ T5910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.487363][ T5910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.495412][ T5910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.502955][ T5910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.560603][ T5910] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 213.593570][ T5910] usb 5-1: USB disconnect, device number 8 [ 213.717503][ T8064] overlayfs: missing 'lowerdir' [ 213.731116][ T8059] fido_id[8059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 214.336287][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 214.336304][ T30] audit: type=1326 audit(1753187664.453:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 214.422950][ T30] audit: type=1326 audit(1753187664.483:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 214.463983][ T30] audit: type=1326 audit(1753187664.483:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 214.526528][ T30] audit: type=1326 audit(1753187664.483:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 214.550923][ T30] audit: type=1326 audit(1753187664.483:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 214.587693][ T30] audit: type=1326 audit(1753187664.483:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 214.695666][ T30] audit: type=1326 audit(1753187664.483:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 214.719120][ T30] audit: type=1326 audit(1753187664.483:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 214.742918][ T30] audit: type=1326 audit(1753187664.483:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 214.767390][ T30] audit: type=1326 audit(1753187664.483:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 216.159353][ T8094] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.927827][ T8106] overlayfs: missing 'lowerdir' [ 218.711310][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 220.167238][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 220.167253][ T30] audit: type=1400 audit(1753187670.273:486): avc: denied { ioctl } for pid=8140 comm="syz.2.677" path="socket:[17078]" dev="sockfs" ino=17078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.337311][ T8148] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 220.419938][ T8148] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 221.414512][ T6012] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 221.684481][ T6012] usb 5-1: Using ep0 maxpacket: 32 [ 221.777295][ T6012] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 221.791653][ T6012] usb 5-1: config 0 has no interface number 0 [ 222.310337][ T6012] usb 5-1: config 0 interface 184 has no altsetting 0 [ 222.320091][ T6012] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 222.347977][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.373531][ T6012] usb 5-1: Product: syz [ 222.379083][ T6012] usb 5-1: Manufacturer: syz [ 222.385031][ T6012] usb 5-1: SerialNumber: syz [ 222.422048][ T6012] usb 5-1: config 0 descriptor?? [ 222.445952][ T6012] smsc75xx v1.0.0 [ 222.982411][ T8185] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.504262][ T30] audit: type=1326 audit(1753187673.613:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 223.664973][ T8195] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 223.673710][ T8195] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 223.924917][ T6012] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 223.991282][ T6012] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 224.117643][ T6012] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 224.221253][ T6012] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 224.314789][ T6012] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 224.391192][ T6012] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 224.461261][ T6012] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 224.499257][ T5888] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 224.566833][ T6012] usb 5-1: USB disconnect, device number 9 [ 224.735232][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 224.780924][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.847651][ T5888] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 224.894785][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.726598][ T5888] usb 4-1: Product: syz [ 225.730820][ T5888] usb 4-1: Manufacturer: syz [ 225.736326][ T5888] usb 4-1: SerialNumber: syz [ 225.743166][ T5888] usb 4-1: config 0 descriptor?? [ 226.235608][ T5888] usb 4-1: USB disconnect, device number 5 [ 226.419162][ T8235] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 226.432072][ T8235] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 226.744812][ T43] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 226.945634][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 226.952590][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 226.963526][ T43] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 226.974146][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.984028][ T43] usb 1-1: Product: syz [ 226.994047][ T43] usb 1-1: Manufacturer: syz [ 227.000475][ T43] usb 1-1: SerialNumber: syz [ 227.030842][ T43] usb 1-1: config 0 descriptor?? [ 227.069982][ T43] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 227.325950][ T43] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 227.576253][ T43] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 228.392585][ T43] usb 1-1: USB disconnect, device number 7 [ 228.684999][ T30] audit: type=1400 audit(1753187678.783:488): avc: denied { connect } for pid=8259 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 228.838256][ T8268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.718'. [ 228.869190][ T8268] netlink: 152 bytes leftover after parsing attributes in process `syz.1.718'. [ 228.957720][ T30] audit: type=1400 audit(1753187678.973:489): avc: denied { setopt } for pid=8266 comm="syz.2.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.083676][ T8277] netlink: 'syz.2.721': attribute type 4 has an invalid length. [ 229.274050][ T5839] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 229.836852][ T8300] Bluetooth: MGMT ver 1.23 [ 230.244461][ T30] audit: type=1400 audit(1753187680.353:490): avc: denied { read } for pid=8302 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.340196][ T8309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.731'. [ 230.375118][ T8309] netlink: 152 bytes leftover after parsing attributes in process `syz.4.731'. [ 230.711093][ T30] audit: type=1400 audit(1753187680.823:491): avc: denied { append } for pid=8306 comm="syz.0.732" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 231.674618][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 232.676939][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 232.685919][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 232.694320][ T43] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 232.703475][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.711599][ T43] usb 5-1: Product: syz [ 232.717434][ T43] usb 5-1: Manufacturer: syz [ 232.723273][ T43] usb 5-1: SerialNumber: syz [ 232.730080][ T43] usb 5-1: config 0 descriptor?? [ 232.742301][ T43] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 232.978232][ T43] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 232.988698][ T43] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 233.180791][ T43] usb 5-1: USB disconnect, device number 10 [ 233.305262][ T5839] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 233.314353][ T5839] Bluetooth: hci3: Injecting HCI hardware error event [ 233.322442][ T5839] Bluetooth: hci3: hardware error 0x00 [ 235.414718][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 235.919591][ T30] audit: type=1400 audit(1753187686.033:492): avc: denied { append } for pid=8381 comm="syz.1.755" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.168898][ T8397] cgroup: fork rejected by pids controller in /syz4 [ 238.856415][ T5986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.987837][ T5986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.138127][ T30] audit: type=1400 audit(1753187689.253:493): avc: denied { create } for pid=8430 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 239.178147][ T30] audit: type=1400 audit(1753187689.253:494): avc: denied { connect } for pid=8430 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 239.238080][ T5986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.261175][ T30] audit: type=1400 audit(1753187689.323:495): avc: denied { bind } for pid=8430 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 239.305565][ T30] audit: type=1400 audit(1753187689.323:496): avc: denied { listen } for pid=8430 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 239.350621][ T30] audit: type=1400 audit(1753187689.323:497): avc: denied { accept } for pid=8430 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 239.410067][ T5986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.436307][ T30] audit: type=1400 audit(1753187689.363:498): avc: denied { connect } for pid=8430 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 239.978533][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.988916][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.998297][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.018613][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.027204][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.096192][ T30] audit: type=1400 audit(1753187690.213:499): avc: denied { read } for pid=8441 comm="syz.3.772" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 240.480513][ T30] audit: type=1400 audit(1753187690.243:500): avc: denied { open } for pid=8441 comm="syz.3.772" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 240.546383][ T30] audit: type=1400 audit(1753187690.303:501): avc: denied { setopt } for pid=8441 comm="syz.3.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 241.478451][ T30] audit: type=1326 audit(1753187691.593:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 241.514898][ T30] audit: type=1326 audit(1753187691.593:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 241.538762][ T30] audit: type=1326 audit(1753187691.593:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 241.568355][ T30] audit: type=1326 audit(1753187691.593:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 241.592257][ T30] audit: type=1326 audit(1753187691.593:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 241.615882][ T30] audit: type=1326 audit(1753187691.593:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 241.618884][ T5986] bond0 (unregistering): Released all slaves [ 241.640093][ T30] audit: type=1326 audit(1753187691.593:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 241.781575][ T30] audit: type=1326 audit(1753187691.593:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 241.809824][ T30] audit: type=1326 audit(1753187691.593:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 241.833338][ T30] audit: type=1326 audit(1753187691.593:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 241.960154][ T8474] 9pnet_fd: Insufficient options for proto=fd [ 242.106800][ T5839] Bluetooth: hci0: command tx timeout [ 242.446253][ T5986] hsr_slave_0: left promiscuous mode [ 242.464011][ T5986] hsr_slave_1: left promiscuous mode [ 242.681169][ T5986] veth1_macvtap: left promiscuous mode [ 242.688381][ T5986] veth0_macvtap: left promiscuous mode [ 242.694132][ T5986] veth1_vlan: left promiscuous mode [ 242.817926][ T5986] veth0_vlan: left promiscuous mode [ 244.214075][ T5839] Bluetooth: hci0: command tx timeout [ 245.765181][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.786845][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.807211][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.815728][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.823138][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.833376][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.841064][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.852765][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.861184][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.871221][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.880018][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.890094][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.900294][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.914586][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.934620][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.942044][ T6969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.990216][ T6969] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [Á“ƽZÄæwÇý[baÿ–é|\rnÀ)A¼#6”oÒ¯ô?•ða Iü¸äãs„Ö5hVõ3ñ®(;éò [ 245.990216][ T6969] ãуPÔ$zÉ·‡X$©·à˜w[SÖì–ÀRìÑeÑzx—ÞuñS r»œÏláì[µ5l'˜ZCz2ñ] on ü’týDKÍí˜Y縣Ϫòž¿¹,ÇËúÒU›¾Oá‰èpŽ“‚{"iÌxúAý[Ëew·ßäÃ’}ÂZXª„A [ 246.110556][ T8533] fido_id[8533]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.274828][ T5832] Bluetooth: hci0: command tx timeout [ 248.087981][ T8439] chnl_net:caif_netlink_parms(): no params data found [ 248.394548][ T5832] Bluetooth: hci0: command tx timeout [ 248.516609][ T8439] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.548745][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.556346][ T8439] bridge_slave_0: entered allmulticast mode [ 248.563732][ T8439] bridge_slave_0: entered promiscuous mode [ 248.572493][ T8439] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.579905][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.587528][ T8439] bridge_slave_1: entered allmulticast mode [ 248.595163][ T8439] bridge_slave_1: entered promiscuous mode [ 248.626861][ T8439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.642960][ T8439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.709959][ T8439] team0: Port device team_slave_0 added [ 248.741046][ T8439] team0: Port device team_slave_1 added [ 248.823832][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.841211][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.904486][ T8439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.937202][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.944180][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.979865][ T8439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.262343][ T8439] hsr_slave_0: entered promiscuous mode [ 249.280130][ T8439] hsr_slave_1: entered promiscuous mode [ 249.413018][ T8580] capability: warning: `syz.2.798' uses 32-bit capabilities (legacy support in use) [ 249.556383][ T8579] input: syz1 as /devices/virtual/input/input6 [ 249.564846][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 249.564862][ T30] audit: type=1400 audit(1753187699.663:571): avc: denied { read } for pid=8573 comm="syz.3.797" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 250.026246][ T8587] netlink: 60 bytes leftover after parsing attributes in process `syz.2.799'. [ 252.115744][ T8604] No buffer was provided with the request [ 254.116906][ T8439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 254.140990][ T8439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 254.172941][ T8439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 254.199919][ T8439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 254.290121][ T30] audit: type=1326 audit(1753187704.393:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c6f8e929 code=0x7fc00000 [ 254.489591][ T8645] 9pnet_fd: Insufficient options for proto=fd [ 254.701965][ T8652] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 254.716669][ T8439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.792300][ T8439] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.853860][ T8439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.874734][ T8439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.904845][ T2133] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.912021][ T2133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.925588][ T2133] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.932732][ T2133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.235849][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.251889][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.448928][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 255.783996][ T30] audit: type=1400 audit(1753187705.893:573): avc: denied { ioctl } for pid=8673 comm="syz.3.819" path="socket:[18295]" dev="sockfs" ino=18295 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 255.930433][ T8439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.613377][ T30] audit: type=1326 audit(1753187706.723:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7fc00000 [ 256.680346][ T30] audit: type=1326 audit(1753187706.723:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a36f8e929 code=0x7fc00000 [ 256.802804][ T30] audit: type=1326 audit(1753187706.723:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7fc00000 [ 256.839749][ T8710] 9pnet_fd: Insufficient options for proto=fd [ 256.887211][ T30] audit: type=1326 audit(1753187706.723:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7fc00000 [ 256.930286][ T30] audit: type=1326 audit(1753187706.723:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7fc00000 [ 256.986333][ T30] audit: type=1326 audit(1753187706.723:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7fc00000 [ 257.006532][ T8439] veth0_vlan: entered promiscuous mode [ 257.012256][ T30] audit: type=1326 audit(1753187706.723:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7fc00000 [ 257.055690][ T8439] veth1_vlan: entered promiscuous mode [ 257.100000][ T30] audit: type=1326 audit(1753187706.723:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7fc00000 [ 257.133063][ T30] audit: type=1326 audit(1753187706.723:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36f8e929 code=0x7fc00000 [ 257.213626][ T8439] veth0_macvtap: entered promiscuous mode [ 257.262961][ T8439] veth1_macvtap: entered promiscuous mode [ 257.349189][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.504856][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.528626][ T8439] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.025397][ T8439] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.057351][ T8439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.077653][ T8439] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.262448][ T8744] vivid-007: ================= START STATUS ================= [ 258.326831][ T8744] vivid-007: Enable Output Cropping: true [ 258.360546][ T8744] vivid-007: Enable Output Composing: true [ 258.374601][ T8744] vivid-007: Enable Output Scaler: true [ 258.405166][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.416195][ T8744] vivid-007: Tx RGB Quantization Range: Automatic [ 258.422665][ T8744] vivid-007: Transmit Mode: HDMI [ 258.442972][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.453900][ T8744] vivid-007: Hotplug Present: 0x00000000 [ 258.472898][ T8744] vivid-007: RxSense Present: 0x00000000 [ 258.537754][ T8744] vivid-007: EDID Present: 0x00000000 [ 258.547095][ T8744] vivid-007: ================== END STATUS ================== [ 259.112777][ T5877] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 259.191739][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.214454][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.331035][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 259.360393][ T5877] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 259.370906][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.391328][ T5877] usb 4-1: Product: syz [ 259.483748][ T5877] usb 4-1: Manufacturer: syz [ 259.517223][ T5877] usb 4-1: SerialNumber: syz [ 259.997356][ T5877] usb 4-1: bad CDC descriptors [ 261.828847][ T6012] usb 4-1: USB disconnect, device number 6 [ 262.850682][ T8819] netlink: 548 bytes leftover after parsing attributes in process `syz.3.851'. [ 263.045764][ T8827] vivid-007: ================= START STATUS ================= [ 263.067822][ T8827] vivid-007: Enable Output Cropping: true [ 263.233308][ T8827] vivid-007: Enable Output Composing: true [ 263.246252][ T8827] vivid-007: Enable Output Scaler: true [ 263.253174][ T8827] vivid-007: Tx RGB Quantization Range: Automatic [ 263.261736][ T8827] vivid-007: Transmit Mode: HDMI [ 263.267325][ T8827] vivid-007: Hotplug Present: 0x00000000 [ 263.273215][ T8827] vivid-007: RxSense Present: 0x00000000 [ 263.862960][ T8827] vivid-007: EDID Present: 0x00000000 [ 263.892861][ T8827] vivid-007: ================== END STATUS ================== [ 264.159020][ T5888] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 264.604440][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 264.669829][ T5888] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 264.689879][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.698431][ T5888] usb 1-1: Product: syz [ 264.702612][ T5888] usb 1-1: Manufacturer: syz [ 264.711838][ T5888] usb 1-1: SerialNumber: syz [ 264.731466][ T5888] usb 1-1: bad CDC descriptors [ 264.924859][ T8859] netlink: 'syz.3.862': attribute type 10 has an invalid length. [ 264.939080][ T8857] tipc: Started in network mode [ 264.946749][ T8857] tipc: Node identity 060dd94c3c7e, cluster identity 4711 [ 264.954065][ T8857] tipc: Enabled bearer , priority 0 [ 264.989350][ T8857] syzkaller0: entered promiscuous mode [ 265.068753][ T8857] syzkaller0: entered allmulticast mode [ 265.309656][ T8867] tipc: Resetting bearer [ 265.493458][ T8856] tipc: Resetting bearer [ 265.956009][ T43] tipc: Node number set to 980670796 [ 266.001781][ T8856] tipc: Disabling bearer [ 266.199388][ T8889] input: syz1 as /devices/virtual/input/input7 [ 268.898238][ T24] usb 1-1: USB disconnect, device number 8 [ 268.974602][ T5910] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 269.134669][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 269.153776][ T5910] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 269.162686][ T5910] usb 4-1: config 0 has no interface number 0 [ 269.171099][ T5910] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 269.181071][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.189253][ T5910] usb 4-1: Product: syz [ 269.193535][ T5910] usb 4-1: Manufacturer: syz [ 269.198229][ T5910] usb 4-1: SerialNumber: syz [ 269.256957][ T8936] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 269.626717][ T5910] usb 4-1: config 0 descriptor?? [ 269.677033][ T5910] smsc95xx v2.0.0 [ 270.248060][ T8953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.889'. [ 270.602879][ T8961] bridge_slave_0: left allmulticast mode [ 270.667564][ T8961] bridge_slave_0: left promiscuous mode [ 270.700427][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.716265][ T5910] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 270.744113][ T5910] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 270.760763][ T5910] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 270.780463][ T8961] bridge_slave_1: left allmulticast mode [ 270.788336][ T8961] bridge_slave_1: left promiscuous mode [ 270.794238][ T5910] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 270.805519][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.822227][ T5910] usb 4-1: USB disconnect, device number 7 [ 270.842937][ T8961] bond0: (slave bond_slave_0): Releasing backup interface [ 270.872796][ T8961] bond0: (slave bond_slave_1): Releasing backup interface [ 270.911423][ T8961] team0: Port device team_slave_0 removed [ 270.939399][ T8961] team0: Port device team_slave_1 removed [ 270.955880][ T8961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.966838][ T974] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 270.978524][ T8961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.990825][ T8961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.001126][ T8961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.024320][ T8961] team0: Port device ip6gretap1 removed [ 271.127376][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 271.159355][ T974] usb 1-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 271.173607][ T974] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 271.187639][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.197488][ T974] usb 1-1: Product: syz [ 271.201670][ T974] usb 1-1: Manufacturer: syz [ 271.209213][ T974] usb 1-1: SerialNumber: syz [ 271.225718][ T974] usb 1-1: config 0 descriptor?? [ 271.427654][ T8974] process 'syz.3.895' launched './file2' with NULL argv: empty string added [ 271.447397][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 271.447419][ T30] audit: type=1400 audit(1753187721.553:644): avc: denied { execute_no_trans } for pid=8972 comm="syz.3.895" path="/204/file2" dev="tmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.064026][ T24] usb 1-1: USB disconnect, device number 9 [ 273.624971][ T8997] netlink: 44 bytes leftover after parsing attributes in process `syz.0.903'. [ 278.669926][ T9022] PKCS8: Unsupported PKCS#8 version [ 281.424668][ T6012] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 283.149337][ T9048] 9pnet_fd: Insufficient options for proto=fd [ 283.304087][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 283.597959][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.630692][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.693654][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 283.757322][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.410298][ T24] usb 2-1: config 0 descriptor?? [ 287.195384][ T24] usb 2-1: string descriptor 0 read error: -71 [ 287.262862][ T24] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 287.326148][ T24] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 287.566451][ T24] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 288.571122][ T24] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 289.553661][ T24] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 289.577962][ T24] usb 2-1: USB disconnect, device number 10 [ 290.649465][ T9087] netlink: 'syz.3.929': attribute type 10 has an invalid length. [ 291.054620][ T6012] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 291.141940][ T9095] 9pnet_fd: Insufficient options for proto=fd [ 291.244454][ T6012] usb 4-1: Using ep0 maxpacket: 16 [ 291.268918][ T6012] usb 4-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 291.319513][ T6012] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 291.347296][ T6012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.371319][ T6012] usb 4-1: Product: syz [ 291.384385][ C0] sched: DL replenish lagged too much [ 291.390077][ T6012] usb 4-1: Manufacturer: syz [ 295.344700][ T6012] usb 4-1: SerialNumber: syz [ 295.500771][ T6012] usb 4-1: config 0 descriptor?? [ 295.506781][ T9087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.541689][ T9087] bond0: (slave wlan1): Opening slave failed [ 295.631555][ T6012] usb 4-1: can't set config #0, error -71 [ 295.660914][ T6012] usb 4-1: USB disconnect, device number 8 [ 296.649605][ T9109] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 296.661401][ T9109] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 299.129592][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.140145][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.148774][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.162524][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.184944][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.643393][ T9118] chnl_net:caif_netlink_parms(): no params data found [ 300.007937][ T9118] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.037818][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.067592][ T9118] bridge_slave_0: entered allmulticast mode [ 300.095804][ T9118] bridge_slave_0: entered promiscuous mode [ 300.120153][ T9118] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.160660][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.184918][ T9118] bridge_slave_1: entered allmulticast mode [ 300.216148][ T9118] bridge_slave_1: entered promiscuous mode [ 300.359200][ T9131] binder: 9130:9131 ioctl c0306201 0 returned -14 [ 300.439585][ T9118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.518940][ T9118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.608088][ T9135] 9pnet_fd: Insufficient options for proto=fd [ 301.834411][ T5839] Bluetooth: hci5: command tx timeout [ 301.870076][ T9118] team0: Port device team_slave_0 added [ 302.711400][ T9118] team0: Port device team_slave_1 added [ 306.255423][ T5839] Bluetooth: hci5: command tx timeout [ 308.625820][ T5832] Bluetooth: hci5: command tx timeout [ 310.674801][ T5832] Bluetooth: hci5: command tx timeout [ 311.391618][ T9161] binder: BINDER_SET_CONTEXT_MGR already set [ 311.434533][ T9161] binder: 9159:9161 ioctl 4018620d 200000000040 returned -16 [ 312.001220][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.010015][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.018573][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.028616][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.036279][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.113815][ T9166] 9pnet_fd: Insufficient options for proto=fd [ 312.206883][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.219267][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.227484][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.235692][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.245175][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.696558][ T9177] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 313.707793][ T9177] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 314.415070][ T5839] Bluetooth: hci2: command tx timeout [ 314.634413][ T5832] Bluetooth: hci1: command tx timeout [ 316.714941][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.721338][ T5832] Bluetooth: hci1: command tx timeout [ 316.721382][ T5839] Bluetooth: hci2: command tx timeout [ 316.848195][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.851265][ T5839] Bluetooth: hci1: command tx timeout [ 318.951366][ T5839] Bluetooth: hci2: command tx timeout [ 321.385500][ T5832] Bluetooth: hci2: command tx timeout [ 321.549803][ T5839] Bluetooth: hci1: command tx timeout [ 321.577683][ T30] audit: type=1400 audit(1753187771.683:645): avc: denied { create } for pid=9192 comm="syz.4.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 327.049532][ T9199] delete_channel: no stack [ 359.108555][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.117418][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.128130][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 359.136295][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.144141][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.152894][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 359.160491][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.195720][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 359.203547][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 359.211423][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 359.484768][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 359.499230][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 359.511314][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 359.523517][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 359.532221][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.224540][ T5832] Bluetooth: hci4: command tx timeout [ 361.305565][ T5832] Bluetooth: hci6: command tx timeout [ 361.544606][ T5832] Bluetooth: hci7: command tx timeout [ 363.120508][ T9118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.130546][ T9118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.160255][ T9118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.309514][ T5832] Bluetooth: hci4: command tx timeout [ 363.394379][ T5832] Bluetooth: hci6: command tx timeout [ 363.403502][ T8422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.538595][ T8422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.624644][ T5832] Bluetooth: hci7: command tx timeout [ 363.647087][ T8422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.740657][ T8422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.898904][ T9168] chnl_net:caif_netlink_parms(): no params data found [ 364.009035][ T9165] chnl_net:caif_netlink_parms(): no params data found [ 364.038238][ T9216] chnl_net:caif_netlink_parms(): no params data found [ 364.158651][ T9217] chnl_net:caif_netlink_parms(): no params data found [ 364.251390][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.260738][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.268225][ T9168] bridge_slave_0: entered allmulticast mode [ 364.275765][ T9168] bridge_slave_0: entered promiscuous mode [ 364.340802][ T9222] chnl_net:caif_netlink_parms(): no params data found [ 364.369255][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.376545][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.384002][ T9168] bridge_slave_1: entered allmulticast mode [ 364.392770][ T9168] bridge_slave_1: entered promiscuous mode [ 364.730799][ T8422] bond0 (unregistering): Released all slaves [ 364.823560][ T9168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.861464][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.887797][ T9165] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.895699][ T9165] bridge_slave_0: entered allmulticast mode [ 364.903013][ T9165] bridge_slave_0: entered promiscuous mode [ 364.924693][ T9168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.951925][ T9216] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.959111][ T9216] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.966437][ T9216] bridge_slave_0: entered allmulticast mode [ 364.973105][ T9216] bridge_slave_0: entered promiscuous mode [ 364.994888][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.002014][ T9165] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.009447][ T9165] bridge_slave_1: entered allmulticast mode [ 365.016240][ T9165] bridge_slave_1: entered promiscuous mode [ 365.032227][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.040256][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.050429][ T9222] bridge_slave_0: entered allmulticast mode [ 365.057239][ T9222] bridge_slave_0: entered promiscuous mode [ 365.083491][ T9216] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.091121][ T9216] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.100106][ T9216] bridge_slave_1: entered allmulticast mode [ 365.107667][ T9216] bridge_slave_1: entered promiscuous mode [ 365.124899][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.131986][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.139245][ T9217] bridge_slave_0: entered allmulticast mode [ 365.146828][ T9217] bridge_slave_0: entered promiscuous mode [ 365.154131][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.161430][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.168785][ T9217] bridge_slave_1: entered allmulticast mode [ 365.176596][ T9217] bridge_slave_1: entered promiscuous mode [ 365.192314][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.199566][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.206955][ T9222] bridge_slave_1: entered allmulticast mode [ 365.214228][ T9222] bridge_slave_1: entered promiscuous mode [ 365.243579][ T9168] team0: Port device team_slave_0 added [ 365.293746][ T9222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.309352][ T9222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.320904][ T9168] team0: Port device team_slave_1 added [ 365.329528][ T9216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.340616][ T9216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.353393][ T9217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.371073][ T9217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.385389][ T5832] Bluetooth: hci4: command tx timeout [ 365.390600][ T9165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.464447][ T5832] Bluetooth: hci6: command tx timeout [ 365.538596][ T9165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.559716][ T8422] hsr_slave_0: left promiscuous mode [ 365.571740][ T8422] hsr_slave_1: left promiscuous mode [ 365.594613][ T8422] veth1_macvtap: left promiscuous mode [ 365.600226][ T8422] veth0_macvtap: left promiscuous mode [ 365.611934][ T8422] veth1_vlan: left promiscuous mode [ 365.617482][ T8422] veth0_vlan: left promiscuous mode [ 365.704408][ T5832] Bluetooth: hci7: command tx timeout [ 366.219491][ T9222] team0: Port device team_slave_0 added [ 366.227910][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.235333][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.262175][ T9168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.328681][ T9222] team0: Port device team_slave_1 added [ 366.345170][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.352177][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.378779][ T9168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.392923][ T9216] team0: Port device team_slave_0 added [ 366.401618][ T9216] team0: Port device team_slave_1 added [ 366.427973][ T9217] team0: Port device team_slave_0 added [ 366.471763][ T9217] team0: Port device team_slave_1 added [ 366.491498][ T9165] team0: Port device team_slave_0 added [ 366.499068][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.506509][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.532769][ T9222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.556879][ T9216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.563963][ T9216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.591222][ T9216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.612744][ T9165] team0: Port device team_slave_1 added [ 366.629074][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.637021][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.663065][ T9222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.688875][ T9216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.695893][ T9216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.721916][ T9216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.733939][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.740972][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.767082][ T9217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.784522][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.791494][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.817747][ T9217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.840082][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.847427][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.875806][ T9165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.888909][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.896871][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.923417][ T9165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.989976][ T9168] hsr_slave_0: entered promiscuous mode [ 366.999270][ T9168] hsr_slave_1: entered promiscuous mode [ 367.009066][ T9168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.019147][ T9168] Cannot create hsr debugfs directory [ 367.068311][ T9222] hsr_slave_0: entered promiscuous mode [ 367.075440][ T9222] hsr_slave_1: entered promiscuous mode [ 367.082563][ T9222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.090232][ T9222] Cannot create hsr debugfs directory [ 367.232984][ T9217] hsr_slave_0: entered promiscuous mode [ 367.239741][ T9217] hsr_slave_1: entered promiscuous mode [ 367.246457][ T9217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.254021][ T9217] Cannot create hsr debugfs directory [ 367.283005][ T9216] hsr_slave_0: entered promiscuous mode [ 367.291278][ T9216] hsr_slave_1: entered promiscuous mode [ 367.297529][ T9216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.305778][ T9216] Cannot create hsr debugfs directory [ 367.372433][ T9165] hsr_slave_0: entered promiscuous mode [ 367.379778][ T9165] hsr_slave_1: entered promiscuous mode [ 367.387413][ T9165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.395134][ T9165] Cannot create hsr debugfs directory [ 367.464657][ T5832] Bluetooth: hci4: command tx timeout [ 367.544605][ T5832] Bluetooth: hci6: command tx timeout [ 367.666722][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.773188][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.784533][ T5832] Bluetooth: hci7: command tx timeout [ 367.923763][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.990967][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.177526][ T9168] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 368.216542][ T9168] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 368.279342][ T9168] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 368.346024][ T9168] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 368.508734][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.528835][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.532209][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.541115][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.558899][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.570910][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.587492][ T9217] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 368.601702][ T9217] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 368.631186][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.653848][ T9217] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 368.697162][ T9217] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 368.727907][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.828693][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.862362][ T9222] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.903414][ T9222] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.963383][ T9222] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 369.016390][ T9222] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.136876][ T9216] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 369.198872][ T9168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.220480][ T9216] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 369.269954][ T9216] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 369.331285][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.354716][ T9168] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.361706][ T9216] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 369.411408][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.418580][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.446815][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.491279][ T2133] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.498456][ T2133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.547181][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.578836][ T9322] chnl_net:caif_netlink_parms(): no params data found [ 369.641130][ T9217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.676547][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.782080][ T9217] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.923580][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.930739][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.949191][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.958446][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.974690][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.982501][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.991650][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.046250][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.053361][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.116383][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.123522][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.140592][ T9322] bridge_slave_0: entered allmulticast mode [ 370.155377][ T9322] bridge_slave_0: entered promiscuous mode [ 370.231663][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.239729][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.253180][ T9322] bridge_slave_1: entered allmulticast mode [ 370.263378][ T9322] bridge_slave_1: entered promiscuous mode [ 370.387621][ T9322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.437329][ T9322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.476734][ T9222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.504129][ T9216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.535016][ T9322] team0: Port device team_slave_0 added [ 370.576885][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.601414][ T9322] team0: Port device team_slave_1 added [ 370.665507][ T5832] Bluetooth: hci0: command tx timeout [ 370.681794][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.702862][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.709964][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.736797][ T9322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.754261][ T9216] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.779668][ T9222] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.799322][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.820063][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.827184][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.855732][ T9322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.899503][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.906651][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.954787][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.961937][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.993167][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.021769][ T9322] hsr_slave_0: entered promiscuous mode [ 371.027927][ T9322] hsr_slave_1: entered promiscuous mode [ 371.033802][ T9322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.041949][ T9322] Cannot create hsr debugfs directory [ 371.100686][ T534] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.107839][ T534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.123289][ T534] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.130465][ T534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.213474][ T9366] chnl_net:caif_netlink_parms(): no params data found [ 371.251486][ T9217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.326192][ T9216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.699096][ T9366] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.723701][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.740335][ T9366] bridge_slave_0: entered allmulticast mode [ 371.748514][ T9366] bridge_slave_0: entered promiscuous mode [ 371.819018][ T9366] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.830863][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.849348][ T9366] bridge_slave_1: entered allmulticast mode [ 371.857096][ T9366] bridge_slave_1: entered promiscuous mode [ 371.863761][ T12] bridge_slave_1: left allmulticast mode [ 371.871253][ T12] bridge_slave_1: left promiscuous mode [ 371.877676][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.887004][ T12] bridge_slave_0: left allmulticast mode [ 371.892658][ T12] bridge_slave_0: left promiscuous mode [ 371.898729][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.910165][ T12] bridge_slave_1: left allmulticast mode [ 371.916231][ T12] bridge_slave_1: left promiscuous mode [ 371.921854][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.931538][ T12] bridge_slave_0: left allmulticast mode [ 371.938694][ T12] bridge_slave_0: left promiscuous mode [ 371.944366][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.024703][ T5832] Bluetooth: hci1: command tx timeout [ 372.157875][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.169458][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.179200][ T12] bond0 (unregistering): Released all slaves [ 372.394038][ T12] bond0 (unregistering): Released all slaves [ 372.598602][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.610718][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.620965][ T12] bond0 (unregistering): Released all slaves [ 372.754553][ T5832] Bluetooth: hci0: command tx timeout [ 372.771968][ T12] bond0 (unregistering): Released all slaves [ 372.996920][ T12] bond0 (unregistering): Released all slaves [ 373.081193][ T9216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.168781][ T9366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.197173][ T9366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.308947][ T12] tipc: Left network mode [ 373.335047][ T9217] veth0_vlan: entered promiscuous mode [ 373.407928][ T9366] team0: Port device team_slave_0 added [ 373.466217][ T9366] team0: Port device team_slave_1 added [ 373.495847][ T9217] veth1_vlan: entered promiscuous mode [ 373.591223][ T9322] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 373.651783][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.661990][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.695134][ T9366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.724245][ T9322] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 373.757493][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.769672][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.795894][ T9366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.837959][ T9222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.860015][ T9322] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 373.872294][ T9322] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 373.951545][ T9217] veth0_macvtap: entered promiscuous mode [ 373.996564][ T9366] hsr_slave_0: entered promiscuous mode [ 374.003550][ T9366] hsr_slave_1: entered promiscuous mode [ 374.010496][ T9366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.020274][ T9366] Cannot create hsr debugfs directory [ 374.105130][ T5832] Bluetooth: hci1: command tx timeout [ 374.122728][ T9216] veth0_vlan: entered promiscuous mode [ 374.143234][ T9217] veth1_macvtap: entered promiscuous mode [ 374.209069][ T9216] veth1_vlan: entered promiscuous mode [ 374.223328][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.250865][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.261716][ T9217] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.271526][ T9217] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.280584][ T9217] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.289355][ T9217] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.605451][ T9216] veth0_macvtap: entered promiscuous mode [ 374.630778][ T9222] veth0_vlan: entered promiscuous mode [ 374.736358][ T9222] veth1_vlan: entered promiscuous mode [ 374.758542][ T9216] veth1_macvtap: entered promiscuous mode [ 374.789983][ T5986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.803435][ T5986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.827677][ T5832] Bluetooth: hci0: command tx timeout [ 374.840159][ T9322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.933698][ T9222] veth0_macvtap: entered promiscuous mode [ 374.970808][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.990145][ T12] hsr_slave_0: left promiscuous mode [ 374.999880][ T12] hsr_slave_1: left promiscuous mode [ 375.009282][ T12] hsr_slave_0: left promiscuous mode [ 375.015582][ T12] hsr_slave_1: left promiscuous mode [ 375.021200][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.029593][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.037482][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.045350][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.056273][ T12] hsr_slave_0: left promiscuous mode [ 375.061874][ T12] hsr_slave_1: left promiscuous mode [ 375.069792][ T12] hsr_slave_0: left promiscuous mode [ 375.076395][ T12] hsr_slave_1: left promiscuous mode [ 375.109212][ T12] veth1_macvtap: left promiscuous mode [ 375.115043][ T12] veth0_macvtap: left promiscuous mode [ 375.120661][ T12] veth1_vlan: left promiscuous mode [ 375.126073][ T12] veth0_vlan: left promiscuous mode [ 375.132025][ T12] veth1_macvtap: left promiscuous mode [ 375.137697][ T12] veth0_macvtap: left promiscuous mode [ 375.143260][ T12] veth1_vlan: left promiscuous mode [ 375.148958][ T12] veth0_vlan: left promiscuous mode [ 375.158902][ T12] veth1_macvtap: left promiscuous mode [ 375.164504][ T12] veth0_macvtap: left promiscuous mode [ 375.170033][ T12] veth1_vlan: left promiscuous mode [ 375.175853][ T12] veth0_vlan: left promiscuous mode [ 375.181722][ T12] veth1_macvtap: left promiscuous mode [ 375.187679][ T12] veth0_macvtap: left promiscuous mode [ 375.193211][ T12] veth1_vlan: left promiscuous mode [ 375.198603][ T12] veth0_vlan: left promiscuous mode [ 375.429881][ T12] team0 (unregistering): Port device team_slave_1 removed [ 375.454281][ T12] team0 (unregistering): Port device team_slave_0 removed [ 376.187614][ T5832] Bluetooth: hci1: command tx timeout [ 376.239035][ T12] team0 (unregistering): Port device team_slave_1 removed [ 376.269631][ T12] team0 (unregistering): Port device team_slave_0 removed [ 376.914458][ T5832] Bluetooth: hci0: command tx timeout [ 377.445231][ T9222] veth1_macvtap: entered promiscuous mode [ 377.451176][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.478566][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.507418][ T9216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.529782][ T9322] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.559518][ T9216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.615112][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.629829][ T9216] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.639865][ T9216] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.648691][ T9216] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.657462][ T9216] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.683220][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.690393][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.743015][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.761412][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.768614][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.799370][ T9222] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.811986][ T9222] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.828454][ T9222] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.839437][ T9222] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.890450][ T9366] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 377.912987][ T9366] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 377.934627][ T9366] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 377.969075][ T9366] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 378.109340][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.116193][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.158937][ T9322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.159314][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.180601][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.274876][ T5832] Bluetooth: hci1: command tx timeout [ 378.321651][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.360056][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.412103][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.464090][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.483051][ T2133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.602593][ T2133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.720702][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.755130][ T9322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.876070][ T9492] binder: BINDER_SET_CONTEXT_MGR already set [ 378.886481][ T9492] binder: 9489:9492 ioctl 4018620d 200000000040 returned -16 [ 378.887600][ T9366] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.960601][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.967791][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.170065][ T9501] netlink: 44 bytes leftover after parsing attributes in process `syz.8.970'. [ 379.208109][ T534] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.215277][ T534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.330653][ T9366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.492282][ T9512] syz.9.972 uses obsolete (PF_INET,SOCK_PACKET) [ 380.815022][ T9366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.511297][ T9322] veth0_vlan: entered promiscuous mode [ 381.577312][ T9546] binder: BINDER_SET_CONTEXT_MGR already set [ 381.598069][ T9546] binder: 9545:9546 ioctl 4018620d 200000000040 returned -16 [ 381.631901][ T9322] veth1_vlan: entered promiscuous mode [ 381.764282][ T9544] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 381.830713][ T9544] kvm: Disabled LAPIC found during irq injection [ 381.843099][ T9322] veth0_macvtap: entered promiscuous mode [ 381.922133][ T9322] veth1_macvtap: entered promiscuous mode [ 382.073603][ T9322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.176618][ T9322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.204436][ T30] audit: type=1400 audit(1753187832.313:646): avc: denied { getopt } for pid=9560 comm="syz.8.981" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 382.234483][ T9322] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.263857][ T9322] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.288366][ T9322] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.321260][ T9322] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.518115][ T9366] veth0_vlan: entered promiscuous mode [ 382.653101][ T9366] veth1_vlan: entered promiscuous mode [ 382.850253][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.938826][ T12] bridge_slave_1: left allmulticast mode [ 382.968752][ T12] bridge_slave_1: left promiscuous mode [ 383.005065][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.026947][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.072676][ T12] bridge_slave_0: left allmulticast mode [ 383.121701][ T12] bridge_slave_0: left promiscuous mode [ 383.159987][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.214258][ T12] bridge_slave_1: left allmulticast mode [ 383.224060][ T12] bridge_slave_1: left promiscuous mode [ 383.239297][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.303867][ T12] bridge_slave_0: left allmulticast mode [ 383.312619][ T12] bridge_slave_0: left promiscuous mode [ 383.324689][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.327568][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.338249][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.349826][ T12] bond0 (unregistering): Released all slaves [ 384.427734][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.437664][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.449042][ T12] bond0 (unregistering): Released all slaves [ 384.654617][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.706058][ T9366] veth0_macvtap: entered promiscuous mode [ 384.714649][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.804122][ T12] hsr_slave_0: left promiscuous mode [ 384.947455][ T12] hsr_slave_1: left promiscuous mode [ 384.953261][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.963329][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.987789][ T12] hsr_slave_0: left promiscuous mode [ 385.168789][ T12] hsr_slave_1: left promiscuous mode [ 385.262436][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.418256][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.805127][ T12] team0 (unregistering): Port device team_slave_1 removed [ 385.961572][ T12] team0 (unregistering): Port device team_slave_0 removed [ 388.084097][ T12] team0 (unregistering): Port device team_slave_1 removed [ 388.109642][ T12] team0 (unregistering): Port device team_slave_0 removed [ 388.220177][ T9366] veth1_macvtap: entered promiscuous mode [ 388.362102][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.381850][ T30] audit: type=1400 audit(1753187838.493:647): avc: denied { write } for pid=9631 comm="syz.9.999" path="socket:[25503]" dev="sockfs" ino=25503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 388.511805][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.591977][ T9366] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.622300][ T9366] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.673356][ T9366] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.723205][ T9366] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.353477][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.409360][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.447036][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.458917][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.608857][ T30] audit: type=1400 audit(1753187839.713:648): avc: denied { call } for pid=9663 comm="syz.6.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 392.216503][ T30] audit: type=1800 audit(1753187841.513:649): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1014" name="bus" dev="overlay" ino=41 res=0 errno=0 [ 392.410200][ T9718] bridge_slave_0: left allmulticast mode [ 392.578989][ T9718] bridge_slave_0: left promiscuous mode [ 392.679433][ T9723] netlink: 'syz.5.1016': attribute type 10 has an invalid length. [ 392.930976][ T30] audit: type=1400 audit(1753187843.013:650): avc: denied { map } for pid=9724 comm="syz.9.1018" path="socket:[26383]" dev="sockfs" ino=26383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.938237][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.983521][ T30] audit: type=1400 audit(1753187843.023:651): avc: denied { read } for pid=9724 comm="syz.9.1018" path="socket:[26383]" dev="sockfs" ino=26383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.050058][ T9718] bridge_slave_1: left allmulticast mode [ 393.063278][ T9718] bridge_slave_1: left promiscuous mode [ 393.089575][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.117574][ T9718] bond0: (slave bond_slave_0): Releasing backup interface [ 393.257701][ T9718] bond0: (slave bond_slave_1): Releasing backup interface [ 393.274659][ T5910] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 393.303180][ T9718] team0: Port device team_slave_0 removed [ 393.454647][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 394.309683][ T9718] team0: Port device team_slave_1 removed [ 394.438281][ T9718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.471048][ T9718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.579502][ T9718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.592700][ T9718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.618905][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.652430][ T5910] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.699845][ T5910] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 394.713810][ T9723] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 394.732118][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.824384][ T5910] usb 6-1: Product: syz [ 394.836285][ T5910] usb 6-1: Manufacturer: syz [ 394.852611][ T5910] usb 6-1: SerialNumber: syz [ 394.870146][ T5910] usb 6-1: config 0 descriptor?? [ 395.375171][ T974] usb 6-1: USB disconnect, device number 2 [ 395.706025][ T5899] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 396.356305][ T5899] usb 9-1: Using ep0 maxpacket: 32 [ 396.372956][ T5899] usb 9-1: config 0 has an invalid interface number: 148 but max is 0 [ 396.391628][ T5899] usb 9-1: config 0 has no interface number 0 [ 396.404384][ T5899] usb 9-1: config 0 interface 148 has no altsetting 0 [ 396.416454][ T5899] usb 9-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 396.455158][ T5899] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.504645][ T5899] usb 9-1: Product: syz [ 396.530470][ T5899] usb 9-1: Manufacturer: syz [ 396.551063][ T5899] usb 9-1: SerialNumber: syz [ 396.570162][ T5899] usb 9-1: config 0 descriptor?? [ 396.588853][ T5899] pl2303 9-1:0.148: required interrupt-in endpoint missing [ 396.964521][ T5899] usb 9-1: USB disconnect, device number 2 [ 398.603672][ T30] audit: type=1400 audit(1753187848.713:652): avc: denied { create } for pid=9828 comm="syz.7.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 398.687431][ T30] audit: type=1400 audit(1753187848.743:653): avc: denied { setopt } for pid=9828 comm="syz.7.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 398.721866][ T30] audit: type=1400 audit(1753187848.833:654): avc: denied { bind } for pid=9837 comm="syz.6.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 398.745915][ T9838] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 398.775378][ T30] audit: type=1400 audit(1753187848.863:655): avc: denied { write } for pid=9837 comm="syz.6.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 398.781874][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1042'. [ 398.812795][ T30] audit: type=1400 audit(1753187848.893:656): avc: denied { bind } for pid=9828 comm="syz.7.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 399.587414][ T9851] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 399.598588][ T9851] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 400.123469][ T9865] overlayfs: overlapping lowerdir path [ 401.013597][ T30] audit: type=1400 audit(1753187851.003:657): avc: denied { checkpoint_restore } for pid=9868 comm="syz.9.1051" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 401.096355][ T9873] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1050'. [ 401.654180][ T30] audit: type=1400 audit(1753187851.763:658): avc: denied { create } for pid=9877 comm="syz.6.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 401.779212][ T30] audit: type=1400 audit(1753187851.883:659): avc: denied { setopt } for pid=9877 comm="syz.6.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 405.704448][ T5891] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 405.737772][ T9946] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1067'. [ 405.747495][ T30] audit: type=1400 audit(1753187855.853:660): avc: denied { create } for pid=9944 comm="syz.6.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 405.809221][ T30] audit: type=1400 audit(1753187855.853:661): avc: denied { write } for pid=9944 comm="syz.6.1067" path="socket:[27807]" dev="sockfs" ino=27807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 405.838752][ T9946] syz.6.1067: attempt to access beyond end of device [ 405.838752][ T9946] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 405.853146][ T9946] syz.6.1067: attempt to access beyond end of device [ 405.853146][ T9946] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 405.884515][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 405.894654][ T9946] Mount JFS Failure: -5 [ 405.929576][ T5891] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 406.274994][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.293668][ T30] audit: type=1400 audit(1753187856.143:662): avc: denied { mount } for pid=9953 comm="syz.7.1069" name="/" dev="rpc_pipefs" ino=27419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 406.363828][ T30] audit: type=1400 audit(1753187856.143:663): avc: denied { unmount } for pid=9953 comm="syz.7.1069" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 406.408591][ T5891] usb 6-1: Product: syz [ 406.459637][ T5891] usb 6-1: Manufacturer: syz [ 406.484371][ T5891] usb 6-1: SerialNumber: syz [ 406.523215][ T5891] usb 6-1: config 0 descriptor?? [ 407.245166][ T5891] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 407.266914][ T9971] ÿÿÿÿÿÿÇ(¯J: renamed from lo (while UP) [ 407.447969][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 407.484745][ T5891] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 407.492895][ T5891] usb 6-1: media controller created [ 407.579319][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.716263][ T5891] zl10353_read_register: readreg error (reg=127, ret==0) [ 407.744440][ T5891] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 407.759319][ T5891] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 407.835434][ T5891] usb 6-1: USB disconnect, device number 3 [ 407.956723][ T9981] bridge_slave_0: left allmulticast mode [ 407.985855][ T9986] netlink: 'syz.7.1073': attribute type 10 has an invalid length. [ 407.998655][ T9981] bridge_slave_0: left promiscuous mode [ 408.010368][ T5891] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 408.038433][ T9981] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.145166][ T9981] bridge_slave_1: left allmulticast mode [ 408.176508][ T9981] bridge_slave_1: left promiscuous mode [ 408.206376][ T9981] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.255098][ T9981] bond0: (slave bond_slave_0): Releasing backup interface [ 408.330307][ T9981] bond0: (slave bond_slave_1): Releasing backup interface [ 408.355542][ T9991] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 408.402971][ T9981] team0: Port device team_slave_0 removed [ 408.447379][ T9981] team0: Port device team_slave_1 removed [ 408.617312][ T9981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.360534][ T9981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.395419][ T9991] kvm: Disabled LAPIC found during irq injection [ 409.406590][ T9981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.444743][ T9981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.524131][ T9986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.545417][ T9986] bond0: (slave wlan1): Opening slave failed [ 409.712581][ T30] audit: type=1400 audit(1753187859.823:664): avc: denied { write } for pid=10008 comm="syz.5.1080" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 409.933458][T10020] netlink: 'syz.8.1084': attribute type 1 has an invalid length. [ 410.086413][T10020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.153095][T10023] overlayfs: overlapping lowerdir path [ 410.465764][ T9528] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 410.624448][ T9528] usb 9-1: Using ep0 maxpacket: 32 [ 410.632658][ T9528] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 410.649408][ T9528] usb 9-1: config 0 has no interface number 0 [ 410.657879][ T9528] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 410.674387][ T9528] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.692796][ T9528] usb 9-1: Product: syz [ 410.702760][ T9528] usb 9-1: Manufacturer: syz [ 410.707656][ T9528] usb 9-1: SerialNumber: syz [ 410.734626][ T6969] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 410.745741][ T9528] usb 9-1: config 0 descriptor?? [ 410.769109][ T9528] smsc95xx v2.0.0 [ 410.994419][ T6969] usb 6-1: device descriptor read/64, error -71 [ 411.083300][ T30] audit: type=1400 audit(1753187861.193:665): avc: denied { ioctl } for pid=10055 comm="syz.9.1091" path="socket:[27928]" dev="sockfs" ino=27928 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 411.242355][T10064] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 411.266451][ T6969] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 411.288834][T10064] kvm: Disabled LAPIC found during irq injection [ 411.434411][ T3960] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 411.504627][ T6969] usb 6-1: device descriptor read/64, error -71 [ 411.593038][T10072] [ 411.595407][T10072] ====================================================== [ 411.602414][T10072] WARNING: possible circular locking dependency detected [ 411.609421][T10072] 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 Not tainted [ 411.616520][T10072] ------------------------------------------------------ [ 411.623528][T10072] syz.7.1095/10072 is trying to acquire lock: [ 411.629591][T10072] ffff888056426088 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 411.638400][T10072] [ 411.638400][T10072] but task is already holding lock: [ 411.645759][T10072] ffff8880298a3540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 411.654225][T10072] [ 411.654225][T10072] which lock already depends on the new lock. [ 411.654225][T10072] [ 411.664619][T10072] [ 411.664619][T10072] the existing dependency chain (in reverse order) is: [ 411.673629][T10072] [ 411.673629][T10072] -> #3 (&p->lock){+.+.}-{4:4}: [ 411.680671][T10072] __mutex_lock+0x199/0xb90 [ 411.685706][T10072] seq_read_iter+0xe1/0x12c0 [ 411.690912][T10072] kernfs_fop_read_iter+0x40f/0x5a0 [ 411.696632][T10072] copy_splice_read+0x615/0xba0 [ 411.702007][T10072] do_splice_read+0x285/0x370 [ 411.702338][ T6969] usb usb6-port1: attempt power cycle [ 411.707195][T10072] splice_file_to_pipe+0x109/0x120 [ 411.707224][T10072] do_sendfile+0x400/0xe50 [ 411.723154][T10072] __x64_sys_sendfile64+0x1d8/0x220 [ 411.728895][T10072] do_syscall_64+0xcd/0x4c0 [ 411.733941][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.740367][T10072] [ 411.740367][T10072] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 411.747758][T10072] __mutex_lock+0x199/0xb90 [ 411.752779][T10072] anon_pipe_write+0x15d/0x1a70 [ 411.758140][T10072] __kernel_write_iter+0x720/0xa90 [ 411.763758][T10072] __kernel_write+0xf5/0x140 [ 411.768855][T10072] autofs_notify_daemon+0x4db/0xd60 [ 411.774567][T10072] autofs_wait+0x10ca/0x1a70 [ 411.779664][T10072] autofs_mount_wait+0x132/0x380 [ 411.785105][T10072] autofs_d_automount+0x390/0x7f0 [ 411.790651][T10072] __traverse_mounts+0x192/0x790 [ 411.796106][T10072] step_into+0x5aa/0x2270 [ 411.800940][T10072] walk_component+0xfc/0x5b0 [ 411.806036][T10072] link_path_walk+0x627/0xe20 [ 411.811218][T10072] path_lookupat+0x15a/0x6d0 [ 411.816315][T10072] filename_lookup+0x224/0x5f0 [ 411.821589][T10072] user_path_at+0x3a/0x60 [ 411.826426][T10072] bpf_obj_get_user+0xae/0x490 [ 411.831694][T10072] __sys_bpf+0x252f/0x4d80 [ 411.836618][T10072] __x64_sys_bpf+0x78/0xc0 [ 411.841546][T10072] do_syscall_64+0xcd/0x4c0 [ 411.846566][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.852969][T10072] [ 411.852969][T10072] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 411.860687][T10072] __mutex_lock+0x199/0xb90 [ 411.865699][T10072] autofs_notify_daemon+0x4a6/0xd60 [ 411.871401][T10072] autofs_wait+0x10ca/0x1a70 [ 411.876496][T10072] autofs_mount_wait+0x132/0x380 [ 411.881938][T10072] autofs_d_automount+0x390/0x7f0 [ 411.887466][T10072] __traverse_mounts+0x192/0x790 [ 411.892917][T10072] step_into+0x5aa/0x2270 [ 411.897750][T10072] walk_component+0xfc/0x5b0 [ 411.902844][T10072] path_lookupat+0x142/0x6d0 [ 411.907943][T10072] filename_lookup+0x224/0x5f0 [ 411.913213][T10072] kern_path+0x35/0x50 [ 411.917787][T10072] lookup_bdev+0xd8/0x280 [ 411.922622][T10072] resume_store+0x1d6/0x460 [ 411.927631][T10072] kobj_attr_store+0x55/0x80 [ 411.932730][T10072] sysfs_kf_write+0xf2/0x150 [ 411.937831][T10072] kernfs_fop_write_iter+0x351/0x510 [ 411.943621][T10072] vfs_write+0x6c7/0x1150 [ 411.948455][T10072] ksys_write+0x12a/0x250 [ 411.953290][T10072] do_syscall_64+0xcd/0x4c0 [ 411.958302][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.964700][T10072] [ 411.964700][T10072] -> #0 (&of->mutex){+.+.}-{4:4}: [ 411.971889][T10072] __lock_acquire+0x126f/0x1c90 [ 411.977240][T10072] lock_acquire+0x179/0x350 [ 411.982246][T10072] __mutex_lock+0x199/0xb90 [ 411.987256][T10072] kernfs_seq_start+0x4d/0x240 [ 411.992617][T10072] seq_read_iter+0x2c1/0x12c0 [ 411.997798][T10072] kernfs_fop_read_iter+0x40f/0x5a0 [ 412.003498][T10072] copy_splice_read+0x615/0xba0 [ 412.008858][T10072] do_splice_read+0x285/0x370 [ 412.014039][T10072] splice_file_to_pipe+0x109/0x120 [ 412.019656][T10072] do_sendfile+0x400/0xe50 [ 412.024580][T10072] __x64_sys_sendfile64+0x1d8/0x220 [ 412.030285][T10072] do_syscall_64+0xcd/0x4c0 [ 412.035297][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.041694][T10072] [ 412.041694][T10072] other info that might help us debug this: [ 412.041694][T10072] [ 412.051898][T10072] Chain exists of: [ 412.051898][T10072] &of->mutex --> &pipe->mutex --> &p->lock [ 412.051898][T10072] [ 412.063612][T10072] Possible unsafe locking scenario: [ 412.063612][T10072] [ 412.071039][T10072] CPU0 CPU1 [ 412.076384][T10072] ---- ---- [ 412.081728][T10072] lock(&p->lock); [ 412.085521][T10072] lock(&pipe->mutex); [ 412.092175][T10072] lock(&p->lock); [ 412.098484][T10072] lock(&of->mutex); [ 412.102445][T10072] [ 412.102445][T10072] *** DEADLOCK *** [ 412.102445][T10072] [ 412.110579][T10072] 2 locks held by syz.7.1095/10072: [ 412.115754][T10072] #0: ffff8880807d2468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 412.124443][T10072] #1: ffff8880298a3540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 412.133316][T10072] [ 412.133316][T10072] stack backtrace: [ 412.139186][T10072] CPU: 1 UID: 0 PID: 10072 Comm: syz.7.1095 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 412.139205][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.139213][T10072] Call Trace: [ 412.139218][T10072] [ 412.139223][T10072] dump_stack_lvl+0x116/0x1f0 [ 412.139245][T10072] print_circular_bug+0x275/0x350 [ 412.139268][T10072] check_noncircular+0x14c/0x170 [ 412.139291][T10072] __lock_acquire+0x126f/0x1c90 [ 412.139306][T10072] lock_acquire+0x179/0x350 [ 412.139318][T10072] ? kernfs_seq_start+0x4d/0x240 [ 412.139334][T10072] ? __pfx___might_resched+0x10/0x10 [ 412.139355][T10072] __mutex_lock+0x199/0xb90 [ 412.139375][T10072] ? kernfs_seq_start+0x4d/0x240 [ 412.139390][T10072] ? kernfs_seq_start+0x4d/0x240 [ 412.139404][T10072] ? __pfx___mutex_lock+0x10/0x10 [ 412.139426][T10072] ? rcu_is_watching+0x12/0xc0 [ 412.139444][T10072] ? trace_kmalloc+0x2b/0xd0 [ 412.139465][T10072] ? __kvmalloc_node_noprof+0x298/0x620 [ 412.139483][T10072] ? kernfs_seq_start+0x4d/0x240 [ 412.139497][T10072] kernfs_seq_start+0x4d/0x240 [ 412.139512][T10072] seq_read_iter+0x2c1/0x12c0 [ 412.139532][T10072] kernfs_fop_read_iter+0x40f/0x5a0 [ 412.139548][T10072] copy_splice_read+0x615/0xba0 [ 412.139570][T10072] ? __mutex_lock+0x1ca/0xb90 [ 412.139589][T10072] ? __pfx_copy_splice_read+0x10/0x10 [ 412.139607][T10072] ? __pfx___mutex_lock+0x10/0x10 [ 412.139627][T10072] ? __fget_files+0x204/0x3c0 [ 412.139647][T10072] ? __pfx_copy_splice_read+0x10/0x10 [ 412.139663][T10072] do_splice_read+0x285/0x370 [ 412.139681][T10072] splice_file_to_pipe+0x109/0x120 [ 412.139700][T10072] do_sendfile+0x400/0xe50 [ 412.139718][T10072] ? __pfx_do_sendfile+0x10/0x10 [ 412.139734][T10072] ? __pfx___seccomp_filter+0x10/0x10 [ 412.139757][T10072] __x64_sys_sendfile64+0x1d8/0x220 [ 412.139778][T10072] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 412.139799][T10072] ? __secure_computing+0x28e/0x3b0 [ 412.139820][T10072] do_syscall_64+0xcd/0x4c0 [ 412.139841][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.139856][T10072] RIP: 0033:0x7fc3f0f8e929 [ 412.139868][T10072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.139882][T10072] RSP: 002b:00007fc3f1e2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 412.139894][T10072] RAX: ffffffffffffffda RBX: 00007fc3f11b6160 RCX: 00007fc3f0f8e929 [ 412.139904][T10072] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 412.139912][T10072] RBP: 00007fc3f1010b39 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 412.139920][T10072] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 412.139928][T10072] R13: 0000000000000000 R14: 00007fc3f11b6160 R15: 00007ffe2379d358 [ 412.139941][T10072] [ 412.415358][ T9528] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 412.444450][ T3960] usb 10-1: Using ep0 maxpacket: 32 [ 412.450922][ T3960] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 412.474064][ T30] audit: type=1400 audit(1753187862.583:666): avc: denied { create } for pid=10066 comm="syz.7.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 412.552175][ T3960] usb 10-1: config 0 has no interface number 0 [ 412.602168][ T3960] usb 10-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.624994][ T30] audit: type=1400 audit(1753187862.583:667): avc: denied { bind } for pid=10066 comm="syz.7.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 412.652458][ T30] audit: type=1400 audit(1753187862.583:668): avc: denied { listen } for pid=10066 comm="syz.7.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 412.774455][ T6969] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 413.187928][ T3960] usb 10-1: string descriptor 0 read error: -71 [ 413.196563][ T3960] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 413.213760][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.234446][ T3960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.245469][ T9528] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 413.260964][ T6969] usb 6-1: device descriptor read/8, error -71 [ 413.266012][ T3960] usb 10-1: config 0 descriptor?? [ 413.272398][ T9528] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 413.287748][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.294604][ T3960] usb 10-1: can't set config #0, error -71 [ 413.338483][ T9528] usb 9-1: USB disconnect, device number 3 [ 413.344615][ T3960] usb 10-1: USB disconnect, device number 2 [ 413.357911][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.408898][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.482165][ T49] bridge_slave_1: left allmulticast mode [ 413.492959][ T49] bridge_slave_1: left promiscuous mode [ 413.500050][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.509825][ T49] bridge_slave_0: left allmulticast mode [ 413.515645][ T49] bridge_slave_0: left promiscuous mode [ 413.521307][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.631160][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.640822][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.650492][ T49] bond0 (unregistering): Released all slaves [ 413.869925][ T49] hsr_slave_0: left promiscuous mode [ 413.875888][ T49] hsr_slave_1: left promiscuous mode [ 413.881382][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.888962][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.898696][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.906236][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.915504][ T49] veth1_macvtap: left promiscuous mode [ 413.920991][ T49] veth0_macvtap: left promiscuous mode [ 413.926696][ T49] veth1_vlan: left promiscuous mode [ 413.931920][ T49] veth0_vlan: left promiscuous mode [ 414.023423][ T49] team0 (unregistering): Port device team_slave_1 removed [ 414.045206][ T49] team0 (unregistering): Port device team_slave_0 removed [ 414.358882][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.398286][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.463042][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.509226][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.604224][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.647042][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.709048][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.758149][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.849732][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.877906][ T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.920845][ T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.968407][ T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.067425][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.128680][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.167825][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.218421][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.289579][ T49] bridge_slave_1: left allmulticast mode [ 415.295369][ T49] bridge_slave_1: left promiscuous mode [ 415.300977][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.309706][ T49] bridge_slave_0: left allmulticast mode [ 415.315553][ T49] bridge_slave_0: left promiscuous mode [ 415.321161][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.330637][ T49] bridge_slave_1: left allmulticast mode [ 415.336362][ T49] bridge_slave_1: left promiscuous mode [ 415.341970][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.350337][ T49] bridge_slave_0: left allmulticast mode [ 415.356147][ T49] bridge_slave_0: left promiscuous mode [ 415.361755][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.516704][ T49] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 415.525049][ T49] bond0 (unregistering): Released all slaves [ 415.635771][ T49] bond0 (unregistering): Released all slaves [ 415.702025][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.711646][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.721321][ T49] bond0 (unregistering): Released all slaves [ 415.780514][ T49] bond1 (unregistering): Released all slaves [ 415.858508][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.868363][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.877596][ T49] bond0 (unregistering): Released all slaves [ 416.387821][ T49] hsr_slave_0: left promiscuous mode [ 416.393480][ T49] hsr_slave_1: left promiscuous mode [ 416.400999][ T49] hsr_slave_0: left promiscuous mode [ 416.410184][ T49] hsr_slave_1: left promiscuous mode [ 416.420628][ T49] hsr_slave_0: left promiscuous mode [ 416.427730][ T49] hsr_slave_1: left promiscuous mode [ 416.433389][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.440873][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.450445][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.457937][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.470298][ T49] hsr_slave_0: left promiscuous mode [ 416.477651][ T49] hsr_slave_1: left promiscuous mode [ 416.483289][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.490933][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.499791][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.507980][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.525294][ T49] veth1_macvtap: left promiscuous mode [ 416.530834][ T49] veth0_macvtap: left promiscuous mode [ 416.537366][ T49] veth1_vlan: left promiscuous mode [ 416.542639][ T49] veth0_vlan: left promiscuous mode [ 416.551210][ T49] veth1_macvtap: left promiscuous mode [ 416.558517][ T49] veth0_macvtap: left promiscuous mode [ 416.564077][ T49] veth1_vlan: left promiscuous mode [ 416.572138][ T49] veth0_vlan: left promiscuous mode [ 416.578600][ T49] veth1_macvtap: left promiscuous mode [ 416.584108][ T49] veth0_macvtap: left promiscuous mode [ 416.590381][ T49] veth1_vlan: left promiscuous mode [ 416.598192][ T49] veth0_vlan: left promiscuous mode [ 416.604175][ T49] veth1_macvtap: left promiscuous mode [ 416.610509][ T49] veth0_macvtap: left promiscuous mode [ 416.616123][ T49] veth1_vlan: left promiscuous mode [ 416.621352][ T49] veth0_vlan: left promiscuous mode [ 417.143442][ T49] team0 (unregistering): Port device team_slave_1 removed [ 417.160968][ T49] team0 (unregistering): Port device team_slave_0 removed [ 417.272369][ T49] team0 (unregistering): Port device team_slave_1 removed [ 417.289581][ T49] team0 (unregistering): Port device team_slave_0 removed