last executing test programs: 9m32.886259846s ago: executing program 2 (id=147): syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x100}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000000540)=0x0) timer_gettime(r1, &(0x7f00000005c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x7, 0x1, 0x5, 0xad}, 0x0, &(0x7f0000000040)={0x3ff, 0xfffffffffffffffc, 0x0, 0x4, 0xffffffff, 0x2, 0x344}, 0x0, 0x0) 9m31.33848867s ago: executing program 2 (id=151): socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x80044100, 0xf0ff1f00000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='9p_protocol_dump\x00', r0, 0x0, 0x100000000}, 0x18) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 9m28.754824109s ago: executing program 2 (id=163): connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c03, 0xffffffffffffffff) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x20000008}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1f8a, 0x3180, 0x8000, 0x840024c}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xd, 0x0, r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', r1, 0x0, 0x0, {0x0, r7}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001800000018000180140002007379865f74756ef3000000000000000010000280080002000000000004000400"], 0x3c}}, 0x2008040) io_uring_enter(r4, 0x627, 0x4c1, 0x9, 0x0, 0x18) syz_open_dev$hiddev(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000380)=0x10) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af25, &(0x7f0000000400)) 9m24.494778467s ago: executing program 2 (id=168): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x76}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 9m24.171504151s ago: executing program 2 (id=171): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES8=r1], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) close(r2) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="1b0000000000000000000000020000000000000027b78f5d1455927dfab24e1bd0a6c80c35d4e4c2", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200"/28], 0x50) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x2e}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x10cc, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x109c, 0x2, [@TCA_FLOW_ACT={0x1098, 0x9, 0x0, 0x1, [@m_vlan={0x1094, 0x18, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x400, 0x7, 0x5, 0x80, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x56e}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x723}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x60b}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf3c}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x897}]}, {0x1004, 0x6, "58ecf633ef954cbbc79c6db296e4fd23a3b932ca74c3ee294075e12c07235e903093aeef20a1672a73100ca910f9118e05b8f33623fdb29c62f455a2c3f5e24f341ddf76c3a0b0a307a5c7401947a2ad1449407fffcf4285a21dd31093aaa4fd0ad6b6cbd14d64cf422520dd86366a5cdf8ecbb159f939d6f9faca2cd5befc70fc5c1495a21e7003bdd943c55d02f9b6f678eac44bd2f8336ec8b6ef2f6b665d95b827879af36c962dcc521dae239eadd2dee8a320f94fe41ca55e58bb176cc166afeedef73d20ac58033388c3ea925a7a681ce8b86a803722311a2a05f1709e584d1febaa2994dd7b0d2b90cc7a50f246ebec1d0c6d8adfa4ed914aba74a7fa39bd1ac9b799e44771b7601d602387cc918a916d4802c1b58c15fce694265a5a8ec0485eb2256f075e09efd481a8d35fbe0150740660e96393a442763fb8b1db5d03c9542ecf31cee7b7a0679a7d4f145589f124278bf145ab783607ca5d01cb882bd77e7466b92ddcef1fbf333d4adea6b515496c2d30a658e74c4a7b429e91795f60b919789fceaf51780436ffb4739573ab94f9b5d9fb2a7469a1cc5cf4ecb1a8c70595f29a056843ac780ce4c6a767611f69472a76b83cfb02eee8d8f01b9509b0bcee54eb7971531b57098a4935f959a13c93eb1d20ed6fcc3c85ce1c69fd26f2f7bb2674e5d4e9bddc623a3487be69dad92f3941c8ee812988eeaec99809bbbb54750287b99453264c754922295d96e1edc2640473c92ab6922a289f49ca0b563e15b978e1782d34c817c50ef8494745cae57f7cfc0bf0ca503fb70de854602b51c071d54aecfd23b5d71adf6e48ec7f45b67f75f40e798e7bbd76d5a7004bbde0b97347b8e1182accecc881a484bbf64b426290f9a2be1b26e392ce7a7154a536ebd357a4b764905d448dd0a3496d9584b6cb1402c204f43bfa184fe89074e96f35a959e0a0f1b483e86e090836f128c6d4d7773d223b534022b1e1d07d1e2cf0b7acf9b9dd5dd889245334cfa961bb09b6282ae4733c80f01605fa45920eee445a03efdafa30342a3f7f8512e1e7eb3dc9b35ae3ae8ad9ed48c997ca3fe6f174cc9cd06e94409ed8ac8d5b9c77f25fdc4ec4e7a35ff3abe164e20b88d84c75d82ae3105d77fdb2797cbd821ab2e7f30fa995f19b1293583aba886466456933eff3795cf709368197cb90aa53d4407e38bf4a5079387d47de2a7f14192b62b536df9ac6e7ac6f97ef9f4543673192b805e37a29d4ceddfebff346230f65cd19a871b16aef0392939dcfb6f18c7cc2c9ac97d537eb48f9dbd015f5692ea713c2c453e899fbba626c8eb9492ca471829811fa26ee0458d7f97fe0ea3992340d709c2d8e05542d42fb867e6c9087869368981de75351a029a754ccc3e4ae2e0a1bd48256f6d936ec41b6f0ca7990b93ea3e8f933fe194f63d20086336c36bba8ec803064b8c2265a02e6d10e70ff2b5e50399e42540d69972e87b09ca8f1a527ae4e303a3e59f77a4ab56cad1804e27a8809c44803fecc433a384898268041a4deaf361e7bc585d070bb74ef1023d02042632935424a7932bf6f459429b30f8f95f33a4604e5cd5ecabd284ca872af0d4f789be30e90116202c1183e8e0d7388d1cebf5c5ba20202a51685023e6c57aa98ff28edae75dfcde2d254dd9f45eca814891d6c1f23e86bafb2ebf564b11a26587843c9dda87548de29058ff02def2e62528542dfd01c83a4e548618ebe4d2a59b2febe88a7124868de194ce702dc2bc9536c758b0ab63186ebe19c662e1bc48fd2a09758b9de2a283bce3fb20904a3add89253149f0b04e7ba6f903ca228e36fc158a7a2dbfe799a2598b3dfee1e574f07e598fb316a422053dae56c5253613164775a1fb195786b60ba67f3ab13d0bee30cb323fd2f016d79b8cdab08672ce2a8629001294f5ebeb9840cb94f09c2940efff9a3d68b170b6cfca130a0a56f6be3b821ea63d879402e9f33d581be25e5795bac40858ec4dc7f7f9b5940f566987b64b0f76e355a3c609fe96984d58b9a8c7885e5b7ac6164ad63fe3173866ae0d3d36ee658a03049d932ff0e9013d05d37130ab089180c387d6e48f722c0a83446ccae16adad1b42972c6b71f38c67d3cb6469ad8b39a5e638950bd864c4a5d86128a361d40391019ce14aca0d41de88e2ba3a92121c4ab9e184fbe3248b9db4a8fe81576c760484c7a5a92371b0987f9d4f5dfbcf1df9001892283b658186f06cef38ea9c5b1296ed16bf939b5c6e36b3bb6d33559dd72e5b2b33f7ade9b6b8b8170bcd72610102f4ad240466b154ad120d1b522784524590c7f40ce5ae5afb335154070d6db99fbb08a593d6c854bd9c1ef67be2dd232eaddcb838b7fb472faac25faa0dc8c9fd2418a61b9ae4d415ce99e0767c3fa615b14faf0c39a417eec4c1bbd05eea6cd0aa428cb240031c5d1a1ad753b3b76aed7125db72be9d6349f81b219ac2ec1ace50bcfd566aab9276f4a2285018af5331c79a6ad8c99e2466fbb812de8d581c783a153451c50cd92ff5cd48c74a3fb344ec9246fce5349957cbac97e2075bfa74be717529d252eeef39ebde5174ef1aeacc293368709b0a4b7e5bd7050d1886d819657a2a18914bda5de27a42a0cde2fe77897dedaf5fec40d64a13271280c512fd9add3dfc50978e4a0b2babd87748bc7184eac72c49201506b9b0f651a01f77dd43a7e22a3dfd62e1cb4d86724f8e0d79a175f7e637f9b934f63da7105a4984e914d0634b87ba2a3b5ee55dd90f3642b5f2c3af83c7c67d785e9a0ac6dbfd5f99bd09fe16fb3826edbe64915b76f5d8cd4b722d57af6e00153c053b2c2df8998da5fb5c31e483dca5a45ca62986c8994dec153d4bd1430ddba499968673ecb3d0b003efae5439b0df809eca8befbdcadc3946a8d730edad0363b4a1677a898d76eca1d60fb691d16ad65d20fb139377e3066897e97b8735bbe7018bfe8f32b217389a27f4d86fd5b0e709623fb3febe6d253edeefbe69ac0301434f4632cf7fdfc2548b2e8ee7cffa10dd26435d39a797f97d01c999043f8dcb639722ddfc10611aa75b77c5c9be6564b57f144aa1380a057f0d64b12d6a511ab6e9e184e67b2338341054546dad74a22a9245e789a4af1d0b7d4d02407341472b58beda112af0daf72a60d775d98a93b1c18e18208d278ec9eead70f76c7742c572ff1515b1e172de48f5ab6d0a1e0bb7e7184f5ba57546ddb25878132d9e044e696ff283edb1f407b0211fe711a6bb1b16d62c899d0380bd3c93c542fd719a50fdb5f7bf670c68eb86abf48e08c7dab76758d267fbb3525f607373ff89ec8b701f0c15e1e433e05cd3437bf27bd7e4381a3b51c1f94c821163c6183e6a8ec3c697bb5b2b39d4a27603ebc8ed5f7a4bc88d8efa77bc1225bf3abfc8e5b37b92f3e5813dd2f8190c235054b8893e2a6c1dd7873dc8c939958318f6811148193c69c2989a22bb9d8430979eaf8b8b4ccc5d57b7c4825e05a025e46f409443f787c93d120bfa873e8d5a08cde4918b7f6cf304cf079683afdba2237381ed7b923a8a0262ae90fdd1ce71f42baad2d838c5c837c18d228f525669c580ef64a1015bb3c84262d444b946a9283a13a24f8b84612879a63539df75a48a78e89c5f7040c5e1f1d38b225a0c7fd338ccec30bbd62bac74aacf8cb37f96423619f4a344cc16e395506bf5a0aeae9045f64fa52e48329aa6d5af2fd0491ea8a48788cd20717abe8d270592aa4f71bfb8ffc91deb2c8e5186782608721a4a4e33d875f0c32eed30081887eda9b3fccff050994f89d8b2eef915b5b5ff81a40cccdced44252cf71b67b9f0df01d3bc77f06557c12f239fa976975990e0db632055085c8e8c901ba38986436220592b5472570f8f53d5ad0c9a4cb39180bc8f24a1d2241e57e20416e2cb17f89e563619e93d3f52df47ba9e4d04e69a0351dbd5a5591523f2eeaea9bca70945c88766be19ed9cd8432ceef9b0cb068461c5c3f72b7a86e397b7dc20028bd12614d69f0462edc127f3220254fa1161b3b124fa2c432f38647281482bc1895cb0fe92c88ceea32412affcb42e33f0f5e13b7d6007085824eeaa7db2a18c29c26024d8fa40c78c982f883b8850eb16c40812678c0485fbfd3ab83c2a434846e033705ea1f542c1e03dcb7b96450270133b4008147042f0da86dbfaf7bf03dbf9e9965c55e788be57c4285e47326d29b33d61133783902fd0e585f5bb5a04a2d12d3256df4ee84368d6da551eaa9e00425588df93ea1c580b8b2147ba2f4a6c44cc9ea30de4dc2a104f8a74ba8c53ab94508d216e2d9bfa85598f490a533970bf841f33e87a8530e462f04f45656e3e050ee6ee6cd6fead3194600d690004aa524512bccd90dbbc0606508bbcac27990e8001b6fa13864f6854617d2465028b0f3382221825d7160871293ab80ab9e319ae076857487b5245266e63c5f6910835af27e5a69a1aaba8b0730ba52b48c163a1d5c863722864eb096f4e1d792477391e14923ac4d1712bb911e4e89eed18d294b207a1d70f3665250ae15e2b966e65b3e9ee995966919508ce0d949d94b20ac932b404f96e118b7836a31cd45a72bb5d8dd2d2f0825a4cbc12134641d32baa44487ca513265e342c05c78526c226eeec0985af843bb6a89463d435b344ff22444e42b0d9c0c96f357c82902246438a96244a985f93f2bcb57d2ef281ea92009f5f82533e83e2bf71f20bf3cfecb1a126681242df2e0e3d85690e1a034db73cd302a1e06f62ffdb5ee854a19f773e92acd637d0e350c6a2489c1c1b7169e82512845df8bd7eec3afa5fd8e474b1c229e1366d267036172b89525c5c75c2978c9775eadcd115a18e40684f2ca7b619e7777874cdc55fea8bde2b72a2188b862aeb420ebe7ef40ad59e3a590faa284ac9d1267a938f7b34491521be10921c8c4fa1314af5a1b28b803f8581af20c756132fa12cf5cc85074114b4bef408eb1e7bcec519d757eb809404f83c568f87b35e1ba2e972e7d4079cffa79b0d8896d5612ef41df5f174153c838f5b93398e3de9b9a0a32a3997178e9894c3b5fe4bf980eca95ccd298e64d842aa3888f723bcc033f63fd03c82ebb99ac611b591d02f072a06fcfd5f3739995ecc243d64709284da770f85bc99734f66d2a3e1f44a0c8e1fcd45656cded61f3191a76f54e2286c45466dd87eee634f2a4aa53d52b3b7d10fcfa244251e67ac8c96bb5d612015dd9e54437bb78e1ca7dfcb25fb5341c599e82e73875315c83fed5b50d8a4a39ab9ac0e5a349695fc7bffd9f363c88e41f8d0397ec30ee2c05ab779e7b5a19a513c7786d8e5104c5b3bf34b2aadf8e22bf8e8f7049f1d307111b163d138187f253d8f6000dea8c9173aa6e8e1db44a75a47102243c1811e3a2ca6e106c6a3f6fc894b1d8d775c830a1d0b9123f928eb99071c6ea49d994b2390c43cb0980f7107570dbf7c4c5083db20ea55f1795b22cd0008b09b52f79bb618be624c3877b7be1b11afb5803816dfcdfd3201d7826492d6d21d28e9468609a9cbe863c62738d5a3b36966a5f95f9b8b9c5f83285ae7e2c8ccc799ab5b61add441363d752a0455de3a21128172335cec159ab0bfaa195de8df4034b2deb7697a90336cc47392d3717020fe56d819b710dc0a77c2418dc8ac3d0a0718b383cff7dbd7be68158ab7232e3d60eff9260d49ad14d55d773926e9b16262aafbb1db9ba44377d26411c9a2715dc4cafe08bc503c2305e9c39eaa117f9e1f7ed2b29fb574fff88b038e702b6e8bb5d23cb5"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x10cc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000140000000b0000000000001105000000050000000061302e00"], &(0x7f0000000fc0)=""/4096, 0x2d, 0x1000, 0x0, 0x4, 0x10000}, 0x28) r6 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r7}, &(0x7f00000001c0), &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x93cea4bee562f1e5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xc, 0xa9, &(0x7f00000002c0)=""/169, 0x41100, 0x4c, '\x00', r8, @fallback=0x1d, r7, 0x8, &(0x7f0000000480)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0x9, 0xf}, 0x10, r9, r7, 0x7, 0x0, &(0x7f0000000400)=[{0x3, 0x2, 0x10, 0x6}, {0x4, 0x3, 0xd, 0x8}, {0x4, 0x1, 0xb, 0xa}, {0x4, 0x1, 0x3, 0x1}, {0x0, 0x4, 0xa, 0xc}, {0x5, 0x3, 0x9, 0xc}, {0x5, 0x1, 0xd, 0x7}], 0x10, 0x5}, 0x94) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') read$FUSE(r10, &(0x7f0000000200)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x7, @val=@netfilter={0x2, 0x0, 0x7, 0x1}}, 0x20) 9m21.469438906s ago: executing program 2 (id=177): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket(0x1d, 0x2, 0x9) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8"], 0xc8}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES32, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) unshare(0x40020000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES64=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{}, "49b7225a90bf1f2e", "12225527a7d828e63474bdc819394fed", "69e26eaf", "38d0b9aaf90ed34a"}, 0x28) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) 9m6.108163575s ago: executing program 32 (id=177): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket(0x1d, 0x2, 0x9) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8"], 0xc8}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES32, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) unshare(0x40020000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES64=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{}, "49b7225a90bf1f2e", "12225527a7d828e63474bdc819394fed", "69e26eaf", "38d0b9aaf90ed34a"}, 0x28) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) 12.370601172s ago: executing program 0 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 11.643060336s ago: executing program 5 (id=1994): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() lgetxattr(0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff0585000000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0xa) r9 = dup(r8) r10 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r10, 0x200004) sendfile(r9, r10, 0x0, 0x80001d00c0d1) (async) sendfile(r9, r10, 0x0, 0x80001d00c0d1) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2c) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x6, r11, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x6, r11, 0x1, 0x0, 0x6, @local}, 0x14) 11.641772416s ago: executing program 1 (id=1995): socket(0x40000000015, 0x5, 0x0) syz_open_dev$media(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff29, &(0x7f0000000680)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102376, 0x18fe8) r1 = gettid() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x4b) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0x3, 0x3ff, 0x34325241, 0x2, [], [0x2b8], [0x0, 0x8]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffffffc, 0x0, 0x40, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x400002, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb72, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x5, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) readv(r3, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) 11.572512283s ago: executing program 0 (id=1996): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x20800) inotify_add_watch(0xffffffffffffffff, 0x0, 0x8500017e) socket$netlink(0x10, 0x3, 0xe) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x4a, 0x0, 0x0, 0x3}}, 0x48) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, 0x0) read$FUSE(r3, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, r7, {0x9}}, 0x18) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000040)="e04235fc19f126fcbea758894eb4", 0xe}, {0x0}], 0x2) 10.024984677s ago: executing program 5 (id=1998): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000002000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000006c0)={0x0, 0xf, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)={0x0, 0x8fb18d57b8b655ec, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$uac1(0x7, 0xed, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x6, 0x70, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x1}, [@mixer_unit={0xb, 0x24, 0x4, 0x3, 0x7, "2801ff6a258e"}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x2, 0x5, [0x7, 0x1, 0x4, 0x1, 0x9], 0x2}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x7fff, 0x4, "e09ff5ca9156"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0xb, 0x0, "14"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x2, 0xff, 0x4, "787f", '5'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x4, 0xba, 0x20, "16494e1581"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x41, 0x2, 0x8, 0x6, "d6"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x4, 0x5, "d1", "ab28cd"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x6, 0x9, {0x7, 0x25, 0x1, 0x1, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x23, 0x4}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xf, 0x3, 0x51, 0x5, 'Dr^U'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0xe, 0x0, "", "fdb3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x9, 0x24, {0x7, 0x25, 0x1, 0x80, 0x0, 0xfff1}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xfd, 0x8, 0x29, 0xff}, 0xe7, &(0x7f0000000240)={0x5, 0xf, 0xe7, 0x3, [@generic={0xc7, 0x10, 0x2, "f7712eebba6484df3e24df8f090a67f98ddd011c5a1071baac8d0378beba41ff3a22d2c7bd825e40d1d227ddb5d2c03a30584a21f3d08a584c587718fb629b29086a42a03d8d0df5c210c80ac90bb09515fb4262262bb9af6853b43f0efac5ced4c0abf756bb4843c1c2ef3438a2533b5de39ded1a12927717c31319303947da9e1e08a75861870f6b2fcf7adb9cc69f9af6ecef1480425573c5afeec23c72c4b04f42545b8f4341b6b7e2ddb3f38c1aa777873c2c843b3cf57b5b947ec8657f2edd26c8"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x10, 0x3, 0x7, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x4, 0x78f, 0xe6e, [0xc030]}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40d}}, {0xec, &(0x7f00000004c0)=@string={0xec, 0x3, "57e736bc1f3e56d4da04f954bdbc735af5d5d3941af13d4cf4646f08ff3f2f98771bdc508c57097605ce07d421871c10039e90742a0b893ca3991eb490b5beb31a67bce050f1c0cdf68980ea68ad4f6940e76e4bcd9bd6b5dda46a1d8b7c1ffc4bbf57f768fb62c2b464a87c81305078a789e9c049a5db611508bb05b2cd6cdfeecf2826fd2e7b4b9acadf563c926eb505bb5e4609f29e34f1d8ae35aadba3316a2f839ed0baa6edbdc3a3d4717c8b655b749f3f4156d6d75df8c74550720549a53ee2edbad346b9f3fab0ef4c9cb5a690b6c8d1cfc9a07fcfe51ae73db020b51290d648b5fd8a1cd609"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40b}}, {0xf5, &(0x7f0000000700)=@string={0xf5, 0x3, "0858b915494f1eff8b2c09b09023e4dd9e5d122230e29f2fedd22923969951609498192c8f47d75451e5fc67bb27cb3c82126d5c72887f55a9fb1b2aa5e615f806f4ad2aaa199582584edbc9673452f63414c70a6ef53a9ef23e474cea5a59ba5ad48a9c45791e0915ceebe70987dcd5ef007731db0ddb5fce1ee635ac3bbb9df20cafca6f52bba8c5ff0002bbac40056a7f4b5b4240da62a1ff9832f008df1061960c427c674b1d1e596f9e5404b86c09b283a58c6523e7f22d1fb7d6720ee24ba06190ef830f027c1f87b96f7a9db0767b006e9db2fa14b4d40d5dc95699e554e9e6a004cdde0b195665b7930c3c65301e28"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc09}}, {0x12, &(0x7f00000005c0)=@string={0x12, 0x3, "fba989a4c44d9057d5f13ba4cce96c10"}}]}) syz_usb_control_io(r3, &(0x7f0000000940)={0x2c, &(0x7f0000000800)={0x20, 0x2, 0x38, {0x38, 0x1, "3ebc20f61a92459201f7a30267aa3c8d1bf49046d40ffec09b838cd3e69b6b56ac4101a4db8c216b5745d3c8a231ac31b46f4cd0af4b"}}, &(0x7f0000000840)={0x0, 0x3, 0x34, @string={0x34, 0x3, "e17d9ca16fe1ab1bdb84cf6e1be6918629fa678a402f34be54284859b8d314dfe86205d847d4d13a5f0977700ba5527baa6e"}}, &(0x7f0000000880)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0xd7, 0x1, "f4c95edf", "d6d599e1"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x80, 0x9, 0x2, 0x6, 0xb8}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000980)={0x0, 0x6, 0xe3, "e4ddfa0b8c44a234b0343f23327383e4c6789d6fa932402d3dde54d24ae5fd5e91ee67446ea1964668682202d3605797196b28ad662643d27fdf2acff5999ebe3f8440b4b2390931b6d1e6672efb3891ad6bd43774dd0ceadaaa2d11c01e75ae14631b9c98f673824b1b4e498c8a42c5554f9a4640b31bbcc806e6f89a578891b531910dbf854d80082dfdb4b20d4bd463af4c9100dca1c3ccd880b88f310c24f9dc501e2da48356e3a7bc7cfff0604f4e96d51459a2afb8b519248ceae70dbb0d221edb5f603b1df86693a2d14b9fe63311aac9437e6a31aa247ec5ed0ed5e65af073"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x200, 0x4}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0xf9}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "f08c"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "b6a1"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xf9}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0xf8}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000f40)={0x2020}, 0x2020) 7.996235232s ago: executing program 1 (id=2003): r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "8c47bbd1ff223e68fc1c495c6a353a4355ac07e193a5b60a9c09f40b83ddce1b10de80c77804ee088ff7caed4d9cf2b6a98f508703bbb9a77fa9fe2b1bd2c2f581bc8ea2145651f2f863c9f22faa856605"}, 0x61) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x820, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) write(r3, &(0x7f00000000c0)="1800000016005f02c17721f8070066000e00000000000000", 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000708000/0x1000)=nil, 0x6000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20) 7.806577857s ago: executing program 0 (id=2005): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x3f00000000000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f00000002c0)={0x7, 0x0, 0x6737, 0x3, 0x5, "84a4df9aeb944af9e8922912cee2b03da46f33"}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) 7.598607935s ago: executing program 4 (id=2006): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b501000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4002800002be16ad10a48b243ccc40806d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb775505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d36c62785f32ecc294a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fcd097728955cf04fec692b01fadfc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab61a19"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 7.529804336s ago: executing program 1 (id=2007): prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 6.798509227s ago: executing program 1 (id=2008): fcntl$setownex(0xffffffffffffffff, 0x11, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1b1c, 0x1c09, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xb0, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0xaca}}, {{{0x9, 0x5, 0x81, 0x3, 0x1bf, 0x4, 0x86, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x9, 0x87}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x7f, 0x9, 0x2, 0x28, 0xfc}, 0x31, &(0x7f0000000800)={0x5, 0xf, 0x31, 0x4, [@generic={0x3, 0x10, 0xa}, @wireless={0xb, 0x10, 0x1, 0x8, 0x70fdcad6ae521ce7, 0xc, 0x7f, 0x2, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x8, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bcd17a9360f70bc6ed32d096c949c84f"}]}}) userfaultfd(0x80801) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2d, 0x0, 0x4, 0x37a, 0x41, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x1, 0x10001, 0x7ff}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000400)=[@code={0x1, 0x4d, {"0f01caac65f0004a2966ba430066edc44115eea3cf6e0000c4e2099ad80f20c035000000400f22c044ff5dc4b9230800000f32c46179d68220590000"}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0xfffffffe}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x3d}, @code={0x1, 0x6b, {"440f20c0350b000000440f22c0dbef410f01cb66b8ce008ec8c4837bf0b88f0000000366baa00066ed0f91e548b859eb0d158062991c0f23d00f21f8353000000a0f23f866baf80cb836f6858bef66bafc0cecb9a20b00000f32"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x8, 0x6}}, @cpuid={0x2, 0x18, {0x1, 0x3}}, @code={0x1, 0x4e, {"0f218e400f01c8672626400f01d1480fc7180f786376662e64f0872d943384f23e3e400fc72d1b7c0000660f17342866b891000f00d88090dd0300001e"}}, @cpuid={0x2, 0x18, {0x0, 0x5}}, @code={0x1, 0x49, {"470f070f074b0fc74def0f017300f347d27ea648b807000000000000000f23d00f21f835300000090f23f80f01f8dde8c42179510a0f01cf"}}, @code={0x1, 0x7e, {"0f01c3b9c2090000b83d3b0000ba000000000f30c744240035000000c744240201000000ff1c240f3026430817660f38801d53221f39c74424001e080000c74424024a3d9e27c7442406000000000f01142466ba210066b8a20066efb9800000c00f3235001000000f30640f09"}}, @uexit={0x0, 0x18, 0xd0}, @code={0x1, 0x62, {"c4221928ad0038000066b894008ed80fc73e471d72b7000066b84d000f00d048b800800000000000000f23d00f21f8352000000b0f23f866baf80cb85205168fef66bafc0c66ed2e47f442f42667f340ab"}}, @uexit={0x0, 0x18, 0xc}, @cpuid={0x2, 0x18, {0x1000, 0xc}}], 0x37f}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000898000/0x18000)=nil, &(0x7f0000000780)=[@text32={0x20, &(0x7f00000002c0)="b9e50800000f320f01c40f68a49b100000000f060f019c21000000003ef33eff5ca245c4c231933c2866b8c0008ee866ba2000ed3e640f2294", 0x39}], 0x1, 0x20, &(0x7f00000007c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) r7 = socket(0x15, 0x5, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000007c0)) getsockopt(r7, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) 6.71049189s ago: executing program 5 (id=2009): r0 = socket$netlink(0x10, 0x3, 0x15) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x18000) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x97) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x80, 0xa, 0xf, 0xd, 0x0, 0xb021, 0x0}) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) 6.703801767s ago: executing program 4 (id=2010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffbffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) socket$kcm(0x10, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000080)="4ad4", 0x2}], 0x1) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000100)=0x2, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@polexpire={0xd8, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000001, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@mark={0xc, 0x15, {0x35075c, 0x4}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000240)={0x0, 0xb}, 0x8) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x10000008}) 6.564941841s ago: executing program 0 (id=2011): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = eventfd(0x3) sync_file_range(r0, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x6bf1c2d5adba8c12}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r1) r5 = fcntl$dupfd(r2, 0x406, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e21, @local}}}, 0x90) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.01832524s ago: executing program 3 (id=2012): r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "8c47bbd1ff223e68fc1c495c6a353a4355ac07e193a5b60a9c09f40b83ddce1b10de80c77804ee088ff7caed4d9cf2b6a98f508703bbb9a77fa9fe2b1bd2c2f581bc8ea2145651f2f863c9f22faa856605"}, 0x61) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x820, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) write(r3, &(0x7f00000000c0)="1800000016005f02c17721f8070066000e00000000000000", 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000708000/0x1000)=nil, 0x6000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20) 3.133042984s ago: executing program 1 (id=2013): socket(0x40000000015, 0x5, 0x0) syz_open_dev$media(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff29, &(0x7f0000000680)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102376, 0x18fe8) r1 = gettid() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x4b) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0x3, 0x3ff, 0x34325241, 0x2, [], [0x2b8], [0x0, 0x8]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffffffc, 0x0, 0x40, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x400002, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb72, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x5, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) readv(r3, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) 3.061742683s ago: executing program 5 (id=2014): r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000040)={0x0, 0x5, 0xfffffffffffffc68, "abcc2e2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0xfebf, &(0x7f00000011c0)=ANY=[@ANYBLOB="40fdb3100000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002840)=ANY=[@ANYBLOB="38010000100013070000000000000000fe88000000000000000000000000010100000000000000000000ffffac1414260000000000000000000000003b000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="fc0200000000000000000000000000010000000232000000ac1414bb00eaffffff0000000000000000000000000000000000000000000000fffffeffffffffff0400000000000000040000000000000040000000000000000000000000000000000000000000000061f4ffffffffffff0300000000000000000000000000000000000100000000000000000002000000000000002dbd700000000000020005000000000000000000480002", @ANYRES16=r2], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) read$FUSE(0xffffffffffffffff, &(0x7f0000002940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0xd) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10184, 0x1, 0x20a}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x31a1}, 0x1}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f00000002c0)={0x0, 0x1000000, "9ba25cc897954320c2e57ebbf70e153dd2fcf5e98bff7f9e", {0xfffff9dc, 0x9}, 0x1ff}) chdir(&(0x7f0000000100)='./file1\x00') open(&(0x7f0000000380)='./file1\x00', 0x24640, 0x32) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r7) 2.994518025s ago: executing program 0 (id=2015): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r0) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100193095b107c0503847d5d01020301090212000108070002090416400065cf5bc208"], 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000340), 0x80, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000002800)=""/4109, 0x100d}, {&(0x7f0000001500)=""/137, 0x89}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f00000016c0)=""/153, 0x99}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000001780)=""/2, 0x2}], 0x7, &(0x7f0000001d40)=""/46, 0x2e}}, {{&(0x7f0000001880)=@pppoe, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/77, 0x4d}, {&(0x7f0000001980)=""/104, 0x68}, {&(0x7f0000001a00)=""/192, 0xc0}, {&(0x7f0000001ac0)=""/4, 0x4}, {&(0x7f0000001b00)=""/157, 0x9d}], 0x5, &(0x7f0000001c40)=""/92, 0x5c}, 0x8}], 0x2, 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000440)={0x0, 0x0, 0x47}, 0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mkdir(0x0, 0x0) (async) r6 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000180)=0x1) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) socket$inet(0x2, 0x800, 0x8) (async, rerun: 32) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'sit0\x00'}}, 0x1e) (async, rerun: 32) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe8a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x18) (async) getrlimit(0xd, &(0x7f0000000040)) 2.989858528s ago: executing program 4 (id=2016): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/136, 0x88}], 0x1, 0x0, 0x0, 0x8081}, 0x24000090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r4, &(0x7f0000005100)={0x2020}, 0x2020) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000140)={0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MAP={0x0, 0xe, {0x4, 0x1, 0x5, 0x3, 0x9, 0xfc}}]}, 0x40}}, 0x0) 2.434191228s ago: executing program 3 (id=2017): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYRESDEC=0x0]) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x4b) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0xf8, 0x11, 0x148, 0xf8, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'geneve0\x00'}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@ttl={{0x28}}, @common=@icmp={{0x28}, {0x0, "e3ec"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 1.941799963s ago: executing program 0 (id=2018): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = fanotify_init(0x40, 0x800) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f0000000040)={0x1, 0xffffffff, 0x7, 0x7, 0x2, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async) fanotify_mark(r4, 0x21, 0x8000008, r4, 0x0) (async) fanotify_mark(r4, 0x22, 0x101b, r4, 0x0) 1.444181647s ago: executing program 4 (id=2019): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xd811, 0x10100, 0x0, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0xc3a, 0xd2e8, 0xf, 0x0, 0x0) (async) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000300)={0x1, 0x0, 0x2, 0x0, {0x8, 0x0, 0x9, 0x109a}}) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000a00)=[{0x2, 0x3, {0x2, 0x0, 0x1}, {0x2, 0xff, 0xf7a59104b40dfa67}, 0xfd}, {0x1, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0xfe}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000040f540d6d356de94b500a1c689396b810000000000000093f8fff387f019122ee1dae685"], 0x48) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004fffd00080003000000009937000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000100008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/keys\x00', 0x0, 0x0) pread64(r12, &(0x7f0000000200)=""/174, 0xae, 0x3b11) (async) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r11, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x80000000, 0x1}}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) (async) r14 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r14, &(0x7f0000000580)=ANY=[@ANYRES32=r14, @ANYRES64=r10, @ANYRES16=r11, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRES8=r13, @ANYRESHEX=r7], 0x58) (async, rerun: 64) close(r14) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x8}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.298664154s ago: executing program 5 (id=2020): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.262890881s ago: executing program 1 (id=2021): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r3 = dup3(r1, r2, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000100)=""/24, 0x30}, {0x0, 0x2}], 0x2, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x10a, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x98, 0xc2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf7, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x1, 0x5, 0x8}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x2, 0x3, "3ba0407fd967"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x6, 0x9}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x2, 0x6, 0x3, 0x9, 0x3, 0xa], 0x8}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0x9, "099d1d43e9ac"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0x6, 0x8, "d2", 'm|'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x80, 0x6, "c9b6d130a2610f10"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x7, 0x4, "eae8f9"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x81, 0x6, 0x5, {0x7, 0x25, 0x1, 0x3, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x27}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0xfb, "9778"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x9, 0x40, "6e05"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x81, 0x3, 0x74, 0x8, "aceb34fb"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x38, 0x0, 0xfc, 0x5, {0x7, 0x25, 0x1, 0x81, 0x7, 0xa8b5}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x2, 0xbf, 0x70, 0x20, 0x7}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "ae25b1fd05d849921ff66de5c710f842"}]}, 0x5, [{0x2d, &(0x7f0000000280)=@string={0x2d, 0x3, "c13df9cec7e71338269820d444fae321ea1605b8c68c82a2961b62c010206b7959d0977cf4334a502b3836"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1407}}, {0xec, &(0x7f0000000340)=@string={0xec, 0x3, "6130cb1ee54920c10c2f1694681901162e6b43f7b608676d140a1df43425e46d3d49c9ea1214b522f8cb795c3d2a1b8e75b5e5974f2b62d2f0f354caa89b518f7f523bc2939e9fa9c4ea4c06e31c15bd3b6009487e9bb94f9b1ecf8c1eb147f917fb985a6694e6c963bfd0586ec55e4a0c0c1f863d2ccad8c155e107558152d0ea9c1ca133c9a6d3b62c5a60593dbb55b61f9251ad76eed9f40bfb46b538ace73cfb9d9220c902591654ca56d70d1a426345fba526309d25d7f660511388354268ce69b04c7f2db01332b63cae0c2afe073090c7a2f56c224c09bc29eee6383780739b76851e8b9fccb7"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x860}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.261156388s ago: executing program 3 (id=2022): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, &(0x7f00000001c0)="945071d4d7a1", 0x2, 0x0, 0x7}, 0x50) r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240"], 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000001300)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.012915767s ago: executing program 5 (id=2023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@delneigh={0x1c, 0x1d, 0x1, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x10, 0x1, 0x3}}, 0x1c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r3, 0x0, 0x1000004) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x8002, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x40, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe7f}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80000001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffff4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8970}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 878.398212ms ago: executing program 4 (id=2024): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x1d4, 0x30, 0x1, 0x0, 0x0, {}, [{0x1c0, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x148, 0x5, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xefe7, 0xffffffff, 0x4, 0xffffff7f, 0x5}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3ff, 0x1b, 0x5, 0xfffffffc, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x2, 0x4c, 0xff, 0x7}, {0x5, 0x0, 0x5, 0x4}, {0x3, 0xa, 0x8, 0x2}, {0xfffc, 0xd, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x2}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}]}, {0x92, 0x6, "289415fcac15b46dc903f72ad8b77790d46b90c45b1288859babdb0d4676ea85a92deb36ca707f523dbabfa51457845953eab4d2aafcd0895f1ba645dc4406d7fa6894b064000f139d83bd62744182bfd99ef896c49d37f982b496808ab97c3d94d83e8fb55e3babbd5f103cb5a0d2e5cbc7195da09bda7d06a6c24494c66c86822fa10e5f050e57b58362e72b17"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x804}, 0x40004) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x80) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) (async) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000000)={0x2, 'syzkaller1\x00', {0x5}, 0x1}) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) 765.932508ms ago: executing program 3 (id=2025): listen(0xffffffffffffffff, 0xffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280"], 0x44}}, 0x10) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xffffffff, 0x0, 0x0, 0xc0, 0x0, r4}, &(0x7f0000000000), &(0x7f0000000640)) write$selinux_load(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x102) (async) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f00000000c0)=0x9, 0x4) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000300)=""/252) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/20, @ANYRES8], 0x50) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001100)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="d134937078ff77deb6e2fc8a1c748fa6fa91e518d3572dd4a65dafd896fcea58682351b15c97c9dd7ba47607d0d1e55c0ca0c79862ac2e7ee9bbb1b52e758c309d498fedae3795342cc60fdd63eed0eee7c100a3480b52b3bdafc09b76fdee05b582cab6d8fd3a600a454f1931a9ce3907e5bc0dab7f5bbe65cc64bf", @ANYRES64=0x0], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000300), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0182101, &(0x7f0000001080)) syz_emit_ethernet(0xe5, &(0x7f0000001580)={@link_local={0x3}, @multicast, @void, {@mpls_uc={0x8847, {[], @generic="ca361366e493fd72188699c226d3923a133ca6a39a53b10c4f0e70cd684a9dcf2848eec9b954c68c8a069fe61517a0011aeff168fe9fafd66a83c12e1d7a3c606013efcd79f2c1367793397e3b20fa5736d045aa110882a97b77baac87f776a1bcfa2f4fc92e5c2ef58a596abc6c37c20b223944c8013ee8766d67c899f1683c6b44b0d3031864fc1a7f812256b2f98bfce8d4b498af5c3b27ba918a97a2dc8d66222ebcfb9c5eaf1a19be77e820cc13d23c518b2be19895a9ab350d5b3ff3f651e2c0bf7b2d017dcb10c94905732e6880689272bd5554"}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 199.3724ms ago: executing program 4 (id=2026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffbffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) socket$kcm(0x10, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000080)="4ad4", 0x2}], 0x1) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000100)=0x2, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@polexpire={0xd8, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000001, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@mark={0xc, 0x15, {0x35075c, 0x4}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000240)={0x0, 0xb}, 0x8) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x10000008}) 154.242477ms ago: executing program 3 (id=2027): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x65}}, './file0\x00'}) getsockname$qrtr(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) io_setup(0x200000, &(0x7f00000000c0)=0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000100)={0x0, 0x53, "6d980f3752afa05260cace6e27187dd2f241eb60a236276c71379d2a160783f0e70fe591515dbbec31b619b7d256ca11fcce7f00873780bbaf6afeb7557ccfa520242b1e6b53a0162d026d3f619f0007657a84"}) r2 = semget$private(0x0, 0x1, 0x80) semctl$SEM_INFO(r2, 0x1, 0x13, &(0x7f0000000180)=""/214) io_setup(0xfffffff8, &(0x7f0000000280)=0x0) io_destroy(r3) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) sched_setscheduler(r4, 0x6, &(0x7f0000000300)=0x7) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={0x0, 0xa, 0x9, 0x9f8, 0x9, 0x8}, &(0x7f00000003c0)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x4, 0x0, 0x7, 0x20, 0x6, 0x5d}, 0x9c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000940)=[{{&(0x7f0000000500)=@xdp, 0x80, &(0x7f0000000700)=[{&(0x7f0000000580)=""/104, 0x68}, {&(0x7f0000000600)=""/206, 0xce}], 0x2}, 0x2}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/3, 0x3}], 0x1, &(0x7f0000000840)=""/248, 0xf8}}], 0x2, 0x3, &(0x7f0000000a00)={r7, r8+10000000}) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000b40)={0x12, 0x1, &(0x7f0000000a40)="7ff03edbbf5755a0b32dcbfe4a40547efbb5347203e20a6be13f9200d4626aac4bd11b533b98dcc538994825cd2c780301adef3c8cd53c769c36c3d343389e3972fcd7877d6cc2ee035ae9f6ef610c90e2d153d0d97bb01ba93211216c1cafe5467d689f551e844891c84b2eb289d64bb718da6c8dcbeb3a9f2f2e5fd90d065ce6df6b32ab3b09a7ae99ee1df06825611db238920dd9862ff06a0e1dde131225dea34c337a276fbf60bc52ec3dd68cc43924755f2af43b7f2dcefb2f23546ed313d960466d7fe4b4800a6348b5f8518557917f56fa6f9a67df4965323795ed2172e610c811ce52fad557f6b81f5e88f163675d353e888b", {0x4, 0x9, 0x32314d59, 0x4, 0x1fb2, 0x100, 0x9, 0xcf}}) r9 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)="c37751357e1fdcb68effcce83ad4f935b79b1c26e12fbcf75ed025e9f26d2e137b9074657399bd0e136736d8a0082544395657f57f5b5fd9dc750fb9b3f5431ae86d689f0ea2348f79363a5f22d7bba03b469e324d81b68d2ac8218b5baee468d56c1b00fa7fc5a08067969a0184413324e8f5fed928ebb0df063bd313f7ac7562985feb5acbe1eb19f1f2c9ec43d8a429e6c7c186d9f8d8fd0d64980bd8470bcc828b2ffaea2afba40668f50a621db10c5ac014d0634505626b15ad3e7e505d82b361b9c70139ba7e00e9f81086b3a6b18544765c25df0251398963f5b632f5b3d967ee0b8b3b2ba29cfb656c3621007af67d6297", 0xf5}], 0x1, &(0x7f0000000cc0)=[{0xf8, 0x104, 0x6, "a4145d4c2d297cecd52d8be41b8cb69353b1dc0c7059807d98a2c7dcc289d9fdf870e35abeb9eedec063c4b2c584b42ebd3f63beda128d0e1c6a4aa4eb2faf1b95eaf553bdca8627462b0dee8d20e02007b0c5dccead927ae3299baeadf717d77d610690ba54c79dc5f913d91ba656d9c604f7e9e0d2306238e96ada00f24fce1a062046459a952684a473691630bef461ab190c55b836d109cc367a0fc4dfc916f6215fe6fe34e4eccfcbb61450b27a1b794dea52505dc1b8a188173ba4e1fcc5ce31ae77572b400f61e0b9a5c01ce26fb4a605d7c67eb8245f573a7bef25de5440a57f794dd665"}, {0xd0, 0x10e, 0x401, "848db0f92d7bbb67a6bb675a40e395cf16c247085aa35fb10890971a3f9bcd7dabb61bdf543363ca6da62e49bafb23806840d7d1a4b23256e7afd1d2c02369c0f879d550b151b9cd748a19b680ea12c783a0bcc90dbff3182a8461fc409474bfbe9ffd6ba658d4afe45197315686d0a1925cad5e631efd95e3649334fe5e91c2871925ec86b86741ec9637cb3e3a9eb4f7f439663ad9f28f1f3948a7c399617f20210fa5e0379ab684fe9e26936f4d4e9cceee70302ba4f11b4a0a7dfc6378d7"}, {0x90, 0x3a, 0xfffffffb, "15f8138ad2b7f35bb925ca4b608cd6fb9ff71d5f565e661422598d2e08587ccdca7f87f0f0b8718111a330dfa5d5eda0db199d57775a3afd1ec3f26e01983562deb562bc289419ef38ddd919b216286f1147dbd4782e5cb59921b00e8a44f9d4079d073829b604d764ba16701e2c73c016200383b97a61359a6864"}, {0x60, 0x189, 0x1, "60acf831b66f6c06119ee0a1e93a8cd399323def3b9be5ebe3339240fa12da45002afac01fbd628ba4e1b94f7c76f7e6504b6a2cc5a1c4f40aa2f879c6840356d1857dddbfcf54de91b9ed1e4aa648"}, {0xe8, 0x109, 0x3, "584b1cfb2f49d29accda52e9322188df02f4332cb5ae8c508321985776c384d272fed9e5bb34f0dcc69426bd9a2ea6dc1be63cb8f47ce20b878b70beedfcb927e7d7d43f27c2c13eb78bb2f4bf6eece4c13bff9c8c5b4709c9d5d743217cb3afb0c808b219e94dba784f197efaafdcf7a1c0be32ffb93dbe9652c7702a6db4ad7a0c74cdb6e2db642f9f350696fc80b366969a50591e8d4bdffd9d7bf6ce6d04f98c33339c94434c72862e96354ac17aafe782aa33216ff3bf5d01c14d89aca1de1c8c57041ae106fcfcaa956ae49fe606b3fa81d2e3"}, {0xb8, 0x29, 0xee, "b2c951c6a8380a19dfb7df5845df1c697c19834d1115c49ea76120cb95720578abbe4712efaea49c0a796e95752ca7fade79a88dacf09861beb67c6620e671c57c4c52a23545b7c40e2f8e4101be7127f6ce1e226fc9ce55b35f0642f1403e9b065dc89a5d1aa53e0f6e5d139029753573a32d98f2ede2a8a6fcff3d6b4f5c99281164e2cb908779f5c101eef8c8a8c353da6a0c4507df439b790ad0aa7ceebe1f15"}, {0xb8, 0x108, 0x7, "3b7e2d02fd65852763ec07607fdadc849c5ccc04ee11ab931cac0ed26c9f132b314cb95b485bc8b5847b294b9fe0ad5eb9d3c28abcfbd88fd70815706b8b06465eb33fe554b60e09f145c1136dc8c1dea5b6070937b4fb3318196098cd7df82951ef5eb48d4ddf227dc6c0e4e6cf3876725d4b0355952ed3aebd0ef65417cd26dd3453a762e64b1bab21ec94d8a55e5978a8bee7f5f053ee8ed6eb58807b19070b01a0c041f243"}], 0x510}, 0x4040001) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001240)=0x2) semop(r2, &(0x7f0000001280)=[{0x0, 0xc, 0x800}], 0x1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r10, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x11c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_DATA={0xf7, 0x1f, "9de582e6158d1cc6dae114c10e6145156ffccb43ca998f8a555a9381bdbbb4154d6e5bdce096f8baf4d9c0b3b30b98e96d21e5f61903c542910b4da15a90d2897ef817fe13c34c662d4a7c91e72ae2226eef4cee7b1c1afaf02245cdad89b79dc66e1b0fb8a2a17ac8bb50dfff66002c22a71e9629438afe407f5cb969c7d3d2e6c257cec8720b3cb619a3528a93b9ec72fc9a909b69083863690d340371c8e38ab892ef0d354e4a57d923da1b2cc095cd0ee74b478409032f91e3530bd93099f1ca2086eb0e403f6e8e34c0db1980f436eb12c04f5fad86443292bd50c8307e24b7615065077899f2ea6069883faeef8d1894"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x9}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1}]}, 0x11c}}, 0x0) getegid() r11 = eventfd(0x375) io_getevents(r1, 0x7, 0x4, &(0x7f00000014c0)=[{}, {}, {}, {}], &(0x7f0000001540)={0x77359400}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001640)=0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001680)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000001780)=0xe8) mount$9p_tcp(&(0x7f0000001580), &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800, &(0x7f00000017c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@msize}, {@access_user}, {@dfltuid={'dfltuid', 0x3d, r12}}, {@aname={'aname', 0x3d, '/dev/ptmx\x00'}}, {@ignoreqv}], [{@appraise_type}, {@uid_lt={'uid<', r13}}]}}) io_submit(0x0, 0x3, &(0x7f0000001ac0)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x3, 0xd7d, r9, &(0x7f00000018c0)="164b400f", 0x4, 0xfffffffffffffffc}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000001940)="172e5e1839cde5aa6e84426b4722d6886b916ff0d9fc7d55f8d5dd99225c54be9e9df5918635452fe42b9c3d7f57044f76acd35697b955419c658616ff696f90c729c294d960", 0x46, 0x401, 0x0, 0x3, r0}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x7, r9, &(0x7f0000001a00)="9b67fc02b8bf1d9378ddd8eebb54b02df8dd1457dad58f252eb33c02e8e32340ee79e503466fe89828c9a7a7a6b55c818b2426ff215d9d7aced09ddb7b1bec81cf0ce5bca86688a75524e7cf8a81ecc1936a13d54fcc037ba31e0108a7e29f1731ae82c8abec130d41cd65e461d9096b0bc47010766b067a7b45633730", 0x7d, 0x40, 0x0, 0x2, r11}]) 0s ago: executing program 3 (id=2028): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r3, r1}, 0xc) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x18, &(0x7f0000000300)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x4c77, 0x1400}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000280)='./file0\x00', 0x40, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000002, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 551.496224][ T2146] usb 4-1: config 0 descriptor?? [ 551.551675][ T30] audit: type=1400 audit(1751898188.397:23535): avc: denied { prog_load } for pid=12182 comm="syz.1.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 551.572332][ T30] audit: type=1400 audit(1751898188.397:23536): avc: denied { bpf } for pid=12182 comm="syz.1.1608" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 551.593077][ T30] audit: type=1400 audit(1751898188.397:23537): avc: denied { perfmon } for pid=12182 comm="syz.1.1608" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 551.619231][ T30] audit: type=1400 audit(1751898188.397:23538): avc: denied { perfmon } for pid=12182 comm="syz.1.1608" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 551.640344][ T30] audit: type=1400 audit(1751898188.407:23539): avc: denied { perfmon } for pid=12182 comm="syz.1.1608" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 551.661879][ T30] audit: type=1400 audit(1751898188.407:23540): avc: denied { perfmon } for pid=12182 comm="syz.1.1608" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 551.682986][ T30] audit: type=1400 audit(1751898188.407:23541): avc: denied { perfmon } for pid=12182 comm="syz.1.1608" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 552.499734][T12199] FAULT_INJECTION: forcing a failure. [ 552.499734][T12199] name failslab, interval 1, probability 0, space 0, times 0 [ 552.580271][T12199] CPU: 0 UID: 0 PID: 12199 Comm: syz.1.1611 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 552.580297][T12199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.580307][T12199] Call Trace: [ 552.580313][T12199] [ 552.580319][T12199] dump_stack_lvl+0x16c/0x1f0 [ 552.580348][T12199] should_fail_ex+0x512/0x640 [ 552.580370][T12199] ? __kvmalloc_node_noprof+0x124/0x620 [ 552.580404][T12199] should_failslab+0xc2/0x120 [ 552.580429][T12199] __kvmalloc_node_noprof+0x137/0x620 [ 552.580450][T12199] ? __pfx___might_resched+0x10/0x10 [ 552.580473][T12199] ? fuse_dev_splice_read+0x10a/0x700 [ 552.580497][T12199] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 552.580519][T12199] ? fuse_dev_splice_read+0x10a/0x700 [ 552.580538][T12199] fuse_dev_splice_read+0x10a/0x700 [ 552.580558][T12199] ? trace_sched_exit_tp+0xde/0x130 [ 552.580583][T12199] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 552.580618][T12199] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 552.580638][T12199] do_splice_read+0x282/0x370 [ 552.580664][T12199] splice_file_to_pipe+0x109/0x120 [ 552.580690][T12199] do_splice+0x118c/0x1fc0 [ 552.580715][T12199] ? rcu_is_watching+0x12/0xc0 [ 552.580738][T12199] ? lockdep_hardirqs_on+0x7c/0x110 [ 552.580767][T12199] ? __pfx_do_splice+0x10/0x10 [ 552.580797][T12199] __do_splice+0x15d/0x360 [ 552.580822][T12199] ? __pfx___do_splice+0x10/0x10 [ 552.580842][T12199] ? __fput_deferred+0x420/0x480 [ 552.580866][T12199] __x64_sys_splice+0x187/0x250 [ 552.580892][T12199] do_syscall_64+0xcd/0x4c0 [ 552.580919][T12199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.580936][T12199] RIP: 0033:0x7fd41ad8e929 [ 552.580950][T12199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.580966][T12199] RSP: 002b:00007fd41bcb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 552.580982][T12199] RAX: ffffffffffffffda RBX: 00007fd41afb5fa0 RCX: 00007fd41ad8e929 [ 552.580993][T12199] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 552.581003][T12199] RBP: 00007fd41bcb9090 R08: 0000000000002000 R09: 0000000000000000 [ 552.581013][T12199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.581023][T12199] R13: 0000000000000000 R14: 00007fd41afb5fa0 R15: 00007ffd8b1c4f48 [ 552.581047][T12199] [ 553.045296][ T9] usb 4-1: USB disconnect, device number 35 [ 553.073439][T12204] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12204 comm=syz.1.1613 [ 553.146011][T12204] loop6: detected capacity change from 0 to 524287999 [ 553.698967][T12209] Unknown options in mask 5 [ 555.518483][T12229] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1619'. [ 555.533601][T12228] syz.3.1619 (12228): drop_caches: 2 [ 555.600279][T12228] syz.3.1619 (12228): drop_caches: 2 [ 556.303147][ T30] kauditd_printk_skb: 238 callbacks suppressed [ 556.303161][ T30] audit: type=1400 audit(1751898193.627:23780): avc: denied { read write } for pid=6848 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 556.406007][ T30] audit: type=1400 audit(1751898193.627:23781): avc: denied { read write open } for pid=6848 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 556.449776][ T30] audit: type=1400 audit(1751898193.637:23782): avc: denied { ioctl } for pid=6848 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 556.680705][ T30] audit: type=1400 audit(1751898193.777:23783): avc: denied { create } for pid=12230 comm="syz.5.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 556.703629][ T30] audit: type=1400 audit(1751898193.777:23784): avc: denied { bind } for pid=12230 comm="syz.5.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 556.724838][ T30] audit: type=1400 audit(1751898193.787:23785): avc: denied { setopt } for pid=12230 comm="syz.5.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 556.749606][ T30] audit: type=1400 audit(1751898193.787:23786): avc: denied { accept } for pid=12230 comm="syz.5.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 556.956200][ T30] audit: type=1400 audit(1751898193.787:23787): avc: denied { read } for pid=12230 comm="syz.5.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 557.164623][ T30] audit: type=1400 audit(1751898193.817:23788): avc: denied { read write } for pid=5828 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 557.317747][ T30] audit: type=1400 audit(1751898193.817:23789): avc: denied { read write open } for pid=5828 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 557.526658][ T5913] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 557.678828][ T5847] udevd[5847]: symlink '../../loop6' '/dev/disk/by-diskseq/124.tmp-b7:6' failed: Read-only file system [ 557.719941][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 557.737122][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.770615][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.801577][ T5913] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 557.830949][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.871135][ T5913] usb 4-1: config 0 descriptor?? [ 558.559093][ T5913] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 558.643807][ T5913] ft260 0003:0403:6030.0012: failed to retrieve chip version [ 558.655159][ T5847] udevd[5847]: symlink '../../loop6' '/dev/disk/by-diskseq/124.tmp-b7:6' failed: Read-only file system [ 558.670376][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 558.686599][ T5913] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -32 [ 558.850429][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 558.878285][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.895238][ T5847] udevd[5847]: symlink '../../loop6' '/dev/disk/by-diskseq/124.tmp-b7:6' failed: Read-only file system [ 558.922078][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.941011][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 558.981272][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 559.007202][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 559.027080][ T9] usb 2-1: Manufacturer: syz [ 559.039468][ T9] usb 2-1: config 0 descriptor?? [ 559.067307][T12272] SELinux: Context system_u:object_r:adjtime_t:s0 is not valid (left unmapped). [ 559.406322][ T5940] usb 4-1: USB disconnect, device number 36 [ 559.674725][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 559.859756][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 560.480046][ T9] usb 2-1: USB disconnect, device number 28 [ 561.479620][ T30] kauditd_printk_skb: 335 callbacks suppressed [ 561.479635][ T30] audit: type=1400 audit(1751898198.817:24125): avc: denied { read } for pid=12295 comm="syz.3.1639" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 561.775401][ T30] audit: type=1400 audit(1751898198.817:24126): avc: denied { read open } for pid=12295 comm="syz.3.1639" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 562.171467][ T30] audit: type=1400 audit(1751898198.927:24127): avc: denied { map_create } for pid=12301 comm="syz.5.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 562.190874][ T30] audit: type=1400 audit(1751898198.927:24128): avc: denied { map_read map_write } for pid=12301 comm="syz.5.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 562.284216][ T30] audit: type=1400 audit(1751898198.927:24129): avc: denied { map_create } for pid=12301 comm="syz.5.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 562.303508][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.351983][ T30] audit: type=1400 audit(1751898198.947:24130): avc: denied { execmem } for pid=12301 comm="syz.5.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 562.387360][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.397041][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.412279][ T30] audit: type=1400 audit(1751898199.047:24131): avc: denied { prog_load } for pid=12295 comm="syz.3.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 562.432258][ T30] audit: type=1400 audit(1751898199.047:24132): avc: denied { bpf } for pid=12295 comm="syz.3.1639" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 562.452909][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.459067][ T30] audit: type=1400 audit(1751898199.047:24133): avc: denied { create } for pid=12295 comm="syz.3.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 562.575517][ T30] audit: type=1400 audit(1751898199.157:24134): avc: denied { read } for pid=12301 comm="syz.5.1638" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 562.629648][ T5893] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 562.724758][T12313] IPv6: addrconf: prefix option has invalid lifetime [ 562.801255][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 562.851749][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.874022][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.900156][ T5893] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 562.923141][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.938146][T12320] FAULT_INJECTION: forcing a failure. [ 562.938146][T12320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.943945][ T5893] usb 2-1: config 0 descriptor?? [ 562.980458][T12320] CPU: 0 UID: 0 PID: 12320 Comm: syz.5.1644 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 562.980481][T12320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 562.980491][T12320] Call Trace: [ 562.980497][T12320] [ 562.980504][T12320] dump_stack_lvl+0x16c/0x1f0 [ 562.980533][T12320] should_fail_ex+0x512/0x640 [ 562.980559][T12320] _copy_to_user+0x32/0xd0 [ 562.980585][T12320] simple_read_from_buffer+0xcb/0x170 [ 562.980609][T12320] proc_fail_nth_read+0x197/0x270 [ 562.980632][T12320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.980656][T12320] ? rw_verify_area+0xcf/0x680 [ 562.980674][T12320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.980696][T12320] vfs_read+0x1e1/0xc60 [ 562.980721][T12320] ? __pfx___mutex_lock+0x10/0x10 [ 562.980744][T12320] ? __pfx_vfs_read+0x10/0x10 [ 562.980773][T12320] ? __fget_files+0x20e/0x3c0 [ 562.980803][T12320] ksys_read+0x12a/0x250 [ 562.980823][T12320] ? __pfx_ksys_read+0x10/0x10 [ 562.980844][T12320] ? fput+0x70/0xf0 [ 562.980863][T12320] do_syscall_64+0xcd/0x4c0 [ 562.980890][T12320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.980907][T12320] RIP: 0033:0x7f83d778d33c [ 562.980920][T12320] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 562.980936][T12320] RSP: 002b:00007f83d86a2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.980953][T12320] RAX: ffffffffffffffda RBX: 00007f83d79b5fa0 RCX: 00007f83d778d33c [ 562.980964][T12320] RDX: 000000000000000f RSI: 00007f83d86a20a0 RDI: 0000000000000006 [ 562.980973][T12320] RBP: 00007f83d86a2090 R08: 0000000000000000 R09: 0000000000000000 [ 562.980983][T12320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.980993][T12320] R13: 0000000000000000 R14: 00007f83d79b5fa0 R15: 00007ffe41941928 [ 562.981015][T12320] [ 563.172444][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.319274][T12323] program syz.3.1645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.711226][T12329] veth1_to_bond: entered allmulticast mode [ 563.718274][T12328] veth1_to_bond: entered promiscuous mode [ 563.840762][T11437] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 563.851862][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 563.857852][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 564.009682][ T5893] usb 2-1: USB disconnect, device number 29 [ 564.130300][ T5886] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 564.320778][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 564.378502][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 564.450639][ T5886] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 564.466865][T12350] SELinux: policydb version -776255604 does not match my version range 15-34 [ 564.475860][T12350] SELinux: failed to load policy [ 564.506175][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.755610][ T5886] usb 6-1: config 0 descriptor?? [ 564.764158][T12351] Unknown options in mask 5 [ 564.861726][T12329] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 565.178799][T12327] veth1_to_bond: left promiscuous mode [ 565.189879][T12327] veth1_to_bond: left allmulticast mode [ 565.560037][ T5940] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 565.738982][ T5940] usb 2-1: config 6 has an invalid interface number: 57 but max is 0 [ 565.773017][ T5940] usb 2-1: config 6 has no interface number 0 [ 565.804078][ T5940] usb 2-1: config 6 interface 57 has no altsetting 0 [ 565.823744][ T5886] usbhid 6-1:0.0: can't add hid device: -71 [ 565.841721][ T5886] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 565.909642][ T5940] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 565.936903][ T5886] usb 6-1: USB disconnect, device number 47 [ 565.947068][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.036700][ T5940] usb 2-1: Product: syz [ 566.036719][ T5940] usb 2-1: Manufacturer: syz [ 566.036732][ T5940] usb 2-1: SerialNumber: syz [ 566.520508][ T30] kauditd_printk_skb: 327 callbacks suppressed [ 566.520523][ T30] audit: type=1400 audit(1751898203.867:24462): avc: denied { create } for pid=12372 comm="syz.5.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 566.568312][ T5940] usb-storage 2-1:6.57: USB Mass Storage device detected [ 566.589275][ T30] audit: type=1400 audit(1751898203.897:24463): avc: denied { create } for pid=12372 comm="syz.5.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 566.634236][ T30] audit: type=1400 audit(1751898203.907:24464): avc: denied { read } for pid=12372 comm="syz.5.1658" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 566.659119][ T30] audit: type=1400 audit(1751898203.907:24465): avc: denied { read open } for pid=12372 comm="syz.5.1658" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 566.697441][ T30] audit: type=1400 audit(1751898203.907:24466): avc: denied { ioctl } for pid=12372 comm="syz.5.1658" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 566.726603][ T30] audit: type=1400 audit(1751898203.937:24467): avc: denied { write } for pid=12365 comm="syz.0.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 566.748362][ T30] audit: type=1400 audit(1751898203.937:24468): avc: denied { read } for pid=12365 comm="syz.0.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 566.764938][ T5940] usb 2-1: USB disconnect, device number 30 [ 566.812425][T12377] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1659'. [ 566.839735][ T5913] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 566.844832][ T30] audit: type=1400 audit(1751898203.937:24469): avc: denied { read write } for pid=12365 comm="syz.0.1656" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 566.879927][ T30] audit: type=1400 audit(1751898203.947:24470): avc: denied { read write open } for pid=12365 comm="syz.0.1656" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 566.910170][ T30] audit: type=1400 audit(1751898203.947:24471): avc: denied { ioctl } for pid=12365 comm="syz.0.1656" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 567.122701][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 567.141346][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 567.165019][ T5913] usb 1-1: config 129 has an invalid interface number: 145 but max is 0 [ 567.173856][ T5913] usb 1-1: config 129 has no interface number 0 [ 567.262510][ T5913] usb 1-1: config 129 interface 145 has no altsetting 0 [ 567.372977][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1659'. [ 567.645203][ T5913] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 567.654836][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.683455][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1659'. [ 567.702234][ T5913] usb 1-1: Product: Т [ 567.714377][ T5913] usb 1-1: SerialNumber: syz [ 567.980474][T12386] SELinux: policydb version -776255604 does not match my version range 15-34 [ 567.989349][T12386] SELinux: failed to load policy [ 568.321245][T12366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.350215][T12366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.508490][ T5913] usb 1-1: disable ehci-hcd to run US-144 [ 568.543146][ T5913] usb 1-1: USB disconnect, device number 40 [ 568.695909][T12390] syzkaller1: entered promiscuous mode [ 568.701436][T12390] syzkaller1: entered allmulticast mode [ 568.967073][T12399] netlink: 'syz.4.1666': attribute type 21 has an invalid length. [ 568.975081][T12399] netlink: 'syz.4.1666': attribute type 2 has an invalid length. [ 568.982886][T12399] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1666'. [ 569.038237][T12397] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12397 comm=syz.1.1665 [ 569.064170][T12391] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 569.078822][T12397] loop6: detected capacity change from 0 to 524287999 [ 569.120152][T12391] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 569.519636][ T5913] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 569.535058][ T5847] udevd[5847]: symlink '../../loop6' '/dev/disk/by-diskseq/126.tmp-b7:6' failed: Read-only file system [ 569.735020][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 569.758952][ T5913] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 569.784443][ T5913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.822117][ T5913] usb 6-1: config 0 has no interface number 0 [ 569.838132][ T5913] usb 6-1: too many endpoints for config 0 interface 35 altsetting 116: 105, using maximum allowed: 30 [ 569.868705][ T5913] usb 6-1: config 0 interface 35 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 570.064997][T12411] x_tables: ip_tables: osf match: only valid for protocol 6 [ 570.319234][ T5913] usb 6-1: config 0 interface 35 has no altsetting 0 [ 570.361706][ T5913] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 570.399612][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.407611][ T5913] usb 6-1: Product: syz [ 570.431903][ T5913] usb 6-1: Manufacturer: syz [ 570.436531][ T5913] usb 6-1: SerialNumber: syz [ 570.460406][ T5913] usb 6-1: config 0 descriptor?? [ 570.500770][ T5913] cypress_m8 6-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 570.509413][ T5913] nokiaca42v2 ttyUSB0: required endpoint is missing [ 570.869515][ T6283] udevd[6283]: symlink '../../loop6' '/dev/disk/by-diskseq/126.tmp-b7:6' failed: Read-only file system [ 570.900055][ T5893] usb 6-1: USB disconnect, device number 48 [ 571.367122][ T5893] cypress_m8 6-1:0.35: device disconnected [ 571.406834][T12418] SELinux: policydb version -776255604 does not match my version range 15-34 [ 571.415763][T12418] SELinux: failed to load policy [ 571.551769][ T30] kauditd_printk_skb: 308 callbacks suppressed [ 571.551804][ T30] audit: type=1400 audit(1751898208.887:24780): avc: denied { ioctl } for pid=5826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 571.818280][ T5847] udevd[5847]: symlink '../../loop6' '/dev/disk/by-diskseq/126.tmp-b7:6' failed: Read-only file system [ 571.832176][ T30] audit: type=1400 audit(1751898208.917:24781): avc: denied { bind } for pid=12416 comm="syz.3.1671" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 571.989233][ T30] audit: type=1400 audit(1751898208.927:24782): avc: denied { node_bind } for pid=12416 comm="syz.3.1671" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 572.066818][ T30] audit: type=1400 audit(1751898208.927:24783): avc: denied { setopt } for pid=12416 comm="syz.3.1671" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 572.171061][ T30] audit: type=1400 audit(1751898208.937:24784): avc: denied { create } for pid=12420 comm="syz.0.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 572.364041][ T30] audit: type=1400 audit(1751898209.327:24785): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 572.522638][ T30] audit: type=1400 audit(1751898209.327:24786): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 572.553668][ T30] audit: type=1400 audit(1751898209.327:24787): avc: denied { read write } for pid=6848 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 572.597745][ T30] audit: type=1400 audit(1751898209.337:24788): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 572.623385][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.653272][T12429] overlayfs: missing 'workdir' [ 572.714142][ T30] audit: type=1400 audit(1751898209.377:24789): avc: denied { read write open } for pid=6848 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 575.120234][T12440] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1678'. [ 575.131544][T12440] netlink: 'syz.0.1678': attribute type 1 has an invalid length. [ 575.263520][T12440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.356170][T12443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.372580][T12443] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 575.383016][T11437] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 575.383965][T12448] xt_limit: Overflow, try lower: 0/0 [ 575.405235][T12443] bond0: (slave ipip0): Error -95 calling set_mac_address [ 576.402020][T12440] bond0: (slave ip6erspan0): making interface the new active one [ 576.441111][T12440] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 576.584000][ T30] kauditd_printk_skb: 282 callbacks suppressed [ 576.584014][ T30] audit: type=1400 audit(1751898213.927:25072): avc: denied { read } for pid=12465 comm="syz.4.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 576.805033][ T30] audit: type=1400 audit(1751898213.927:25073): avc: denied { read } for pid=12465 comm="syz.4.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 576.838841][T12469] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12469 comm=syz.1.1683 [ 576.864601][T12471] No control pipe specified [ 576.908007][ T30] audit: type=1400 audit(1751898213.967:25074): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 576.912716][T12472] loop6: detected capacity change from 0 to 524287999 [ 576.985261][T12469] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 576.998176][T12469] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 577.003597][ T30] audit: type=1400 audit(1751898213.967:25075): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 577.143155][ T30] audit: type=1400 audit(1751898213.977:25076): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 577.276658][ T30] audit: type=1400 audit(1751898213.987:25077): avc: denied { write } for pid=12465 comm="syz.4.1682" path="socket:[32299]" dev="sockfs" ino=32299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 577.374261][ T30] audit: type=1400 audit(1751898213.997:25078): avc: denied { execmem } for pid=12465 comm="syz.4.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 577.427799][ T5847] udevd[5847]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 577.481971][ T30] audit: type=1400 audit(1751898214.057:25079): avc: denied { create } for pid=12467 comm="syz.1.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 577.501870][ T30] audit: type=1400 audit(1751898214.077:25080): avc: denied { create } for pid=12467 comm="syz.1.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 577.521782][ T30] audit: type=1400 audit(1751898214.087:25081): avc: denied { ioctl } for pid=12467 comm="syz.1.1683" path="socket:[32305]" dev="sockfs" ino=32305 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 577.719607][ T5940] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 577.782090][T12483] batadv_slave_1: entered promiscuous mode [ 577.891862][ T5940] usb 6-1: Using ep0 maxpacket: 32 [ 577.933931][ T5940] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.946884][ T5940] usb 6-1: config 0 has no interface number 0 [ 578.351787][ T5940] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 578.373075][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.391041][ T5940] usb 6-1: Product: syz [ 578.397659][ T5940] usb 6-1: Manufacturer: syz [ 578.417542][T12480] lo speed is unknown, defaulting to 1000 [ 578.424930][T12480] lo speed is unknown, defaulting to 1000 [ 578.480061][T12478] batadv_slave_1: left promiscuous mode [ 578.494845][ T5940] usb 6-1: SerialNumber: syz [ 578.562525][ T5940] usb 6-1: config 0 descriptor?? [ 578.677240][ T5940] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 578.730116][ T5940] usb 6-1: selecting invalid altsetting 1 [ 578.759785][ T5940] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 578.778555][ T6283] udevd[6283]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 578.802205][ T5940] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 578.849993][ T5940] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 578.858272][ T5940] usb 6-1: media controller created [ 578.972303][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.044460][ T6283] udevd[6283]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 579.609679][ T6283] udevd[6283]: symlink '../../loop6' '/dev/disk/by-diskseq/129.tmp-b7:6' failed: Read-only file system [ 580.114191][T12505] x_tables: ip_tables: osf match: only valid for protocol 6 [ 580.389037][ T5940] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 580.396590][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 580.461915][ T5940] zl10353_read_register: readreg error (reg=127, ret==-110) [ 580.637226][ T5940] usb 6-1: USB disconnect, device number 49 [ 580.672471][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 580.699637][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.758316][ T10] usb 4-1: config 0 descriptor?? [ 581.999588][ T30] kauditd_printk_skb: 250 callbacks suppressed [ 581.999630][ T30] audit: type=1400 audit(1751898218.887:25332): avc: denied { prog_load } for pid=12518 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 582.120411][ T10] pegasus 4-1:0.0: probe with driver pegasus failed with error -121 [ 582.160829][ T30] audit: type=1400 audit(1751898218.897:25333): avc: denied { bpf } for pid=12518 comm="syz.4.1699" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 582.225254][T12522] input: syz1 as /devices/virtual/input/input23 [ 582.239320][ T30] audit: type=1400 audit(1751898218.907:25334): avc: denied { create } for pid=12518 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 582.499857][ T30] audit: type=1400 audit(1751898218.907:25335): avc: denied { write } for pid=12518 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 582.606831][ T30] audit: type=1400 audit(1751898218.917:25336): avc: denied { prog_load } for pid=12518 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 582.628574][T12533] SELinux: policydb version -776255604 does not match my version range 15-34 [ 582.637534][T12533] SELinux: failed to load policy [ 582.752573][ T30] audit: type=1400 audit(1751898218.917:25337): avc: denied { bpf } for pid=12518 comm="syz.4.1699" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 582.851657][ T30] audit: type=1400 audit(1751898218.937:25338): avc: denied { create } for pid=12518 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 582.943533][ T30] audit: type=1400 audit(1751898218.937:25339): avc: denied { module_request } for pid=12518 comm="syz.4.1699" kmod="net-pf-2-proto-5-type-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 583.151816][ T30] audit: type=1400 audit(1751898219.057:25340): avc: denied { map_create } for pid=12518 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 583.185625][ T30] audit: type=1400 audit(1751898219.057:25341): avc: denied { map_create } for pid=12518 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 583.911921][T12545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1704'. [ 584.300854][T12542] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 584.524146][ T5893] usb 4-1: USB disconnect, device number 37 [ 586.247909][T12560] input: syz1 as /devices/virtual/input/input24 [ 586.389588][T12558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.080369][ T30] kauditd_printk_skb: 217 callbacks suppressed [ 587.080384][ T30] audit: type=1400 audit(1751898224.337:25559): avc: denied { read } for pid=12561 comm="syz.5.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.229822][T12551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.249767][ T30] audit: type=1400 audit(1751898224.337:25560): avc: denied { read } for pid=12561 comm="syz.5.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.323382][ T30] audit: type=1400 audit(1751898224.347:25561): avc: denied { read } for pid=12561 comm="syz.5.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.345814][T12553] lo speed is unknown, defaulting to 1000 [ 587.407223][T12553] lo speed is unknown, defaulting to 1000 [ 587.442675][ T30] audit: type=1400 audit(1751898224.357:25562): avc: denied { read } for pid=12561 comm="syz.5.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.526249][ T30] audit: type=1400 audit(1751898224.367:25563): avc: denied { read } for pid=12561 comm="syz.5.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.570960][ T30] audit: type=1400 audit(1751898224.377:25564): avc: denied { read } for pid=12561 comm="syz.5.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.646799][ T30] audit: type=1400 audit(1751898224.387:25565): avc: denied { read } for pid=12561 comm="syz.5.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.679623][ T5886] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 587.742860][T12577] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.744341][ T30] audit: type=1400 audit(1751898224.397:25566): avc: denied { read } for pid=12561 comm="syz.5.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.749374][T12577] audit: audit_lost=866 audit_rate_limit=0 audit_backlog_limit=64 [ 587.839882][ T5886] usb 4-1: device descriptor read/64, error -71 [ 588.082314][ T5886] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 588.231398][ T5886] usb 4-1: device descriptor read/64, error -71 [ 588.361579][ T5886] usb usb4-port1: attempt power cycle [ 588.739717][ T5886] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 588.824368][ T5886] usb 4-1: device descriptor read/8, error -71 [ 588.833872][T12586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 589.109638][ T5886] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 589.175822][ T5886] usb 4-1: device descriptor read/8, error -71 [ 589.300037][ T5886] usb usb4-port1: unable to enumerate USB device [ 591.128924][T12603] dvmrp8: entered allmulticast mode [ 591.218224][T12601] input: syz1 as /devices/virtual/input/input25 [ 591.369621][ T5913] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 591.991637][ T5913] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 592.004464][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 592.039084][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 592.079093][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 592.123806][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 592.125309][ T30] kauditd_printk_skb: 569 callbacks suppressed [ 592.125322][ T30] audit: type=1400 audit(1751898229.467:26054): avc: denied { prog_load } for pid=12612 comm="syz.3.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 592.170036][ T5913] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.207614][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.244972][ T30] audit: type=1400 audit(1751898229.507:26055): avc: denied { bpf } for pid=12612 comm="syz.3.1722" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 592.326736][ T30] audit: type=1400 audit(1751898229.527:26056): avc: denied { map_create } for pid=12612 comm="syz.3.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 592.366683][ T30] audit: type=1400 audit(1751898229.527:26057): avc: denied { bpf } for pid=12612 comm="syz.3.1722" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 592.389244][ T5913] usb 6-1: config 0 descriptor?? [ 592.394502][ T30] audit: type=1400 audit(1751898229.527:26058): avc: denied { map_read map_write } for pid=12612 comm="syz.3.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 592.415513][ T30] audit: type=1400 audit(1751898229.537:26059): avc: denied { map_create } for pid=12612 comm="syz.3.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 592.417715][T12608] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 592.434955][ T30] audit: type=1400 audit(1751898229.537:26060): avc: denied { bpf } for pid=12612 comm="syz.3.1722" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 592.494720][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 592.590531][ T10] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 592.613983][ T30] audit: type=1400 audit(1751898229.537:26061): avc: denied { map_read map_write } for pid=12612 comm="syz.3.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 592.923413][ T30] audit: type=1400 audit(1751898229.547:26062): avc: denied { prog_load } for pid=12612 comm="syz.3.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 593.223282][ T30] audit: type=1400 audit(1751898229.547:26063): avc: denied { bpf } for pid=12612 comm="syz.3.1722" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 593.302174][T12621] random: crng reseeded on system resumption [ 593.526040][T12624] fido_id[12624]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 593.645204][ T5913] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 593.689861][ T5913] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 593.944843][T12608] trusted_key: encrypted_key: insufficient parameters specified [ 593.979628][ T5893] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 594.012354][ T5886] usb 6-1: USB disconnect, device number 50 [ 594.140761][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 594.196130][ T5893] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 594.224888][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.249915][ T5893] usb 2-1: config 0 has no interface number 0 [ 594.264111][ T5893] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.338743][ T5893] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 594.387211][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.434521][ T5893] usb 2-1: Product: syz [ 594.459147][ T5893] usb 2-1: Manufacturer: syz [ 594.478765][ T5893] usb 2-1: SerialNumber: syz [ 594.495736][ T5893] usb 2-1: config 0 descriptor?? [ 594.507399][ T5893] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 594.977389][ T5893] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 595.095007][ T5893] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 595.142761][ T5893] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 595.307355][ T5886] usb 2-1: USB disconnect, device number 31 [ 596.790929][T12651] lo: left allmulticast mode [ 596.799319][T12651] tunl0: left allmulticast mode [ 596.807624][T12651] gre0: left allmulticast mode [ 596.817189][T12651] gretap0: left allmulticast mode [ 596.829022][T12651] erspan0: left allmulticast mode [ 596.839691][T12651] ip_vti0: left allmulticast mode [ 596.847182][T12651] ip6_vti0: left allmulticast mode [ 596.855161][T12651] sit0: left allmulticast mode [ 596.862151][T12651] ip6tnl0: left allmulticast mode [ 596.869696][T12651] ip6gre0: left allmulticast mode [ 596.876357][T12651] syz_tun: left allmulticast mode [ 596.884042][T12651] vcan0: left allmulticast mode [ 596.889613][T12651] bond0: left allmulticast mode [ 596.895494][T12651] dummy0: left allmulticast mode [ 596.902015][T12651] nlmon0: left allmulticast mode [ 596.907916][T12651] caif0: left allmulticast mode [ 596.914336][T12651] batadv0: left allmulticast mode [ 596.921207][T12651] vxcan0: left allmulticast mode [ 596.927037][T12651] vxcan1: left allmulticast mode [ 596.932953][T12651] veth0: left allmulticast mode [ 596.939165][T12651] veth1: left allmulticast mode [ 596.945042][T12651] wg0: left allmulticast mode [ 596.951210][T12651] wg1: left allmulticast mode [ 596.957273][T12651] wg2: left allmulticast mode [ 596.963697][T12651] veth0_to_bridge: left allmulticast mode [ 596.972502][T12651] bridge_slave_0: left allmulticast mode [ 596.979635][T12651] veth1_to_bridge: left allmulticast mode [ 596.986818][T12651] bridge_slave_1: left allmulticast mode [ 596.994255][T12651] veth0_to_bond: left allmulticast mode [ 597.002152][T12651] bond_slave_0: left allmulticast mode [ 597.010395][T12651] veth1_to_bond: left allmulticast mode [ 597.017547][T12651] bond_slave_1: left allmulticast mode [ 597.025429][T12651] veth0_to_team: left allmulticast mode [ 597.031919][T12651] team_slave_0: left allmulticast mode [ 597.038936][T12651] veth1_to_team: left allmulticast mode [ 597.045757][T12651] team_slave_1: left allmulticast mode [ 597.052560][T12651] veth0_to_batadv: left allmulticast mode [ 597.059738][T12651] batadv_slave_0: left allmulticast mode [ 597.066084][T12651] veth1_to_batadv: left allmulticast mode [ 597.072928][T12651] batadv_slave_1: left allmulticast mode [ 597.079878][T12651] xfrm0: left allmulticast mode [ 597.085782][T12651] veth0_to_hsr: left allmulticast mode [ 597.093156][T12651] veth1_to_hsr: left allmulticast mode [ 597.099728][T12651] hsr0: left allmulticast mode [ 597.104572][T12651] hsr_slave_0: left allmulticast mode [ 597.110053][T12651] hsr_slave_1: left allmulticast mode [ 597.116848][T12651] veth1_virt_wifi: left allmulticast mode [ 597.124194][T12651] veth0_virt_wifi: left allmulticast mode [ 597.130752][T12651] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 597.138434][T12651] veth1_vlan: left allmulticast mode [ 597.145026][T12651] vlan0: left allmulticast mode [ 597.150763][T12651] vlan1: left allmulticast mode [ 597.156242][T12651] macvlan0: left allmulticast mode [ 597.162500][T12651] macvlan1: left allmulticast mode [ 597.168361][T12651] ipvlan0: left allmulticast mode [ 597.174296][T12651] ipvlan1: left allmulticast mode [ 597.179352][T12651] veth0_vlan: left allmulticast mode [ 597.185474][T12651] veth1_macvtap: left allmulticast mode [ 597.192143][T12651] veth0_macvtap: left allmulticast mode [ 597.198499][T12651] macvtap0: left allmulticast mode [ 597.204541][T12651] macsec0: left allmulticast mode [ 597.210383][T12651] geneve0: left allmulticast mode [ 597.216541][T12651] geneve1: left allmulticast mode [ 597.222557][T12651] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 597.237232][T12651] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 597.298854][T12651] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 597.308646][T12651] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 597.311566][T12651] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 597.312364][T12651] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 597.313039][T12651] syztnl0: left allmulticast mode [ 597.314028][T12651] vlan2: left allmulticast mode [ 597.314055][T12651] bridge0: left allmulticast mode [ 597.314746][T12651] gtp0: left allmulticast mode [ 597.315708][T12651] vlan3: left allmulticast mode [ 597.315735][T12651] ip6gretap0: left allmulticast mode [ 597.316421][T12651] bond1: left allmulticast mode [ 597.317062][T12651] bond2: left allmulticast mode [ 597.317694][T12651] sit1: left allmulticast mode [ 597.318731][T12651] mac80211_hwsim hwsim14 wlan2: left allmulticast mode [ 597.329413][ T30] kauditd_printk_skb: 1797 callbacks suppressed [ 597.329955][ T30] audit: type=1400 audit(1751898234.357:27018): avc: denied { read open } for pid=12644 comm="syz.1.1732" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 597.348713][ T30] audit: type=1400 audit(1751898234.637:27019): avc: denied { ioctl } for pid=12644 comm="syz.1.1732" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 597.405859][ T30] audit: type=1400 audit(1751898234.747:27020): avc: denied { create } for pid=12653 comm="syz.4.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 597.459819][ T30] audit: type=1400 audit(1751898234.807:27021): avc: denied { listen } for pid=12653 comm="syz.4.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 597.497448][ T30] audit: type=1400 audit(1751898234.837:27022): avc: denied { prog_load } for pid=12655 comm="syz.5.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 597.498622][ T30] audit: type=1400 audit(1751898234.837:27023): avc: denied { bpf } for pid=12655 comm="syz.5.1734" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 597.501517][ T30] audit: type=1400 audit(1751898234.847:27024): avc: denied { perfmon } for pid=12655 comm="syz.5.1734" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 597.525289][ T30] audit: type=1400 audit(1751898234.867:27025): avc: denied { perfmon } for pid=12655 comm="syz.5.1734" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 597.525332][ T30] audit: type=1400 audit(1751898234.867:27026): avc: denied { perfmon } for pid=12655 comm="syz.5.1734" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 597.525371][ T30] audit: type=1400 audit(1751898234.867:27027): avc: denied { perfmon } for pid=12655 comm="syz.5.1734" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 598.148581][T12669] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1739'. [ 598.451204][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 598.632123][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 598.662671][ T24] usb 1-1: too many configurations: 40, using maximum allowed: 8 [ 598.739807][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 598.759782][ T24] usb 1-1: can't read configurations, error -61 [ 599.379669][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 599.559597][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 599.566454][ T24] usb 1-1: too many configurations: 40, using maximum allowed: 8 [ 599.592134][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 599.600346][ T5913] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 599.608182][ T24] usb 1-1: can't read configurations, error -61 [ 599.615932][ T24] usb usb1-port1: attempt power cycle [ 599.911727][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 599.979715][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 600.020253][ T5913] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 600.021633][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 600.029277][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.029298][ T5913] usb 6-1: Product: syz [ 600.063922][T12686] netlink: 'syz.1.1746': attribute type 43 has an invalid length. [ 600.081175][ T24] usb 1-1: too many configurations: 40, using maximum allowed: 8 [ 600.098130][ T5913] usb 6-1: Manufacturer: syz [ 600.112318][ T5913] usb 6-1: SerialNumber: syz [ 600.224773][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 600.235156][ T24] usb 1-1: can't read configurations, error -61 [ 600.244732][ T5913] usb 6-1: config 0 descriptor?? [ 600.296634][ T5913] gspca_main: sq905-2.14.0 probing 2770:9120 [ 600.724444][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 600.784168][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 600.795388][ T24] usb 1-1: too many configurations: 40, using maximum allowed: 8 [ 600.839778][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 600.856500][ T24] usb 1-1: can't read configurations, error -61 [ 600.869848][ T24] usb usb1-port1: unable to enumerate USB device [ 600.950604][ T5886] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 601.291141][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.319278][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.353986][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 601.402135][ T5886] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 601.445849][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.468150][ T5886] usb 4-1: config 0 descriptor?? [ 601.624240][ T5913] gspca_sq905: bulk read fail (-22) len 0/4 [ 601.632432][ T5913] sq905 6-1:0.0: probe with driver sq905 failed with error -5 [ 601.683339][T12713] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value [ 601.694422][T12713] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 601.893552][T12688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.916886][T12688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.961633][T12688] random: crng reseeded on system resumption [ 602.013394][ T5886] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 602.366445][ T30] kauditd_printk_skb: 384 callbacks suppressed [ 602.366470][ T30] audit: type=1400 audit(1751898239.587:27412): avc: denied { ioctl } for pid=12696 comm="syz.3.1749" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 602.649901][ T30] audit: type=1400 audit(1751898239.647:27413): avc: denied { read } for pid=12716 comm="syz.1.1755" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 602.702786][ T30] audit: type=1400 audit(1751898239.647:27414): avc: denied { read open } for pid=12716 comm="syz.1.1755" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 602.759967][ T30] audit: type=1400 audit(1751898239.717:27415): avc: denied { read } for pid=12720 comm="syz.0.1756" dev="nsfs" ino=4026533326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 602.816502][ T30] audit: type=1400 audit(1751898239.717:27416): avc: denied { read open } for pid=12720 comm="syz.0.1756" path="net:[4026533326]" dev="nsfs" ino=4026533326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 602.889253][ T30] audit: type=1400 audit(1751898239.717:27417): avc: denied { create } for pid=12720 comm="syz.0.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 602.948869][ T30] audit: type=1400 audit(1751898239.787:27418): avc: denied { create } for pid=12716 comm="syz.1.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 603.011353][ T30] audit: type=1400 audit(1751898240.127:27419): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 603.070242][ T30] audit: type=1400 audit(1751898240.127:27420): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 603.180495][T12730] input: syz1 as /devices/virtual/input/input28 [ 603.454557][ T30] audit: type=1400 audit(1751898240.127:27421): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 603.519509][ T5886] usb 6-1: USB disconnect, device number 51 [ 603.745930][ T5913] usb 4-1: USB disconnect, device number 42 [ 604.849865][ T5886] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 605.079942][ T5886] usb 1-1: device descriptor read/64, error -71 [ 605.175561][T12769] netlink: 'syz.5.1769': attribute type 12 has an invalid length. [ 605.190320][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'. [ 605.349634][ T5886] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 605.448004][T12776] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:0 [ 605.499820][ T5886] usb 1-1: device descriptor read/64, error -71 [ 605.611153][ T5886] usb usb1-port1: attempt power cycle [ 606.371532][ T5886] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 606.422731][ T5886] usb 1-1: device descriptor read/8, error -71 [ 606.579656][ T10] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 606.669803][ T5886] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 606.739499][ T5886] usb 1-1: device descriptor read/8, error -71 [ 606.806477][ T10] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 606.854713][ T5886] usb usb1-port1: unable to enumerate USB device [ 607.043871][ T10] usb 2-1: config 0 has no interface number 0 [ 607.050342][ T10] usb 2-1: config 0 interface 106 has no altsetting 0 [ 607.070462][ T10] usb 2-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 607.089032][ T10] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 607.109588][ T10] usb 2-1: Product: syz [ 607.113760][ T10] usb 2-1: Manufacturer: syz [ 607.118351][ T10] usb 2-1: SerialNumber: syz [ 607.142879][ T10] usb 2-1: config 0 descriptor?? [ 607.414047][ T30] kauditd_printk_skb: 361 callbacks suppressed [ 607.414062][ T30] audit: type=1400 audit(1751898244.756:27783): avc: denied { prog_load } for pid=12801 comm="syz.5.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 607.439470][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.459745][ T10] usb 2-1: USB disconnect, device number 32 [ 607.569078][ T30] audit: type=1400 audit(1751898244.766:27784): avc: denied { prog_load } for pid=12806 comm="syz.3.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 607.596900][ T30] audit: type=1400 audit(1751898244.766:27785): avc: denied { bpf } for pid=12806 comm="syz.3.1782" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 607.644919][ T5913] kernel write not supported for file [eventfd] (pid: 5913 comm: kworker/0:5) [ 607.667729][ T30] audit: type=1400 audit(1751898244.766:27786): avc: denied { perfmon } for pid=12806 comm="syz.3.1782" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 607.746882][ T30] audit: type=1400 audit(1751898244.776:27787): avc: denied { perfmon } for pid=12806 comm="syz.3.1782" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 607.803721][ T30] audit: type=1400 audit(1751898244.776:27788): avc: denied { perfmon } for pid=12806 comm="syz.3.1782" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 607.824708][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.899656][ T30] audit: type=1400 audit(1751898244.776:27789): avc: denied { perfmon } for pid=12806 comm="syz.3.1782" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 607.948327][ T30] audit: type=1400 audit(1751898244.776:27790): avc: denied { bpf } for pid=12806 comm="syz.3.1782" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 607.973740][ T30] audit: type=1400 audit(1751898244.796:27791): avc: denied { ioctl } for pid=12783 comm="syz.1.1772" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 608.123796][ T30] audit: type=1400 audit(1751898244.796:27792): avc: denied { ioctl } for pid=12783 comm="syz.1.1772" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 608.286492][T12826] Device name cannot be null; rc = [-22] [ 608.350686][T12826] dvmrp0: entered allmulticast mode [ 608.709609][T12836] input: syz1 as /devices/virtual/input/input29 [ 609.224067][T12840] overlayfs: failed to clone upperpath [ 609.717291][T12862] overlay: Unknown parameter 'mask' [ 609.970195][T12872] team0: Device gtp0 is of different type [ 610.034976][T12871] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 610.050075][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 611.491689][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 611.495092][T12851] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 612.307561][T12851] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 612.321241][T12851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 612.330441][T12851] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 612.428605][ T30] kauditd_printk_skb: 334 callbacks suppressed [ 612.428617][ T30] audit: type=1400 audit(1751898249.766:28115): avc: denied { read write } for pid=6848 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 612.537019][ T30] audit: type=1400 audit(1751898249.766:28116): avc: denied { read write open } for pid=6848 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 612.634399][ T30] audit: type=1400 audit(1751898249.766:28117): avc: denied { ioctl } for pid=6848 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 612.719627][ T30] audit: type=1400 audit(1751898249.816:28118): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 612.761443][T12907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.785913][ T30] audit: type=1400 audit(1751898249.816:28119): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 612.821934][T12907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.845491][ T30] audit: type=1400 audit(1751898249.816:28120): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 612.941172][ T30] audit: type=1400 audit(1751898249.946:28121): avc: denied { create } for pid=12901 comm="syz.1.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 612.999836][ T5913] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 613.022482][T12907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.034497][T12907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.034508][T12917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.120377][T12917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.128145][ T30] audit: type=1400 audit(1751898249.946:28122): avc: denied { write } for pid=12901 comm="syz.1.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 613.179632][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 613.211673][T12907] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.211957][T12906] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.247176][ T5913] usb 6-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 613.349411][ T5913] usb 6-1: config 0 interface 0 has no altsetting 0 [ 613.376368][ T5913] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 613.462637][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.506935][ T5913] usb 6-1: config 0 descriptor?? [ 613.523382][ T5913] usb 6-1: can't set config #0, error -71 [ 613.540909][ T5913] usb 6-1: USB disconnect, device number 52 [ 613.574484][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 613.759059][T12931] tmpfs: Bad value for 'mpol' [ 614.102876][T12938] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 614.370585][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 614.413320][T12944] input: syz1 as /devices/virtual/input/input30 [ 616.469076][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 617.158051][T12972] netlink: 'syz.3.1823': attribute type 2 has an invalid length. [ 617.166044][T12972] netlink: 'syz.3.1823': attribute type 8 has an invalid length. [ 617.174074][T12972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1823'. [ 617.469660][ T30] kauditd_printk_skb: 345 callbacks suppressed [ 617.469675][ T30] audit: type=1400 audit(1751898254.746:28434): avc: denied { execmem } for pid=12975 comm="syz.0.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 617.605205][ T30] audit: type=1400 audit(1751898254.766:28435): avc: denied { create } for pid=12976 comm="syz.5.1826" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 617.730839][T12985] netlink: 'syz.0.1825': attribute type 21 has an invalid length. [ 617.738698][T12985] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1825'. [ 617.748334][T12985] netlink: 'syz.0.1825': attribute type 4 has an invalid length. [ 617.756387][T12985] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1825'. [ 617.790850][T12985] hfsplus: unable to find HFS+ superblock [ 617.957240][ T30] audit: type=1400 audit(1751898254.766:28436): avc: denied { map } for pid=12976 comm="syz.5.1826" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 617.981651][ T30] audit: type=1400 audit(1751898254.766:28437): avc: denied { read write } for pid=12976 comm="syz.5.1826" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 618.016291][ T30] audit: type=1400 audit(1751898254.766:28438): avc: denied { map } for pid=12976 comm="syz.5.1826" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 618.067256][ T30] audit: type=1400 audit(1751898254.786:28439): avc: denied { read write } for pid=12976 comm="syz.5.1826" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 618.390430][T12991] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.392652][ T30] audit: type=1400 audit(1751898254.786:28440): avc: denied { allowed } for pid=12976 comm="syz.5.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 618.448414][T12994] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.455051][T12994] audit: audit_lost=1191 audit_rate_limit=0 audit_backlog_limit=64 [ 618.573274][T12154] Bluetooth: hci5: Frame reassembly failed (-84) [ 618.957373][T13008] sctp: [Deprecated]: syz.4.1833 (pid 13008) Use of int in maxseg socket option. [ 618.957373][T13008] Use struct sctp_assoc_value instead [ 618.995357][ T2146] IPVS: starting estimator thread 0... [ 619.403376][T13010] IPVS: using max 36 ests per chain, 86400 per kthread [ 620.631765][T11437] Bluetooth: hci5: command 0x1003 tx timeout [ 620.638095][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 622.617363][ T30] kauditd_printk_skb: 309 callbacks suppressed [ 622.617378][ T30] audit: type=1400 audit(1751898259.956:28744): avc: denied { read } for pid=13032 comm="syz.3.1841" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 622.695320][ T30] audit: type=1400 audit(1751898259.996:28745): avc: denied { read open } for pid=13032 comm="syz.3.1841" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 622.807636][ T30] audit: type=1400 audit(1751898260.006:28746): avc: denied { ioctl } for pid=13032 comm="syz.3.1841" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 622.925515][ T30] audit: type=1400 audit(1751898260.066:28747): avc: denied { read } for pid=13032 comm="syz.3.1841" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 622.976418][ T30] audit: type=1400 audit(1751898260.066:28748): avc: denied { read open } for pid=13032 comm="syz.3.1841" path="net:[4026532806]" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 623.032310][ T30] audit: type=1400 audit(1751898260.066:28749): avc: denied { create } for pid=13032 comm="syz.3.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 623.097170][ T30] audit: type=1400 audit(1751898260.116:28750): avc: denied { mounton } for pid=13034 comm="syz.1.1842" path="/351/file0" dev="tmpfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 623.131757][ T30] audit: type=1400 audit(1751898260.126:28751): avc: denied { mount } for pid=13034 comm="syz.1.1842" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 623.159686][ T30] audit: type=1400 audit(1751898260.136:28752): avc: denied { create } for pid=13034 comm="syz.1.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 623.180807][ T30] audit: type=1400 audit(1751898260.136:28753): avc: denied { create } for pid=13035 comm="syz.4.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 623.205787][T13040] : entered promiscuous mode [ 623.479731][ T5913] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 623.600879][T13042] netlink: 'syz.4.1845': attribute type 10 has an invalid length. [ 623.608678][T13042] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1845'. [ 623.618418][T13042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.627253][T13042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.635931][T13042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.645250][T13042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.658467][T13042] team0: Port device geneve0 added [ 623.800231][ T5913] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 623.818308][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.829234][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.852308][ T5913] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 623.879973][ T5913] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 623.904921][ T5913] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 623.928542][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.967042][T13040] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 623.996675][ T5913] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 624.502281][T13040] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 624.508918][T13040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 624.523020][T13040] vhci_hcd vhci_hcd.0: Device attached [ 624.539761][ T5913] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 624.552656][T13040] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(22) [ 624.559257][T13040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 624.610138][T13040] vhci_hcd vhci_hcd.0: Device attached [ 624.622771][T13061] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(25) [ 624.629377][T13061] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 624.638912][T13061] vhci_hcd vhci_hcd.0: Device attached [ 624.699892][ T10] vhci_hcd: vhci_device speed not set [ 624.709715][T13040] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(24) [ 624.716319][T13040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 624.756168][ T5913] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 624.767202][T13040] vhci_hcd vhci_hcd.0: Device attached [ 624.773457][ T10] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 624.797956][ T5913] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 624.799886][T13040] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(28) [ 624.814351][T13040] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 624.815784][ T5913] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 624.853477][T13040] vhci_hcd vhci_hcd.0: Device attached [ 624.866146][T13061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 624.882593][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.914311][T13048] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 624.954990][ T5913] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 624.979010][T13040] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(30) [ 624.985610][T13040] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 625.019664][T13040] vhci_hcd vhci_hcd.0: Device attached [ 625.035753][T13061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 625.107090][T13040] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(34) [ 625.113700][T13040] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 625.178558][T13040] vhci_hcd vhci_hcd.0: Device attached [ 625.378997][T13067] vhci_hcd: connection closed [ 625.386402][T12154] vhci_hcd: stop threads [ 625.397183][T13064] vhci_hcd: connection closed [ 625.397647][T13055] vhci_hcd: connection reset by peer [ 625.401781][T13058] vhci_hcd: connection closed [ 625.411453][ T5913] usb 1-1: USB disconnect, device number 49 [ 625.418336][T12154] vhci_hcd: release socket [ 625.430799][T12154] vhci_hcd: disconnect device [ 625.435074][T13062] vhci_hcd: connection closed [ 625.435625][T12154] vhci_hcd: stop threads [ 625.449221][T12154] vhci_hcd: release socket [ 625.477609][T12154] vhci_hcd: disconnect device [ 625.490376][ T5886] usb 2-1: USB disconnect, device number 33 [ 625.496393][T12154] vhci_hcd: stop threads [ 625.510540][T12154] vhci_hcd: release socket [ 625.519123][T12154] vhci_hcd: disconnect device [ 625.527800][T12154] vhci_hcd: stop threads [ 625.535661][T12154] vhci_hcd: release socket [ 625.563982][T12154] vhci_hcd: disconnect device [ 625.614944][T12154] vhci_hcd: stop threads [ 625.624214][T12154] vhci_hcd: release socket [ 625.652718][T12154] vhci_hcd: disconnect device [ 625.985044][T13090] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1858'. [ 626.391201][T13090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.525916][T13090] bridge0: port 3(bond1) entered blocking state [ 626.571973][T13090] bridge0: port 3(bond1) entered disabled state [ 626.577973][T13073] vhci_hcd: connection closed [ 626.578477][T13071] vhci_hcd: connection closed [ 626.579431][T12152] vhci_hcd: stop threads [ 626.606032][T13090] bond1: entered allmulticast mode [ 626.624409][T12152] vhci_hcd: release socket [ 626.632199][T13090] bond1: entered promiscuous mode [ 626.646407][T12152] vhci_hcd: disconnect device [ 626.662742][T13090] bridge0: port 3(bond1) entered blocking state [ 626.669130][T13090] bridge0: port 3(bond1) entered forwarding state [ 626.699401][T12152] vhci_hcd: stop threads [ 626.726954][T12152] vhci_hcd: release socket [ 626.747834][T12152] vhci_hcd: disconnect device [ 626.823083][T12154] bridge0: port 3(bond1) entered disabled state [ 626.891100][T13097] input: syz1 as /devices/virtual/input/input31 [ 627.626259][ T30] kauditd_printk_skb: 329 callbacks suppressed [ 627.626270][ T30] audit: type=1400 audit(1751903488.958:29083): avc: denied { read write } for pid=5828 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 627.668712][ T30] audit: type=1400 audit(1751903488.998:29084): avc: denied { allowed } for pid=13111 comm="syz.4.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 627.699809][ T30] audit: type=1400 audit(1751903488.998:29085): avc: denied { create } for pid=13111 comm="syz.4.1862" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 627.846470][ T30] audit: type=1400 audit(1751903488.998:29086): avc: denied { map } for pid=13111 comm="syz.4.1862" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 627.870778][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.915739][ T30] audit: type=1400 audit(1751903488.998:29087): avc: denied { read write } for pid=13111 comm="syz.4.1862" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 628.002952][ T30] audit: type=1400 audit(1751903488.998:29088): avc: denied { map } for pid=13111 comm="syz.4.1862" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 628.057931][ T30] audit: type=1400 audit(1751903488.998:29089): avc: denied { read write } for pid=13111 comm="syz.4.1862" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 628.082841][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.914061][ T30] audit: type=1400 audit(1751903488.998:29090): avc: denied { read write open } for pid=5828 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.939170][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.022664][T13120] input: syz1 as /devices/virtual/input/input32 [ 629.146432][ T30] audit: type=1400 audit(1751903488.998:29091): avc: denied { ioctl } for pid=5828 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 629.172059][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.343827][ T30] audit: type=1400 audit(1751903489.108:29092): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 629.368055][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.590340][T13133] overlayfs: failed to clone lowerpath [ 629.881044][ T10] vhci_hcd: vhci_device speed not set [ 630.049591][ T5913] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 630.269947][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 630.311617][ T5913] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 630.331629][ T5913] usb 4-1: config 0 has no interface number 0 [ 630.331922][T13142] IPv6: sit1: Disabled Multicast RS [ 630.337713][ T5913] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 630.392135][ T5913] usb 4-1: config 0 interface 85 has no altsetting 0 [ 630.394491][T13142] sit1: entered allmulticast mode [ 630.430976][ T5913] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 630.447543][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.482568][ T5913] usb 4-1: Product: syz [ 630.514601][ T5913] usb 4-1: Manufacturer: syz [ 630.532595][ T5913] usb 4-1: SerialNumber: syz [ 630.540290][ T5913] usb 4-1: config 0 descriptor?? [ 631.259589][ T5886] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 631.342149][ T2146] usb usb36-port1: attempt power cycle [ 631.451576][T13160] futex_wake_op: syz.4.1877 tries to shift op by 144; fix this program [ 631.521741][ T5886] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 631.592362][T13165] xt_HMARK: proto mask must be zero with L3 mode [ 631.622921][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.633780][ T5886] usb 1-1: config 0 descriptor?? [ 631.749423][ T5913] appletouch 4-1:0.85: Geyser mode initialized. [ 631.773776][ T5913] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input33 [ 632.048755][ T2146] usb usb36-port1: unable to enumerate USB device [ 632.642831][ T30] kauditd_printk_skb: 287 callbacks suppressed [ 632.642847][ T30] audit: type=1400 audit(1751903493.978:29380): avc: denied { name_bind } for pid=13178 comm="syz.1.1881" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 632.694105][ T30] audit: type=1400 audit(1751903493.978:29381): avc: denied { node_bind } for pid=13178 comm="syz.1.1881" saddr=172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 632.721334][ T30] audit: type=1400 audit(1751903493.978:29382): avc: denied { name_bind } for pid=13178 comm="syz.1.1881" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 632.745467][ T30] audit: type=1400 audit(1751903493.978:29383): avc: denied { node_bind } for pid=13178 comm="syz.1.1881" saddr=172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 632.772904][ T30] audit: type=1400 audit(1751903494.018:29384): avc: denied { create } for pid=13178 comm="syz.1.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 632.869975][ T5886] kaweth 1-1:0.0: Firmware present in device. [ 632.880565][ T30] audit: type=1400 audit(1751903494.018:29385): avc: denied { setopt } for pid=13178 comm="syz.1.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 632.923440][ T5886] kaweth 1-1:0.0: Error reading configuration (-71), no net device created [ 632.949911][ T5886] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 632.972309][ T30] audit: type=1400 audit(1751903494.018:29386): avc: denied { read } for pid=13178 comm="syz.1.1881" path="socket:[35628]" dev="sockfs" ino=35628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 633.010058][ T5886] usb 1-1: USB disconnect, device number 50 [ 633.048265][ T30] audit: type=1400 audit(1751903494.018:29387): avc: denied { read } for pid=13178 comm="syz.1.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 633.071941][ T30] audit: type=1400 audit(1751903494.088:29388): avc: denied { write } for pid=13178 comm="syz.1.1881" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 633.157182][ T30] audit: type=1400 audit(1751903494.088:29389): avc: denied { write open } for pid=13178 comm="syz.1.1881" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 633.157959][ T2146] usb 4-1: USB disconnect, device number 43 [ 633.375890][ T2146] appletouch 4-1:0.85: input: appletouch disconnected [ 633.511000][T13198] lo speed is unknown, defaulting to 1000 [ 633.530055][T13198] lo speed is unknown, defaulting to 1000 [ 634.219608][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 634.381437][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 634.442026][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.474147][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 634.508214][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.547220][ T10] usb 1-1: config 0 descriptor?? [ 635.123852][ T10] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 636.656601][T13252] syz.3.1899: attempt to access beyond end of device [ 636.656601][T13252] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 637.479040][ T10] usb 1-1: USB disconnect, device number 51 [ 637.719447][ T30] kauditd_printk_skb: 352 callbacks suppressed [ 637.719461][ T30] audit: type=1400 audit(1751903499.048:29742): avc: denied { read write } for pid=6848 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.227326][ T30] audit: type=1400 audit(1751903499.108:29743): avc: denied { read write open } for pid=6848 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.317629][ T30] audit: type=1400 audit(1751903499.108:29744): avc: denied { ioctl } for pid=6848 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.450784][ T30] audit: type=1400 audit(1751903499.208:29745): avc: denied { ioctl } for pid=13266 comm="syz.1.1902" path="/363/file0" dev="tmpfs" ino=1945 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 638.479253][ T30] audit: type=1400 audit(1751903499.228:29746): avc: denied { ioctl } for pid=13266 comm="syz.1.1902" path="/363/file0" dev="tmpfs" ino=1945 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 638.699663][ T30] audit: type=1400 audit(1751903499.288:29747): avc: denied { create } for pid=13266 comm="syz.1.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 639.306094][ T30] audit: type=1400 audit(1751903499.288:29748): avc: denied { write } for pid=13266 comm="syz.1.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 639.327705][ T30] audit: type=1400 audit(1751903499.288:29749): avc: denied { read } for pid=13266 comm="syz.1.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 639.483060][ T30] audit: type=1400 audit(1751903499.288:29750): avc: denied { read } for pid=13266 comm="syz.1.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 639.611014][T13289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 640.029779][ T10] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 640.204304][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.217748][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.251671][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 640.276799][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.334041][ T10] usb 6-1: config 0 descriptor?? [ 640.785414][ T10] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 640.831975][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0017/input/input34 [ 641.058614][ T10] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 641.136035][ T10] usb 6-1: USB disconnect, device number 53 [ 641.336688][T13334] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 641.475528][T13329] fido_id[13329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 641.740221][ T2146] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 642.034177][ T2146] usb 4-1: config 7 has an invalid interface number: 74 but max is 0 [ 642.061491][ T2146] usb 4-1: config 7 has no interface number 0 [ 642.097927][ T2146] usb 4-1: config 7 interface 74 has no altsetting 0 [ 642.161705][ T2146] usb 4-1: New USB device found, idVendor=3568, idProduct=2d59, bcdDevice=ad.48 [ 642.196709][ T2146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.270257][ T2146] usb 4-1: Product: syz [ 642.282205][ T2146] usb 4-1: Manufacturer: syz [ 642.319612][ T2146] usb 4-1: SerialNumber: syz [ 642.789548][ T30] kauditd_printk_skb: 296 callbacks suppressed [ 642.789564][ T30] audit: type=1400 audit(1751903504.078:30033): avc: denied { wake_alarm } for pid=13343 comm="syz.1.1919" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 642.855996][ T2146] usb 4-1: USB disconnect, device number 44 [ 642.957693][ T30] audit: type=1400 audit(1751903504.288:30034): avc: denied { read write } for pid=6848 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.005426][ T30] audit: type=1400 audit(1751903504.288:30035): avc: denied { read write open } for pid=6848 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.046137][ T30] audit: type=1400 audit(1751903504.288:30036): avc: denied { ioctl } for pid=6848 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.122564][ T30] audit: type=1400 audit(1751903504.378:30037): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.182370][ T30] audit: type=1400 audit(1751903504.378:30038): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.299247][ T30] audit: type=1400 audit(1751903504.408:30039): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.362731][ T30] audit: type=1400 audit(1751903504.528:30040): avc: denied { read } for pid=13352 comm="syz.0.1920" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 643.439578][ T30] audit: type=1400 audit(1751903504.538:30041): avc: denied { read open } for pid=13352 comm="syz.0.1920" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 643.596858][ T30] audit: type=1400 audit(1751903504.568:30042): avc: denied { ioctl } for pid=13352 comm="syz.0.1920" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 645.448079][T13390] 9pnet_fd: Insufficient options for proto=fd [ 645.450997][T13394] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1929'. [ 645.480382][T13391] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1929'. [ 646.570342][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 646.828853][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 646.848472][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.880009][ T10] usb 2-1: Product: syz [ 646.893683][ T10] usb 2-1: Manufacturer: syz [ 646.911398][ T10] usb 2-1: SerialNumber: syz [ 646.933487][ T10] usb 2-1: config 0 descriptor?? [ 647.039803][ T2146] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 647.200058][ T2146] usb 1-1: Using ep0 maxpacket: 32 [ 647.220022][ T10] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 647.276451][ T2146] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 647.297554][ T2146] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 647.325822][ T2146] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 647.358550][T13422] ubi31: attaching mtd0 [ 647.364440][T13422] ubi31: scanning is finished [ 647.369110][T13422] ubi31: empty MTD device detected [ 647.393547][ T2146] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 647.519815][T13422] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 647.581135][ T2146] usb 1-1: config 0 interface 0 has no altsetting 0 [ 647.623384][ T2146] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 647.645764][ T2146] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 647.674510][ T2146] usb 1-1: Product: syz [ 647.694706][ T2146] usb 1-1: Manufacturer: syz [ 647.728147][ T2146] usb 1-1: SerialNumber: syz [ 647.790571][ T2146] usb 1-1: config 0 descriptor?? [ 647.826724][ T30] kauditd_printk_skb: 750 callbacks suppressed [ 647.826757][ T30] audit: type=1400 audit(1751903509.158:30793): avc: denied { ioctl } for pid=13414 comm="syz.0.1938" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 647.879276][ T2146] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 647.993350][ T10] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 648.009751][ T2146] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 648.109990][ T10] usb 2-1: USB disconnect, device number 34 [ 648.131470][ T30] audit: type=1400 audit(1751903509.158:30794): avc: denied { ioctl } for pid=13414 comm="syz.0.1938" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 648.299719][ T30] audit: type=1400 audit(1751903509.168:30795): avc: denied { ioctl } for pid=13414 comm="syz.0.1938" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 648.421135][ T10] usb 1-1: USB disconnect, device number 52 [ 648.435231][T13411] audit: audit_backlog=65 > audit_backlog_limit=64 [ 648.472534][ T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 648.488689][T13411] audit: audit_lost=1199 audit_rate_limit=0 audit_backlog_limit=64 [ 648.510790][T13439] audit: audit_backlog=65 > audit_backlog_limit=64 [ 648.591679][ T30] audit: type=1400 audit(1751903509.198:30796): avc: denied { read } for pid=13410 comm="syz.4.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 648.592120][T13411] audit: backlog limit exceeded [ 648.618874][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 648.621527][ T30] audit: type=1400 audit(1751903509.198:30797): avc: denied { read } for pid=13410 comm="syz.4.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 648.848814][T13439] raw_sendmsg: syz.1.1940 forgot to set AF_INET. Fix it! [ 649.210742][T13442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1941'. [ 649.906358][ T5913] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 650.593859][ T10] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 650.674609][ T5913] usb 1-1: device descriptor read/64, error -71 [ 650.978320][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.994750][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 651.011349][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 651.031032][ T5913] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 651.049072][T13456] Bluetooth: MGMT ver 1.23 [ 651.058132][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 651.074975][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.094531][ T10] usb 2-1: Product: syz [ 651.102136][ T10] usb 2-1: Manufacturer: syz [ 651.107235][ T10] usb 2-1: SerialNumber: syz [ 651.135556][ T10] usb 2-1: bad CDC descriptors [ 651.169652][ T5913] usb 1-1: device descriptor read/64, error -71 [ 651.279806][ T5913] usb usb1-port1: attempt power cycle [ 651.355689][T13450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.390377][T13450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.425545][ T2146] usb 2-1: USB disconnect, device number 35 [ 651.620124][ T5913] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 651.739095][ T5913] usb 1-1: device descriptor read/8, error -71 [ 652.109595][ T5913] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 652.160125][ T5913] usb 1-1: device descriptor read/8, error -71 [ 652.272791][ T5913] usb usb1-port1: unable to enumerate USB device [ 652.626314][ T2146] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 652.779603][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 652.823433][ T2146] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 652.835371][ T30] kauditd_printk_skb: 1973 callbacks suppressed [ 652.835384][ T30] audit: type=1400 audit(1751903514.168:32143): avc: denied { ioctl } for pid=13476 comm="syz.3.1951" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.841758][ T2146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.927870][ T30] audit: type=1400 audit(1751903514.208:32144): avc: denied { read } for pid=13410 comm="syz.4.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 652.972281][ T2146] usb 4-1: config 0 descriptor?? [ 652.990214][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 653.005606][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 653.021551][T13483] audit: audit_backlog=65 > audit_backlog_limit=64 [ 653.028705][T13487] audit: audit_backlog=65 > audit_backlog_limit=64 [ 653.038710][T13483] audit: audit_lost=1410 audit_rate_limit=0 audit_backlog_limit=64 [ 653.059008][ T30] audit: type=1400 audit(1751903514.208:32145): avc: denied { read } for pid=13410 comm="syz.4.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 653.070209][T13487] audit: audit_lost=1411 audit_rate_limit=0 audit_backlog_limit=64 [ 653.082421][T13488] audit: audit_backlog=65 > audit_backlog_limit=64 [ 653.086774][T13483] audit: backlog limit exceeded [ 653.098012][T13411] audit: audit_backlog=65 > audit_backlog_limit=64 [ 653.137129][ T24] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.40 [ 653.153070][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.165191][ T24] usb 2-1: Product: syz [ 653.169458][ T24] usb 2-1: SerialNumber: syz [ 653.213634][ T2146] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 653.427207][ T2146] usb 4-1: USB disconnect, device number 45 [ 653.457364][ T24] usbhid 2-1:1.0: can't add hid device: -71 [ 653.494464][ T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 653.554922][ T24] usb 2-1: USB disconnect, device number 36 [ 653.999651][ T2146] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 654.160109][ T2146] usb 1-1: Using ep0 maxpacket: 16 [ 654.187193][ T2146] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 654.218285][ T2146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.251171][ T2146] usb 1-1: config 0 descriptor?? [ 654.283606][ T2146] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 655.139983][ T5913] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 655.311565][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 655.362536][T13490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.380405][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 655.383065][T13490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.425355][T13524] overlayfs: failed to clone upperpath [ 655.451143][ T5913] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 655.479055][ T5913] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 655.530077][ T5913] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 655.559562][ T5913] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 655.569302][ T5913] usb 2-1: config 1 interface 0 has no altsetting 0 [ 655.592648][ T5913] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 655.620346][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.650888][ T5913] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 655.660977][ T2146] gspca_sonixj: reg_w1 err -110 [ 655.692808][ T2146] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 655.767792][T13490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.789872][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 655.980057][T13490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.115381][ T2146] usb 1-1: USB disconnect, device number 57 [ 656.172916][ T5913] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 656.179584][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 656.205946][ T5913] usb 2-1: USB disconnect, device number 37 [ 656.237059][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 656.299582][ T24] usb 4-1: config 0 has no interface number 0 [ 656.305703][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 656.378752][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 656.409866][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.440120][ T24] usb 4-1: Product: syz [ 656.444294][ T24] usb 4-1: Manufacturer: syz [ 656.448884][ T24] usb 4-1: SerialNumber: syz [ 656.471581][ T24] usb 4-1: config 0 descriptor?? [ 656.510282][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 656.522977][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 656.659728][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 656.839671][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 656.862569][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 656.893414][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 656.912417][ T10] usb 6-1: can't read configurations, error -71 [ 656.983076][ T24] em28xx 4-1:0.132: chip ID is em28178 [ 657.049624][ T2146] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 657.246894][ T2146] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 657.265191][ T2146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.304870][ T2146] usb 1-1: config 0 descriptor?? [ 657.871537][ T30] kauditd_printk_skb: 817 callbacks suppressed [ 657.871555][ T30] audit: type=1400 audit(1751903519.118:32955): avc: denied { map_create } for pid=13553 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 658.096691][ T30] audit: type=1400 audit(1751903519.128:32956): avc: denied { map_read map_write } for pid=13553 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 658.162927][T13529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.267253][T13529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.275117][ T5913] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 658.440636][ T30] audit: type=1400 audit(1751903519.128:32957): avc: denied { prog_load } for pid=13553 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 658.580090][ T2146] usb 1-1: Cannot read MAC address [ 658.585381][ T2146] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 658.597018][ T24] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 658.607328][ T24] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 658.637607][ T30] audit: type=1400 audit(1751903519.128:32958): avc: denied { bpf } for pid=13553 comm="syz.4.1978" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 658.640301][T13563] siw: device registration error -23 [ 658.679668][ T5913] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 658.682897][ T2146] usb 1-1: USB disconnect, device number 58 [ 658.694828][ T24] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 658.707401][ T30] audit: type=1400 audit(1751903519.128:32959): avc: denied { perfmon } for pid=13553 comm="syz.4.1978" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 658.740372][ T30] audit: type=1400 audit(1751903519.138:32960): avc: denied { perfmon } for pid=13553 comm="syz.4.1978" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 658.745226][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.777677][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 658.842250][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 658.848289][ T5886] em28xx 4-1:0.132: Registering V4L2 extension [ 658.867800][ T30] audit: type=1400 audit(1751903519.138:32961): avc: denied { perfmon } for pid=13553 comm="syz.4.1978" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 658.897011][ T24] usb 4-1: USB disconnect, device number 46 [ 658.909171][ T5202] udevd[5202]: worker [5841] terminated by signal 33 (Unknown signal 33) [ 658.929266][ T5913] usb 2-1: Product: syz [ 658.930288][ T24] em28xx 4-1:0.132: Disconnecting em28xx [ 658.934153][ T5202] udevd[5202]: worker [5841] failed while handling '/devices/virtual/block/loop0' [ 658.950163][ T5913] usb 2-1: Manufacturer: syz [ 658.959113][ T5913] usb 2-1: SerialNumber: syz [ 658.963460][T13571] audit: audit_backlog=65 > audit_backlog_limit=64 [ 658.970550][ T5913] usb 2-1: config 0 descriptor?? [ 658.979988][T13571] audit: audit_lost=1415 audit_rate_limit=0 audit_backlog_limit=64 [ 658.991432][T13572] audit: audit_backlog=65 > audit_backlog_limit=64 [ 659.033247][ T5913] gm12u320 2-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 659.096218][ T5913] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 659.146130][ T5913] usb-storage 2-1:0.0: USB Mass Storage device detected [ 659.169704][ T5886] usb 4-1: Decoder not found [ 659.187841][ T5886] em28xx 4-1:0.132: failed to create media graph [ 659.201882][ T5913] usb-storage 2-1:0.0: device ignored [ 659.206471][ T5886] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 659.225520][ T5886] em28xx 4-1:0.132: Remote control support is not available for this card. [ 659.244407][ T24] em28xx 4-1:0.132: Closing input extension [ 659.260764][ T24] em28xx 4-1:0.132: Freeing device [ 659.288064][ T5847] udevd[5847]: failed to send result of seq 17913 to main daemon: Connection refused [ 659.412237][T13552] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 659.664296][ T24] usb 2-1: USB disconnect, device number 38 [ 659.864792][T13588] overlayfs: failed to resolve './file0': -2 [ 660.129920][ T5913] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 660.329790][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 660.376575][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.398348][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.419660][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 660.444781][ T5913] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 660.466682][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.486830][ T5913] usb 6-1: config 0 descriptor?? [ 661.343755][ T5913] usbhid 6-1:0.0: can't add hid device: -71 [ 661.349807][ T5913] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 661.362954][ T5913] usb 6-1: USB disconnect, device number 56 [ 662.233423][ T6067] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 662.806101][T13631] input: syz1 as /devices/virtual/input/input35 [ 662.895803][ T30] kauditd_printk_skb: 354 callbacks suppressed [ 662.895837][ T30] audit: type=1400 audit(1751903524.228:33313): avc: denied { ioctl } for pid=13623 comm="syz.0.1996" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 662.953939][ T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 663.773517][ T30] audit: type=1400 audit(1751903524.268:33314): avc: denied { create } for pid=13629 comm="syz.3.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 663.794794][ T30] audit: type=1400 audit(1751903524.268:33315): avc: denied { bind } for pid=13629 comm="syz.3.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 663.815549][ T30] audit: type=1400 audit(1751903524.268:33316): avc: denied { create } for pid=13629 comm="syz.3.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 663.836480][ T30] audit: type=1400 audit(1751903524.278:33317): avc: denied { create } for pid=13629 comm="syz.3.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 663.858093][ T30] audit: type=1400 audit(1751903524.278:33318): avc: denied { write } for pid=13629 comm="syz.3.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 663.878978][ T30] audit: type=1400 audit(1751903524.278:33319): avc: denied { write } for pid=13629 comm="syz.3.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 663.900711][ T30] audit: type=1400 audit(1751903524.338:33320): avc: denied { read } for pid=13629 comm="syz.3.1997" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 663.933611][ T30] audit: type=1400 audit(1751903524.348:33321): avc: denied { read open } for pid=13629 comm="syz.3.1997" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 663.967101][ T30] audit: type=1400 audit(1751903524.358:33322): avc: denied { ioctl } for pid=13629 comm="syz.3.1997" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 664.119567][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 664.132166][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 664.141431][ T24] usb 1-1: config 0 has no interface number 0 [ 664.157594][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 664.169313][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.177556][ T24] usb 1-1: Product: syz [ 664.181819][ T24] usb 1-1: Manufacturer: syz [ 664.186780][ T24] usb 1-1: SerialNumber: syz [ 664.202288][ T24] usb 1-1: config 0 descriptor?? [ 664.218790][ T24] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 664.227714][ T24] usb 1-1: selecting invalid altsetting 1 [ 664.233843][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 664.254987][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 664.267473][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 664.276074][ T24] usb 1-1: media controller created [ 664.340706][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.509759][ T5913] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 664.598621][T13646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.613898][T13646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.660946][ T5913] usb 6-1: device descriptor read/64, error -71 [ 664.856533][ T24] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 664.951234][ T5913] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 664.967907][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 664.976229][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 665.015709][ T24] usb 1-1: USB disconnect, device number 59 [ 665.376903][ T5913] usb 6-1: device descriptor read/64, error -71 [ 665.522161][ T5913] usb usb6-port1: attempt power cycle [ 665.990924][ T5913] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 666.023478][ T5913] usb 6-1: device descriptor read/8, error -71 [ 666.289668][ T5913] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 666.359687][T13655] SELinux: policydb version -776255604 does not match my version range 15-34 [ 666.368551][T13655] SELinux: failed to load policy [ 666.447098][ T5913] usb 6-1: device descriptor read/8, error -71 [ 666.653281][ T5913] usb usb6-port1: unable to enumerate USB device [ 667.816762][T13680] netlink: 'syz.1.2008': attribute type 21 has an invalid length. [ 667.824761][T13680] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2008'. [ 667.833998][T13680] netlink: 'syz.1.2008': attribute type 4 has an invalid length. [ 667.841771][T13680] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2008'. [ 667.872762][T13680] hfsplus: unable to find HFS+ superblock [ 667.923092][ T30] kauditd_printk_skb: 330 callbacks suppressed [ 667.923120][ T30] audit: type=1400 audit(1751903529.108:33653): avc: denied { create } for pid=13670 comm="syz.1.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 668.022696][ T30] audit: type=1400 audit(1751903529.118:33654): avc: denied { setopt } for pid=13670 comm="syz.1.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 668.042406][ T30] audit: type=1400 audit(1751903529.128:33655): avc: denied { create } for pid=13670 comm="syz.1.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 668.079582][ T30] audit: type=1400 audit(1751903529.138:33656): avc: denied { getopt } for pid=13670 comm="syz.1.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 668.367205][ T30] audit: type=1400 audit(1751903529.198:33657): avc: denied { mounton } for pid=13670 comm="syz.1.2008" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 670.768138][ T30] audit: type=1400 audit(1751903529.228:33658): avc: denied { create } for pid=13670 comm="syz.1.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 670.788309][ T30] audit: type=1400 audit(1751903529.238:33659): avc: denied { prog_load } for pid=13670 comm="syz.1.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 670.807605][ T30] audit: type=1400 audit(1751903529.248:33660): avc: denied { bpf } for pid=13670 comm="syz.1.2008" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 670.828376][ T30] audit: type=1400 audit(1751903529.298:33661): avc: denied { bpf } for pid=13676 comm="syz.4.2010" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 670.854435][ T30] audit: type=1400 audit(1751903529.328:33662): avc: denied { perfmon } for pid=13676 comm="syz.4.2010" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 671.081610][T13690] SELinux: policydb version -776255604 does not match my version range 15-34 [ 671.090624][T13690] SELinux: failed to load policy [ 671.276997][T13689] input: syz1 as /devices/virtual/input/input36 [ 671.654743][T13700] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2014'. [ 672.205958][T13710] batman_adv: batadv0: Adding interface: ipvlan2 [ 672.212380][T13710] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.246471][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 672.255947][T13710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.266433][T13710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.276349][T13710] batman_adv: batadv0: Interface activated: ipvlan2 [ 672.323762][T13711] wireguard0: entered promiscuous mode [ 672.329250][T13711] wireguard0: entered allmulticast mode [ 672.379399][T13704] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 672.866200][T13719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'. [ 672.931323][ T30] kauditd_printk_skb: 186 callbacks suppressed [ 672.931336][ T30] audit: type=1400 audit(1751903534.268:33849): avc: denied { ioctl } for pid=13714 comm="syz.0.2018" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 672.980007][ T30] audit: type=1400 audit(1751903534.268:33850): avc: denied { bpf } for pid=13722 comm="syz.5.2020" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 673.001929][ T24] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 673.005438][T13728] geneve2: entered promiscuous mode [ 673.010002][ T30] audit: type=1400 audit(1751903534.268:33851): avc: denied { bpf } for pid=13722 comm="syz.5.2020" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 673.049556][T13728] geneve2: entered allmulticast mode [ 673.069616][ T30] audit: type=1400 audit(1751903534.268:33852): avc: denied { bpf } for pid=13722 comm="syz.5.2020" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 673.075238][T13729] netlink: 'syz.3.2022': attribute type 12 has an invalid length. [ 673.102204][T13729] netlink: 'syz.3.2022': attribute type 29 has an invalid length. [ 673.109545][ T30] audit: type=1400 audit(1751903534.268:33853): avc: denied { bpf } for pid=13722 comm="syz.5.2020" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 673.123483][T13729] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2022'. [ 673.137023][ T30] audit: type=1400 audit(1751903534.268:33854): avc: denied { bpf } for pid=13722 comm="syz.5.2020" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 673.160687][T13729] netlink: 'syz.3.2022': attribute type 2 has an invalid length. [ 673.160703][T13729] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2022'. [ 673.192126][ T5886] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 673.199778][ T24] usb 1-1: device descriptor read/64, error -71 [ 673.227127][ T30] audit: type=1400 audit(1751903534.268:33855): avc: denied { bpf } for pid=13722 comm="syz.5.2020" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 673.330333][ T30] audit: type=1400 audit(1751903534.268:33856): avc: denied { bpf } for pid=13722 comm="syz.5.2020" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 673.351291][ T30] audit: type=1400 audit(1751903534.268:33857): avc: denied { bpf } for pid=13722 comm="syz.5.2020" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 673.392180][ T30] audit: type=1400 audit(1751903534.278:33858): avc: denied { prog_run } for pid=13722 comm="syz.5.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 673.439701][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 673.460787][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.471692][ T24] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 673.482519][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.513234][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 673.556337][ T5886] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 673.577385][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.612404][ T5886] usb 2-1: config 0 descriptor?? [ 673.620445][ T24] usb 1-1: device descriptor read/64, error -71 [ 673.729859][ T24] usb usb1-port1: attempt power cycle [ 674.089684][ T24] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 674.142861][ T5886] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 674.150601][ T24] usb 1-1: device descriptor read/8, error -71 [ 674.159551][ T5886] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 674.175577][ T5886] ================================================================== [ 674.183649][ T5886] BUG: KASAN: slab-out-of-bounds in mon_copy_to_buff+0xc2/0x170 [ 674.191295][ T5886] Read of size 3392 at addr ffff88803460b001 by task kworker/1:4/5886 [ 674.199445][ T5886] [ 674.201770][ T5886] CPU: 1 UID: 0 PID: 5886 Comm: kworker/1:4 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 674.201796][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 674.201810][ T5886] Workqueue: usb_hub_wq hub_event [ 674.201834][ T5886] Call Trace: [ 674.201841][ T5886] [ 674.201848][ T5886] dump_stack_lvl+0x116/0x1f0 [ 674.201876][ T5886] print_report+0xcd/0x680 [ 674.201901][ T5886] ? __virt_addr_valid+0x81/0x610 [ 674.201923][ T5886] ? __phys_addr+0xe8/0x180 [ 674.201944][ T5886] ? mon_copy_to_buff+0xc2/0x170 [ 674.201967][ T5886] kasan_report+0xe0/0x110 [ 674.201990][ T5886] ? mon_copy_to_buff+0xc2/0x170 [ 674.202017][ T5886] kasan_check_range+0x100/0x1b0 [ 674.202034][ T5886] __asan_memcpy+0x23/0x60 [ 674.202053][ T5886] mon_copy_to_buff+0xc2/0x170 [ 674.202081][ T5886] mon_bin_event+0x1071/0x2050 [ 674.202113][ T5886] ? __pfx_mon_bin_event+0x10/0x10 [ 674.202141][ T5886] mon_bus_submit+0xcf/0x140 [ 674.202164][ T5886] usb_hcd_submit_urb+0x12d/0x1c60 [ 674.202186][ T5886] ? __device_attach+0x1e4/0x4b0 [ 674.202203][ T5886] ? bus_probe_device+0x17f/0x1c0 [ 674.202215][ T5886] ? device_add+0x1148/0x1a70 [ 674.202224][ T5886] ? usb_set_configuration+0x1187/0x1e20 [ 674.202235][ T5886] ? usb_generic_driver_probe+0xb1/0x110 [ 674.202253][ T5886] usb_submit_urb+0x87c/0x1790 [ 674.202264][ T5886] ? __pfx_lockdep_init_map_type+0x1/0x10 [ 674.202276][ T5886] ? __init_swait_queue_head+0xca/0x150 [ 674.202293][ T5886] usb_start_wait_urb+0x104/0x4b0 [ 674.202304][ T5886] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 674.202318][ T5886] ? __asan_memset+0x23/0x50 [ 674.202331][ T5886] usb_control_msg+0x326/0x4a0 [ 674.202342][ T5886] ? __pfx_usb_control_msg+0x10/0x10 [ 674.202355][ T5886] usbhid_raw_request+0x58f/0x700 [ 674.202374][ T5886] ? __pfx_usbhid_raw_request+0x10/0x10 [ 674.202391][ T5886] __hid_request+0x296/0x3c0 [ 674.202405][ T5886] hidinput_connect+0x1ada/0x2bd0 [ 674.202424][ T5886] hid_connect+0x13f3/0x1a60 [ 674.202435][ T5886] ? trace_kmalloc+0x2b/0xd0 [ 674.202451][ T5886] ? __kmalloc_noprof+0x242/0x510 [ 674.202465][ T5886] ? __asan_memset+0x23/0x50 [ 674.202477][ T5886] ? __pfx_hid_connect+0x10/0x10 [ 674.202494][ T5886] hid_hw_start+0xaa/0x140 [ 674.202508][ T5886] ms_probe+0x195/0x500 [ 674.202517][ T5886] ? __pfx_ms_probe+0x10/0x10 [ 674.202526][ T5886] hid_device_probe+0x360/0x720 [ 674.202539][ T5886] ? __pfx_hid_device_probe+0x10/0x10 [ 674.202553][ T5886] really_probe+0x23e/0xa90 [ 674.202568][ T5886] __driver_probe_device+0x1de/0x440 [ 674.202583][ T5886] driver_probe_device+0x4c/0x1b0 [ 674.202598][ T5886] __device_attach_driver+0x1df/0x310 [ 674.202613][ T5886] ? __pfx___device_attach_driver+0x10/0x10 [ 674.202628][ T5886] bus_for_each_drv+0x156/0x1e0 [ 674.202640][ T5886] ? __pfx_bus_for_each_drv+0x10/0x10 [ 674.202652][ T5886] ? lockdep_hardirqs_on+0x7c/0x110 [ 674.202666][ T5886] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 674.202681][ T5886] __device_attach+0x1e4/0x4b0 [ 674.202695][ T5886] ? __pfx___device_attach+0x10/0x10 [ 674.202710][ T5886] ? do_raw_spin_unlock+0x172/0x230 [ 674.202723][ T5886] bus_probe_device+0x17f/0x1c0 [ 674.202737][ T5886] device_add+0x1148/0x1a70 [ 674.202747][ T5886] ? __pfx_device_add+0x10/0x10 [ 674.202757][ T5886] ? debugfs_create_file_full+0x41/0x60 [ 674.202774][ T5886] hid_add_device+0x373/0xa60 [ 674.202787][ T5886] ? __pfx_hid_add_device+0x10/0x10 [ 674.202798][ T5886] ? lockdep_init_map_type+0x5c/0x280 [ 674.202809][ T5886] ? lockdep_init_map_type+0x5c/0x280 [ 674.202820][ T5886] usbhid_probe+0xd38/0x13f0 [ 674.202837][ T5886] usb_probe_interface+0x303/0x9c0 [ 674.202852][ T5886] ? __pfx_usb_probe_interface+0x10/0x10 [ 674.202867][ T5886] really_probe+0x23e/0xa90 [ 674.202882][ T5886] __driver_probe_device+0x1de/0x440 [ 674.202897][ T5886] driver_probe_device+0x4c/0x1b0 [ 674.202912][ T5886] __device_attach_driver+0x1df/0x310 [ 674.202927][ T5886] ? __pfx___device_attach_driver+0x10/0x10 [ 674.202942][ T5886] bus_for_each_drv+0x156/0x1e0 [ 674.202954][ T5886] ? __pfx_bus_for_each_drv+0x10/0x10 [ 674.202966][ T5886] ? lockdep_hardirqs_on+0x7c/0x110 [ 674.202979][ T5886] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 674.202993][ T5886] __device_attach+0x1e4/0x4b0 [ 674.203007][ T5886] ? __pfx___device_attach+0x10/0x10 [ 674.203022][ T5886] ? do_raw_spin_unlock+0x172/0x230 [ 674.203035][ T5886] bus_probe_device+0x17f/0x1c0 [ 674.203048][ T5886] device_add+0x1148/0x1a70 [ 674.203058][ T5886] ? __pfx_device_add+0x10/0x10 [ 674.203067][ T5886] ? preempt_schedule_thunk+0x16/0x30 [ 674.203083][ T5886] usb_set_configuration+0x1187/0x1e20 [ 674.203100][ T5886] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 674.203111][ T5886] usb_generic_driver_probe+0xb1/0x110 [ 674.203121][ T5886] usb_probe_device+0xef/0x3e0 [ 674.203133][ T5886] ? __pfx_usb_probe_device+0x10/0x10 [ 674.203146][ T5886] really_probe+0x23e/0xa90 [ 674.203165][ T5886] __driver_probe_device+0x1de/0x440 [ 674.203180][ T5886] ? usb_driver_applicable+0x1c7/0x220 [ 674.203194][ T5886] driver_probe_device+0x4c/0x1b0 [ 674.203209][ T5886] __device_attach_driver+0x1df/0x310 [ 674.203224][ T5886] ? __pfx___device_attach_driver+0x10/0x10 [ 674.203239][ T5886] bus_for_each_drv+0x156/0x1e0 [ 674.203255][ T5886] ? __pfx_bus_for_each_drv+0x10/0x10 [ 674.203266][ T5886] ? lockdep_hardirqs_on+0x7c/0x110 [ 674.203280][ T5886] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 674.203295][ T5886] __device_attach+0x1e4/0x4b0 [ 674.203311][ T5886] ? __pfx___device_attach+0x10/0x10 [ 674.203326][ T5886] ? do_raw_spin_unlock+0x172/0x230 [ 674.203341][ T5886] bus_probe_device+0x17f/0x1c0 [ 674.203355][ T5886] device_add+0x1148/0x1a70 [ 674.203365][ T5886] ? __pfx_device_add+0x10/0x10 [ 674.203375][ T5886] ? usb_detect_static_quirks+0x335/0x3e0 [ 674.203387][ T5886] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 674.203404][ T5886] usb_new_device+0xd07/0x1a20 [ 674.203418][ T5886] ? do_raw_spin_lock+0x12c/0x2b0 [ 674.203430][ T5886] ? __pfx_usb_new_device+0x10/0x10 [ 674.203442][ T5886] ? mark_held_locks+0x49/0x80 [ 674.203460][ T5886] hub_event+0x2eb7/0x4fa0 [ 674.203477][ T5886] ? __pfx_hub_event+0x10/0x10 [ 674.203489][ T5886] ? ioread32_rep+0xe0/0x100 [ 674.203505][ T5886] ? rcu_is_watching+0x12/0xc0 [ 674.203520][ T5886] process_one_work+0x9cf/0x1b70 [ 674.203534][ T5886] ? __pfx_hcd_resume_work+0x10/0x10 [ 674.203548][ T5886] ? __pfx_process_one_work+0x10/0x10 [ 674.203562][ T5886] ? assign_work+0x1a0/0x250 [ 674.203573][ T5886] worker_thread+0x6c8/0xf10 [ 674.203586][ T5886] ? __kthread_parkme+0x19e/0x250 [ 674.203602][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 674.203613][ T5886] kthread+0x3c5/0x780 [ 674.203622][ T5886] ? __pfx_kthread+0x10/0x10 [ 674.203633][ T5886] ? rcu_is_watching+0x12/0xc0 [ 674.203646][ T5886] ? __pfx_kthread+0x10/0x10 [ 674.203657][ T5886] ret_from_fork+0x5d4/0x6f0 [ 674.203673][ T5886] ? __pfx_kthread+0x10/0x10 [ 674.203682][ T5886] ret_from_fork_asm+0x1a/0x30 [ 674.203698][ T5886] [ 674.203701][ T5886] [ 674.863655][ T5886] Allocated by task 5886: [ 674.867961][ T5886] kasan_save_stack+0x33/0x60 [ 674.872629][ T5886] kasan_save_track+0x14/0x30 [ 674.877289][ T5886] __kasan_kmalloc+0xaa/0xb0 [ 674.881864][ T5886] __kmalloc_noprof+0x223/0x510 [ 674.886699][ T5886] __hid_request+0x2c/0x3c0 [ 674.891186][ T5886] hidinput_connect+0x1ada/0x2bd0 [ 674.896196][ T5886] hid_connect+0x13f3/0x1a60 [ 674.900766][ T5886] hid_hw_start+0xaa/0x140 [ 674.905165][ T5886] ms_probe+0x195/0x500 [ 674.909299][ T5886] hid_device_probe+0x360/0x720 [ 674.914130][ T5886] really_probe+0x23e/0xa90 [ 674.918618][ T5886] __driver_probe_device+0x1de/0x440 [ 674.923889][ T5886] driver_probe_device+0x4c/0x1b0 [ 674.928900][ T5886] __device_attach_driver+0x1df/0x310 [ 674.934263][ T5886] bus_for_each_drv+0x156/0x1e0 [ 674.939093][ T5886] __device_attach+0x1e4/0x4b0 [ 674.943843][ T5886] bus_probe_device+0x17f/0x1c0 [ 674.948675][ T5886] device_add+0x1148/0x1a70 [ 674.953155][ T5886] hid_add_device+0x373/0xa60 [ 674.957812][ T5886] usbhid_probe+0xd38/0x13f0 [ 674.962387][ T5886] usb_probe_interface+0x303/0x9c0 [ 674.967481][ T5886] really_probe+0x23e/0xa90 [ 674.971972][ T5886] __driver_probe_device+0x1de/0x440 [ 674.977244][ T5886] driver_probe_device+0x4c/0x1b0 [ 674.982258][ T5886] __device_attach_driver+0x1df/0x310 [ 674.987616][ T5886] bus_for_each_drv+0x156/0x1e0 [ 674.992448][ T5886] __device_attach+0x1e4/0x4b0 [ 674.997198][ T5886] bus_probe_device+0x17f/0x1c0 [ 675.002031][ T5886] device_add+0x1148/0x1a70 [ 675.006515][ T5886] usb_set_configuration+0x1187/0x1e20 [ 675.011956][ T5886] usb_generic_driver_probe+0xb1/0x110 [ 675.017395][ T5886] usb_probe_device+0xef/0x3e0 [ 675.022144][ T5886] really_probe+0x23e/0xa90 [ 675.026630][ T5886] __driver_probe_device+0x1de/0x440 [ 675.031898][ T5886] driver_probe_device+0x4c/0x1b0 [ 675.036908][ T5886] __device_attach_driver+0x1df/0x310 [ 675.042264][ T5886] bus_for_each_drv+0x156/0x1e0 [ 675.047097][ T5886] __device_attach+0x1e4/0x4b0 [ 675.051849][ T5886] bus_probe_device+0x17f/0x1c0 [ 675.056680][ T5886] device_add+0x1148/0x1a70 [ 675.061163][ T5886] usb_new_device+0xd07/0x1a20 [ 675.065910][ T5886] hub_event+0x2eb7/0x4fa0 [ 675.070308][ T5886] process_one_work+0x9cf/0x1b70 [ 675.075228][ T5886] worker_thread+0x6c8/0xf10 [ 675.079804][ T5886] kthread+0x3c5/0x780 [ 675.083851][ T5886] ret_from_fork+0x5d4/0x6f0 [ 675.088429][ T5886] ret_from_fork_asm+0x1a/0x30 [ 675.093176][ T5886] [ 675.095480][ T5886] The buggy address belongs to the object at ffff88803460b000 [ 675.095480][ T5886] which belongs to the cache kmalloc-8 of size 8 [ 675.109166][ T5886] The buggy address is located 1 bytes inside of [ 675.109166][ T5886] allocated 7-byte region [ffff88803460b000, ffff88803460b007) [ 675.122940][ T5886] [ 675.125246][ T5886] The buggy address belongs to the physical page: [ 675.131631][ T5886] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3460b [ 675.140368][ T5886] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 675.147888][ T5886] page_type: f5(slab) [ 675.151851][ T5886] raw: 00fff00000000000 ffff88801b841500 0000000000000000 dead000000000001 [ 675.160415][ T5886] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 675.168973][ T5886] page dumped because: kasan: bad access detected [ 675.175359][ T5886] page_owner tracks the page as allocated [ 675.181050][ T5886] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5831, tgid 5831 (syz-executor), ts 244208551363, free_ts 244208543189 [ 675.200477][ T5886] post_alloc_hook+0x1c0/0x230 [ 675.205227][ T5886] get_page_from_freelist+0x1321/0x3890 [ 675.210762][ T5886] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 675.216641][ T5886] alloc_pages_mpol+0x1fb/0x550 [ 675.221480][ T5886] new_slab+0x23b/0x330 [ 675.225618][ T5886] ___slab_alloc+0xd9c/0x1940 [ 675.230275][ T5886] __slab_alloc.constprop.0+0x56/0xb0 [ 675.235630][ T5886] __kmalloc_node_noprof+0x2ed/0x500 [ 675.240902][ T5886] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 675.246778][ T5886] __vmalloc_node_noprof+0xad/0xf0 [ 675.251869][ T5886] do_ipt_get_ctl+0x6b6/0xaa0 [ 675.256531][ T5886] nf_getsockopt+0x79/0xe0 [ 675.260928][ T5886] ip_getsockopt+0x18c/0x1e0 [ 675.265506][ T5886] tcp_getsockopt+0xa1/0x100 [ 675.270082][ T5886] do_sock_getsockopt+0x3fc/0x800 [ 675.275095][ T5886] __sys_getsockopt+0x12f/0x260 [ 675.279931][ T5886] page last free pid 5831 tgid 5831 stack trace: [ 675.286233][ T5886] __free_frozen_pages+0x7fe/0x1180 [ 675.291420][ T5886] kasan_populate_vmalloc+0x13d/0x1f0 [ 675.296775][ T5886] alloc_vmap_area+0x959/0x29c0 [ 675.301613][ T5886] __get_vm_area_node+0x1ca/0x330 [ 675.306619][ T5886] __vmalloc_node_range_noprof+0x271/0x14b0 [ 675.312492][ T5886] __vmalloc_node_noprof+0xad/0xf0 [ 675.317587][ T5886] do_ipt_get_ctl+0x6b6/0xaa0 [ 675.322252][ T5886] nf_getsockopt+0x79/0xe0 [ 675.326649][ T5886] ip_getsockopt+0x18c/0x1e0 [ 675.331224][ T5886] tcp_getsockopt+0xa1/0x100 [ 675.335805][ T5886] do_sock_getsockopt+0x3fc/0x800 [ 675.340819][ T5886] __sys_getsockopt+0x12f/0x260 [ 675.345655][ T5886] __x64_sys_getsockopt+0xbd/0x160 [ 675.350751][ T5886] do_syscall_64+0xcd/0x4c0 [ 675.355247][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.361119][ T5886] [ 675.363421][ T5886] Memory state around the buggy address: [ 675.369028][ T5886] ffff88803460af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.377068][ T5886] ffff88803460af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.385110][ T5886] >ffff88803460b000: 07 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 675.393149][ T5886] ^ [ 675.397198][ T5886] ffff88803460b080: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 675.405237][ T5886] ffff88803460b100: 07 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 675.413278][ T5886] ================================================================== [ 675.421316][ T5886] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 675.428491][ T5886] CPU: 1 UID: 0 PID: 5886 Comm: kworker/1:4 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 675.438797][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 675.448834][ T5886] Workqueue: usb_hub_wq hub_event [ 675.453850][ T5886] Call Trace: [ 675.457109][ T5886] [ 675.460026][ T5886] dump_stack_lvl+0x3d/0x1f0 [ 675.464604][ T5886] panic+0x71c/0x800 [ 675.468493][ T5886] ? __pfx_panic+0x10/0x10 [ 675.472901][ T5886] ? __pfx__printk+0x10/0x10 [ 675.477475][ T5886] ? end_report+0x4c/0x170 [ 675.481881][ T5886] ? mon_copy_to_buff+0xc2/0x170 [ 675.486807][ T5886] check_panic_on_warn+0xab/0xb0 [ 675.491734][ T5886] end_report+0x107/0x170 [ 675.496052][ T5886] kasan_report+0xee/0x110 [ 675.500456][ T5886] ? mon_copy_to_buff+0xc2/0x170 [ 675.505387][ T5886] kasan_check_range+0x100/0x1b0 [ 675.510305][ T5886] __asan_memcpy+0x23/0x60 [ 675.514704][ T5886] mon_copy_to_buff+0xc2/0x170 [ 675.519461][ T5886] mon_bin_event+0x1071/0x2050 [ 675.524222][ T5886] ? __pfx_mon_bin_event+0x10/0x10 [ 675.529328][ T5886] mon_bus_submit+0xcf/0x140 [ 675.533908][ T5886] usb_hcd_submit_urb+0x12d/0x1c60 [ 675.539006][ T5886] ? __device_attach+0x1e4/0x4b0 [ 675.543933][ T5886] ? bus_probe_device+0x17f/0x1c0 [ 675.548943][ T5886] ? device_add+0x1148/0x1a70 [ 675.553599][ T5886] ? usb_set_configuration+0x1187/0x1e20 [ 675.559216][ T5886] ? usb_generic_driver_probe+0xb1/0x110 [ 675.564837][ T5886] usb_submit_urb+0x87c/0x1790 [ 675.569582][ T5886] ? __pfx_lockdep_init_map_type+0x1/0x10 [ 675.575283][ T5886] ? __init_swait_queue_head+0xca/0x150 [ 675.580814][ T5886] usb_start_wait_urb+0x104/0x4b0 [ 675.585822][ T5886] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 675.591351][ T5886] ? __asan_memset+0x23/0x50 [ 675.595927][ T5886] usb_control_msg+0x326/0x4a0 [ 675.600672][ T5886] ? __pfx_usb_control_msg+0x10/0x10 [ 675.605939][ T5886] usbhid_raw_request+0x58f/0x700 [ 675.610956][ T5886] ? __pfx_usbhid_raw_request+0x10/0x10 [ 675.616494][ T5886] __hid_request+0x296/0x3c0 [ 675.621073][ T5886] hidinput_connect+0x1ada/0x2bd0 [ 675.626089][ T5886] hid_connect+0x13f3/0x1a60 [ 675.630665][ T5886] ? trace_kmalloc+0x2b/0xd0 [ 675.635249][ T5886] ? __kmalloc_noprof+0x242/0x510 [ 675.640265][ T5886] ? __asan_memset+0x23/0x50 [ 675.644841][ T5886] ? __pfx_hid_connect+0x10/0x10 [ 675.649768][ T5886] hid_hw_start+0xaa/0x140 [ 675.654170][ T5886] ms_probe+0x195/0x500 [ 675.658306][ T5886] ? __pfx_ms_probe+0x10/0x10 [ 675.662964][ T5886] hid_device_probe+0x360/0x720 [ 675.667800][ T5886] ? __pfx_hid_device_probe+0x10/0x10 [ 675.673162][ T5886] really_probe+0x23e/0xa90 [ 675.677652][ T5886] __driver_probe_device+0x1de/0x440 [ 675.682927][ T5886] driver_probe_device+0x4c/0x1b0 [ 675.687939][ T5886] __device_attach_driver+0x1df/0x310 [ 675.693299][ T5886] ? __pfx___device_attach_driver+0x10/0x10 [ 675.699179][ T5886] bus_for_each_drv+0x156/0x1e0 [ 675.704013][ T5886] ? __pfx_bus_for_each_drv+0x10/0x10 [ 675.709368][ T5886] ? lockdep_hardirqs_on+0x7c/0x110 [ 675.714558][ T5886] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 675.720353][ T5886] __device_attach+0x1e4/0x4b0 [ 675.725106][ T5886] ? __pfx___device_attach+0x10/0x10 [ 675.730380][ T5886] ? do_raw_spin_unlock+0x172/0x230 [ 675.735564][ T5886] bus_probe_device+0x17f/0x1c0 [ 675.740400][ T5886] device_add+0x1148/0x1a70 [ 675.744887][ T5886] ? __pfx_device_add+0x10/0x10 [ 675.749718][ T5886] ? debugfs_create_file_full+0x41/0x60 [ 675.755256][ T5886] hid_add_device+0x373/0xa60 [ 675.759917][ T5886] ? __pfx_hid_add_device+0x10/0x10 [ 675.765098][ T5886] ? lockdep_init_map_type+0x5c/0x280 [ 675.770455][ T5886] ? lockdep_init_map_type+0x5c/0x280 [ 675.775810][ T5886] usbhid_probe+0xd38/0x13f0 [ 675.780394][ T5886] usb_probe_interface+0x303/0x9c0 [ 675.785495][ T5886] ? __pfx_usb_probe_interface+0x10/0x10 [ 675.791114][ T5886] really_probe+0x23e/0xa90 [ 675.795604][ T5886] __driver_probe_device+0x1de/0x440 [ 675.800878][ T5886] driver_probe_device+0x4c/0x1b0 [ 675.805892][ T5886] __device_attach_driver+0x1df/0x310 [ 675.811253][ T5886] ? __pfx___device_attach_driver+0x10/0x10 [ 675.817136][ T5886] bus_for_each_drv+0x156/0x1e0 [ 675.821972][ T5886] ? __pfx_bus_for_each_drv+0x10/0x10 [ 675.827329][ T5886] ? lockdep_hardirqs_on+0x7c/0x110 [ 675.832516][ T5886] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 675.838308][ T5886] __device_attach+0x1e4/0x4b0 [ 675.843061][ T5886] ? __pfx___device_attach+0x10/0x10 [ 675.848335][ T5886] ? do_raw_spin_unlock+0x172/0x230 [ 675.853523][ T5886] bus_probe_device+0x17f/0x1c0 [ 675.858361][ T5886] device_add+0x1148/0x1a70 [ 675.862847][ T5886] ? __pfx_device_add+0x10/0x10 [ 675.867679][ T5886] ? preempt_schedule_thunk+0x16/0x30 [ 675.873053][ T5886] usb_set_configuration+0x1187/0x1e20 [ 675.878511][ T5886] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 675.884562][ T5886] usb_generic_driver_probe+0xb1/0x110 [ 675.890003][ T5886] usb_probe_device+0xef/0x3e0 [ 675.894750][ T5886] ? __pfx_usb_probe_device+0x10/0x10 [ 675.900107][ T5886] really_probe+0x23e/0xa90 [ 675.904599][ T5886] __driver_probe_device+0x1de/0x440 [ 675.909870][ T5886] ? usb_driver_applicable+0x1c7/0x220 [ 675.915316][ T5886] driver_probe_device+0x4c/0x1b0 [ 675.920330][ T5886] __device_attach_driver+0x1df/0x310 [ 675.925690][ T5886] ? __pfx___device_attach_driver+0x10/0x10 [ 675.931570][ T5886] bus_for_each_drv+0x156/0x1e0 [ 675.936405][ T5886] ? __pfx_bus_for_each_drv+0x10/0x10 [ 675.941761][ T5886] ? lockdep_hardirqs_on+0x7c/0x110 [ 675.946947][ T5886] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 675.952743][ T5886] __device_attach+0x1e4/0x4b0 [ 675.957494][ T5886] ? __pfx___device_attach+0x10/0x10 [ 675.962768][ T5886] ? do_raw_spin_unlock+0x172/0x230 [ 675.967955][ T5886] bus_probe_device+0x17f/0x1c0 [ 675.972795][ T5886] device_add+0x1148/0x1a70 [ 675.977285][ T5886] ? __pfx_device_add+0x10/0x10 [ 675.982117][ T5886] ? usb_detect_static_quirks+0x335/0x3e0 [ 675.987821][ T5886] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 675.993702][ T5886] usb_new_device+0xd07/0x1a20 [ 675.998452][ T5886] ? do_raw_spin_lock+0x12c/0x2b0 [ 676.003466][ T5886] ? __pfx_usb_new_device+0x10/0x10 [ 676.008656][ T5886] ? mark_held_locks+0x49/0x80 [ 676.013415][ T5886] hub_event+0x2eb7/0x4fa0 [ 676.017828][ T5886] ? __pfx_hub_event+0x10/0x10 [ 676.022575][ T5886] ? ioread32_rep+0xe0/0x100 [ 676.027156][ T5886] ? rcu_is_watching+0x12/0xc0 [ 676.031908][ T5886] process_one_work+0x9cf/0x1b70 [ 676.036835][ T5886] ? __pfx_hcd_resume_work+0x10/0x10 [ 676.042109][ T5886] ? __pfx_process_one_work+0x10/0x10 [ 676.047467][ T5886] ? assign_work+0x1a0/0x250 [ 676.052039][ T5886] worker_thread+0x6c8/0xf10 [ 676.056616][ T5886] ? __kthread_parkme+0x19e/0x250 [ 676.061631][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 676.066727][ T5886] kthread+0x3c5/0x780 [ 676.070780][ T5886] ? __pfx_kthread+0x10/0x10 [ 676.075355][ T5886] ? rcu_is_watching+0x12/0xc0 [ 676.080107][ T5886] ? __pfx_kthread+0x10/0x10 [ 676.084681][ T5886] ret_from_fork+0x5d4/0x6f0 [ 676.089266][ T5886] ? __pfx_kthread+0x10/0x10 [ 676.093839][ T5886] ret_from_fork_asm+0x1a/0x30 [ 676.098591][ T5886] [ 676.101772][ T5886] Kernel Offset: disabled [ 676.106073][ T5886] Rebooting in 86400 seconds..