last executing test programs: 9.135726841s ago: executing program 3 (id=2124): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/65}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007bc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0xb4, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_TABLE_USERDATA={0x75, 0x6, "d655d0fd459d7e2727c37efafb364663fb8ffaf5e33e20aa574e13b8ad7db64000119a1bf1a929ec3e5152a1a007076cb4f5c35e3459e07beeb78ed6d85dea819e69e9454b11826f71d698e955f576ec2340175fa8b12571f319569919545f18bd8defcd2c86d953cf5a534a8437a046e7"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0xb8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x7d, 0x8, "e29a59f14c3e7547885fb82e6211893f91058812d9c1b7c16b33348d18fff1293aa59fd044a8ad57459242217fd81263d27bb95730f1710ee50361e9206774a8fa2460f45b757d87a4055c414e2e57914cd4628b629af100af00149422aad771bd439045c4b46701313e853674a888fb92ea813e28405d504d"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x204}, 0x1, 0x0, 0x0, 0x2}, 0x20040000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x82, 0x200000007}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./file1\x00') timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 7.995597434s ago: executing program 1 (id=2128): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x400}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe05e39709130f3de}, 0x4000000) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', 0x0, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) geteuid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000540)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xffc, 0x401, 0x1, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r8 = gettid() sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_generic(r6, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000300002002bbd7010ffdbdf250600000014004b00ff011900000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x20044004}, 0x8090) 7.874411346s ago: executing program 3 (id=2130): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000700)={0x40, 0xb, 0x4, "eb5f9bb9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = epoll_create1(0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r2, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000001020000400000004000000000000000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x41, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000206010100000000000000000000000305000500020000000900020073797a3100000000050004000500000011000300686173683a6e65742c6e6574000000000c00030068617368386970007c8ee065df2e5ad0ff7812a0d9e4aa26e8c93c92045b7d3818cf1f8978bf7d2537119cbbddc90d00"/131], 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x1) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x20008141}, 0x4800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) 5.905619681s ago: executing program 4 (id=2136): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) close(r1) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x19) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f00000002c0)={0x0, 0x0, 0x7ff, 0x9d, 0x4, 0x3, 0x0, 0x2, 0xd}) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000004c0)={r4, 0x7}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf0, 0x8f, 0xd, 0x40, 0x4b4, 0x6830, 0x86cf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x63, 0xc1}}]}}]}}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x2, 0x1, 0x4, 0x100, 0x1b52, 0x4, 0x6}, 0x1c) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0xe0, 0x0, &(0x7f00000003c0)="0f2fe34bfd9d6d373b547c8975a0edb46765efe2d18c7269cbb5ff3322ba24dca1af4fbabd537078b539db6c3aaebce3a0a7d102b0ea2f747fa823049cbbe98aa8df29c8e68bba08886b112d0dfbc9a098c3c6661e30377a42dd15b2712ea610cae701cace3ecebf41051a93a36b8780329703a1084c1dfa3a6da522b89b6da88b7fcaf84ea2a0d8d9637f7b5bae3ab22e7c335c243400911f1a4c5df6505db140e8619998c227e02b5c8e8e9582b95531f810a18c441fe2cacb20c1f5ae763c0bbed70119cd91172225972455ff147875b1717d3470359138d2278cd32d7e20"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) (async) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x208000, 0x0) (async) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) 5.67834803s ago: executing program 4 (id=2138): r0 = fsopen(&(0x7f0000000580)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) 4.995268973s ago: executing program 4 (id=2139): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180), 0x1800000, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@dont_measure}], 0x2f}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c0002"], 0x164}, 0x1, 0x0, 0x0, 0x400480d}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x7}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x8, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) acct(&(0x7f0000000240)='./file0\x00') write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) socket(0x2a, 0x2, 0x0) 4.85797173s ago: executing program 1 (id=2140): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/65}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007bc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0xb4, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_TABLE_USERDATA={0x75, 0x6, "d655d0fd459d7e2727c37efafb364663fb8ffaf5e33e20aa574e13b8ad7db64000119a1bf1a929ec3e5152a1a007076cb4f5c35e3459e07beeb78ed6d85dea819e69e9454b11826f71d698e955f576ec2340175fa8b12571f319569919545f18bd8defcd2c86d953cf5a534a8437a046e7"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0xb8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x7d, 0x8, "e29a59f14c3e7547885fb82e6211893f91058812d9c1b7c16b33348d18fff1293aa59fd044a8ad57459242217fd81263d27bb95730f1710ee50361e9206774a8fa2460f45b757d87a4055c414e2e57914cd4628b629af100af00149422aad771bd439045c4b46701313e853674a888fb92ea813e28405d504d"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x204}, 0x1, 0x0, 0x0, 0x2}, 0x20040000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x82, 0x200000007}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./file1\x00') timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.990685543s ago: executing program 0 (id=2142): r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x0, 0x8}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x64}}, 0x20000000) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000001280)="555a6060d64dc9c3dfb6de66a81485bf508daa16c0de4fda80f5a9b8d54284543cbeec823bab3a1d293005588f66934d", 0xffda}, {0x0}], 0x2) 3.780132803s ago: executing program 1 (id=2144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async, rerun: 64) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x800) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@generic={0x0}, 0x18) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) (async) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) fsopen(&(0x7f0000000100)='pipefs\x00', 0x1) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) (async, rerun: 32) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000480)=""/165, 0xa5}], 0x1000000000000140, &(0x7f0000008640), 0x0, 0x0) 3.700056444s ago: executing program 2 (id=2145): unshare(0x22020600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x9) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 3.652413822s ago: executing program 1 (id=2146): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) fcntl$getflags(r1, 0xb) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x9) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x0, 0x8, 0x8, &(0x7f00000001c0)={0x8, "c6c1f7b51030c4b7c54bf28f8a1eed3ea2dfe17a04bc517b54d2b3b94bce47509d"}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r7}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0), &(0x7f00000004c0), 0x1000, r7}, 0x38) 3.640798532s ago: executing program 2 (id=2147): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = syz_open_dev$radio(&(0x7f0000000580), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\'\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/154, 0x9a}], 0x1) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x4, 0x1c000000, 0x2, "0062ba7d820740ff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x13) ioctl$TCXONC(r3, 0x540a, 0x2) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) mlockall(0x7) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8140, 0x42) mkdirat(r6, &(0x7f0000000140)='./file0\x00', 0x90) 3.575015091s ago: executing program 4 (id=2148): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_emit_ethernet(0xa6, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00@\x00', 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x10, 0x0, 0x63, 0x300, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}]}}}}}}, 0x0) getpid() r0 = socket(0x14, 0x2, 0x4) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) 3.412131691s ago: executing program 3 (id=2149): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRESOCT=r2, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) syz_open_dev$radio(&(0x7f0000000240), 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="260a00000000000061116c00000000001800000000009500000000000000c5e44afa605466ec6110c8638f234d6c70dc71ecb1a0ee6dd649e93773e8867ec1373456788c6d631610050d08f83fb4db4a06920cda298d96e9843a8eb581afa395bf96822e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 3.301971789s ago: executing program 4 (id=2150): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000005340)={0x78, 0x0, r1, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r2, r3, 0xb, 0x8, 0x1000000}}}, 0x78) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000000)={0x5, 0x100, 0xd58}, 0xc) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) ioctl$CEC_TRANSMIT(r5, 0xc0386105, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_clone3(&(0x7f0000000700)={0x200000000, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000340), {0x8}, &(0x7f0000000a00)=""/4096, 0x1000, &(0x7f0000000600)=""/231, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r5}}, 0x58) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r8, 0x207a98, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000001a00)=@newchain={0x22a8, 0x64, 0x4, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xffe0, 0x3}, {0x1}, {0xa, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @filter_kind_options=@f_u32={{0x8}, {0xba0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x6f4, 0x5, {0xa, 0xc4, 0x9, 0xfff, 0xc2e, 0xfc00, 0x7, 0x0, [{0x191, 0x6, 0x7f, 0x1}, {0x573, 0x10, 0x4, 0xe}, {0x4, 0xaea, 0x6, 0x1}, {0x5b, 0x800, 0x4c3c, 0xb}, {0x7, 0x101, 0x400, 0x8000}, {0x4, 0x9, 0xffffffff, 0x94}, {0x7, 0x2f8, 0x162, 0x10000}, {0x0, 0x1, 0x7, 0xffffff7f}, {0xd, 0xff, 0x6, 0x2}, {0x2, 0x3, 0x5, 0x7d51}, {0xf351, 0xeb, 0x3, 0x6}, {0x3, 0x9, 0x6, 0xfffffffc}, {0x1000, 0x8, 0x7, 0xffff}, {0x8, 0x80000000, 0x8, 0x1}, {0x3, 0x1, 0xff, 0x43}, {0x3, 0x0, 0x7f, 0x101}, {0x8, 0x10, 0xfffffffd, 0x4}, {0x101, 0x9, 0x8, 0x7fffffff}, {0x3, 0x6, 0x9, 0x7d}, {0x4, 0x9, 0xb0, 0x200}, {0x6, 0x7, 0xc0, 0x9}, {0x4, 0x984, 0xfffffffe, 0x6000}, {0xd, 0x8, 0x2, 0x8}, {0xdc, 0x0, 0x8, 0x80000001}, {0x6, 0xb52b, 0xfffffff9, 0xffffffff}, {0x3e47, 0x9, 0x4, 0x3850a648}, {0x2, 0xd2b, 0x3, 0x80}, {0x101, 0x0, 0x9, 0x1}, {0x8001, 0x4, 0x7, 0x8}, {0x5, 0x8, 0x3, 0x7}, {0xffffffff, 0x0, 0x6}, {0x4, 0xee3, 0x5, 0x63}, {0x4622, 0xfffffffc, 0x9, 0x6}, {0x9, 0x6, 0xfffffffa, 0x94a9}, {0xb36, 0x0, 0xb2e, 0x7ff}, {0x7fff, 0x1000, 0x2, 0x6}, {0x8, 0x6, 0x2, 0x9}, {0x1, 0x4, 0xfff, 0x9cc}, {0x8, 0x80, 0xbc, 0xf4}, {0x0, 0x8, 0x4}, {0x8001, 0xd467, 0x7, 0x9}, {0xb, 0x3ff, 0xfffffffd, 0xf}, {0x40, 0x4, 0x5, 0x2}, {0x8, 0x2, 0xfb, 0x2}, {0x9, 0x7ff, 0x1}, {0x9, 0x219b999c, 0x6f5, 0x9}, {0x0, 0x8, 0x10, 0x1}, {0xbe, 0x1, 0x2, 0x80000001}, {0x2, 0x6ed00000, 0x3, 0x1}, {0xb95, 0xffffddab, 0x6, 0x3}, {0x6, 0x1, 0x1, 0x3}, {0x400, 0x6, 0x9a9b, 0x5}, {0x0, 0x2, 0x9, 0xc}, {0x1, 0x1, 0x4, 0x602f}, {0x8, 0x8, 0x6, 0x7fff}, {0x6, 0x7, 0x4, 0x6}, {0xffffffff, 0x3, 0x8, 0x6}, {0xa, 0x2, 0x7, 0xffffffff}, {0x4d8, 0x400, 0x5, 0x6}, {0xfffffffb, 0x1ff, 0x3, 0x2}, {0x55, 0x1, 0x6, 0x4}, {0x5, 0x4, 0xfffffff8, 0x1}, {0x43, 0x4, 0xffffffff, 0x1}, {0x8, 0xcc, 0x7, 0x9}, {0x80, 0xe5, 0xf48, 0x80}, {0x4, 0x9, 0x9, 0x4}, {0x0, 0x7, 0x7, 0x2}, {0x8001, 0x7, 0x7fff, 0x81}, {0x80000001, 0x6, 0x4, 0xd954}, {0x218, 0x5, 0x6, 0x4}, {0xa, 0x6, 0x4, 0x7fffffff}, {0x1fc, 0x5, 0x1ff, 0x8}, {0x814, 0x2, 0x8, 0x6}, {0x5, 0x0, 0xffff, 0x9}, {0x4, 0x6, 0xfffffff7}, {0x40, 0x1, 0x7fffffff, 0x400}, {0xe, 0x400, 0x6, 0x4}, {0x6, 0x800, 0x0, 0x162}, {0x347a, 0x0, 0x4, 0xb}, {0x1, 0x2, 0xb2, 0x7000}, {0xa, 0x10001, 0x6d, 0x5}, {0x2, 0x64d, 0x9bd, 0xc}, {0x1, 0x2434, 0x2, 0xccbb}, {0xd, 0xffffffff, 0x1, 0x3}, {0x8, 0x0, 0x400, 0xfffffffa}, {0x496, 0x4, 0x8000, 0x16}, {0x3, 0x8cb0, 0x8000, 0x3}, {0x5, 0x1ff, 0x8000, 0x7}, {0x1, 0x8, 0x88, 0x7ff}, {0x5, 0x9, 0xed0, 0x8}, {0x5, 0x3, 0x2, 0x1ff}, {0x13, 0x10001, 0x4, 0x3}, {0x7, 0xa, 0x7, 0x457}, {0x64ba, 0xfffffff8, 0x8, 0xd42}, {0x51d, 0x2, 0xfffffffe, 0xfff}, {0x2, 0x1, 0x2, 0x2}, {0xe, 0x6, 0x9}, {0x5000000, 0x6, 0x5}, {0x7ff, 0x8, 0x8, 0x4}, {0x7, 0x3, 0xcb, 0x4}, {0x202, 0x1, 0x7, 0xff}, {0x7, 0xd5, 0x5, 0x6}, {0x5, 0x1ff, 0x9, 0x7ec4}, {0xe, 0x8af, 0x1, 0xd6a}, {0x4, 0x5, 0xc4f, 0x8}, {0x10001, 0x8, 0x8, 0x3000000}, {0xa01, 0x6, 0x401, 0xf}, {0x2, 0x0, 0x6, 0x7}, {0xf, 0x8, 0xb, 0x5}, {0x1, 0x3, 0x8001, 0x6}]}}, @TCA_U32_HASH={0x8, 0x2, 0x6}, @TCA_U32_SEL={0x64, 0x5, {0xa, 0x1, 0x7, 0x3cce, 0x9, 0x9, 0x69, 0xdfa5537, [{0x1, 0x2, 0xfffffffa, 0x6}, {0x1, 0x7, 0x8, 0xed}, {0xffff789b, 0x3ff, 0x7, 0x3ff}, {0xb, 0x7, 0x8, 0xff}, {0x7a, 0x8000, 0x60, 0x6}]}}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x10, 0x4be2, 0xfffffffc, 0x32, 0x2, 0x3, 0x8, 0xbd98, 0x4b, 0x1, 0x9, 0xc49, 0xa4e4, 0xa, 0xe5b2, 0x1, 0x57fe, 0x0, 0xfffff2cf, 0x2, 0x8, 0x1, 0x6, 0xdc9f, 0x5, 0x2, 0x3, 0xfffffff9, 0x1, 0x8, 0x9, 0x1000, 0x8, 0x1, 0x9, 0x1ff, 0x7, 0x6, 0x8, 0x1, 0x3, 0x4, 0x4, 0x3, 0x5, 0x7, 0xb4, 0x7, 0x6, 0x7, 0xe6, 0x2, 0x2, 0x3, 0xfffffff9, 0xe6, 0x0, 0x2, 0x5, 0x4, 0x2, 0x7, 0x7, 0x8, 0x7fffffff, 0x8f, 0x101, 0x4, 0x81, 0xf, 0x1, 0xffff8001, 0xbd2, 0x1c32, 0x2, 0x6, 0x9, 0x91, 0x6, 0x6, 0x8, 0x3, 0x100000, 0x6, 0x80000001, 0x7fff, 0x9, 0x0, 0xfffffff8, 0x7, 0x8, 0xff, 0x7, 0x3, 0x6, 0x4, 0xffff, 0xf, 0x2, 0x2, 0x4, 0x2, 0x8001, 0x8, 0x0, 0x8, 0x10000, 0x4, 0xd, 0x95, 0x5, 0x9, 0x6, 0x3, 0x8, 0x7, 0x9, 0x9, 0x7fff, 0x4fa4, 0x2000, 0x66e, 0x8, 0xffff, 0xfffffffb, 0x8, 0x8, 0x100, 0x2, 0x100, 0x8, 0x6, 0x8, 0x769, 0x6, 0x93b, 0xe, 0x8, 0x5, 0xeddf, 0x7, 0x0, 0xdb, 0x4, 0x3511, 0x4000000, 0x7, 0x9916, 0xfff, 0x5, 0x10001, 0x1, 0x3, 0x2, 0x4, 0x0, 0x2, 0xc, 0x80000000, 0x10, 0x8, 0x8, 0x6, 0x0, 0x0, 0xb, 0x3, 0x8001, 0x8001, 0x0, 0x319, 0xfffffffd, 0x8, 0x6, 0x1, 0x9, 0xfffffff7, 0xfffffff5, 0x3ad5b4c2, 0xe, 0x5, 0x12, 0x1, 0x0, 0x90000000, 0x7, 0x0, 0x10001, 0x5, 0x8, 0x80000000, 0x14, 0x4, 0x902, 0x10, 0x8, 0x3, 0x5, 0xc076, 0x1, 0x4, 0xfffffff8, 0x67, 0x5, 0x9, 0x7, 0x400, 0x2, 0x529, 0x7fff, 0x9, 0x4, 0x42, 0x1, 0x6, 0x9, 0x6, 0x7fffffff, 0x9, 0x0, 0x70b68cc6, 0x2, 0x10000, 0x1, 0x1, 0x2, 0x2, 0x0, 0xff, 0xffff4c88, 0x40, 0x7, 0x78, 0x7f, 0x400, 0x3, 0x0, 0x10000, 0xae, 0x1, 0x200, 0xb, 0x7, 0x2, 0x4, 0x0, 0xcb7, 0xff, 0x9, 0x7, 0x8, 0x6431f64, 0x4, 0x8000, 0x800]}]}, @TCA_U32_INDEV={0x14, 0x8, 'wg0\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_DIVISOR={0x8, 0x4, 0xde}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9}]}}, @TCA_CHAIN={0x8, 0xb, 0x1ff}, @filter_kind_options=@f_u32={{0x8}, {0x16b4, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x2, 0x36, 0x1, 0x0, 0x8, 0x100, 0x8, 0x6}}, @TCA_U32_ACT={0x1694, 0x7, [@m_sample={0x5c, 0xd, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}]}, {0x1f, 0x6, "969d05dd1910ae8915c531e4d753e8d799433a8a22b7f271f21b9d"}, {0xc}, {0xc}}}, @m_skbmod={0x158, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0x9, 0xffffffffffffffff, 0x7, 0x4}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="f5d72d923d19"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xac4}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0xca, 0x6, "7117867ab6c6633054f403405f1c5d99b369e3678851ed6f944cefb61eeed3604a65fba206d0d32bd0268d5f7df5b77694c04673fbca65d45cff6fde0ea4375fab387e7b650af99ae953ec055fccc705ed17f623cb5814c9f4c27bf35fe012bb9f3597ecf5b9bef451a4d08aced2a5c6784795e422923b8bbb729ae841a4986df4939bacaf5614df4f80a892a25475feccdf4f4fada5430e5eca12b52795c472a4843d32b26a5ec4fe05265e1927018dc5744c0474abaef31790e4e11897efb85f4cab91015d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}, @m_vlan={0x64, 0x20, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0xd, 0x6, "f72e566ce942747ea2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0xa8, 0xc, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x6, 0x0, 0x7, 0x9}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x2, 0x40, 0x9}, 0x5d}}]}, {0x42, 0x6, "4e3e1800744192ca1ce777924cc6ea2b817d2a102097f1571539e6a9220d4b875ce5bdb7f3d15d3cbc6e44a4300374a1b2c3bae296fc639f89b1551980b7"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x1088, 0x2, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x699, 0xff, 0x5, 0x3, 0xee}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x58d}]}, {0x1002, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x7c, 0x1a, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x6, 0x1, 0x5}, 0xd}}]}, {0x2b, 0x6, "88dcb872dbc688480944c8ff17e9d517e15832b7734a0f1a4afea9ae08eb44f3c42f35ea8802a0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xc4, 0xd, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x662, 0x2, 0x4, 0x7, 0x2}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_SMAC={0xa, 0x4, @random="22421f5793b1"}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}]}, {0x63, 0x6, "b1488edc764b820bee1dd7a7c2e84afabafb1daacc6042f4707386bcbe09015968c70b4aab8202cffd83d32057b773dea74b10d267bcd6aab9916fd5c7cc3a89da479c50347a4fe1597fbe479463a4aaeade7fc1dd08ec82b01ed42606124c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x208, 0xd, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x6, 0xffffffffffffffff, 0x0, 0x1}, @private=0xa010102, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x3, 0x5, 0x2cf, 0x8}, @remote, @loopback, 0xffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0xa, 0x8, 0x1}, @rand_addr=0x64010100, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x5, 0x1, 0x401}, @loopback, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x4, 0x6, 0x9}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7fff, 0x4, 0x3}, @remote, @multicast2, 0xffffffff, 0x1}}]}, {0xf0, 0x6, "eeb491b5c666bc482dc35493c9576deda66c9ef9aab8c8d77d40ced9c8b012975bfdbbb1dcbb9595f92037d137da822946e2aa4202b7a84b5a9687454c8ab1fbe37bd2ead42636fd480106a552ce31229d7723a2f21db84e8c9176affbefec5529905e20c5c2bb17c2028fc65b2a2a5efbd9ff254eac16c8b5f81275040fd6b74ab2ec87044da3fdf3f6ec54d376189269d2e5516ddd34bae5238c0b4ae29b5c232dff76e857ccb6982695bf613f91ba46a41743520ea378d518674c43096a82d0b925d77a27f5e84834cb1fea4a66b349fedd7c6fc69e1b4b2b91dfe0ff8d2e505c159401fa90391ab0603b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x7fff}]}}]}, 0x22a8}, 0x1, 0x0, 0x0, 0x40041}, 0x40081) 3.086083358s ago: executing program 4 (id=2151): syz_usb_connect$cdc_ecm(0x3, 0x5c, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181202, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001380)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x118, 0x248, 0x248, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd8, 0x118, 0x0, {}, [@common=@srh={{0x30}, {0x3a, 0x81, 0x9, 0x2, 0x10, 0x1203, 0x3}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [0x0, 0xc58a471433d5ba0d], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 3.071233643s ago: executing program 2 (id=2152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000020000000000000000000a20000000000a01010000000000000000010014000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000b6f010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 3.051507341s ago: executing program 0 (id=2153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000003d00010710000000000000000300000004"], 0x18}}, 0x880) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000380)={r7, 0x3}, 0x8) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x1000, 0x1, 0x7a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000097e3075ad39065cd72319ca29942e7fbecc18690de53b500639afa8e9e4138760902effa0ff4e653bd043116c5316515a9a7dbf26667b7765d071b5cd83fe2ec8915b55ea1f232bc5ce379d7"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) 2.993240159s ago: executing program 3 (id=2154): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0xaf) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1}, 0x1c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) 2.720178827s ago: executing program 2 (id=2155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 1.760966359s ago: executing program 0 (id=2156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair(0x9, 0x6, 0x7, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f000072f000/0x1000)=nil, 0x1000, 0x60) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040)=0x6) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5a54ffff34b63f458c9acf93dd16e34eab636973682f186c7cdd913a06c621777afb32a88dc5a766b3b1969e6823ec32a5cbdb776b60e4f6a9a8d57dc1e11eaad384b85f50dad1ecfd0aa821c08445882eddcee6e4f6de702536ec077680d362a95e7c5042fb98cb53b6d7a00f41d8693b6a331ea5b3eca6e1e774dc2eb45643f96d7f3840d8038d4d1608f90ad0029f5adf66dd08747bdbc876680c57be0327e9492eb314570609d5d2ce7d589115fd77e68d851506feb1c82458fc1f0994e123e3f24266d39a9a2e504cb737d39890b47f983fb25864d83d0658db442ff436e76677705c01742a834ded", @ANYRES16=r8, @ANYBLOB="110c26bd7000fedbdf256800000008000300", @ANYRES32=r9, @ANYBLOB="1800c70007050401070001020704b8014901dece5b739d7d"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 1.619005501s ago: executing program 3 (id=2157): socket$packet(0x11, 0x3, 0x300) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) io_uring_setup(0x3a84, &(0x7f0000001d80)={0x0, 0xfc33, 0x2, 0x1, 0x3d7}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x4) socket(0x11, 0xa, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1.406412309s ago: executing program 2 (id=2158): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/100, 0x64}], 0x1, 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') (async) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/100, 0x64}], 0x1, 0x0, 0x0) (async) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1) (async) 844.085518ms ago: executing program 2 (id=2159): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000700)={0x40, 0xb, 0x4, "eb5f9bb9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = epoll_create1(0x0) syz_usb_connect$cdc_ecm(0x5, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000582505a1a440000102030109024f0001010420b80904001002020600060924060000391400080004072414010400000905032000fc03080905820210008105080907030208000403ed"], &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x1, 0x5, 0x8, 0x20, 0x8b}, 0x6c, &(0x7f0000000140)={0x5, 0xf, 0x6c, 0x6, [@generic={0x10, 0x10, 0x4, "e3f56e4acb2b1cd968c79e7698"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x9, 0x6}, @ssp_cap={0x14, 0x10, 0xa, 0xe, 0x2, 0x4, 0xf0f, 0x6, [0xff3f3f, 0xff0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "539db1657dc4e6315a81338c817e8a02"}, @ss_container_id={0x14, 0x10, 0x4, 0xcd, "0f4710ea0fd1be1b7586932952f14916"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b838c7b7a40c9344dd08cc2ea985e998"}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x402}}, {0xfd, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0xab, &(0x7f0000000380)=@string={0xab, 0x3, "0647d4e1c205929e2bbbcaa7084b873ae6531e867c715623a2d2c7f2abe1f312af9054da4ee08e1d2648b53677ef7827be29718ac4adca3012a4fe356313f025453f1d3f5554dd05aa983f8c79c0e341a0861dc01773f9844746cd51c9514407019d26c754b3c1a72481fb27c427239327b455cc3a577afec8fd942eb2021d54986c6e9dae2d98211b1e65791b38898615d29fa773c146e778ae0d2fe9c9c7e570bedc30286f9480eb"}}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') fstat(r2, &(0x7f0000000200)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f00000004c0)='memory.stat\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(r4, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x1fc) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) dup3(r3, r1, 0x0) fsopen(&(0x7f0000000240)='xfs\x00', 0x0) 688.416523ms ago: executing program 0 (id=2160): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_emit_ethernet(0xa6, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00@\x00', 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x10, 0x0, 0x63, 0x300, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}]}}}}}}, 0x0) getpid() r0 = socket(0x14, 0x2, 0x4) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) 677.171027ms ago: executing program 3 (id=2161): io_setup(0x5, &(0x7f0000000e80)=0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x2}}, [0xf42, 0x2, 0x86bd, 0x8, 0x8000, 0xd7, 0xc5c9, 0x8b8e, 0xfffffffeffffffff, 0x8001, 0x4, 0x7, 0x0, 0x2, 0x9]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r2, 0xa, "1a14c18f508157ad88b1"}, &(0x7f0000000200)=0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r3, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2021, 0x1, @thr={&(0x7f0000000000)="477ab85b57b0bfe363e6664fd2eab4253c11c7f19d17077216192eb4668f3a061a1b360a09d36544f45fcf2524b84cb8b21b185c49ad5715714e8c9fd459d7174f1a918ad0721ee25a07abc1cf375c875577a0044b50818ece5133e6acf8f9cc2d9592a0a588d88bda22a50539b06bdba99e1dda267ffb121cf1327a00270d6697075d685ad5c9f7216aa363335986ebde77fac164d71a3078b70f65235d145027cd7184aa3d7a290f8da10196a08c9cb60d9918cfdc4f8419e9c4806d20b7c390dd43f3f6d20e5b46e33540bcf4d968524e4e7bccebdba86f5de79cb9d8e9", &(0x7f00000010c0)="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"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r5 = timerfd_create(0x0, 0x800) r6 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x6776, 0x8, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0xc1, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0xfffffffd, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x8, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) sendto$inet6(r1, &(0x7f00000004c0)="ab64fb7e40e50bdbc79cf49ae5ac734f62c8f19f35ec2da77e47cd158e29b89a8adbbd599aafb9215b3cecbec2050ad13520f92998de4f578c4873d6db70a39500d79d0311b66714a8785f6dc435292ee6afb1d503f7fd233b51383c8d6d01de9970a8f50fb943df6d926d60b925bbdd5a87239f70a75d48969ae7966b737b4e61e4bf258b401ae787f702cf4662aa9b147c5f38073b338d7cd4eca5a340300860c24289ed60daf45fe835600630f2e6579c572f36b972471434b9f47f11cc3187860d783edc024c4d155540e216a0276c92b214af5e49ae4f00e3aae4eb684c83c6ebf8e64667539a54535756106ab014af8a", 0xf3, 0x1, &(0x7f0000000240)={0xa, 0x4e21, 0xfffffffe, @mcast2, 0x9}, 0x1c) 550.355324ms ago: executing program 0 (id=2162): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) fcntl$setstatus(r1, 0x4, 0x40400) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000003e000701feffffffe3ffffff017c000008004282040009000fdb151b4f6cf15c4ad796928cdc9b4d5a93180060963d6151636f24d7e59665dd53cf143ea6e7ef94922806ecd920f3bba648f78b829e5a02ceb60083b86dc84edd2f85824abb1518d6cdf48de6845af6d2f79b2ddc1c8f41c61e97df26eba43f6c6f41cd4cff1816fe983177cb75323c37"], 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=r5], 0x90}}, 0x0) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x20040040, &(0x7f0000000200)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) 278.243291ms ago: executing program 0 (id=2163): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffc, 0x9}}) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3, 0xff80}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x7, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r4, @ANYBLOB="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", @ANYRES32=r1, @ANYRES32, @ANYBLOB="df79b5bc6c91429af62aedea2ade2213f82ca31361cca0038e2144c7cbe184eff7df500c8d4c61207b4c2713236042baffbaac7db31162fbfd2bce6194faabdfe003ba62160aa104cea87ef123f62f6dcf74ce7ad560510790c32b0f0bd41b25980b2ec4021846adcf60e02d790bf7ba2a287ccf79ab104d2bc7515a189eeabe68375449ea238ff3642d9f70050e6682203b9bbacdf87d0f", @ANYBLOB="0edb6a3071a66cd53ae8b23815419da0dce586f822501febc24daeeda1870d5bd416123d65d8880a3ddacbe05c62e051c788c508837125fbeeb05a0f39564a31ca0d00b3fca27563030b3b390688dd7ac495f779ef587e92877bf11d3561eef10d867a4d071aa5053eb1233aa9c661"], 0x1c0}}, 0x0) ioctl$sock_SIOCINQ(r1, 0x5760, 0x0) r7 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f0000000200)={0x3, @output={0x1000, 0x0, {0x8, 0x7}, 0x1}}) read$FUSE(r0, &(0x7f0000006200)={0x2020}, 0x2020) write$binfmt_script(r5, &(0x7f0000000180), 0x4) 201.310863ms ago: executing program 1 (id=2164): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x300, 0x0, 0x6, 0x0, @private=0xa210104, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x8, 0x1, 0x0, [{@remote, 0x4}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async, rerun: 32) pread64(r0, &(0x7f0000000080)=""/88, 0x58, 0x100) (rerun: 32) 0s ago: executing program 1 (id=2165): r0 = socket(0x10, 0x3, 0x0) accept$alg(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="1b00000000000000000000000f00000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000100)="89979b7351b283b6202afcc39def93d4ec06c1c50d7303d827f998ebcf4c023b1ed8f3a8b85335", &(0x7f0000001380)=""/153}, 0x20) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r0, &(0x7f0000000000)="2000000011005f0414f9f40700090400810000000d0000000000000008000f000100", 0x22) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f00007f9000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$P9_RSTATFS(r5, &(0x7f0000001280)={0x43, 0x9, 0x2, {0x2, 0x1, 0x2, 0x1000, 0x9, 0x5, 0x2d3ab285, 0x54b4, 0x4}}, 0x43) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000fc000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) kernel console output (not intermixed with test programs): 16161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 541.685119][ T30] audit: type=1400 audit(1751441488.713:1019): avc: denied { associate } for pid=12434 comm="syz.2.1737" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 541.823571][ T30] audit: type=1400 audit(1751441488.853:1020): avc: denied { mounton } for pid=12434 comm="syz.2.1737" path="/326/bus" dev="tmpfs" ino=1761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 541.916544][T12441] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 542.079937][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 542.090713][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 542.181641][ T30] audit: type=1400 audit(1751441489.063:1021): avc: denied { add_name } for pid=12434 comm="syz.2.1737" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 542.182067][ T30] audit: type=1400 audit(1751441489.063:1022): avc: denied { setattr } for pid=12434 comm="syz.2.1737" name="work" dev="tmpfs" ino=1762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 542.215112][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.382943][ T5922] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 542.393551][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 542.406916][ T5922] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 542.406942][ T30] audit: type=1400 audit(1751441489.073:1023): avc: denied { write open } for pid=12434 comm="syz.2.1737" path=2F202864656C6574656429 dev="tmpfs" ino=1763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 542.417685][ T5922] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 543.212652][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.660705][ T5922] usb 5-1: config 0 descriptor?? [ 543.667965][T12428] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 543.761800][T12445] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 543.900484][ T5873] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 543.933176][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 543.941320][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 543.948130][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 543.955070][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 543.961944][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 543.968813][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 543.975895][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 543.982835][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 543.989620][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 543.996553][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.003740][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.010706][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.017469][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.025623][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.032689][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.039572][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.046446][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.053329][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.060428][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.067299][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.069970][ T5961] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 544.074150][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.088568][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.095848][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.103023][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.109788][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.116903][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.123939][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.134177][ T9] usb 5-1: USB disconnect, device number 70 [ 544.142594][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.149372][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 544.157727][ T5135] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 544.194630][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.206174][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.220266][ T5873] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 544.234854][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.245833][ T5873] usb 4-1: config 0 descriptor?? [ 544.260891][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 544.260911][ T30] audit: type=1400 audit(1751441491.293:1032): avc: denied { setattr } for pid=12443 comm="syz.1.1739" path="/dev/mixer" dev="devtmpfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 544.334506][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.347955][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.368640][ T5961] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 544.388439][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.411559][ T5961] usb 3-1: config 0 descriptor?? [ 544.424442][T12467] CUSE: info not properly terminated [ 544.658853][ T5873] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 544.676242][ T5873] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 544.710552][ T5922] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 544.830117][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'. [ 544.840161][T12476] veth1_macvtap: left promiscuous mode [ 544.859879][T12476] veth0_vlan: entered allmulticast mode [ 544.899767][T12476] vlan0: entered promiscuous mode [ 544.905496][T12476] vlan0: entered allmulticast mode [ 544.981393][ T5961] hid-led 0003:27B8:01ED.0020: unknown main item tag 0x0 [ 545.048925][ T5961] hid-led 0003:27B8:01ED.0020: unknown main item tag 0x0 [ 545.103036][ T5961] hid-led 0003:27B8:01ED.0020: unknown main item tag 0x0 [ 545.164333][ T5961] hid-led 0003:27B8:01ED.0020: unknown main item tag 0x0 [ 545.188751][ T5873] cp2112 0003:10C4:EA90.001F: Part Number: 0x82 Device Version: 0xFE [ 545.196628][ T5961] hid-led 0003:27B8:01ED.0020: unknown main item tag 0x0 [ 545.467902][ T5922] usb 2-1: device descriptor read/64, error -71 [ 545.493100][ T5961] hid-led 0003:27B8:01ED.0020: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 545.616020][ T5961] hid-led 0003:27B8:01ED.0020: ThingM blink(1) initialized [ 545.669778][ T30] audit: type=1400 audit(1751441492.603:1033): avc: denied { getopt } for pid=12453 comm="syz.3.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 545.712900][ T5961] usb 3-1: USB disconnect, device number 74 [ 545.737076][T12482] fido_id[12482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 546.189903][ T5922] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 546.504231][ T5922] usb 2-1: device descriptor read/64, error -71 [ 546.616724][T12492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.672707][ T5922] usb usb2-port1: attempt power cycle [ 547.228948][ T30] audit: type=1400 audit(1751441494.253:1034): avc: denied { listen } for pid=12503 comm="syz.2.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 547.490059][ T5922] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 547.520164][ T5941] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 547.781897][ T5873] cp2112 0003:10C4:EA90.001F: error reading lock byte: -71 [ 547.990986][T12513] FAULT_INJECTION: forcing a failure. [ 547.990986][T12513] name failslab, interval 1, probability 0, space 0, times 0 [ 547.991099][ T5873] usb 4-1: USB disconnect, device number 74 [ 548.021077][T12513] CPU: 0 UID: 0 PID: 12513 Comm: syz.1.1757 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 548.021104][T12513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 548.021115][T12513] Call Trace: [ 548.021121][T12513] [ 548.021127][T12513] dump_stack_lvl+0x16c/0x1f0 [ 548.021157][T12513] should_fail_ex+0x512/0x640 [ 548.021179][T12513] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 548.021206][T12513] should_failslab+0xc2/0x120 [ 548.021230][T12513] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 548.021251][T12513] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 548.021277][T12513] ? getname_flags.part.0+0x4c/0x550 [ 548.021300][T12513] getname_flags.part.0+0x4c/0x550 [ 548.021321][T12513] getname_flags+0x93/0xf0 [ 548.021343][T12513] do_readlinkat+0xb4/0x3a0 [ 548.021368][T12513] ? fput+0x70/0xf0 [ 548.021392][T12513] ? __pfx_do_readlinkat+0x10/0x10 [ 548.021416][T12513] ? ksys_write+0x1ac/0x250 [ 548.021436][T12513] ? __pfx_ksys_write+0x10/0x10 [ 548.021462][T12513] __x64_sys_readlink+0x78/0xc0 [ 548.021479][T12513] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.021501][T12513] do_syscall_64+0xcd/0x4c0 [ 548.021528][T12513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.021545][T12513] RIP: 0033:0x7f882498e929 [ 548.021559][T12513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.021575][T12513] RSP: 002b:00007f8825753038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 548.021590][T12513] RAX: ffffffffffffffda RBX: 00007f8824bb5fa0 RCX: 00007f882498e929 [ 548.021601][T12513] RDX: 00000000000000d7 RSI: 0000200000000240 RDI: 0000200000000000 [ 548.021612][T12513] RBP: 00007f8825753090 R08: 0000000000000000 R09: 0000000000000000 [ 548.021621][T12513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.021631][T12513] R13: 0000000000000000 R14: 00007f8824bb5fa0 R15: 00007ffd3aea43d8 [ 548.021655][T12513] [ 548.225046][ T5922] usb 2-1: device not accepting address 74, error -71 [ 548.815435][T12506] SELinux: failed to load policy [ 548.829580][ T5873] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 549.262457][ T5941] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 549.275250][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 549.282782][ T5941] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 549.296392][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.496401][ T5941] usb 5-1: config 0 descriptor?? [ 549.510375][T12497] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 549.619989][ T5873] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.631355][ T5873] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 549.642764][ T5873] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 549.652976][ T5873] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 549.686248][T12524] ubi: mtd0 is already attached to ubi31 [ 549.688190][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.737755][T12515] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 549.784975][ T5873] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 550.002563][T12515] tmpfs: Unknown parameter 'usrquota0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.002563][T12515] 0 [ 550.786837][ T5941] waltop 0003:172F:0032.0021: unknown main item tag 0x1 [ 550.793561][T12528] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 550.800039][ T5941] waltop 0003:172F:0032.0021: hidraw0: USB HID v0.04 Device [HID 172f:0032] on usb-dummy_hcd.4-1/input0 [ 552.113067][ T5961] usb 5-1: USB disconnect, device number 71 [ 552.270167][ T48] usb 4-1: USB disconnect, device number 75 [ 552.429765][T12547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.507750][T12554] FAULT_INJECTION: forcing a failure. [ 552.507750][T12554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.617423][ T30] audit: type=1400 audit(1751441499.643:1035): avc: denied { read } for pid=12550 comm="syz.0.1768" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 552.642637][T12554] CPU: 0 UID: 0 PID: 12554 Comm: syz.4.1769 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 552.642661][T12554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.642671][T12554] Call Trace: [ 552.642677][T12554] [ 552.642683][T12554] dump_stack_lvl+0x16c/0x1f0 [ 552.642713][T12554] should_fail_ex+0x512/0x640 [ 552.642739][T12554] strncpy_from_user+0x3b/0x2e0 [ 552.642762][T12554] getname_flags.part.0+0x8f/0x550 [ 552.642783][T12554] getname_flags+0x93/0xf0 [ 552.642804][T12554] do_readlinkat+0xb4/0x3a0 [ 552.642829][T12554] ? fput+0x70/0xf0 [ 552.642862][T12554] ? __pfx_do_readlinkat+0x10/0x10 [ 552.642891][T12554] ? ksys_write+0x1ac/0x250 [ 552.642911][T12554] ? __pfx_ksys_write+0x10/0x10 [ 552.642936][T12554] __x64_sys_readlink+0x78/0xc0 [ 552.642952][T12554] ? lockdep_hardirqs_on+0x7c/0x110 [ 552.642975][T12554] do_syscall_64+0xcd/0x4c0 [ 552.643001][T12554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.643018][T12554] RIP: 0033:0x7f07fdd8e929 [ 552.643031][T12554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.643047][T12554] RSP: 002b:00007f07feb15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 552.643063][T12554] RAX: ffffffffffffffda RBX: 00007f07fdfb5fa0 RCX: 00007f07fdd8e929 [ 552.643073][T12554] RDX: 00000000000000d7 RSI: 0000200000000240 RDI: 0000200000000000 [ 552.643083][T12554] RBP: 00007f07feb15090 R08: 0000000000000000 R09: 0000000000000000 [ 552.643092][T12554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.643101][T12554] R13: 0000000000000000 R14: 00007f07fdfb5fa0 R15: 00007ffc7f9acb18 [ 552.643122][T12554] [ 552.885743][T12556] lo speed is unknown, defaulting to 1000 [ 552.886402][T12556] lo speed is unknown, defaulting to 1000 [ 552.933858][ T30] audit: type=1400 audit(1751441499.643:1036): avc: denied { open } for pid=12550 comm="syz.0.1768" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 552.933905][ T30] audit: type=1400 audit(1751441499.673:1037): avc: denied { create } for pid=12549 comm="syz.2.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 553.077258][ T5941] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 553.250047][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 553.259378][ T5941] usb 1-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 553.428414][ T5941] usb 1-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.624832][ T5941] usb 1-1: config 0 interface 0 has no altsetting 0 [ 553.697077][ T5941] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 553.763911][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.857318][ T5941] usb 1-1: config 0 descriptor?? [ 553.871802][ T5941] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 554.721113][ T30] audit: type=1400 audit(1751441501.743:1038): avc: denied { ioctl } for pid=12550 comm="syz.0.1768" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 556.162606][ T5826] usb 1-1: USB disconnect, device number 73 [ 556.837895][ T5941] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 556.847287][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 556.994693][T12614] binder: Binderfs stats mode cannot be changed during a remount [ 557.012205][ T24] usb 5-1: device descriptor read/64, error -71 [ 557.130453][ T5941] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 557.216392][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.232118][T12618] syz.0.1784: attempt to access beyond end of device [ 557.232118][T12618] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 557.252336][ T5941] pwc: Logitech ViewPort AV 100 webcam detected. [ 557.258829][T12618] hpfs: hpfs_map_sector(): read error [ 557.331954][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 557.480025][ T5826] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 557.503670][ T24] usb 5-1: device descriptor read/64, error -71 [ 557.548111][T12627] CUSE: info not properly terminated [ 557.622602][ T24] usb usb5-port1: attempt power cycle [ 557.661847][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.678604][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.710758][ T5826] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 557.726094][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.984350][ T24] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 558.056771][ T24] usb 5-1: device descriptor read/8, error -71 [ 558.111856][ T5826] usb 4-1: config 0 descriptor?? [ 558.127776][ T5941] pwc: Failed to set LED on/off time (-71) [ 558.137220][ T5941] pwc: send_video_command error -71 [ 558.147215][ T5941] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 558.159242][ T5941] Philips webcam 3-1:127.0: probe with driver Philips webcam failed with error -71 [ 558.181332][ T5941] usb 3-1: USB disconnect, device number 75 [ 558.309977][ T24] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 558.439560][ T30] audit: type=1400 audit(1751441505.443:1039): avc: denied { append } for pid=12635 comm="syz.1.1789" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 558.491476][ T24] usb 5-1: device descriptor read/8, error -71 [ 558.538402][ T30] audit: type=1400 audit(1751441505.443:1040): avc: denied { map } for pid=12635 comm="syz.1.1789" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 558.562683][ T30] audit: type=1400 audit(1751441505.453:1041): avc: denied { execute } for pid=12635 comm="syz.1.1789" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 558.640416][ T24] usb usb5-port1: unable to enumerate USB device [ 558.682159][ T30] audit: type=1400 audit(1751441505.713:1042): avc: denied { read } for pid=12644 comm="syz.1.1791" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 558.705965][ T30] audit: type=1400 audit(1751441505.713:1043): avc: denied { open } for pid=12644 comm="syz.1.1791" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 558.896735][ T5826] usbhid 4-1:0.0: can't add hid device: -71 [ 558.904673][ T5826] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 558.921771][ T5826] usb 4-1: USB disconnect, device number 76 [ 559.540746][T12654] overlayfs: cannot append lower layer [ 559.864274][ T30] audit: type=1400 audit(1751441506.733:1044): avc: denied { accept } for pid=12659 comm="syz.1.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 559.949061][T12660] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1795'. [ 559.958961][T12660] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1795'. [ 560.044738][T12666] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 560.061177][T12666] cramfs: wrong magic [ 560.200017][ T5961] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 561.061086][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 561.067942][ T5961] usb 3-1: too many configurations: 207, using maximum allowed: 8 [ 561.081863][ T5961] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 561.339254][ T5961] usb 3-1: can't read configurations, error -61 [ 561.562137][ T5961] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 561.854601][ T30] audit: type=1400 audit(1751441508.863:1045): avc: denied { watch } for pid=12671 comm="syz.0.1800" path="/372/file0" dev="tmpfs" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 561.889918][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 561.898337][ T5961] usb 3-1: too many configurations: 207, using maximum allowed: 8 [ 561.926690][ T5961] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 561.947069][ T5961] usb 3-1: can't read configurations, error -61 [ 561.964237][ T30] audit: type=1400 audit(1751441508.863:1046): avc: denied { watch_sb } for pid=12671 comm="syz.0.1800" path="/372/file0" dev="tmpfs" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 562.087021][ T5961] usb usb3-port1: attempt power cycle [ 562.672124][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.678485][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.168642][ T5961] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 563.226139][ T5961] usb 3-1: device descriptor read/8, error -71 [ 563.251113][ T5873] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 563.348398][ T30] audit: type=1400 audit(1751441510.373:1047): avc: denied { checkpoint_restore } for pid=12695 comm="syz.1.1805" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 563.371980][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1805'. [ 563.493398][ T5873] usb 4-1: device descriptor read/64, error -71 [ 563.502578][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1805'. [ 563.662743][ T30] audit: type=1400 audit(1751441510.693:1048): avc: denied { open } for pid=12701 comm="syz.4.1807" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 563.690244][ T30] audit: type=1400 audit(1751441510.693:1049): avc: denied { ioctl } for pid=12701 comm="syz.4.1807" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 563.766809][T12706] XFS (nullb0): Invalid superblock magic number [ 563.810424][ T5826] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 563.818063][ T5873] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 563.960035][ T5873] usb 4-1: device descriptor read/64, error -71 [ 563.980224][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 563.988947][ T5826] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 563.998189][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.019696][ T5826] usb 2-1: Product: syz [ 564.113258][ T5873] usb usb4-port1: attempt power cycle [ 564.127064][ T5826] usb 2-1: Manufacturer: syz [ 564.139270][ T5826] usb 2-1: SerialNumber: syz [ 564.155712][ T5826] usb 2-1: config 0 descriptor?? [ 564.807967][T12718] overlayfs: cannot append lower layer [ 564.852852][ T5826] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 564.865004][ T5826] usb 2-1: USB disconnect, device number 76 [ 564.899973][ T5873] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 564.934638][ T5873] usb 4-1: device descriptor read/8, error -71 [ 564.979964][ T24] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 565.180561][ T5873] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 565.211085][ T5873] usb 4-1: device descriptor read/8, error -71 [ 565.327059][ T5873] usb usb4-port1: unable to enumerate USB device [ 565.969966][ T5961] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 566.239096][ T30] audit: type=1400 audit(1751441513.063:1050): avc: denied { read } for pid=12730 comm="syz.3.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 566.930500][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 567.013983][ T30] audit: type=1400 audit(1751441514.033:1051): avc: denied { execute } for pid=12739 comm="syz.2.1815" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 567.180441][ T5961] usb 2-1: config 1 interface 1 has no altsetting 0 [ 567.204607][ T5961] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.465530][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.497191][ T30] audit: type=1400 audit(1751441514.523:1052): avc: denied { setopt } for pid=12742 comm="syz.0.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 567.561730][ T5961] usb 2-1: Product: syz [ 567.575870][ T5961] usb 2-1: Manufacturer: syz [ 567.590236][ T5961] usb 2-1: SerialNumber: syz [ 567.592529][T12745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.900146][T12757] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 568.294024][ T5887] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 568.669943][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 568.793806][T12768] overlayfs: cannot append lower layer [ 569.666966][ T5887] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 569.686384][ T5961] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 569.765609][ T5887] usb 3-1: config 0 has no interface number 0 [ 569.820982][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1826'. [ 569.843109][ T5961] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 569.915677][ T5887] usb 3-1: config 0 interface 184 has no altsetting 0 [ 570.009274][ T5887] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 570.253529][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.278330][ T5887] usb 3-1: Product: syz [ 570.282811][ T5887] usb 3-1: Manufacturer: syz [ 570.288595][ T5961] usb 2-1: USB disconnect, device number 77 [ 570.295037][ T5887] usb 3-1: SerialNumber: syz [ 570.304458][ T5887] usb 3-1: config 0 descriptor?? [ 570.507193][ T5887] smsc75xx v1.0.0 [ 570.532235][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.619078][T12787] binder: 12786:12787 ioctl c0502100 200000000240 returned -22 [ 570.668316][T12787] binder: 12786:12787 ioctl 40045108 200000000040 returned -22 [ 570.925598][ T5887] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 570.949452][T12801] netlink: 'syz.4.1834': attribute type 10 has an invalid length. [ 570.958815][ T5887] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 570.972611][ T5887] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 571.062845][ T5826] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 571.096662][ T5887] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 571.514208][ T5826] usb 4-1: Using ep0 maxpacket: 32 [ 571.991167][ T5826] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 572.065847][ T5826] usb 4-1: config 0 has no interface number 0 [ 572.072309][ T5826] usb 4-1: config 0 interface 150 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 572.084009][ T5826] usb 4-1: config 0 interface 150 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 572.120217][ T5826] usb 4-1: config 0 interface 150 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 572.132753][ T5826] usb 4-1: config 0 interface 150 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 572.144284][ T5826] usb 4-1: config 0 interface 150 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 572.158147][ T5826] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=6c.3a [ 572.167833][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.244458][ T5826] usb 4-1: Product: syz [ 572.252009][ T5826] usb 4-1: Manufacturer: syz [ 572.261500][ T5826] usb 4-1: SerialNumber: syz [ 572.752577][ T5826] r8152-cfgselector 4-1: Unknown version 0x0000 [ 572.768122][ T5826] r8152-cfgselector 4-1: config 0 descriptor?? [ 572.774219][ T30] audit: type=1400 audit(1751441519.793:1053): avc: denied { block_suspend } for pid=12798 comm="syz.1.1833" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 572.833204][ T5941] usb 3-1: USB disconnect, device number 80 [ 573.233255][T12820] overlayfs: cannot append lower layer [ 573.549354][ T5826] r8152-cfgselector 4-1: Unknown version 0x0000 [ 573.565720][ T5826] r8153_ecm 4-1:0.150: skipping garbage [ 573.580248][ T5826] r8152-cfgselector 4-1: bad CDC descriptors [ 573.594419][ T5826] r8152-cfgselector 4-1: USB disconnect, device number 81 [ 573.649783][ T30] audit: type=1400 audit(1751441520.673:1054): avc: denied { bind } for pid=12827 comm="syz.1.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 573.686744][T12830] netlink: 'syz.2.1841': attribute type 10 has an invalid length. [ 573.782408][ T30] audit: type=1400 audit(1751441520.743:1055): avc: denied { write } for pid=12831 comm="syz.0.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 574.060172][ T5887] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 574.301735][T12845] trusted_key: encrypted_key: master key parameter 'usÊ¥|g>­0000000000000004093' is invalid [ 574.330005][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 574.337594][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.356037][ T5887] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 574.365659][ T5887] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 574.375209][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.397552][ T5887] usb 1-1: config 0 descriptor?? [ 574.620294][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 574.870360][ T24] usb 2-1: device descriptor read/64, error -71 [ 574.911507][ T30] audit: type=1400 audit(1751441521.943:1056): avc: denied { read } for pid=12831 comm="syz.0.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 574.912863][T12832] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 574.994495][ T5826] usb 1-1: USB disconnect, device number 74 [ 575.070842][T12858] FAULT_INJECTION: forcing a failure. [ 575.070842][T12858] name failslab, interval 1, probability 0, space 0, times 0 [ 575.084186][T12858] CPU: 0 UID: 0 PID: 12858 Comm: syz.2.1852 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 575.084210][T12858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.084221][T12858] Call Trace: [ 575.084227][T12858] [ 575.084233][T12858] dump_stack_lvl+0x16c/0x1f0 [ 575.084263][T12858] should_fail_ex+0x512/0x640 [ 575.084285][T12858] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 575.084312][T12858] should_failslab+0xc2/0x120 [ 575.084337][T12858] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 575.084360][T12858] ? __alloc_skb+0x2b2/0x380 [ 575.084387][T12858] __alloc_skb+0x2b2/0x380 [ 575.084409][T12858] ? __pfx___alloc_skb+0x10/0x10 [ 575.084434][T12858] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 575.084456][T12858] netlink_alloc_large_skb+0x69/0x130 [ 575.084475][T12858] netlink_sendmsg+0x6a1/0xdd0 [ 575.084497][T12858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.084524][T12858] ____sys_sendmsg+0xa95/0xc70 [ 575.084543][T12858] ? copy_msghdr_from_user+0x10a/0x160 [ 575.084567][T12858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.084597][T12858] ___sys_sendmsg+0x134/0x1d0 [ 575.084620][T12858] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.084641][T12858] ? __lock_acquire+0x622/0x1c90 [ 575.084694][T12858] __sys_sendmsg+0x16d/0x220 [ 575.084718][T12858] ? __pfx___sys_sendmsg+0x10/0x10 [ 575.084757][T12858] do_syscall_64+0xcd/0x4c0 [ 575.084784][T12858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.084802][T12858] RIP: 0033:0x7f1b7638e929 [ 575.084820][T12858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.084837][T12858] RSP: 002b:00007f1b771a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.084853][T12858] RAX: ffffffffffffffda RBX: 00007f1b765b5fa0 RCX: 00007f1b7638e929 [ 575.084864][T12858] RDX: 000000000404c080 RSI: 0000200000000040 RDI: 0000000000000003 [ 575.084874][T12858] RBP: 00007f1b771a0090 R08: 0000000000000000 R09: 0000000000000000 [ 575.084884][T12858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.084893][T12858] R13: 0000000000000000 R14: 00007f1b765b5fa0 R15: 00007fff75701b48 [ 575.084915][T12858] [ 575.298949][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.446897][ T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 575.454697][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 575.724945][T12863] overlayfs: cannot append lower layer [ 575.840480][ T24] usb 2-1: device descriptor read/64, error -71 [ 575.956669][ T24] usb usb2-port1: attempt power cycle [ 576.240134][ T5941] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 576.260123][ T5826] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 576.290189][ T5873] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 576.330007][ T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 576.351194][ T24] usb 2-1: device descriptor read/8, error -71 [ 576.391844][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 576.404784][ T5826] usb 4-1: device descriptor read/64, error -71 [ 576.412368][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 576.427166][ T5941] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 576.440483][ T5941] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 576.449642][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.459407][ T5941] usb 1-1: config 0 descriptor?? [ 576.465292][T12869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 576.474139][ T5873] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 576.483534][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.495461][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 576.499997][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 576.506420][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 576.525290][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 576.539286][ T5873] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 576.548830][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.558825][ T5873] usb 3-1: config 0 descriptor?? [ 576.564526][T12872] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 576.600306][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 576.621602][ T24] usb 2-1: device descriptor read/8, error -71 [ 576.659953][ T48] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 576.660196][ T5826] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 576.730708][ T24] usb usb2-port1: unable to enumerate USB device [ 576.810228][ T5826] usb 4-1: device descriptor read/64, error -71 [ 576.819996][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 576.826274][ T48] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 576.837561][ T48] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 576.847666][ T48] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 576.857656][ T48] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.870853][ T48] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.879940][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.895902][ T5941] magicmouse 0003:05AC:0269.0022: hidraw0: USB HID v0.01 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 576.922143][ T5826] usb usb4-port1: attempt power cycle [ 576.978143][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.995609][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.007386][ T5873] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 577.021521][ T5873] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 577.099895][ T48] usb 5-1: GET_CAPABILITIES returned 0 [ 577.105475][ T48] usbtmc 5-1:16.0: can't read capabilities [ 577.112691][ T5873] usb 1-1: USB disconnect, device number 75 [ 577.260181][ T5826] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 577.271110][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.281654][ T5826] usb 4-1: device descriptor read/8, error -71 [ 577.282017][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.298445][ T48] usb 3-1: USB disconnect, device number 81 [ 577.304213][ T30] audit: type=1400 audit(1751441524.333:1057): avc: denied { write } for pid=12873 comm="syz.4.1858" name="hiddev0" dev="devtmpfs" ino=3694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 577.327620][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.520029][ T5826] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 577.530056][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 577.543632][T12885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.550461][ T5826] usb 4-1: device descriptor read/8, error -71 [ 577.563215][ T5887] lo speed is unknown, defaulting to 1000 [ 577.576950][ T30] audit: type=1400 audit(1751441524.603:1058): avc: denied { read } for pid=12884 comm="syz.1.1861" path="socket:[37126]" dev="sockfs" ino=37126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 577.720533][ T5826] usb usb4-port1: unable to enumerate USB device [ 578.401184][ T30] audit: type=1400 audit(1751441525.433:1059): avc: denied { write } for pid=12894 comm="syz.2.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 578.432141][ T30] audit: type=1400 audit(1751441525.453:1060): avc: denied { ioctl } for pid=12894 comm="syz.2.1864" path="socket:[36461]" dev="sockfs" ino=36461 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 578.456901][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.569471][T12902] overlayfs: cannot append lower layer [ 578.580032][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 579.238457][T12917] ip6erspan0: entered allmulticast mode [ 579.609994][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 580.649980][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 580.841767][ T5887] usb 5-1: USB disconnect, device number 77 [ 581.668962][T12921] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 581.675493][T12921] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 581.684007][T12921] vhci_hcd vhci_hcd.0: Device attached [ 581.689978][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 581.924647][T12933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1873'. [ 581.939241][T12922] vhci_hcd: connection closed [ 581.941023][ T12] vhci_hcd: stop threads [ 581.953006][ T12] vhci_hcd: release socket [ 581.957578][ T12] vhci_hcd: disconnect device [ 581.977272][T12937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.989932][ T5826] usb 40-1: enqueue for inactive port 0 [ 582.119329][ T30] audit: type=1400 audit(1751441529.143:1061): avc: denied { node_bind } for pid=12936 comm="syz.2.1874" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 582.554692][ T5826] usb usb40-port1: attempt power cycle [ 582.730152][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 582.948002][T12955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 582.948520][ T30] audit: type=1400 audit(1751441529.973:1062): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 582.994255][ T5922] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 583.036948][ T30] audit: type=1400 audit(1751441530.063:1063): avc: denied { create } for pid=12956 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 583.150838][ T5826] usb usb40-port1: unable to enumerate USB device [ 583.160160][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 583.186961][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.213679][ T5887] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 583.235572][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 583.341503][ T5922] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 583.352895][ T5922] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 583.366408][ T5922] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 583.379622][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.402358][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 583.409634][ T5887] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 583.438567][ T5887] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 583.453118][ T5922] hub 2-1:1.0: bad descriptor, ignoring hub [ 583.465425][ T5922] hub 2-1:1.0: probe with driver hub failed with error -5 [ 583.478155][ T5887] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 583.498215][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.564208][ T5922] cdc_wdm 2-1:1.0: skipping garbage [ 583.569471][ T5922] cdc_wdm 2-1:1.0: skipping garbage [ 583.589204][ T5887] usb 4-1: Product: syz [ 583.645450][ T5887] usb 4-1: Manufacturer: syz [ 583.652484][ T5922] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 583.748499][ T5887] usb 4-1: SerialNumber: syz [ 583.759648][ T5922] cdc_wdm 2-1:1.0: Unknown control protocol [ 583.769668][T12960] openvswitch: netlink: VXLAN extension 206 out of range max 1 [ 583.777474][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 583.791533][ T5922] usb 2-1: USB disconnect, device number 82 [ 584.090186][ T48] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 584.143255][ T5887] cdc_ncm 4-1:1.0: bind() failure [ 584.292352][ T5887] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 584.343987][ T5887] cdc_ncm 4-1:1.1: bind() failure [ 584.366264][ T5887] usb 4-1: USB disconnect, device number 86 [ 584.381596][ T48] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 584.435297][ T48] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 584.472442][ T48] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 584.483122][ T48] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 584.501625][ T48] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 584.535139][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.576376][ T48] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 584.591084][ T48] usb 5-1: invalid MIDI out EP 0 [ 584.604087][ T30] audit: type=1400 audit(1751441531.633:1064): avc: denied { shutdown } for pid=12970 comm="syz.1.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 584.785544][ T48] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 584.810080][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 584.918258][ T48] usb 5-1: USB disconnect, device number 78 [ 585.849985][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 585.973206][T12999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.987688][T12999] bond0: (slave bond1): Enslaving as an active interface with an up link [ 586.538766][ T24] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 586.775612][ T24] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 586.806592][ T24] usb 5-1: config 0 has no interface number 0 [ 586.845644][ T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 586.860336][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.868711][ T24] usb 5-1: Product: syz [ 586.874803][ T24] usb 5-1: Manufacturer: syz [ 586.880212][ T24] usb 5-1: SerialNumber: syz [ 586.890066][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 586.909963][ T24] usb 5-1: config 0 descriptor?? [ 587.448259][ T30] audit: type=1400 audit(1751441534.473:1065): avc: denied { create } for pid=13025 comm="syz.1.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 587.930056][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 588.969993][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 589.070737][ T30] audit: type=1400 audit(1751441536.093:1066): avc: denied { connect } for pid=13054 comm="syz.2.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 589.117163][ T24] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 589.129509][ T24] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 589.182610][ T24] asix 5-1:0.251: probe with driver asix failed with error -5 [ 589.206270][ T24] usb 5-1: USB disconnect, device number 79 [ 589.427123][ T5922] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 589.581008][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 589.587294][ T5922] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 590.009985][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 590.111934][ T5922] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 590.126490][ T5922] usb 3-1: config 6 has no interface number 0 [ 590.163051][ T5922] usb 3-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 590.570785][ T5922] usb 3-1: New USB device found, idVendor=0007, idProduct=0000, bcdDevice=88.91 [ 590.718524][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.727338][ T5922] usb 3-1: Product: syz [ 590.733358][ T5922] usb 3-1: Manufacturer: syz [ 590.745834][ T5922] usb 3-1: SerialNumber: syz [ 590.784803][T13081] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1916'. [ 591.050000][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 591.535201][T13088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.090008][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 592.601155][ T30] audit: type=1400 audit(1751441539.633:1067): avc: denied { append } for pid=13103 comm="syz.3.1923" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 593.130985][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 594.060652][ T30] audit: type=1400 audit(1751441541.093:1068): avc: denied { setopt } for pid=13117 comm="syz.4.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 594.179977][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 594.284658][T13131] CUSE: info not properly terminated [ 595.122506][ T48] usb 3-1: USB disconnect, device number 82 [ 595.176358][T13149] veth1: entered promiscuous mode [ 595.209972][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 595.286206][ T30] audit: type=1400 audit(1751441542.313:1069): avc: denied { setopt } for pid=13151 comm="syz.2.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 595.482298][ T5887] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 595.660047][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 595.758301][ T5887] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 595.826514][ T5887] usb 2-1: config 0 has no interface number 0 [ 595.899316][ T5887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.972468][ T5887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.991694][ T5887] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 595.993806][ T30] audit: type=1400 audit(1751441543.013:1070): avc: denied { create } for pid=13173 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 596.022670][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.047455][ T5887] usb 2-1: config 0 descriptor?? [ 596.185478][ T5873] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 596.259976][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 596.492076][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 596.518223][ T5873] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 596.540218][ T5873] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 596.591220][ T5873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 596.636841][ T5873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 596.656501][T13152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.667544][T13188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=293 sclass=netlink_route_socket pid=13188 comm=syz.2.1943 [ 596.690365][T13152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.691551][ T5873] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.736916][T13152] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 596.737312][ T30] audit: type=1400 audit(1751441543.763:1071): avc: denied { mounton } for pid=13150 comm="syz.1.1936" path="/415/file0/bus" dev="ramfs" ino=37684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 596.767568][ T5873] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 596.772900][T13152] overlayfs: failed to set xattr on upper [ 596.787944][T13152] overlayfs: ...falling back to redirect_dir=nofollow. [ 596.792507][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.807721][T13152] overlayfs: ...falling back to index=off. [ 596.818161][T13152] overlayfs: ...falling back to uuid=null. [ 596.834670][T13152] overlayfs: ...falling back to xino=off. [ 596.851670][ T5922] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 596.856216][T13152] overlayfs: conflicting lowerdir path [ 597.009968][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 597.027846][ T5922] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 597.036413][ T5922] usb 5-1: config 0 has no interface number 0 [ 597.042699][ T5922] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 597.104964][ T5922] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 597.116190][ T5873] usb 4-1: usb_control_msg returned -32 [ 597.118470][ T5887] usbhid 2-1:0.1: can't add hid device: -71 [ 597.135600][ T5873] usbtmc 4-1:16.0: can't read capabilities [ 597.145680][ T5922] usb 5-1: config 0 interface 41 has no altsetting 0 [ 597.160754][ T5887] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 597.168423][ T5922] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 597.208915][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.209899][ T5887] usb 2-1: USB disconnect, device number 83 [ 597.265608][ T5922] usb 5-1: Product: syz [ 597.282552][ T5922] usb 5-1: Manufacturer: syz [ 597.289980][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 597.297395][ T5922] usb 5-1: SerialNumber: syz [ 597.326691][ T5922] usb 5-1: config 0 descriptor?? [ 597.362249][T13186] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 597.370178][T13186] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 597.481614][T13169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.515863][T13169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.594957][T13186] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 597.624877][T13186] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 597.692803][ T5941] usb 4-1: USB disconnect, device number 87 [ 598.058316][ T5922] Error reading MAC address [ 598.077603][T13186] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 598.106515][T13186] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 598.330010][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 598.339685][ T30] audit: type=1326 audit(1751441545.363:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13185 comm="syz.4.1944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07fdd8e929 code=0x0 [ 598.390227][ T5922] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 598.428477][ T5922] usb 5-1: USB disconnect, device number 80 [ 599.369988][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 600.080147][ T30] audit: type=1400 audit(1751441547.103:1073): avc: denied { accept } for pid=13234 comm="syz.4.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 600.409979][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 600.549951][T13246] lo speed is unknown, defaulting to 1000 [ 600.556016][T13246] lo speed is unknown, defaulting to 1000 [ 600.761857][T13246] lo speed is unknown, defaulting to 1000 [ 600.761889][T13244] input: syz1 as /devices/virtual/input/input25 [ 600.775354][T13246] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 600.814984][T13246] lo speed is unknown, defaulting to 1000 [ 600.822217][T13246] lo speed is unknown, defaulting to 1000 [ 600.829298][T13246] lo speed is unknown, defaulting to 1000 [ 600.836458][T13246] lo speed is unknown, defaulting to 1000 [ 600.843572][T13246] lo speed is unknown, defaulting to 1000 [ 600.939973][ T5887] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 601.399933][ T5887] usb 5-1: device descriptor read/64, error -71 [ 601.449975][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 601.468245][ T30] audit: type=1400 audit(1751441548.493:1074): avc: denied { create } for pid=13261 comm="syz.1.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 601.651167][ T5887] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 601.920118][ T5887] usb 5-1: device descriptor read/64, error -71 [ 601.989624][ T5826] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 602.050504][ T5887] usb usb5-port1: attempt power cycle [ 602.290294][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 602.297734][ T5826] usb 2-1: unable to get BOS descriptor or descriptor too short [ 602.318744][ T5826] usb 2-1: config index 0 descriptor too short (expected 101, got 95) [ 602.327493][ T5826] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.347250][ T5826] usb 2-1: config 1 interface 0 altsetting 233 bulk endpoint 0x82 has invalid maxpacket 1023 [ 602.358113][ T5826] usb 2-1: config 1 interface 0 altsetting 233 bulk endpoint 0x3 has invalid maxpacket 16 [ 602.368318][ T5826] usb 2-1: config 1 interface 0 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.382801][ T5826] usb 2-1: config 1 interface 0 has no altsetting 0 [ 602.392745][ T5826] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.402115][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.458535][ T5826] usb 2-1: Product: syz [ 602.470970][ T5826] usb 2-1: Manufacturer: syz [ 602.476510][ T5826] usb 2-1: SerialNumber: syz [ 602.489988][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 602.498186][T13271] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 602.509579][T13271] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 602.669998][ T5887] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 602.691940][ T5887] usb 5-1: device descriptor read/8, error -71 [ 602.847499][ T48] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 602.979952][ T5887] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 603.014899][ T48] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 603.459082][ T5887] usb 5-1: device descriptor read/8, error -71 [ 603.470887][ T48] usb 1-1: config 0 has no interface number 0 [ 603.482545][ T48] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 603.516609][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.529956][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 603.556541][ T48] usb 1-1: Product: syz [ 603.566655][ T48] usb 1-1: Manufacturer: syz [ 603.572079][ T5887] usb usb5-port1: unable to enumerate USB device [ 603.581244][ T48] usb 1-1: SerialNumber: syz [ 603.593652][ T48] usb 1-1: config 0 descriptor?? [ 603.951240][ T48] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 603.972072][ T48] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 603.983803][ T48] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 604.001975][ T48] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 604.111576][ T48] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 604.401464][ T5873] usb 1-1: USB disconnect, device number 76 [ 604.421005][ T5873] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 604.444235][ T5873] keyspan 1-1:0.133: device disconnected [ 604.464420][T13262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.570125][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 604.772774][ T5826] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 604.854215][ T5826] usb 2-1: USB disconnect, device number 84 [ 605.047931][T13316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1973'. [ 605.609971][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 605.959944][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 606.021737][ T5826] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 606.371937][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.390245][ T5873] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 606.411571][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 606.433548][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 606.450149][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.473726][T13320] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 606.490765][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 606.498567][ T5826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.512808][ T5826] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 606.525207][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.538251][ T5826] usb 4-1: config 0 descriptor?? [ 606.563670][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 606.578531][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 606.597366][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 606.622728][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.650047][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 606.661708][ T5873] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 606.671042][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.681480][ T5873] usb 3-1: config 0 descriptor?? [ 606.687181][T13326] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 606.715409][T13332] wireguard0: entered promiscuous mode [ 606.730140][T13332] wireguard0: entered allmulticast mode [ 606.832563][ T24] usb 5-1: USB disconnect, device number 85 [ 606.891421][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.509898][ T24] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 607.689972][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 607.700448][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.720072][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 607.736609][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 607.768822][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.906536][T13320] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 607.924334][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 608.729960][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 608.838025][ T5941] usb 4-1: USB disconnect, device number 88 [ 609.620081][ T30] audit: type=1400 audit(1751441556.643:1075): avc: denied { connect } for pid=13370 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 609.639797][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.770024][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 609.843998][ T30] audit: type=1400 audit(1751441556.733:1076): avc: denied { append } for pid=13319 comm="syz.4.1975" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 609.951618][T13369] input: syz0 as /devices/virtual/input/input26 [ 610.553240][T13374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.563211][T13374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.628469][ T5873] usbhid 3-1:0.0: can't add hid device: -71 [ 610.643990][ T5873] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 610.661697][ T30] audit: type=1400 audit(1751441557.683:1077): avc: denied { setopt } for pid=13379 comm="syz.3.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 610.696990][ T5873] usb 3-1: USB disconnect, device number 83 [ 610.809995][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 610.944278][ T5887] usb 5-1: USB disconnect, device number 86 [ 611.133257][T13394] netlink: 'syz.1.1990': attribute type 11 has an invalid length. [ 611.270207][T13395] IPv4: Oversized IP packet from 127.202.26.0 [ 611.473488][ T30] audit: type=1400 audit(1751441558.503:1078): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.533736][ T30] audit: type=1400 audit(1751441558.503:1079): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.650135][ T5887] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 611.668164][ T30] audit: type=1400 audit(1751441558.503:1080): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.752513][ T30] audit: type=1400 audit(1751441558.503:1081): avc: denied { read } for pid=5479 comm="dhcpcd" name="n108" dev="tmpfs" ino=8405 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 611.850076][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 611.900551][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.066481][ T5887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.102743][ T30] audit: type=1400 audit(1751441558.503:1082): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n108" dev="tmpfs" ino=8405 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 612.180049][ T5887] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 612.189123][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.209677][ T30] audit: type=1400 audit(1751441558.503:1083): avc: denied { getattr } for pid=5479 comm="dhcpcd" path="/run/udev/data/n108" dev="tmpfs" ino=8405 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 612.237405][ T5887] usb 5-1: Product: syz [ 612.245917][ T5887] usb 5-1: Manufacturer: syz [ 612.254194][ T5887] usb 5-1: SerialNumber: syz [ 612.316519][T13410] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 612.331416][T13410] qnx6: wrong signature (magic) in superblock #1. [ 612.337874][T13410] qnx6: unable to read the first superblock [ 612.531902][T13411] misc userio: Begin command sent, but we're already running [ 612.663793][ T30] audit: type=1400 audit(1751441559.093:1084): avc: denied { read open } for pid=13403 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.689737][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.889980][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 613.552770][T13389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.846109][T13389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.930021][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 614.228784][ T5887] usb 5-1: 0:2 : does not exist [ 614.493997][ T5887] usb 5-1: USB disconnect, device number 87 [ 614.970037][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 615.494585][T13471] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 615.494611][T13471] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 615.496035][T13471] vhci_hcd vhci_hcd.0: Device attached [ 615.502179][T13471] 9pnet_fd: Insufficient options for proto=fd [ 615.641676][ T5887] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 615.730004][ T5956] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 615.742678][ T24] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 615.790048][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 615.802956][ T5887] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 615.830070][ T5887] usb 5-1: config 179 has no interface number 0 [ 615.846945][ T5887] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 615.889723][ T5887] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 615.912030][ T24] usb 3-1: config 0 has no interfaces? [ 615.921097][ T24] usb 3-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 615.952585][ T5887] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 615.966130][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.009966][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 616.029748][ T24] usb 3-1: config 0 descriptor?? [ 616.039936][ T5887] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 616.122518][ T5887] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 616.185863][T13487] netlink: 'syz.3.2008': attribute type 1 has an invalid length. [ 616.202982][ T5887] usb 5-1: config 179 interface 65 has no altsetting 0 [ 616.204782][T13488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2009'. [ 616.226095][ T5887] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 616.256244][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.285448][T13472] usbip_core: unknown command [ 616.294194][ T48] usb 3-1: USB disconnect, device number 84 [ 616.301341][T13472] vhci_hcd: unknown pdu 0 [ 616.305351][T13487] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2008'. [ 616.328163][T13466] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 616.347130][T13472] usbip_core: unknown command [ 616.368962][ T36] vhci_hcd: stop threads [ 616.388672][ T36] vhci_hcd: release socket [ 616.393667][ T5887] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input28 [ 616.416037][T13487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 616.435882][ T36] vhci_hcd: disconnect device [ 616.473254][T13487] veth3: entered promiscuous mode [ 616.530926][ T5169] input input28: unable to receive magic message: -110 [ 616.789684][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 616.931635][ T5169] input input28: unable to receive magic message: -32 [ 616.968305][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 616.993377][ T5169] input input28: unable to receive magic message: -32 [ 617.049953][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 617.092138][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 617.356426][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 617.538828][ T5169] input input28: unable to receive magic message: -32 [ 617.574396][T13518] CUSE: info not properly terminated [ 618.072003][ T5169] input input28: unable to receive magic message: -32 [ 618.090103][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 618.116683][ T5169] input input28: unable to receive magic message: -32 [ 618.179496][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 618.456072][ T5887] usb 5-1: USB disconnect, device number 88 [ 618.462148][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 618.491408][ T5887] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 619.130085][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 619.645707][T13533] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 619.651341][T13536] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 619.916730][T13549] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 619.982062][T13550] tty tty1: ldisc open failed (-12), clearing slot 0 [ 620.160674][ T5873] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 620.170017][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 620.389947][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 620.764048][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.778040][ T5873] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 620.799963][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.819535][ T5873] usb 1-1: config 0 descriptor?? [ 620.879970][ T5956] vhci_hcd: vhci_device speed not set [ 620.885522][ T24] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 621.120197][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 621.174851][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 621.191533][T13572] CUSE: info not properly terminated [ 621.196535][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.209938][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 621.647268][ T24] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 621.655990][ T5873] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0024/input/input29 [ 621.656742][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.710420][ T24] usb 5-1: config 0 descriptor?? [ 621.717011][T13555] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 621.758557][T13579] netlink: 'syz.2.2032': attribute type 10 has an invalid length. [ 621.935071][ T5873] appleir 0003:05AC:8241.0024: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 622.249968][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 622.307243][ T5873] usb 1-1: USB disconnect, device number 77 [ 623.022129][T13581] fido_id[13581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 623.224254][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 623.224270][ T30] audit: type=1400 audit(1751441570.253:1093): avc: denied { wake_alarm } for pid=13599 comm="syz.0.2037" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 623.229524][T13600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2037'. [ 623.290010][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 623.340149][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 623.390128][ T5956] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 623.848696][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 623.863774][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.870152][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.330105][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 624.548069][T13622] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 624.554634][T13622] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 625.129022][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 625.139990][T13622] vhci_hcd vhci_hcd.0: Device attached [ 625.162218][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 625.217768][ T24] usb 5-1: USB disconnect, device number 89 [ 625.369959][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 625.592762][ T5826] usb 34-1: SetAddress Request (2) to port 0 [ 625.769292][ T5826] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 626.034861][ T30] audit: type=1400 audit(1751441572.992:1094): avc: denied { setopt } for pid=13629 comm="syz.4.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 626.055386][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.410057][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 626.595501][T13623] vhci_hcd: connection reset by peer [ 627.095533][T13643] netlink: 'syz.3.2046': attribute type 10 has an invalid length. [ 627.106543][ T3561] vhci_hcd: stop threads [ 627.110981][ T3561] vhci_hcd: release socket [ 627.115515][ T3561] vhci_hcd: disconnect device [ 627.228710][ T30] audit: type=1400 audit(1751441574.242:1095): avc: denied { mount } for pid=13646 comm="syz.3.2048" name="/" dev="configfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 627.335407][ T30] audit: type=1400 audit(1751441574.292:1096): avc: denied { search } for pid=13646 comm="syz.3.2048" name="/" dev="configfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 627.357670][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.380878][T13651] ip6gre1: entered allmulticast mode [ 627.388890][ T30] audit: type=1400 audit(1751441574.292:1097): avc: denied { search } for pid=13646 comm="syz.3.2048" name="/" dev="configfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 627.449960][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 627.904136][T13669] netlink: 'syz.3.2054': attribute type 1 has an invalid length. [ 627.913040][ T30] audit: type=1400 audit(1751441574.292:1098): avc: denied { read open } for pid=13646 comm="syz.3.2048" path="/" dev="configfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 627.945777][ T30] audit: type=1400 audit(1751441574.292:1099): avc: denied { search } for pid=13646 comm="syz.3.2048" name="/" dev="configfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 628.019129][T13669] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2054'. [ 628.134802][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2055'. [ 628.147959][T13669] 8021q: adding VLAN 0 to HW filter on device bond4 [ 628.286902][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2055'. [ 628.346945][T13669] veth5: entered promiscuous mode [ 628.376769][T13675] IPv6: sit1: Disabled Multicast RS [ 628.381340][T13685] netlink: 'syz.4.2057': attribute type 10 has an invalid length. [ 628.406019][T13675] sit1: entered allmulticast mode [ 628.490015][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 629.200263][ T5873] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 629.376933][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 629.425456][ T5873] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 629.454906][ T5873] usb 4-1: config 0 has no interface number 0 [ 629.530045][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 629.564371][T13704] overlayfs: missing 'workdir' [ 629.911504][ T5873] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 629.922131][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.930325][ T5873] usb 4-1: Product: syz [ 629.935214][ T5873] usb 4-1: Manufacturer: syz [ 629.942367][ T5873] usb 4-1: SerialNumber: syz [ 629.958270][ T5873] usb 4-1: config 0 descriptor?? [ 629.963403][ T5941] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 629.976704][ T5873] smsc95xx v2.0.0 [ 629.980427][ T5873] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 629.991380][ T5873] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 630.155385][ T5941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.202862][ T5941] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 630.214398][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.232865][ T5941] usb 1-1: Product: syz [ 630.241792][ T5941] usb 1-1: Manufacturer: syz [ 630.246763][ T5941] usb 1-1: SerialNumber: syz [ 630.260573][ T5941] usb 1-1: config 0 descriptor?? [ 630.271982][ T5941] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 630.290529][ T5941] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 630.477165][ T5941] usb 1-1: USB disconnect, device number 78 [ 630.571016][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 630.620913][T13713] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2062'. [ 630.634976][T13714] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2063'. [ 630.682405][ T30] audit: type=1326 audit(1751441577.712:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882498e929 code=0x7ffc0000 [ 630.705916][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.735419][ T30] audit: type=1326 audit(1751441577.712:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882498e929 code=0x7ffc0000 [ 630.758916][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.765807][ T30] audit: type=1326 audit(1751441577.712:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f882498e929 code=0x7ffc0000 [ 630.789275][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.855169][ T30] audit: type=1326 audit(1751441577.712:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882498e929 code=0x7ffc0000 [ 630.954442][ T30] audit: type=1326 audit(1751441577.712:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882498e929 code=0x7ffc0000 [ 630.981379][ T5941] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 631.041247][ T30] audit: type=1326 audit(1751441577.712:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f882498e929 code=0x7ffc0000 [ 631.065505][ T5826] usb 34-1: device descriptor read/8, error -110 [ 631.091658][ T30] audit: type=1326 audit(1751441577.712:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f882492ab19 code=0x7ffc0000 [ 631.116116][ T30] audit: type=1326 audit(1751441577.712:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f882492ab19 code=0x7ffc0000 [ 631.139513][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.170912][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 631.203928][ T5941] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 631.219984][ T5941] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.244377][ T30] audit: type=1326 audit(1751441577.712:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f882492ab19 code=0x7ffc0000 [ 631.289473][ T5941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.339783][ T5941] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 631.357562][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.376088][ T30] audit: type=1326 audit(1751441577.712:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f882492ab19 code=0x7ffc0000 [ 631.380152][ T5941] usb 3-1: Product: syz [ 631.470863][ T5826] usb usb34-port1: attempt power cycle [ 631.609973][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 631.692485][ T5941] usb 3-1: Manufacturer: syz [ 631.932533][ T5941] usb 3-1: SerialNumber: syz [ 632.192334][ T5826] usb usb34-port1: unable to enumerate USB device [ 632.406635][ T5941] usb 3-1: 0:2 : does not exist [ 632.456127][ T24] usb 4-1: USB disconnect, device number 89 [ 632.471586][ T5941] usb 3-1: USB disconnect, device number 86 [ 632.629078][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.649970][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 632.982478][ T24] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 633.615300][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.633488][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.654573][ T24] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 633.690286][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 633.761918][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.910355][ T24] usb 4-1: config 0 descriptor?? [ 634.359904][ T24] hid-rmi 0003:06CB:81A7.0025: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0 [ 634.700390][T13772] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 634.706937][T13772] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 634.729678][T13772] vhci_hcd vhci_hcd.0: Device attached [ 634.735341][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 634.740269][ T5941] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 634.870632][ T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 634.899917][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 634.999977][ T5956] usb 34-1: SetAddress Request (6) to port 0 [ 635.023285][ T5956] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 635.031041][ T24] usb 2-1: device descriptor read/64, error -71 [ 635.396830][ T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 635.769963][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 635.799213][ T5941] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.812178][ T24] usb 2-1: device descriptor read/64, error -71 [ 635.979146][ T5941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 635.988347][ T5941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 636.000022][ T5941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 636.011557][ T5941] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 636.021479][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.030796][ T24] usb usb2-port1: attempt power cycle [ 636.036868][ T5961] usb 4-1: USB disconnect, device number 90 [ 636.440047][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 636.464688][T13773] vhci_hcd: connection reset by peer [ 636.531366][ T24] usb 2-1: device descriptor read/8, error -71 [ 636.545217][ T13] vhci_hcd: stop threads [ 636.615773][ T13] vhci_hcd: release socket [ 636.686650][ T13] vhci_hcd: disconnect device [ 636.734621][ T5941] hub 5-1:1.0: bad descriptor, ignoring hub [ 636.754232][ T5941] hub 5-1:1.0: probe with driver hub failed with error -5 [ 636.771131][ T5941] cdc_wdm 5-1:1.0: skipping garbage [ 636.776473][ T5941] cdc_wdm 5-1:1.0: skipping garbage [ 636.783468][T13780] netlink: 'syz.2.2080': attribute type 1 has an invalid length. [ 636.790083][ T5941] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 636.797218][ T5941] cdc_wdm 5-1:1.0: Unknown control protocol [ 636.809965][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 636.824589][T13780] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2080'. [ 636.843403][T13780] veth3: entered promiscuous mode [ 636.849933][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 636.852290][T13780] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 636.871422][ T24] usb 2-1: device descriptor read/8, error -71 [ 636.877637][ T30] kauditd_printk_skb: 4449 callbacks suppressed [ 636.877653][ T30] audit: type=1400 audit(1751441583.902:5559): avc: denied { read write } for pid=13763 comm="syz.4.2074" name="cdc-wdm0" dev="devtmpfs" ino=3818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 636.910821][ T30] audit: type=1400 audit(1751441583.902:5560): avc: denied { open } for pid=13763 comm="syz.4.2074" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 636.936361][T13782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.945175][T13782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.010116][ T24] usb usb2-port1: unable to enumerate USB device [ 637.039896][ T5961] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 637.058979][ T5941] usb 5-1: USB disconnect, device number 90 [ 637.150229][ T30] audit: type=1400 audit(1751441584.172:5561): avc: denied { shutdown } for pid=13788 comm="syz.2.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 637.195024][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 637.206872][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 637.217903][ T5961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 637.231100][ T5961] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 637.245083][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.256813][ T5961] usb 4-1: config 0 descriptor?? [ 637.274859][T13778] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 637.309161][T13798] lo speed is unknown, defaulting to 1000 [ 637.316584][T13798] lo speed is unknown, defaulting to 1000 [ 637.324589][T13798] lo speed is unknown, defaulting to 1000 [ 637.540031][T13806] FAULT_INJECTION: forcing a failure. [ 637.540031][T13806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.553639][T13806] CPU: 1 UID: 0 PID: 13806 Comm: syz.0.2085 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 637.553662][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 637.553673][T13806] Call Trace: [ 637.553680][T13806] [ 637.553687][T13806] dump_stack_lvl+0x16c/0x1f0 [ 637.553722][T13806] should_fail_ex+0x512/0x640 [ 637.553750][T13806] _copy_from_iter+0x29f/0x16f0 [ 637.553775][T13806] ? __build_skb_around+0x278/0x3b0 [ 637.553798][T13806] ? __alloc_skb+0x200/0x380 [ 637.553820][T13806] ? __pfx__copy_from_iter+0x10/0x10 [ 637.553842][T13806] ? __pfx___alloc_skb+0x10/0x10 [ 637.553870][T13806] ? __asan_memset+0x23/0x50 [ 637.553889][T13806] ? skb_put+0x138/0x1b0 [ 637.553910][T13806] tipc_msg_build+0x7e9/0x1150 [ 637.553939][T13806] ? __pfx_tipc_msg_build+0x10/0x10 [ 637.553968][T13806] ? tipc_send_group_bcast+0x517/0xa50 [ 637.553998][T13806] tipc_send_group_bcast+0x7cc/0xa50 [ 637.554034][T13806] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 637.554062][T13806] ? finish_task_switch.isra.0+0x21c/0xc10 [ 637.554088][T13806] ? __pfx_woken_wake_function+0x10/0x10 [ 637.554109][T13806] ? lockdep_hardirqs_on+0x7c/0x110 [ 637.554134][T13806] ? finish_task_switch.isra.0+0x221/0xc10 [ 637.554161][T13806] ? find_held_lock+0x2b/0x80 [ 637.554191][T13806] __tipc_sendmsg+0x4ab/0x19a0 [ 637.554219][T13806] ? __pfx___tipc_sendmsg+0x10/0x10 [ 637.554264][T13806] ? __local_bh_enable_ip+0xa4/0x120 [ 637.554288][T13806] tipc_sendmsg+0x4f/0x70 [ 637.554308][T13806] ____sys_sendmsg+0xa95/0xc70 [ 637.554328][T13806] ? copy_msghdr_from_user+0x10a/0x160 [ 637.554357][T13806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.554388][T13806] ___sys_sendmsg+0x134/0x1d0 [ 637.554413][T13806] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.554451][T13806] ? find_held_lock+0x2b/0x80 [ 637.554488][T13806] __sys_sendmmsg+0x200/0x420 [ 637.554516][T13806] ? __pfx___sys_sendmmsg+0x10/0x10 [ 637.554561][T13806] ? rcu_is_watching+0x12/0xc0 [ 637.554583][T13806] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 637.554604][T13806] ? lockdep_hardirqs_on+0x7c/0x110 [ 637.554628][T13806] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 637.554651][T13806] ? rcu_read_unlock_trace_special+0x2aa/0x3f0 [ 637.554681][T13806] __x64_sys_sendmmsg+0x9c/0x100 [ 637.554706][T13806] do_syscall_64+0xcd/0x4c0 [ 637.554734][T13806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.554752][T13806] RIP: 0033:0x7fdc3cb8e929 [ 637.554767][T13806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.554784][T13806] RSP: 002b:00007fdc3da1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 637.554802][T13806] RAX: ffffffffffffffda RBX: 00007fdc3cdb6160 RCX: 00007fdc3cb8e929 [ 637.554813][T13806] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 637.554824][T13806] RBP: 00007fdc3da1f090 R08: 0000000000000000 R09: 0000000000000000 [ 637.554834][T13806] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.554845][T13806] R13: 0000000000000000 R14: 00007fdc3cdb6160 R15: 00007ffc56c72ef8 [ 637.554870][T13806] [ 637.862184][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 637.999417][ T5941] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 638.155937][ T30] audit: type=1400 audit(1751441585.152:5562): avc: denied { connect } for pid=13811 comm="syz.1.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 638.350771][ T5941] usb 3-1: config 0 has an invalid interface number: 189 but max is 0 [ 638.358990][ T5941] usb 3-1: config 0 has no interface number 0 [ 638.381127][ T5941] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=e7.7b [ 638.396119][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.404848][ T5941] usb 3-1: Product: syz [ 638.409019][ T5941] usb 3-1: Manufacturer: syz [ 638.414336][ T5941] usb 3-1: SerialNumber: syz [ 638.422422][ T5941] usb 3-1: config 0 descriptor?? [ 638.444853][ T5941] ttusb_dec_send_command: command bulk message failed: error -22 [ 638.453403][ T5941] ttusb-dec 3-1:0.189: probe with driver ttusb-dec failed with error -22 [ 638.649560][ T5941] usb 3-1: USB disconnect, device number 87 [ 638.713861][ T30] audit: type=1400 audit(1751441585.742:5563): avc: denied { ioctl } for pid=13814 comm="syz.4.2087" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 638.739642][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.889967][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 638.964039][T13835] netlink: 'syz.0.2092': attribute type 1 has an invalid length. [ 639.044751][T13838] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2092'. [ 639.198568][ T30] audit: type=1326 audit(1751441586.222:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13814 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdd8e929 code=0x7fc00000 [ 639.222053][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.416622][T13835] veth5: entered promiscuous mode [ 639.432872][T13835] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 639.526761][ T30] audit: type=1400 audit(1751441586.552:5565): avc: denied { read write } for pid=13841 comm="syz.2.2094" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 639.604394][ T30] audit: type=1400 audit(1751441586.582:5566): avc: denied { open } for pid=13841 comm="syz.2.2094" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 639.930151][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 639.980811][ T5961] usbhid 4-1:0.0: can't add hid device: -71 [ 639.986862][ T5961] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 640.148526][ T5961] usb 4-1: USB disconnect, device number 91 [ 640.170184][ T5956] usb 34-1: device descriptor read/8, error -110 [ 640.480769][ T24] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 640.583852][ T5956] usb usb34-port1: attempt power cycle [ 640.695507][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 640.721655][ T24] usb 3-1: config 0 has no interface number 0 [ 640.746503][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 640.789631][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 640.925162][ T30] audit: type=1400 audit(1751441587.852:5567): avc: denied { mount } for pid=13857 comm="syz.3.2099" name="/" dev="gadgetfs" ino=6045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 640.970037][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 641.003279][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 641.025244][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.044152][ T30] audit: type=1400 audit(1751441588.072:5568): avc: denied { ioctl } for pid=13863 comm="syz.0.2101" path="socket:[40163]" dev="sockfs" ino=40163 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 641.077233][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.181941][ T24] usb 3-1: config 0 descriptor?? [ 641.202347][ T5956] usb usb34-port1: unable to enumerate USB device [ 641.220567][T13852] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 641.235369][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 641.490789][ T5956] usb 3-1: USB disconnect, device number 88 [ 641.496774][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 641.632627][ T24] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 641.699950][ T5961] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 641.825168][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 641.898926][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 641.921395][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 641.934723][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 641.963574][ T24] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 641.973000][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.981660][ T5961] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 641.992292][ T24] usb 2-1: config 0 descriptor?? [ 641.997293][ T5961] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.007662][ T5961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 642.016852][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 642.019375][T13873] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 642.025982][ T5961] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 642.042373][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.050474][ T5961] usb 5-1: Product: syz [ 642.054664][ T5961] usb 5-1: Manufacturer: syz [ 642.059264][ T5961] usb 5-1: SerialNumber: syz [ 642.089926][ T5941] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 642.239881][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 642.246485][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.260768][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.272475][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 642.286903][ T5941] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 642.302372][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.316370][ T5941] usb 4-1: config 0 descriptor?? [ 642.579472][ T5961] usb 5-1: 0:2 : does not exist [ 642.759960][ T5887] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 642.814376][ T5941] logitech 0003:046D:C293.0026: unknown main item tag 0x0 [ 642.834464][ T5941] logitech 0003:046D:C293.0026: unknown main item tag 0x0 [ 642.844875][ T5941] logitech 0003:046D:C293.0026: unknown main item tag 0x0 [ 642.852416][ T5941] logitech 0003:046D:C293.0026: unknown main item tag 0x0 [ 642.861817][ T5941] logitech 0003:046D:C293.0026: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.3-1/input0 [ 642.886160][ T5941] logitech 0003:046D:C293.0026: no inputs found [ 642.996893][ T5887] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 643.010896][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.024930][ T5887] usb 3-1: Product: syz [ 643.032331][ T5887] usb 3-1: Manufacturer: syz [ 643.037649][ T5887] usb 3-1: SerialNumber: syz [ 643.050778][ T5941] usb 4-1: USB disconnect, device number 92 [ 643.061188][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 643.074163][ T5887] usb 3-1: config 0 descriptor?? [ 643.082353][ T5887] ch341 3-1:0.0: ch341-uart converter detected [ 643.117847][T13897] fido_id[13897]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 643.252914][T13876] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 643.275673][ T5961] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 643.285547][ T5887] usb 3-1: failed to receive control message: -121 [ 643.298441][ T5887] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 643.359378][ T5961] usb 5-1: USB disconnect, device number 91 [ 644.099951][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 644.244014][ T5941] usb 3-1: USB disconnect, device number 89 [ 644.256477][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.274757][ T5941] ch341 3-1:0.0: device disconnected [ 645.139942][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 645.665929][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 645.674132][ T5135] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 645.713051][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 645.770226][ T24] usb 2-1: USB disconnect, device number 89 [ 646.169949][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 646.430984][ T5828] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 646.431039][ T5828] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 646.440267][ T5828] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 646.448258][ T5828] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 646.457000][ T5828] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 646.465210][ T5828] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 646.473120][ T5828] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 646.481166][ T5828] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 646.489042][ T5828] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 646.497929][ T5828] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 646.507501][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.523854][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.531980][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.539946][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.547746][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.555894][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.563757][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.571687][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.580144][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.588055][ T916] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 646.595746][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.603644][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.611741][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.619557][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.627294][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.635127][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.643251][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.651226][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.658918][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.666734][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.680296][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.688041][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.696626][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.706136][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.714118][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.732980][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.741288][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.748975][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.760045][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.768168][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.776746][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.784751][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.797158][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 646.810712][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 647.026922][ T916] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 647.187101][ T916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.209933][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 647.220382][ T916] usb 1-1: config 0 descriptor?? [ 647.238323][ T916] cp210x 1-1:0.0: cp210x converter detected [ 648.193733][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 648.236113][ T916] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 648.244741][ T916] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 648.253391][ T916] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 648.259936][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 648.299855][ T5956] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 648.303097][ T916] usb 1-1: cp210x converter now attached to ttyUSB0 [ 648.460245][ T5941] usb 1-1: USB disconnect, device number 79 [ 648.486156][ T5941] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 648.492337][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 648.510989][ T5941] cp210x 1-1:0.0: device disconnected [ 648.534340][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 648.555943][ T5956] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 648.568211][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.617914][ T5956] usb 5-1: config 0 descriptor?? [ 648.625718][T13958] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 648.660255][ T916] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 648.790954][ T5826] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 648.811845][ T916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 648.823167][ T916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 648.834255][ T916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.847356][ T916] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 648.856568][ T5873] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 648.865559][ T916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.875498][ T916] usb 2-1: config 0 descriptor?? [ 648.882624][T13973] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 648.940832][ T5826] usb 4-1: Using ep0 maxpacket: 32 [ 648.947393][ T5826] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 648.955688][ T5826] usb 4-1: config 0 has no interface number 0 [ 648.962251][ T5826] usb 4-1: config 0 interface 184 has no altsetting 0 [ 648.972606][ T5826] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 648.982497][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.990961][ T5826] usb 4-1: Product: syz [ 648.995151][ T5826] usb 4-1: Manufacturer: syz [ 648.999760][ T5826] usb 4-1: SerialNumber: syz [ 649.010989][ T5826] usb 4-1: config 0 descriptor?? [ 649.020743][ T5826] smsc75xx v1.0.0 [ 649.031436][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.042745][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.054851][ T5956] input: HID 041e:3100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0027/input/input30 [ 649.056832][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 649.120653][ T5873] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 649.130486][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.153055][ T5873] usb 3-1: config 0 descriptor?? [ 649.254373][ T5956] creative-sb0540 0003:041E:3100.0027: input,hidraw0: USB HID v0.05 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 649.289954][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 649.416493][ T5956] usb 5-1: USB disconnect, device number 92 [ 649.488916][ T5826] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 649.507207][ T5826] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 649.600048][ T5826] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 649.644688][T13990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.647290][ T5826] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 649.672583][ T5873] plantronics 0003:047F:FFFF.0028: item fetching failed at offset 14/15 [ 649.679552][T13990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.686236][ T5873] plantronics 0003:047F:FFFF.0028: parse failed [ 649.699318][ T5873] plantronics 0003:047F:FFFF.0028: probe with driver plantronics failed with error -22 [ 649.860124][ T5922] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 650.048015][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 650.099467][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 650.109521][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 650.121918][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 650.190690][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'. [ 650.211159][ T5922] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 650.229919][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.255661][T13994] 9p: Unknown Cache mode or invalid value f%cache [ 650.264937][ T5922] usb 1-1: Product: syz [ 650.329942][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 650.333252][ T5922] usb 1-1: Manufacturer: syz [ 650.344173][T13997] can: request_module (can-proto-0) failed. [ 650.395236][ T5941] usb 3-1: USB disconnect, device number 90 [ 650.452640][ T5922] usb 1-1: SerialNumber: syz [ 650.481669][ T5922] usb 1-1: config 0 descriptor?? [ 650.518393][ T5922] radioshark 1-1:0.0: Invalid radioSHARK device [ 650.578072][ T5922] radioshark 1-1:0.0: probe with driver radioshark failed with error -22 [ 650.693656][ T5922] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 651.369941][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 651.539284][ T916] usbhid 2-1:0.0: can't add hid device: -71 [ 651.550988][ T916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 651.564826][T14015] overlayfs: failed to resolve 'dont_measure': -2 [ 651.588478][ T916] usb 2-1: USB disconnect, device number 90 [ 652.286442][T14028] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2139'. [ 652.368436][ T5941] usb 1-1: USB disconnect, device number 80 [ 652.409972][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 652.803950][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 652.803961][ T30] audit: type=1400 audit(1751441599.832:5570): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 652.900859][ T916] usb 4-1: USB disconnect, device number 93 [ 653.136276][T14055] netlink: 'syz.3.2149': attribute type 1 has an invalid length. [ 653.154502][T14057] CUSE: info not properly terminated [ 653.199896][ T5887] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 653.219180][T14055] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2149'. [ 653.241368][T14055] veth7: entered promiscuous mode [ 653.249659][T14055] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 653.380403][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 653.401192][ T5887] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 653.414189][ T30] audit: type=1400 audit(1751441600.432:5571): avc: denied { write } for pid=14064 comm="syz.4.2151" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 653.437748][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.450141][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 653.460899][ T5887] usb 2-1: config 0 descriptor?? [ 654.489933][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 654.599006][ T5887] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 654.626462][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 654.737415][ T5887] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 654.908598][ T5887] usb 2-1: media controller created [ 654.928530][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 654.980948][ T5887] az6027: usb out operation failed. (-71) [ 654.994723][ T5887] az6027: usb out operation failed. (-71) [ 655.443358][ T5887] stb0899_attach: Driver disabled by Kconfig [ 655.450121][ T5887] az6027: no front-end attached [ 655.450121][ T5887] [ 655.461721][ T5887] az6027: usb out operation failed. (-71) [ 655.468626][ T5887] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 655.479380][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 655.496436][ T5887] dvb-usb: schedule remote query interval to 400 msecs. [ 655.510926][ T5887] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 655.529914][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 655.548849][ T5887] usb 2-1: USB disconnect, device number 91 [ 655.612178][ T5887] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 655.829973][ T5961] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 656.365584][T14107] netlink: 'syz.1.2165': attribute type 10 has an invalid length. [ 761.319734][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 761.326708][ C0] rcu: 1-...!: (1 GPs behind) idle=092c/1/0x4000000000000000 softirq=66356/66357 fqs=4 [ 761.337312][ C0] rcu: (detected by 0, t=10505 jiffies, g=56417, q=224 ncpus=2) [ 761.345025][ C0] Sending NMI from CPU 0 to CPUs 1: [ 761.345052][ C1] NMI backtrace for cpu 1 [ 761.345064][ C1] CPU: 1 UID: 0 PID: 5812 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 761.345082][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 761.345090][ C1] RIP: 0010:__rcu_read_unlock+0x108/0x580 [ 761.345117][ C1] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 75 01 00 00 <8b> 83 44 04 00 00 3d ff ff ff 3f 0f 87 49 01 00 00 5b 5d 41 5c 41 [ 761.345130][ C1] RSP: 0018:ffffc90000a08d60 EFLAGS: 00000046 [ 761.345142][ C1] RAX: 0000000000000007 RBX: ffff8880260ac880 RCX: ffffc90000a08d54 [ 761.345151][ C1] RDX: 0000000000000000 RSI: ffffffff8ddf4c2b RDI: ffff8880260accc4 [ 761.345161][ C1] RBP: ffff8880260ac880 R08: 0000000000000001 R09: 0000000000000000 [ 761.345169][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880260ac880 [ 761.345178][ C1] R13: 185b44f1d6d13af0 R14: 0000000000000002 R15: ffff888057dc7010 [ 761.345187][ C1] FS: 0000555577764500(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 761.345201][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 761.345210][ C1] CR2: 000020000000b000 CR3: 000000005c9f5000 CR4: 00000000003526f0 [ 761.345220][ C1] Call Trace: [ 761.345226][ C1] [ 761.345234][ C1] advance_sched+0x6f6/0xc80 [ 761.345256][ C1] ? __pfx_advance_sched+0x10/0x10 [ 761.345272][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 761.345291][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 761.345305][ C1] ? read_tsc+0x9/0x20 [ 761.345324][ C1] hrtimer_interrupt+0x397/0x8e0 [ 761.345340][ C1] ? ktime_get+0x1a7/0x310 [ 761.345361][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 761.345383][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 761.345402][ C1] [ 761.345406][ C1] [ 761.345411][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 761.345427][ C1] RIP: 0010:in_gate_area_no_mm+0x19/0x70 [ 761.345444][ C1] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 54 45 31 e4 55 53 48 89 fb e8 ed bb 8f 00 8b 2d 47 7c c5 0c 02 00 00 00 89 ee e8 1b b7 8f 00 83 fd 02 74 29 e8 d1 bb 8f 00 [ 761.345456][ C1] RSP: 0018:ffffc900031b6e48 EFLAGS: 00000293 [ 761.345467][ C1] RAX: 0000000000000000 RBX: 00007fdc3cb85193 RCX: ffffc900031b6dfc [ 761.345476][ C1] RDX: ffff8880260ac880 RSI: ffffffff812c64b3 RDI: 00007fdc3cb85193 [ 761.345485][ C1] RBP: 0000000000000001 R08: ffffffff91367906 R09: 0000000000000000 [ 761.345494][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 761.345503][ C1] R13: ffffc900031b6f68 R14: 0000000000000000 R15: ffff8880260ac880 [ 761.345515][ C1] ? in_gate_area_no_mm+0x13/0x70 [ 761.345533][ C1] ? in_gate_area_no_mm+0x13/0x70 [ 761.345548][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 761.345566][ C1] kernel_text_address+0x35/0x100 [ 761.345580][ C1] __kernel_text_address+0xd/0x40 [ 761.345594][ C1] unwind_get_return_address+0x59/0xa0 [ 761.345615][ C1] arch_stack_walk+0xa6/0x100 [ 761.345632][ C1] stack_trace_save+0x8e/0xc0 [ 761.345648][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 761.345668][ C1] save_stack+0x160/0x1f0 [ 761.345684][ C1] ? __pfx_save_stack+0x10/0x10 [ 761.345700][ C1] ? post_alloc_hook+0x1c0/0x230 [ 761.345715][ C1] ? get_page_from_freelist+0x1321/0x3890 [ 761.345731][ C1] ? __alloc_frozen_pages_noprof+0x261/0x23f0 [ 761.345747][ C1] ? alloc_pages_mpol+0x1fb/0x550 [ 761.345764][ C1] ? alloc_pages_noprof+0x131/0x390 [ 761.345781][ C1] ? pte_alloc_one+0x1c/0x3a0 [ 761.345793][ C1] ? __pte_alloc+0x6d/0x3c0 [ 761.345811][ C1] ? copy_page_range+0x1aed/0x5740 [ 761.345824][ C1] ? dup_mmap+0xe88/0x21d0 [ 761.345837][ C1] ? copy_process+0x4081/0x76a0 [ 761.345853][ C1] ? kernel_clone+0xfc/0x960 [ 761.345869][ C1] ? __do_sys_clone+0xce/0x120 [ 761.345884][ C1] ? do_syscall_64+0xcd/0x4c0 [ 761.345908][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.345922][ C1] ? __lock_acquire+0x622/0x1c90 [ 761.345944][ C1] __set_page_owner+0x91/0x550 [ 761.345962][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 761.345979][ C1] ? bad_range+0x261/0x4c0 [ 761.345991][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 761.346010][ C1] post_alloc_hook+0x1c0/0x230 [ 761.346027][ C1] get_page_from_freelist+0x1321/0x3890 [ 761.346048][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 761.346063][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 761.346080][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 761.346097][ C1] ? stack_depot_save_flags+0x28/0xa40 [ 761.346116][ C1] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 761.346134][ C1] ? kasan_save_stack+0x42/0x60 [ 761.346151][ C1] ? kasan_save_stack+0x33/0x60 [ 761.346167][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 761.346184][ C1] ? __pmd_alloc+0xbf/0x930 [ 761.346195][ C1] ? dup_mmap+0xe88/0x21d0 [ 761.346208][ C1] ? kernel_clone+0xfc/0x960 [ 761.346223][ C1] ? __do_sys_clone+0xce/0x120 [ 761.346238][ C1] ? do_syscall_64+0xcd/0x4c0 [ 761.346256][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.346275][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 761.346291][ C1] ? policy_nodemask+0xea/0x4e0 [ 761.346310][ C1] alloc_pages_mpol+0x1fb/0x550 [ 761.346329][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 761.346346][ C1] ? css_rstat_updated+0x9d/0xd30 [ 761.346367][ C1] alloc_pages_noprof+0x131/0x390 [ 761.346385][ C1] pte_alloc_one+0x1c/0x3a0 [ 761.346398][ C1] __pte_alloc+0x6d/0x3c0 [ 761.346416][ C1] ? __pfx___pte_alloc+0x10/0x10 [ 761.346435][ C1] ? _raw_spin_unlock+0x28/0x50 [ 761.346451][ C1] ? __pmd_alloc+0x3fb/0x930 [ 761.346464][ C1] copy_page_range+0x1aed/0x5740 [ 761.346482][ C1] ? __lock_acquire+0x622/0x1c90 [ 761.346509][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 761.346523][ C1] ? mas_store+0x7a9/0x1160 [ 761.346537][ C1] ? find_held_lock+0x2b/0x80 [ 761.346553][ C1] ? __vma_enter_locked+0x163/0x3f0 [ 761.346573][ C1] dup_mmap+0xe88/0x21d0 [ 761.346590][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 761.346610][ C1] copy_process+0x4081/0x76a0 [ 761.346627][ C1] ? do_wp_page+0x1aa7/0x4f20 [ 761.346650][ C1] ? __pfx_copy_process+0x10/0x10 [ 761.346672][ C1] kernel_clone+0xfc/0x960 [ 761.346689][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 761.346709][ C1] ? css_rstat_updated+0x9d/0xd30 [ 761.346728][ C1] __do_sys_clone+0xce/0x120 [ 761.346744][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 761.346761][ C1] ? handle_mm_fault+0x2ab/0xd10 [ 761.346780][ C1] ? do_user_addr_fault+0x843/0x1370 [ 761.346800][ C1] do_syscall_64+0xcd/0x4c0 [ 761.346820][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.346833][ C1] RIP: 0033:0x7fdc3cb85193 [ 761.346845][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 761.346857][ C1] RSP: 002b:00007ffc56c73178 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 761.346870][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc3cb85193 [ 761.346879][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 761.346888][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 761.346896][ C1] R10: 00005555777647d0 R11: 0000000000000246 R12: 0000000000000000 [ 761.346908][ C1] R13: 00000000000927c0 R14: 00000000000a01ab R15: 00007ffc56c73310 [ 761.346922][ C1] [ 761.347045][ C0] rcu: rcu_preempt kthread starved for 10485 jiffies! g56417 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 762.077998][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 762.087960][ C0] rcu: RCU grace-period kthread stack dump: [ 762.093834][ C0] task:rcu_preempt state:R running task stack:28264 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 762.107327][ C0] Call Trace: [ 762.110598][ C0] [ 762.113526][ C0] __schedule+0x116a/0x5de0 [ 762.118049][ C0] ? __pfx___schedule+0x10/0x10 [ 762.122907][ C0] ? find_held_lock+0x2b/0x80 [ 762.127584][ C0] ? schedule+0x2d7/0x3a0 [ 762.131918][ C0] schedule+0xe7/0x3a0 [ 762.135992][ C0] schedule_timeout+0x123/0x290 [ 762.140843][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 762.146210][ C0] ? __pfx_process_timeout+0x10/0x10 [ 762.151496][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 762.157301][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 762.162766][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 762.167534][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 762.172819][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 762.178015][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 762.182954][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 762.187810][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 762.193619][ C0] rcu_gp_kthread+0x270/0x380 [ 762.198295][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 762.203496][ C0] ? rcu_is_watching+0x12/0xc0 [ 762.208260][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 762.213459][ C0] ? __kthread_parkme+0x19e/0x250 [ 762.218486][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 762.223686][ C0] kthread+0x3c2/0x780 [ 762.227748][ C0] ? __pfx_kthread+0x10/0x10 [ 762.232332][ C0] ? rcu_is_watching+0x12/0xc0 [ 762.237091][ C0] ? __pfx_kthread+0x10/0x10 [ 762.241680][ C0] ret_from_fork+0x5d4/0x6f0 [ 762.246269][ C0] ? __pfx_kthread+0x10/0x10 [ 762.250854][ C0] ret_from_fork_asm+0x1a/0x30 [ 762.255623][ C0] [ 762.258638][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 762.264951][ C0] CPU: 0 UID: 0 PID: 5807 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 762.277089][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 762.287135][ C0] RIP: 0010:write_comp_data+0x8b/0x90 [ 762.292503][ C0] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 762.312105][ C0] RSP: 0000:ffffc900041ef8c0 EFLAGS: 00000293 [ 762.318172][ C0] RAX: 0000000000000000 RBX: ffff8880b853fe20 RCX: ffffffff81b001fd [ 762.326134][ C0] RDX: ffff888030838000 RSI: 0000000000000000 RDI: 0000000000000005 [ 762.334096][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 762.342057][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 762.350019][ C0] R13: 0000000000000003 R14: ffffed10170a7fc5 R15: ffff8880b843b580 [ 762.357982][ C0] FS: 000055555c2c4500(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 762.366908][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.373486][ C0] CR2: 000055555c2df5c8 CR3: 000000006091c000 CR4: 00000000003526f0 [ 762.381454][ C0] DR0: 0000000061812e20 DR1: 0000000000000000 DR2: 0000000000000000 [ 762.389417][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 762.397380][ C0] Call Trace: [ 762.400650][ C0] [ 762.403571][ C0] smp_call_function_many_cond+0xd9d/0x1510 [ 762.409463][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 762.414685][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 762.421016][ C0] ? lock_acquire+0x179/0x350 [ 762.425700][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 762.430892][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 762.436264][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 762.441377][ C0] flush_tlb_mm_range+0x4a0/0x1790 [ 762.446484][ C0] ? page_table_check_clear+0x362/0x740 [ 762.452035][ C0] ? __page_table_check_pte_clear+0xa9/0x100 [ 762.458014][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 762.463557][ C0] ? __pfx_pte_mkwrite+0x10/0x10 [ 762.468493][ C0] ptep_clear_flush+0x136/0x180 [ 762.473350][ C0] do_wp_page+0x1683/0x4f20 [ 762.477864][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 762.482721][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 762.488096][ C0] __handle_mm_fault+0x2223/0x5490 [ 762.493220][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 762.498690][ C0] ? lock_vma_under_rcu+0x47d/0x970 [ 762.503884][ C0] ? lock_vma_under_rcu+0x47d/0x970 [ 762.509130][ C0] handle_mm_fault+0x589/0xd10 [ 762.513915][ C0] ? __pkru_allows_pkey+0x41/0xb0 [ 762.518964][ C0] do_user_addr_fault+0x60c/0x1370 [ 762.524104][ C0] ? rcu_is_watching+0x12/0xc0 [ 762.528879][ C0] exc_page_fault+0x5c/0xb0 [ 762.533388][ C0] asm_exc_page_fault+0x26/0x30 [ 762.538232][ C0] RIP: 0033:0x7f07fdd4cd9f [ 762.542640][ C0] Code: 8d 34 19 48 39 d5 48 89 75 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 eb 80 48 8d 0d 61 d3 0e 00 48 8d 15 65 e5 0e 00 bf 01 [ 762.562245][ C0] RSP: 002b:00007ffc7f9acd40 EFLAGS: 00010206 [ 762.568310][ C0] RAX: 0000000000018a41 RBX: 0000000000008040 RCX: 000055555c2d7590 [ 762.576272][ C0] RDX: 0000000000008041 RSI: 000055555c2df5c0 RDI: 0000000000000004 [ 762.584243][ C0] RBP: 00007f07fdf84ca0 R08: 0000000000000000 R09: 0000000000000000 [ 762.592205][ C0] R10: 0000000000001000 R11: 0000000000000802 R12: 0000000000008030 [ 762.600166][ C0] R13: 0000000000000076 R14: 00007f07fdf84d00 R15: 0000000000000000 [ 762.608143][ C0] [ 762.611515][ C0] vkms_vblank_simulate: vblank timer overrun