last executing test programs: 2m27.167971262s ago: executing program 1 (id=2938): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x2, 0xf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfc}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000fe0000000000000000010000850000002e000000b7080000000000007b8af8ff00000000b70800000900", @ANYRES32, @ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de7", 0x2e}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) io_setup(0x800, &(0x7f00000002c0)=0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) socket$kcm(0x29, 0x5, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f00000000c0)="93") syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@local, @empty}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000000)={&(0x7f0000000740)=[{0x1, 0x9000, 0x0, 0x0}, {0xfff, 0x0, 0x0, 0x0}], 0x2}) r7 = eventfd(0x8) io_submit(r4, 0x1, &(0x7f0000003880)=[&(0x7f0000003840)={0x0, 0x0, 0x0, 0x6, 0x8000, r0, &(0x7f0000002840)="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", 0x1000, 0xf4e8, 0x0, 0x1, r7}]) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m22.840122043s ago: executing program 1 (id=2948): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002db9700000000000ac1e6ce5801d8652ea3b710b46b10001000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff000000000100060000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c", 0x4d, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="6800000000000000170100000200000050000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c67c807c5ab4264c8ba94065d11d8ee27dd16f400000000180000000020000017010000040000000600000000000000"], 0x80, 0x40800}], 0x5a1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000b40)="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", 0x1de) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc4c85513, &(0x7f0000000040)={0x1}) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 2m20.627728613s ago: executing program 1 (id=2953): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 2m20.559738409s ago: executing program 1 (id=2954): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ptrace$peekuser(0x3, r0, 0xffffffffffffff3f) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, r10, 0x321, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4048010) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c9, &(0x7f0000000100)) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x100003, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x300, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2m19.618717461s ago: executing program 1 (id=2959): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@multicast1, 0xffff, 0x1000, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r9, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x400008a, 0x0) 2m18.587344606s ago: executing program 1 (id=2961): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0x2, &(0x7f00000001c0)={0x7, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32], 0x15) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}}) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6(0xa, 0x2, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) signalfd(r9, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x4fffff) socket$unix(0x1, 0x5, 0x0) 2m2.647774514s ago: executing program 32 (id=2961): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0x2, &(0x7f00000001c0)={0x7, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32], 0x15) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}}) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6(0xa, 0x2, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) signalfd(r9, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x4fffff) socket$unix(0x1, 0x5, 0x0) 13.356016722s ago: executing program 3 (id=3310): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000000540)) r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x26, &(0x7f0000000140)=[{0x15, '\x00', @data=0x14e2}]}) r4 = dup3(r2, r1, 0x0) sendfile(r4, r0, 0x0, 0x1000009) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f00000003c0)=0x8, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r6}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r7, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x28100, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x50040, &(0x7f0000000500)={0x11, 0xb, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250f0000000c00018008000100", @ANYRES32=r9, @ANYBLOB="1ac0c43cc6a2efd92a097f15567789e9d8edec6abf778e8590be9cf7bf9c16fdca3a8177e3a68b7b57b769bcd7cdc9d5371a762cc295a1bc94530be0069916ebc7673b261452ae29a110063b3ee3facce0762bc0e2240fd773982ff4ec604bb30d2031b6b94d1d47d6d053bcfce46e6b145dd92be37f5b46c4d4fbedb571c752e6b694f9a5155110be5fad0b9569d00cc5c2350cacf2c394fadcd802d0dbc21cec0cc5327fce6f2aae856a69f0d6a8c543eba7157135629fcf14db7df60d76c12d6e53a244b56842198c7bfdf2203a84c4fef94258f4ed5ebc9a07d3687573090000009d11fe4d8308279bb1f5ae"], 0x20}, 0x1, 0x0, 0x0, 0x48d0}, 0x400e0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x8000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_gettime(0x0, &(0x7f0000000240)) 10.353475131s ago: executing program 2 (id=3317): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = dup(0xffffffffffffffff) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) 10.103580411s ago: executing program 3 (id=3320): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) socket(0x200000000000011, 0x2, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x0) 8.715077751s ago: executing program 3 (id=3321): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 8.58710401s ago: executing program 4 (id=3323): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x2080) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 8.288045358s ago: executing program 3 (id=3324): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000c40)=0x7, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000004c0)=0x2, &(0x7f00000001c0)=0xffffffffffffffed) r2 = syz_usbip_server_init(0x2) r3 = syz_usb_connect(0x1, 0x43, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f000000010902"], 0x0) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) r5 = syz_open_pts(0xffffffffffffffff, 0x200401) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x42040) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000000)=0x400) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}, 0x48) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x6}}) write$usbip_server(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r4, @ANYRES16=r3, @ANYRES32=r2, @ANYRES16=r3, @ANYRES64, @ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES32=r6], 0x30) 7.55060449s ago: executing program 4 (id=3325): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_complete(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000a00)={r7}, &(0x7f0000001a40)=0x8) r10 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 5.067981835s ago: executing program 4 (id=3326): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) socket(0x200000000000011, 0x2, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x0) 4.968369561s ago: executing program 2 (id=3327): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x9, 0x5, 0xaa, 0x2, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x81, @rand_addr=' \x01\x00', 0x364}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000980)="b8901eb30dc52b8a752d5373f15c13941eec12406dc0534aeb15692ba93e54d97203658c9295552727cb75676fd22fe17bef81ff68f0a7383203c9d54355d96685c3b20a977a7223f819c56dbc3e4676f50400139f7be69d9e5b784ee65503e5fc2d2fbfadcd571e646608bd9233c8414504e9181a8820004033810dc5a6791a", 0x80}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) poll(&(0x7f0000000540)=[{r3, 0x2020}], 0x1, 0xb8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d0381edd7fc6e5539b0d430a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbac5c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 4.792196518s ago: executing program 5 (id=3330): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, 0xffffffffffffffff) (async) r2 = syz_usb_connect$rtl8150(0x2, 0xfffffffffffffdbf, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a3) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1a7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f9}) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xcc, 0x9, 0x904, 0x2, 0xd, 0x4, 0x4}}, {0xc, 0x2, [0x10, 0x5, 0x8, 0x8]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8046}, 0x4048800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0164fe8d24995b02f5000800ffffff7fffffffff020073307a5f74756e0000000000000000000c00028008000200ff000000"], 0x38}, 0x1, 0x0, 0x0, 0x24}, 0x0) r10 = socket$inet(0x2, 0x80001, 0x84) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r3, 0x80000, 0x4) (async) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 4.764584863s ago: executing program 0 (id=3331): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='mpol=prefer=']) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000240)={[{@uid={'uid', 0x3d, r3}}]}) 4.565552399s ago: executing program 0 (id=3332): r0 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff1d) socket$inet_udp(0x2, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x2d8, 0x0, 0x0, 0x0, 0x8, 0x150a, 0x1203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x3, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0xd, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x76f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0xa, 0x9}}}}}]}}]}}, 0x0) migrate_pages(r0, 0x4, 0x0, &(0x7f0000000300)=0xa) 3.898796905s ago: executing program 5 (id=3333): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="c4c1d5592966ba2100b0b8eeb9310a00000f3266baf80cb814cab68eef66bafc0c66ed66baf80cb824577689ef66bafc0cb8e5000000ef66baf80cb83e088183ef66bafc0c66b87b0066ef8adb66f30f09643e0fc7b100000100b9800000c00f3235004000000f30", 0x68}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r4, 0x20, &(0x7f0000002140)={&(0x7f0000001100)=""/4096, 0x1000, 0x0, &(0x7f0000002100)=""/40, 0x28}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x3, 0x1d, &(0x7f0000000480)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call, @call={0x85, 0x0, 0x0, 0xb7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @generic={0x43, 0x9, 0x8, 0xfffd, 0x200}, @ldst={0x2, 0x3, 0x0, 0x4, 0x5, 0xfffffffffffffffe}], &(0x7f0000000580)='syzkaller\x00', 0x80, 0x71, &(0x7f00000005c0)=""/113, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x16, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xc, 0x3, 0x2}, 0x10, r6, r4, 0x4, &(0x7f00000021c0)=[r4], &(0x7f0000002200)=[{0x2, 0x3, 0xf, 0x4}, {0x5, 0x4, 0x4, 0x8}, {0x0, 0x5, 0x0, 0x7}, {0x2, 0x1, 0x5, 0x8}], 0x10, 0x8}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r7, &(0x7f0000019300)=""/102392, 0x18ff8) prlimit64(0x0, 0xd, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 3.897217787s ago: executing program 2 (id=3334): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 3.850279404s ago: executing program 4 (id=3335): socket(0x8, 0x1, 0xa328) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x17) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r2, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 3.378622879s ago: executing program 3 (id=3336): syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) inotify_init() r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x42042, 0x0) sendfile(r0, r0, 0x0, 0x100000000) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r2 = userfaultfd(0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x11) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28000805}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=@deltaction={0x294, 0x31, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5fb5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x53fc}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x4, 0x1, 'skbmod\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1219, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf4566000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000002400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private2, 0xe0f1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000029000000430000002c9a09000000000000007a7f"], 0x18}}], 0x1, 0x4000054) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000001c0)=0x40) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) 3.283026638s ago: executing program 2 (id=3337): socket(0x8, 0x1, 0xa328) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 3.175994594s ago: executing program 5 (id=3338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 3.053348985s ago: executing program 5 (id=3339): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = dup(0xffffffffffffffff) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) 2.67915703s ago: executing program 2 (id=3340): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_complete(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000a00)={r7}, &(0x7f0000001a40)=0x8) r10 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 1.718303311s ago: executing program 2 (id=3341): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) open(0x0, 0x400400, 0xd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@local, 0x0, 0x0, 0x20, 0x0, 0x2}, {}, {0x0, 0x0, 0x10001}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) 1.364415708s ago: executing program 0 (id=3342): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='0123:abcd:0o\'', 0xd) (fail_nth: 2) 1.357373493s ago: executing program 3 (id=3343): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r2, 0xc2f, 0x5, 0x2) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000500050002000000050004"], 0x54}}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CANCEL(r3, 0x6407) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x3, 0xc, 0x0, 0x700, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x18, 0x0, "53bb46"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140be7cbe"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000180)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.001576641s ago: executing program 4 (id=3344): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x515000, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00008ca000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0x31807000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) 779.234218ms ago: executing program 0 (id=3345): socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x9, 0x5, 0xaa, 0x2, 0xffffffff}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x81, @rand_addr=' \x01\x00', 0x364}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000980)="b8901eb30dc52b8a752d5373f15c13941eec12406dc0534aeb15692ba93e54d97203658c9295552727cb75676fd22fe17bef81ff68f0a7383203c9d54355d96685c3b20a977a7223f819c56dbc3e4676f50400139f7be69d9e5b784ee65503e5fc2d2fbfadcd571e646608bd9233c8414504e9181a8820004033810dc5a6791a", 0x80}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) poll(&(0x7f0000000540)=[{r1, 0x2020}], 0x1, 0xb8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 278.082256ms ago: executing program 0 (id=3346): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) accept$unix(r2, &(0x7f0000000100), &(0x7f00000001c0)=0x6e) 185.629239ms ago: executing program 5 (id=3347): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 110.380349ms ago: executing program 5 (id=3348): mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) accept(0xffffffffffffffff, &(0x7f0000000000)=@caif=@dbg, &(0x7f0000000080)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffff80}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x35, 0x10}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r0, &(0x7f0000000f00)='f', 0x1) 84.790318ms ago: executing program 0 (id=3349): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001a00010028bd70000000000002201000000000070000000008000100c40000010800", @ANYRES32=r1], 0x2c}}, 0xea5bc50b6199d77e) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x10) mkdirat(r2, 0x0, 0x1c9) 0s ago: executing program 4 (id=3350): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0xfffffffffffffe95) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="cf5d6e1287eb8efacf48061b58fbaf57e7ee4a73e6eb608e1e9ef7f500baa4c9bd72fbec597388073523f104492f86cdb1ccca6aa29fdbd0c613ce43dfb787b6189a571bc7d1cafda29c0c3270bcd2d474e2", @ANYRESOCT=r0], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x41}, 0x94) pipe2(&(0x7f0000000100), 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) madvise(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e0001002bbd70000400000002"], 0x1c}}, 0x20000080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x48, 0xf0, 0x1}, 0x28) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r3, 0x40047451, 0xf0ff1f00000000) r4 = syz_io_uring_complete(0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000040)={0x6, 0x4}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000050000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_connect(0x5, 0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001420c5c08fa9988894154010203010902580001020c40800904"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000085000000080000000100000020000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x48, 0x4, 0x6, 0x203, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x200c8840) kernel console output (not intermixed with test programs): ERAL descriptor not found [ 883.798508][T14562] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 884.308395][ T29] usb 5-1: USB disconnect, device number 92 [ 884.866455][T14562] usb 2-1: USB disconnect, device number 26 [ 885.532229][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.703155][T16450] wlan0 speed is unknown, defaulting to 1000 [ 886.180370][ T5732] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 886.503433][ T5732] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 886.839426][ T5732] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 887.123911][ T5732] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 887.480738][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.494179][T16472] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 888.537313][ T5732] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 889.774266][T16497] FAULT_INJECTION: forcing a failure. [ 889.774266][T16497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.787491][T16497] CPU: 0 UID: 0 PID: 16497 Comm: syz.4.2866 Tainted: G L syzkaller #0 PREEMPT(full) [ 889.787518][T16497] Tainted: [L]=SOFTLOCKUP [ 889.787524][T16497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 889.787534][T16497] Call Trace: [ 889.787542][T16497] [ 889.787550][T16497] dump_stack_lvl+0x100/0x190 [ 889.787576][T16497] should_fail_ex.cold+0x5/0xa [ 889.787598][T16497] _copy_from_user+0x2e/0xd0 [ 889.787622][T16497] copy_msghdr_from_user+0x9f/0x4c0 [ 889.787650][T16497] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 889.787674][T16497] ? rcu_is_watching+0x12/0xc0 [ 889.787710][T16497] ___sys_sendmsg+0x106/0x1e0 [ 889.787737][T16497] ? __pfx____sys_sendmsg+0x10/0x10 [ 889.787772][T16497] ? lockdep_hardirqs_on+0x78/0x100 [ 889.787791][T16497] ? irqentry_exit+0x24d/0xa00 [ 889.787822][T16497] __sys_sendmmsg+0x20c/0x440 [ 889.787846][T16497] ? __pfx___sys_sendmmsg+0x10/0x10 [ 889.787866][T16497] ? ksys_write+0x190/0x250 [ 889.787908][T16497] ? fput+0x79/0x100 [ 889.787927][T16497] ? ksys_write+0x1ac/0x250 [ 889.787951][T16497] ? __pfx_ksys_write+0x10/0x10 [ 889.787979][T16497] __x64_sys_sendmmsg+0x9c/0x100 [ 889.788005][T16497] ? lockdep_hardirqs_on+0x78/0x100 [ 889.788022][T16497] do_syscall_64+0x115/0x870 [ 889.788040][T16497] ? clear_bhb_loop+0x40/0x90 [ 889.788060][T16497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.788077][T16497] RIP: 0033:0x7fc2c599de99 [ 889.788091][T16497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.788107][T16497] RSP: 002b:00007fc2c683b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 889.788124][T16497] RAX: ffffffffffffffda RBX: 00007fc2c5c26090 RCX: 00007fc2c599de99 [ 889.788135][T16497] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000005 [ 889.788145][T16497] RBP: 00007fc2c683b090 R08: 0000000000000000 R09: 0000000000000000 [ 889.788155][T16497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.788165][T16497] R13: 00007fc2c5c26128 R14: 00007fc2c5c26090 R15: 00007ffceaaae428 [ 889.788189][T16497] [ 891.025341][T16500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2867'. [ 891.045279][ T5732] usb 1-1: USB disconnect, device number 103 [ 891.076598][T16500] openvswitch: netlink: Missing key (keys=40, expected=80) [ 891.143001][T16507] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16507 comm=syz.2.2867 [ 891.167156][T16505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2870'. [ 891.234102][T16500] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16500 comm=syz.2.2867 [ 891.597118][T16524] netlink: 'syz.3.2876': attribute type 4 has an invalid length. [ 891.994994][T16528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16528 comm=syz.3.2876 [ 892.124020][T16532] netlink: 'syz.3.2876': attribute type 4 has an invalid length. [ 892.979302][T16518] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 893.247735][ T29] lo speed is unknown, defaulting to 1000 [ 893.268227][ T29] syz2: Port: 1 Link ACTIVE [ 893.284251][ T29] lo speed is unknown, defaulting to 1000 [ 893.508288][T16541] FAULT_INJECTION: forcing a failure. [ 893.508288][T16541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.537016][T16541] CPU: 1 UID: 0 PID: 16541 Comm: syz.3.2879 Tainted: G L syzkaller #0 PREEMPT(full) [ 893.537045][T16541] Tainted: [L]=SOFTLOCKUP [ 893.537051][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 893.537061][T16541] Call Trace: [ 893.537067][T16541] [ 893.537073][T16541] dump_stack_lvl+0x100/0x190 [ 893.537093][T16541] should_fail_ex.cold+0x5/0xa [ 893.537108][T16541] _copy_to_user+0x32/0xd0 [ 893.537123][T16541] simple_read_from_buffer+0xcb/0x170 [ 893.537136][T16541] proc_fail_nth_read+0x1af/0x230 [ 893.537153][T16541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 893.537170][T16541] ? rw_verify_area+0xce/0x6d0 [ 893.537185][T16541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 893.537201][T16541] vfs_read+0x1e4/0xb40 [ 893.537219][T16541] ? __pfx_vfs_read+0x10/0x10 [ 893.537235][T16541] ? __fget_files+0x215/0x3d0 [ 893.537249][T16541] ? __fget_files+0x21f/0x3d0 [ 893.537263][T16541] ksys_read+0x12a/0x250 [ 893.537280][T16541] ? __pfx_ksys_read+0x10/0x10 [ 893.537300][T16541] do_syscall_64+0x115/0x870 [ 893.537313][T16541] ? clear_bhb_loop+0x40/0x90 [ 893.537326][T16541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.537337][T16541] RIP: 0033:0x7fe92155e6ce [ 893.537347][T16541] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 893.537358][T16541] RSP: 002b:00007fe9223acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 893.537369][T16541] RAX: ffffffffffffffda RBX: 00007fe9223ad6c0 RCX: 00007fe92155e6ce [ 893.537377][T16541] RDX: 000000000000000f RSI: 00007fe9223ad0a0 RDI: 0000000000000004 [ 893.537383][T16541] RBP: 00007fe9223ad090 R08: 0000000000000000 R09: 0000000000000000 [ 893.537389][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.537396][T16541] R13: 00007fe921826038 R14: 00007fe921825fa0 R15: 00007ffebc1dc458 [ 893.537410][T16541] [ 894.641442][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2882'. [ 897.016281][T16571] bond0: option xmit_hash_policy: invalid value (6) [ 897.031603][T16571] bond0 (unregistering): Released all slaves [ 900.954261][T16601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2886'. [ 901.089251][T16601] openvswitch: netlink: Missing key (keys=40, expected=80) [ 901.516970][T16611] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16611 comm=syz.4.2886 [ 901.549539][T16601] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16601 comm=syz.4.2886 [ 901.563697][T16613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.588525][T16616] FAULT_INJECTION: forcing a failure. [ 901.588525][T16616] name failslab, interval 1, probability 0, space 0, times 0 [ 901.602766][T16613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.619779][T16616] CPU: 0 UID: 0 PID: 16616 Comm: syz.1.2897 Tainted: G L syzkaller #0 PREEMPT(full) [ 901.619810][T16616] Tainted: [L]=SOFTLOCKUP [ 901.619817][T16616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 901.619828][T16616] Call Trace: [ 901.619834][T16616] [ 901.619842][T16616] dump_stack_lvl+0x100/0x190 [ 901.619870][T16616] should_fail_ex.cold+0x5/0xa [ 901.619892][T16616] should_failslab+0xc2/0x120 [ 901.619916][T16616] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 901.619938][T16616] ? __alloc_skb+0x5b7/0x710 [ 901.619958][T16616] ? __alloc_skb+0x140/0x710 [ 901.619981][T16616] __alloc_skb+0x140/0x710 [ 901.619999][T16616] ? __alloc_skb+0x5b7/0x710 [ 901.620017][T16616] ? __pfx___alloc_skb+0x10/0x10 [ 901.620043][T16616] netlink_alloc_large_skb+0x69/0x150 [ 901.620062][T16616] netlink_sendmsg+0x680/0xda0 [ 901.620083][T16616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.620103][T16616] ? selinux_socket_sendmsg+0x198/0x2f0 [ 901.620133][T16616] ____sys_sendmsg+0xa4d/0xbe0 [ 901.620158][T16616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.620177][T16616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 901.620213][T16616] ___sys_sendmsg+0x190/0x1e0 [ 901.620241][T16616] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.620266][T16616] ? __lock_acquire+0x49f/0x1a40 [ 901.620287][T16616] ? get_pid_task+0x106/0x250 [ 901.620340][T16616] __sys_sendmsg+0x160/0x210 [ 901.620363][T16616] ? __pfx___sys_sendmsg+0x10/0x10 [ 901.620397][T16616] do_syscall_64+0x115/0x870 [ 901.620416][T16616] ? clear_bhb_loop+0x40/0x90 [ 901.620438][T16616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.620455][T16616] RIP: 0033:0x7fb60199de99 [ 901.620483][T16616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.620501][T16616] RSP: 002b:00007fb60294e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.620519][T16616] RAX: ffffffffffffffda RBX: 00007fb601c25fa0 RCX: 00007fb60199de99 [ 901.620531][T16616] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 901.620542][T16616] RBP: 00007fb60294e090 R08: 0000000000000000 R09: 0000000000000000 [ 901.620553][T16616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.620564][T16616] R13: 00007fb601c26038 R14: 00007fb601c25fa0 R15: 00007ffd4ba0d218 [ 901.620588][T16616] [ 902.275804][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 902.426080][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 902.504557][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.543971][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 902.545394][ T29] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 902.589155][ T10] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 902.589217][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.223020][ T10] usb 3-1: config 0 descriptor?? [ 903.525996][ T29] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 903.539289][ T29] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 903.555326][ T29] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 903.565907][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.783849][T16623] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 903.812993][ T10] hid-multitouch 0003:0EEF:72D0.0076: unknown main item tag 0x0 [ 903.826142][ T10] hid-multitouch 0003:0EEF:72D0.0076: unknown main item tag 0x0 [ 903.832390][ T29] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 903.836467][ T10] hid-multitouch 0003:0EEF:72D0.0076: unknown main item tag 0x0 [ 903.851076][ T10] hid-multitouch 0003:0EEF:72D0.0076: unknown main item tag 0x0 [ 903.861585][ T10] hid-multitouch 0003:0EEF:72D0.0076: unknown main item tag 0x0 [ 903.875518][ T10] hid-multitouch 0003:0EEF:72D0.0076: unknown main item tag 0x0 [ 903.916956][ T10] hid-multitouch 0003:0EEF:72D0.0076: unknown main item tag 0x0 [ 903.939946][ T10] hid-multitouch 0003:0EEF:72D0.0076: unbalanced delimiter at end of report description [ 903.958270][ T10] hid-multitouch 0003:0EEF:72D0.0076: probe with driver hid-multitouch failed with error -22 [ 904.012345][T16613] xt_socket: unknown flags 0x4c [ 904.037231][T15344] usb 3-1: USB disconnect, device number 93 [ 904.175609][ T5732] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 904.425391][ T5732] usb 5-1: Using ep0 maxpacket: 16 [ 904.441430][ T5732] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.489811][ T5732] usb 5-1: config 0 interface 0 has no altsetting 0 [ 904.509482][ T29] usb 2-1: USB disconnect, device number 27 [ 904.517286][ T5732] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 904.547767][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.578172][ T5732] usb 5-1: config 0 descriptor?? [ 905.139806][T16653] netlink: 'syz.2.2909': attribute type 1 has an invalid length. [ 905.727409][ T5732] mcp2221 0003:04D8:00DD.0077: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 905.741164][T16657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2910'. [ 905.754032][T16657] openvswitch: netlink: Missing key (keys=40, expected=80) [ 905.763353][T16657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16657 comm=syz.3.2910 [ 905.780862][T16657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16657 comm=syz.3.2910 [ 905.798925][T16653] bridge1: entered promiscuous mode [ 905.818280][T16653] bond0: (slave bridge1): making interface the new active one [ 905.842892][T16653] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 906.899911][T16640] i2c i2c-1: unsupported multi-msg i2c transaction [ 906.919446][T15347] usb 5-1: USB disconnect, device number 93 [ 907.395369][T15346] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 907.910941][T15346] usb 3-1: device descriptor read/64, error -71 [ 908.295143][T15347] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 908.506200][T15347] usb 4-1: Using ep0 maxpacket: 16 [ 908.516499][T15347] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.551199][T15347] usb 4-1: config 0 interface 0 has no altsetting 0 [ 908.575076][T15347] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 908.590058][T15347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.628072][T15347] usb 4-1: config 0 descriptor?? [ 908.775064][ T5732] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 908.906354][T15346] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 909.136376][T15347] mcp2221 0003:04D8:00DD.0078: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 909.633318][T16680] i2c i2c-1: unsupported multi-msg i2c transaction [ 909.819560][T15347] usb 4-1: USB disconnect, device number 108 [ 910.065107][ T5732] usb 5-1: Using ep0 maxpacket: 32 [ 910.077436][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 910.088999][ T5732] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 910.103026][ T5732] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 910.227184][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.250219][ T5732] usb 5-1: config 0 descriptor?? [ 910.307127][ T30] audit: type=1326 audit(3932494598.392:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.2923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199de99 code=0x7ffc0000 [ 910.338468][ T30] audit: type=1326 audit(3932494598.392:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.2923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199de99 code=0x7ffc0000 [ 910.378373][ T30] audit: type=1326 audit(3932494598.392:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.2923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199de99 code=0x7ffc0000 [ 910.413417][ T30] audit: type=1326 audit(3932494598.392:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.2923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199de99 code=0x7ffc0000 [ 910.470218][ T30] audit: type=1326 audit(3932494598.392:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.2923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb60199de99 code=0x7ffc0000 [ 910.497449][ T30] audit: type=1326 audit(3932494598.392:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.2923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199de99 code=0x7ffc0000 [ 910.547142][ T30] audit: type=1326 audit(3932494598.392:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.2923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199de99 code=0x7ffc0000 [ 910.589789][ T30] audit: type=1326 audit(3932494598.392:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.2923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199de99 code=0x7ffc0000 [ 910.632450][ T30] audit: type=1326 audit(3932494598.392:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.2923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60199de99 code=0x7ffc0000 [ 910.659353][ T30] audit: type=1326 audit(3932494598.392:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.2923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fb60199de99 code=0x7ffc0000 [ 910.794503][ T5732] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0079/input/input87 [ 911.203628][ T5732] sony 0003:054C:03D5.0079: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 911.268179][ T5732] usb 5-1: USB disconnect, device number 94 [ 911.269936][T16712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 911.629957][T16711] fido_id[16711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 911.674883][T15347] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 911.689899][T16713] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 912.951662][T16725] sctp: [Deprecated]: syz.1.2930 (pid 16725) Use of int in maxseg socket option. [ 912.951662][T16725] Use struct sctp_assoc_value instead [ 914.050796][T15347] usb 3-1: device descriptor read/all, error -71 [ 915.564813][ T5732] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 915.724690][ T5732] usb 2-1: Using ep0 maxpacket: 16 [ 915.741413][ T5732] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.786046][ T5732] usb 2-1: config 0 interface 0 has no altsetting 0 [ 915.804847][ T5732] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 915.820253][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.842990][ T5732] usb 2-1: config 0 descriptor?? [ 916.478317][ T5732] mcp2221 0003:04D8:00DD.007A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 916.913488][T16745] i2c i2c-1: unsupported multi-msg i2c transaction [ 917.178068][ T5732] usb 2-1: USB disconnect, device number 28 [ 917.473587][T16767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2936'. [ 917.528559][T16767] bridge_slave_0: left allmulticast mode [ 917.543530][T16775] sctp: [Deprecated]: syz.4.2945 (pid 16775) Use of int in maxseg socket option. [ 917.543530][T16775] Use struct sctp_assoc_value instead [ 917.562702][T16767] bridge_slave_0: left promiscuous mode [ 918.459854][T16767] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.545500][T16767] bridge_slave_1: left allmulticast mode [ 918.596360][T16767] bridge_slave_1: left promiscuous mode [ 918.644111][T16767] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.734175][T16767] bond0: (slave veth0_to_bond): Releasing backup interface [ 919.732373][T16767] bond0: (slave bond_slave_0): Releasing backup interface [ 920.070419][T16767] bond0: (slave bond_slave_1): Releasing backup interface [ 920.152283][T16767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.205144][T16767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 920.788624][T16797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2957'. [ 920.818397][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 920.818413][ T30] audit: type=1326 audit(3932494608.913:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.3.2957" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe92159de99 code=0x0 [ 920.864519][T16804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2952'. [ 920.931599][T16804] hpfs: Bad magic ... probably not HPFS [ 920.964658][T16804] hpfs: Bad magic ... probably not HPFS [ 921.029239][T16813] binder: 16796:16813 ioctl 4c0a 0 returned -22 [ 921.123213][T16814] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16811] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16814] [ 921.226324][T14562] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 921.714928][T14562] usb 5-1: Using ep0 maxpacket: 8 [ 921.745388][T14562] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 921.795234][T14562] usb 5-1: config 179 has no interface number 0 [ 921.842619][T14562] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 922.044859][T16823] dlm: plock device version mismatch: kernel (1.2.0), user (1.589824.4194304) [ 922.798972][T14562] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 922.810320][T14562] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 922.822641][T14562] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 922.834673][T14562] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 922.848173][T14562] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 922.857424][T14562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.869674][T16804] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 923.063711][T16829] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 923.072832][T16829] overlayfs: missing 'lowerdir' [ 923.831969][T16830] IPVS: Scheduler module ip_vs_ not found [ 924.143235][T14562] usb 5-1: USB disconnect, device number 95 [ 924.149235][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 924.149266][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 926.714032][ T5732] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 926.864009][ T5732] usb 5-1: Using ep0 maxpacket: 32 [ 926.872645][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 926.892928][ T5732] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 926.936378][ T5732] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 926.956320][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.039506][ T5732] usb 5-1: config 0 descriptor?? [ 927.494557][ T5732] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.007B/input/input89 [ 927.590178][ T5732] sony 0003:054C:03D5.007B: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 928.015139][T15344] usb 5-1: USB disconnect, device number 96 [ 928.057233][T16870] fido_id[16870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 929.717824][T16888] netlink: 'syz.4.2977': attribute type 10 has an invalid length. [ 929.731129][T16888] team0: Cannot enslave team device to itself [ 929.816179][T16878] overlayfs: failed to resolve './file0': -2 [ 929.832234][T16877] ALSA: mixer_oss: invalid OSS volume 'P' [ 930.278093][T16899] fuse: Bad value for 'fd' [ 930.307080][T16894] input: syz1 as /devices/virtual/input/input90 [ 930.760789][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'. [ 931.061953][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.853673][ T10] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 933.243737][ T10] usb 5-1: device descriptor read/64, error -71 [ 933.298621][T16954] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 933.308169][T16954] overlayfs: missing 'lowerdir' [ 933.542357][ T10] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 934.234228][T16954] IPVS: Scheduler module ip_vs_ not found [ 934.410568][T16967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2997'. [ 934.444473][ T10] usb 5-1: device descriptor read/64, error -71 [ 934.566481][ T10] usb usb5-port1: attempt power cycle [ 934.569292][T16970] hpfs: Bad magic ... probably not HPFS [ 934.591373][T16967] /dev/nullb0: Can't open blockdev [ 935.183572][T14562] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 935.313573][ T10] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 935.358062][T14562] usb 1-1: Using ep0 maxpacket: 8 [ 935.367532][ T10] usb 5-1: device descriptor read/8, error -71 [ 935.378480][T14562] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 935.400991][T14562] usb 1-1: config 179 has no interface number 0 [ 935.418655][T14562] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 935.441397][T14562] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 935.458729][T14562] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 935.470497][T14562] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 935.482089][T14562] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 935.502164][T14562] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 935.511287][T14562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.585417][T16967] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 935.642973][ T10] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 935.863799][ T10] usb 5-1: device not accepting address 100, error -71 [ 935.947868][ T10] usb usb5-port1: unable to enumerate USB device [ 936.561734][ T29] usb 1-1: USB disconnect, device number 104 [ 936.561737][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 936.561868][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 936.913562][T15344] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 936.923487][ T5732] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 937.063544][T15344] usb 4-1: Using ep0 maxpacket: 16 [ 937.070027][T15344] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.081552][ T5732] usb 5-1: Using ep0 maxpacket: 16 [ 937.086982][T15344] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.093717][T15344] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 937.103271][T15344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.111960][ T5732] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.123557][T14562] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 937.127554][ T5732] usb 5-1: config 0 interface 0 has no altsetting 0 [ 937.138566][T15344] usb 4-1: config 0 descriptor?? [ 937.153652][ T5732] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 937.167080][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.236872][ T5732] usb 5-1: config 0 descriptor?? [ 937.323784][T14562] usb 3-1: Using ep0 maxpacket: 32 [ 937.353304][T14562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 937.430664][T14562] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 937.446139][T14562] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 937.455787][T14562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.555309][T14562] usb 3-1: config 0 descriptor?? [ 937.631793][T15344] mcp2221 0003:04D8:00DD.007C: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 937.922041][ T5732] mcp2221 0003:04D8:00DD.007D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 938.156551][T16995] i2c i2c-1: unsupported multi-msg i2c transaction [ 938.262785][T16997] i2c i2c-1: unsupported multi-msg i2c transaction [ 938.347721][T15344] usb 4-1: USB disconnect, device number 109 [ 938.738982][T14562] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.007E/input/input91 [ 938.856296][T14562] sony 0003:054C:03D5.007E: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 938.864713][ T5732] usb 5-1: USB disconnect, device number 101 [ 938.892647][T14562] usb 3-1: USB disconnect, device number 98 [ 938.903758][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 938.918456][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 938.930006][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 938.939169][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 938.949309][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 939.115130][T17012] fido_id[17012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 939.724576][T17010] lo speed is unknown, defaulting to 1000 [ 939.964435][T17010] wlan0 speed is unknown, defaulting to 1000 [ 940.279119][T17042] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 941.087601][T14080] Bluetooth: hci4: command tx timeout [ 941.750825][T17010] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.779720][T17010] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.812346][T17010] bridge_slave_0: entered allmulticast mode [ 941.844022][T17010] bridge_slave_0: entered promiscuous mode [ 941.876411][T17010] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.903930][T17010] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.926126][T17010] bridge_slave_1: entered allmulticast mode [ 941.953410][T17010] bridge_slave_1: entered promiscuous mode [ 942.335986][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3021'. [ 942.352088][T17010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.380917][T17010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.459278][T17010] team0: Port device team_slave_0 added [ 942.475001][T17010] team0: Port device team_slave_1 added [ 942.525766][T17010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.532804][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.560435][T17010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.583640][T17010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.590677][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.617884][T17010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.683340][T15344] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 942.843549][T15344] usb 4-1: Using ep0 maxpacket: 16 [ 942.896686][T15344] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.928442][T15344] usb 4-1: config 0 interface 0 has no altsetting 0 [ 942.995732][T15344] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 943.009881][T15344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.050929][T15344] usb 4-1: config 0 descriptor?? [ 943.146438][T14080] Bluetooth: hci4: command tx timeout [ 943.175434][T17010] hsr_slave_0: entered promiscuous mode [ 943.195859][T17010] hsr_slave_1: entered promiscuous mode [ 943.214718][T17010] debugfs: 'hsr0' already exists in 'hsr' [ 943.234835][T17010] Cannot create hsr debugfs directory [ 943.555160][T15344] mcp2221 0003:04D8:00DD.007F: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 944.208083][T15344] usb 4-1: USB disconnect, device number 110 [ 944.463218][ T5747] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 944.953935][ T5747] usb 1-1: device descriptor read/all, error -61 [ 945.040215][T17010] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 945.058471][T17010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 945.067693][T17010] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 945.091837][T17010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 945.093011][ T5747] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 945.102658][T17010] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 945.118334][T17010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 945.128724][T17010] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 945.131176][T17114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 945.150449][T17010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 945.223403][T14080] Bluetooth: hci4: command tx timeout [ 945.293074][ T5747] usb 1-1: device descriptor read/64, error -71 [ 946.195173][T17010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.225140][T17010] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.273142][ T5747] usb usb1-port1: attempt power cycle [ 946.279156][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.286299][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.298860][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.306031][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.476487][T17136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3040'. [ 946.699717][T17138] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 946.708795][T17138] overlayfs: missing 'lowerdir' [ 947.302945][T14080] Bluetooth: hci4: command tx timeout [ 947.347653][T17139] IPVS: Scheduler module ip_vs_ not found [ 948.060901][T17158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3045'. [ 948.112923][T15347] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 948.154026][T17160] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 948.163032][T17160] overlayfs: missing 'lowerdir' [ 948.292801][T15347] usb 1-1: Using ep0 maxpacket: 16 [ 948.299744][T15347] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.390694][T15347] usb 1-1: config 0 interface 0 has no altsetting 0 [ 948.491457][T15347] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 948.621577][T15347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.926424][T15347] usb 1-1: config 0 descriptor?? [ 949.075344][T17160] IPVS: Scheduler module ip_vs_ not found [ 949.668886][T17010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.698880][T15347] mcp2221 0003:04D8:00DD.0080: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 949.730748][T17190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3053'. [ 950.079256][T17190] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 950.088199][T17190] overlayfs: missing 'lowerdir' [ 950.576769][T17151] i2c i2c-1: unsupported multi-msg i2c transaction [ 950.655675][T17190] IPVS: Scheduler module ip_vs_ not found [ 950.694101][ T9] usb 1-1: USB disconnect, device number 108 [ 951.584663][T17010] veth0_vlan: entered promiscuous mode [ 951.627345][T17010] veth1_vlan: entered promiscuous mode [ 952.002286][T17010] veth0_macvtap: entered promiscuous mode [ 952.035492][T17010] veth1_macvtap: entered promiscuous mode [ 952.059841][T17010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.080820][T17010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.114957][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.134130][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.172191][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.205189][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.266895][T17228] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 952.380489][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.411828][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.677275][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.686645][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.109091][T17246] lo speed is unknown, defaulting to 1000 [ 953.264740][T17246] wlan0 speed is unknown, defaulting to 1000 [ 954.068713][T17261] FAULT_INJECTION: forcing a failure. [ 954.068713][T17261] name failslab, interval 1, probability 0, space 0, times 0 [ 954.118679][T17261] CPU: 0 UID: 0 PID: 17261 Comm: syz.4.3073 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.118710][T17261] Tainted: [L]=SOFTLOCKUP [ 954.118716][T17261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 954.118727][T17261] Call Trace: [ 954.118733][T17261] [ 954.118741][T17261] dump_stack_lvl+0x100/0x190 [ 954.118768][T17261] should_fail_ex.cold+0x5/0xa [ 954.118792][T17261] should_failslab+0xc2/0x120 [ 954.118816][T17261] __kmalloc_cache_noprof+0x91/0x6c0 [ 954.118873][T17261] ? rtnl_newlink+0x126/0x2380 [ 954.118897][T17261] ? __pfx_rtnl_newlink+0x10/0x10 [ 954.118920][T17261] rtnl_newlink+0x126/0x2380 [ 954.118946][T17261] ? find_held_lock+0x2b/0x80 [ 954.118982][T17261] ? __pfx_rtnl_newlink+0x10/0x10 [ 954.119003][T17261] ? find_held_lock+0x2b/0x80 [ 954.119029][T17261] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 954.119049][T17261] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 954.119073][T17261] ? avc_has_perm_noaudit+0x145/0x3b0 [ 954.119101][T17261] ? __lock_acquire+0x49f/0x1a40 [ 954.119135][T17261] ? find_held_lock+0x2b/0x80 [ 954.119161][T17261] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 954.119183][T17261] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 954.119207][T17261] ? __pfx_rtnl_newlink+0x10/0x10 [ 954.119230][T17261] rtnetlink_rcv_msg+0x95e/0xe90 [ 954.119255][T17261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 954.119283][T17261] ? __lock_acquire+0x49f/0x1a40 [ 954.119308][T17261] netlink_rcv_skb+0x159/0x420 [ 954.119327][T17261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 954.119351][T17261] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 954.119377][T17261] ? netlink_deliver_tap+0x1ae/0xcc0 [ 954.119409][T17261] netlink_unicast+0x585/0x850 [ 954.119429][T17261] ? __pfx_netlink_unicast+0x10/0x10 [ 954.119456][T17261] netlink_sendmsg+0x8b0/0xda0 [ 954.119478][T17261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.119497][T17261] ? selinux_socket_sendmsg+0x198/0x2f0 [ 954.119527][T17261] ____sys_sendmsg+0xa4d/0xbe0 [ 954.119553][T17261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.119572][T17261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.119609][T17261] ___sys_sendmsg+0x190/0x1e0 [ 954.119639][T17261] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.119664][T17261] ? __lock_acquire+0x49f/0x1a40 [ 954.119686][T17261] ? get_pid_task+0x106/0x250 [ 954.119740][T17261] __sys_sendmsg+0x160/0x210 [ 954.119762][T17261] ? __pfx___sys_sendmsg+0x10/0x10 [ 954.119797][T17261] do_syscall_64+0x115/0x870 [ 954.119816][T17261] ? clear_bhb_loop+0x40/0x90 [ 954.119837][T17261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.119856][T17261] RIP: 0033:0x7fc2c599de99 [ 954.119871][T17261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.119888][T17261] RSP: 002b:00007fc2c685c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.119905][T17261] RAX: ffffffffffffffda RBX: 00007fc2c5c25fa0 RCX: 00007fc2c599de99 [ 954.119917][T17261] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 954.119929][T17261] RBP: 00007fc2c685c090 R08: 0000000000000000 R09: 0000000000000000 [ 954.119944][T17261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.119955][T17261] R13: 00007fc2c5c26038 R14: 00007fc2c5c25fa0 R15: 00007ffceaaae428 [ 954.119980][T17261] [ 954.192534][ T29] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 954.476915][T17263] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3009'. [ 954.642677][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 954.657223][ T29] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.673554][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 954.695185][ T29] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 954.745479][ T30] audit: type=1400 audit(3932494642.844:1639): avc: denied { ioctl } for pid=17269 comm="syz.3.3076" path="/dev/uhid" dev="devtmpfs" ino=1272 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 954.774609][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.919929][ T29] usb 3-1: config 0 descriptor?? [ 954.938377][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 954.968165][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 954.976770][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 954.991793][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 955.004650][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 955.742265][ T29] mcp2221 0003:04D8:00DD.0081: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 956.017624][T17255] i2c i2c-1: unsupported multi-msg i2c transaction [ 956.064611][ T29] usb 3-1: USB disconnect, device number 99 [ 956.320460][T17275] lo speed is unknown, defaulting to 1000 [ 956.622662][T17275] wlan0 speed is unknown, defaulting to 1000 [ 956.886603][ T5342] kernel write not supported for file /media0 (pid: 5342 comm: kworker/0:3) [ 956.994575][T17275] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.004085][T17275] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.011285][T17275] bridge_slave_0: entered allmulticast mode [ 957.031402][T17275] bridge_slave_0: entered promiscuous mode [ 957.051200][T17275] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.052534][T14080] Bluetooth: hci6: command tx timeout [ 957.059125][T17275] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.059270][T17275] bridge_slave_1: entered allmulticast mode [ 957.060460][T17275] bridge_slave_1: entered promiscuous mode [ 958.948548][ T5342] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 959.134995][T14080] Bluetooth: hci6: command tx timeout [ 959.306363][ T5342] usb 6-1: Using ep0 maxpacket: 8 [ 959.488274][T17330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3090'. [ 959.709737][T17331] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 959.754451][T17331] overlayfs: missing 'lowerdir' [ 960.247256][T17332] IPVS: Scheduler module ip_vs_ not found [ 960.756371][T17275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.885081][ T5342] usb 6-1: device descriptor read/all, error -71 [ 960.896679][T17275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.049152][T17338] SELinux: Context system_u:object_r:devicekit_var_lib_t:s0 is not valid (left unmapped). [ 961.060732][ T30] audit: type=1400 audit(3932494649.145:1640): avc: denied { relabelfrom } for pid=17337 comm="syz.2.3093" name="TCPv6" dev="sockfs" ino=72519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 961.579016][T14080] Bluetooth: hci6: command tx timeout [ 961.681521][ T30] audit: type=1400 audit(3932494649.775:1641): avc: denied { relabelto } for pid=17337 comm="syz.2.3093" name="TCPv6" dev="sockfs" ino=72519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:devicekit_var_lib_t:s0" [ 963.062557][T15344] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 963.211560][T17275] team0: Port device team_slave_0 added [ 963.213917][T15344] usb 3-1: Using ep0 maxpacket: 16 [ 963.238731][T15344] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.242480][T17275] team0: Port device team_slave_1 added [ 963.264942][T15344] usb 3-1: config 0 interface 0 has no altsetting 0 [ 963.272604][T15344] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 963.281792][T15344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.313235][T15344] usb 3-1: config 0 descriptor?? [ 963.462208][T17275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.487467][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.587248][T17275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.611927][ T5621] Bluetooth: hci6: command tx timeout [ 963.630705][T17275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.648667][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.707294][T17275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.007360][T17275] hsr_slave_0: entered promiscuous mode [ 964.030116][T17275] hsr_slave_1: entered promiscuous mode [ 964.054091][T17275] debugfs: 'hsr0' already exists in 'hsr' [ 964.074347][T17275] Cannot create hsr debugfs directory [ 965.888345][T15344] mcp2221 0003:04D8:00DD.0082: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 965.997282][T15344] usb 3-1: USB disconnect, device number 100 [ 966.343033][T17378] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3105'. [ 967.691276][T10323] vlan3: left allmulticast mode [ 967.697877][T10323] geneve0: left allmulticast mode [ 967.706841][T10323] vlan3: left promiscuous mode [ 967.711902][T10323] geneve0: left promiscuous mode [ 967.720608][T10323] bridge0: port 3(vlan3) entered disabled state [ 968.459879][T14562] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 968.491139][ T30] audit: type=1400 audit(3932494656.575:1642): avc: denied { write } for pid=17384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.606575][T14562] usb 6-1: device descriptor read/64, error -71 [ 968.613535][ T30] audit: type=1400 audit(3932494656.705:1643): avc: denied { write } for pid=17405 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.738137][T10323] bond0 (unregistering): Released all slaves [ 968.749387][T10323] bond1 (unregistering): (slave vlan2): Releasing active interface [ 968.760349][T10323] bond1 (unregistering): Released all slaves [ 968.775034][T10323] bond2 (unregistering): Released all slaves [ 968.824464][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 968.880670][T14562] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 969.019793][T14562] usb 6-1: device descriptor read/64, error -71 [ 969.166756][T14562] usb usb6-port1: attempt power cycle [ 969.186932][T10323] tipc: Left network mode [ 969.631855][T15344] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 969.633853][T14562] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 969.698286][T14562] usb 6-1: device descriptor read/8, error -71 [ 970.013426][T14562] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 970.114246][T14562] usb 6-1: device descriptor read/8, error -71 [ 970.265709][T14562] usb usb6-port1: unable to enumerate USB device [ 970.801561][T15344] usb 4-1: Using ep0 maxpacket: 8 [ 970.932172][T15344] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 970.964134][T15344] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 971.093837][T15344] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 971.127147][T15344] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 971.144350][ T30] audit: type=1400 audit(3932494659.215:1644): avc: denied { write } for pid=17414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.184520][T15344] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 971.198127][T15344] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 971.222230][T15344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.222439][T17441] sctp: [Deprecated]: syz.4.3115 (pid 17441) Use of int in max_burst socket option. [ 971.222439][T17441] Use struct sctp_assoc_value instead [ 971.384041][ T30] audit: type=1400 audit(3932494659.475:1645): avc: denied { write } for pid=17442 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.449798][T17441] sctp: [Deprecated]: syz.4.3115 (pid 17441) Use of int in maxseg socket option. [ 971.449798][T17441] Use struct sctp_assoc_value instead [ 971.472713][T17444] syzkaller0: entered promiscuous mode [ 971.499688][T17444] syzkaller0: entered allmulticast mode [ 971.518746][T17447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17447 comm=syz.2.3117 [ 971.564316][T15344] usb 4-1: usb_control_msg returned -32 [ 971.572084][T15344] usbtmc 4-1:16.0: can't read capabilities [ 971.995535][T10323] hsr_slave_0: left promiscuous mode [ 972.006451][T10323] hsr_slave_1: left promiscuous mode [ 972.021682][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 972.061546][T15344] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 972.122115][T17460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.147816][T17460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.170117][ T10] usb 4-1: USB disconnect, device number 111 [ 972.177851][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 972.189781][T17460] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 972.199955][ T30] audit: type=1400 audit(3932494660.285:1646): avc: denied { write } for pid=17458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.227940][T15344] usb 6-1: device descriptor read/64, error -71 [ 972.228445][ T9] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 972.276567][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.304865][ T9] usb 3-1: Product: syz [ 972.327769][ T9] usb 3-1: Manufacturer: syz [ 972.342128][ T9] usb 3-1: SerialNumber: syz [ 972.390761][ T9] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 972.418588][ T30] audit: type=1400 audit(3932494660.505:1647): avc: denied { write } for pid=17475 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.501552][T15344] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 972.595791][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 972.622859][ T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 972.631339][ T9] usb 3-1: media controller created [ 972.647278][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 972.662363][T15344] usb 6-1: device descriptor read/64, error -71 [ 972.728216][T17275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 972.748381][T17275] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 972.764509][T17275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 972.783970][T15344] usb usb6-port1: attempt power cycle [ 972.799258][T17275] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 972.811314][ T9] usb 3-1: USB disconnect, device number 101 [ 972.822675][T17275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 972.883379][T17275] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 972.903226][T17275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 972.939675][ T30] audit: type=1400 audit(3932494661.026:1648): avc: denied { write } for pid=17481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.947362][T17275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 973.152349][T15344] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 973.184049][T15344] usb 6-1: device descriptor read/8, error -71 [ 973.442144][T15344] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 973.536408][T15344] usb 6-1: device descriptor read/8, error -71 [ 973.693184][T15344] usb usb6-port1: unable to enumerate USB device [ 974.235442][ T30] audit: type=1400 audit(3932494662.216:1649): avc: denied { write } for pid=17498 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.699126][T17275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.747459][T17275] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.798443][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.805608][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.856184][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.863337][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.032251][ T30] audit: type=1400 audit(3932494663.686:1650): avc: denied { getopt } for pid=17525 comm="syz.3.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 976.261412][T10323] IPVS: stop unused estimator thread 0... [ 976.631243][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 976.731907][ T5747] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 976.751267][ T5732] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 977.108815][T17275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.211255][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 977.220238][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 977.231754][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 977.239571][T17275] veth0_vlan: entered promiscuous mode [ 977.244729][ T29] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 977.244753][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.270394][ T29] usb 6-1: config 0 descriptor?? [ 977.280151][ T5747] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 977.284632][T17275] veth1_vlan: entered promiscuous mode [ 977.302337][ T5747] usb 5-1: config 0 has no interfaces? [ 977.310913][ T5747] usb 5-1: config 0 has no interfaces? [ 977.313220][T17275] veth0_macvtap: entered promiscuous mode [ 977.320700][ T5747] usb 5-1: config 0 has no interfaces? [ 977.332054][ T5747] usb 5-1: config 0 has no interfaces? [ 977.333384][T17275] veth1_macvtap: entered promiscuous mode [ 977.338629][ T5747] usb 5-1: config 0 has no interfaces? [ 977.348962][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 977.356535][ T5747] usb 5-1: config 0 has no interfaces? [ 977.358605][T17275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.363014][ T5747] usb 5-1: config 0 has no interfaces? [ 977.376041][ T5732] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.376588][T17275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.386502][ T5732] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 977.403088][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.408967][ T5747] usb 5-1: config 0 has no interfaces? [ 977.423802][ T5747] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 977.433294][ T5747] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 977.443448][ T5747] usb 5-1: Product: syz [ 977.448080][ T5747] usb 5-1: Manufacturer: syz [ 977.453406][ T5747] usb 5-1: SerialNumber: syz [ 977.458167][ T5732] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 977.467573][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.477188][ T5732] usb 4-1: Product: syz [ 977.481568][ T5732] usb 4-1: Manufacturer: syz [ 977.486190][ T5732] usb 4-1: SerialNumber: syz [ 977.502715][ T5747] usb 5-1: config 0 descriptor?? [ 977.508712][ T5732] usb 4-1: config 0 descriptor?? [ 977.543599][ T5732] appledisplay 4-1:0.0: Could not find int-in endpoint [ 977.574879][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.597660][ T5732] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 977.602908][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.621781][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.718792][ T29] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.0083/input/input92 [ 977.787002][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.804060][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.836141][ T29] sony 0003:054C:03D5.0083: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 977.852742][ T30] audit: type=1400 audit(3932494665.946:1651): avc: denied { write } for pid=17553 comm="syz.4.3136" name="functions" dev="configfs" ino=9070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 977.913378][ T29] usb 6-1: USB disconnect, device number 12 [ 977.984878][ T30] audit: type=1400 audit(3932494665.956:1652): avc: denied { write } for pid=17553 comm="syz.4.3136" name="core" dev="configfs" ino=3118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 978.010876][T10327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.047015][T10327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.060145][ T5732] usb 4-1: USB disconnect, device number 112 [ 978.065224][T17573] fido_id[17573]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 978.084112][ T30] audit: type=1400 audit(3932494665.976:1653): avc: denied { write } for pid=17553 comm="syz.4.3136" name="rd_mcp_0" dev="configfs" ino=74281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 978.125716][ T5725] usb 5-1: USB disconnect, device number 102 [ 978.146063][ T30] audit: type=1400 audit(3932494666.036:1654): avc: denied { write } for pid=17574 comm="syz.2.3139" name="strings" dev="configfs" ino=9072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 978.216965][ T30] audit: type=1400 audit(3932494666.036:1655): avc: denied { write } for pid=17574 comm="syz.2.3139" name="0x409" dev="configfs" ino=74802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 978.217565][T17575] loop5: detected capacity change from 0 to 7 [ 978.262908][ T30] audit: type=1400 audit(3932494666.036:1656): avc: denied { write } for pid=17574 comm="syz.2.3139" name="0x409" dev="configfs" ino=74802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 978.300177][T17575] Dev loop5: unable to read RDB block 7 [ 978.311725][T17575] loop5: AHDI p1 p2 p3 [ 978.325054][T17575] loop5: partition table partially beyond EOD, truncated [ 978.333303][ T30] audit: type=1400 audit(3932494666.066:1657): avc: denied { write } for pid=17574 comm="syz.2.3139" name="strings" dev="configfs" ino=9072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 978.418043][T17575] loop5: p1 start 1601398130 is beyond EOD, truncated [ 978.432072][T17575] loop5: p2 start 1702059890 is beyond EOD, truncated [ 978.442821][ T30] audit: type=1400 audit(3932494666.086:1658): avc: denied { write } for pid=17574 comm="syz.2.3139" name="usb_gadget" dev="configfs" ino=3196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 982.035875][T14080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 982.051249][T14080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 982.060171][T14080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 982.139416][T14080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 982.163818][ T10] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 982.221457][T14080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 982.376541][ T10] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 982.414221][ T10] usb 6-1: config 0 has no interface number 0 [ 982.428703][ T10] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 982.464007][ T10] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 982.499907][ T10] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 982.506221][T17620] kvm: emulating exchange as write [ 982.527284][ T10] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 982.549576][ T10] usb 6-1: Manufacturer: syz [ 982.559000][ T10] usb 6-1: SerialNumber: syz [ 982.580382][ T10] usb 6-1: config 0 descriptor?? [ 982.770146][T17610] lo speed is unknown, defaulting to 1000 [ 982.800292][T17604] netlink: 'syz.5.3146': attribute type 19 has an invalid length. [ 982.951007][ T5732] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 983.003029][T17610] wlan0 speed is unknown, defaulting to 1000 [ 983.093871][ T10] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 983.111417][ T5732] usb 1-1: Using ep0 maxpacket: 32 [ 983.111515][ T10] usb 6-1: USB disconnect, device number 13 [ 983.136515][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 983.163480][ T5732] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 983.178798][ T5732] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 983.190699][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.201093][ T9] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 983.223609][ T5732] usb 1-1: config 0 descriptor?? [ 983.269679][T17610] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.294748][T17610] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.303701][T17610] bridge_slave_0: entered allmulticast mode [ 983.338990][T17610] bridge_slave_0: entered promiscuous mode [ 983.380954][T17610] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.394340][T17610] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.405329][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.406024][T17610] bridge_slave_1: entered allmulticast mode [ 983.425940][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 983.427406][T17610] bridge_slave_1: entered promiscuous mode [ 983.435966][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.492847][ T9] usb 3-1: config 0 descriptor?? [ 983.555606][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 983.778512][T17630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.778657][ T5732] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0084/input/input94 [ 983.802200][T17630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.819318][T17610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.881109][T17610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.897150][T17644] netlink: 'syz.5.3153': attribute type 11 has an invalid length. [ 983.929237][ T5732] sony 0003:054C:03D5.0084: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 984.048752][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 984.062300][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 984.083238][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 984.091637][ T5732] usb 1-1: USB disconnect, device number 109 [ 984.094118][T17610] team0: Port device team_slave_0 added [ 984.103830][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 984.112232][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 984.121117][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 984.133934][T17610] team0: Port device team_slave_1 added [ 984.142587][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 984.170259][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 984.263733][ T5621] Bluetooth: hci1: command tx timeout [ 984.305729][T17648] fido_id[17648]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 984.320144][T17610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.320160][T17610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.320370][T17610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.320508][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 984.325107][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 984.837437][T17610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.858973][T17610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.883129][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 984.917876][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 984.939259][T17610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.129925][T17610] hsr_slave_0: entered promiscuous mode [ 985.153147][T17610] hsr_slave_1: entered promiscuous mode [ 985.177015][T17610] debugfs: 'hsr0' already exists in 'hsr' [ 985.206541][T17610] Cannot create hsr debugfs directory [ 985.460963][ T5732] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 985.476160][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 985.571503][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 985.610583][ T9] pwc: Registered as video103. [ 985.620726][ T5732] usb 5-1: Using ep0 maxpacket: 32 [ 985.625469][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input95 [ 985.652814][ T5732] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 985.671931][ T9] usb 3-1: USB disconnect, device number 102 [ 985.703733][ T5732] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 985.719258][ T5732] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 985.779886][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.832900][ T5732] usb 5-1: config 0 descriptor?? [ 986.201755][T17668] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 986.210937][T17668] overlayfs: missing 'lowerdir' [ 986.324004][ T5732] kye 0003:0458:5010.0085: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 986.341008][ T5621] Bluetooth: hci1: command tx timeout [ 986.490022][ T5732] kye 0003:0458:5010.0085: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 986.619920][ T5732] kye 0003:0458:5010.0085: tablet-enabling feature report not found [ 986.748597][ T5732] kye 0003:0458:5010.0085: tablet enabling failed [ 987.194594][T17668] IPVS: Scheduler module ip_vs_ not found [ 988.303730][T17687] dlm: no locking on control device [ 988.318398][T17686] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 988.326867][T17686] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 988.335452][T17686] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 988.411930][ T5621] Bluetooth: hci1: command tx timeout [ 988.431018][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 988.448495][ T30] audit: type=1400 audit(3932494676.496:1659): avc: denied { bind } for pid=17683 comm="syz.2.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 988.641589][ T10] usb 6-1: device descriptor read/64, error -71 [ 988.960695][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 989.143630][ T10] usb 6-1: device descriptor read/64, error -71 [ 989.406607][ T10] usb usb6-port1: attempt power cycle [ 989.716717][ T9] usb 5-1: USB disconnect, device number 103 [ 989.795600][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 989.875077][ T10] usb 6-1: device descriptor read/8, error -71 [ 990.169732][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 990.242176][ T10] usb 6-1: device descriptor read/8, error -71 [ 990.397870][ T10] usb usb6-port1: unable to enumerate USB device [ 990.490590][ T5621] Bluetooth: hci1: command tx timeout [ 991.090577][T14562] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 991.250565][T14562] usb 5-1: Using ep0 maxpacket: 32 [ 992.150320][T14562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 992.288860][T14562] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 992.312323][T14562] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 992.333043][T14562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.346601][T14562] usb 5-1: config 0 descriptor?? [ 992.434263][ T30] audit: type=1400 audit(3932494680.527:1660): avc: denied { listen } for pid=17708 comm="syz.5.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 992.456294][ T30] audit: type=1400 audit(3932494680.547:1661): avc: denied { accept } for pid=17708 comm="syz.5.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 992.477509][T17610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 992.491775][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.515579][T17610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 992.842482][T14562] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0086/input/input96 [ 992.852928][T17610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 992.886015][T17610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 992.913078][T17610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 992.958710][T17610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 992.987238][T17610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 993.001246][T14562] sony 0003:054C:03D5.0086: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 993.057860][T17610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 993.086388][T14562] usb 5-1: USB disconnect, device number 104 [ 993.269839][T17721] fido_id[17721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 993.397378][T17610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.472135][T17610] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.512926][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.520021][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.585144][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.592300][T10323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.883572][T17737] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 993.890116][T17737] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 993.960789][T17737] vhci_hcd vhci_hcd.0: Device attached [ 994.140603][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 994.200285][T14562] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 994.230544][ T10] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 994.355493][T17610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.377637][T14562] usb 1-1: config 0 has no interfaces? [ 994.390311][T14562] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 994.416931][T14562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.452347][T14562] usb 1-1: config 0 descriptor?? [ 994.503582][T17610] veth0_vlan: entered promiscuous mode [ 994.527004][T17610] veth1_vlan: entered promiscuous mode [ 994.702443][T17610] veth0_macvtap: entered promiscuous mode [ 994.738124][T17610] veth1_macvtap: entered promiscuous mode [ 994.809146][T17739] usbip_core: unknown command [ 994.833152][T14562] usb 1-1: USB disconnect, device number 110 [ 994.844308][T17610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.846047][T17739] vhci_hcd: unknown pdu 117964806 [ 994.880200][T17739] usbip_core: unknown command [ 994.895605][T10325] vhci_hcd vhci_hcd.0: stop threads [ 994.912460][T10325] vhci_hcd vhci_hcd.0: release socket [ 994.912948][T17610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.938012][T10325] vhci_hcd vhci_hcd.0: disconnect device [ 994.980667][T10323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.002408][T10323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.015705][T10323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.027028][T10323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.100321][ T5732] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 995.201677][ T30] audit: type=1400 audit(3932494683.297:1662): avc: denied { append } for pid=17755 comm="syz.2.3176" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 995.260243][ T5732] usb 5-1: Using ep0 maxpacket: 16 [ 995.288548][ T5732] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.321428][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.457628][ T5732] usb 5-1: config 0 interface 0 has no altsetting 0 [ 995.467450][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.480715][ T5732] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 995.509858][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.705378][ T5732] usb 5-1: config 0 descriptor?? [ 996.874916][T10325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.908411][T10325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.984588][ T5732] mcp2221 0003:04D8:00DD.0087: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 997.190059][ T5799] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 997.325088][T14080] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 997.339511][T14080] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 997.350162][T14080] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 997.358861][T14080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 997.366058][ T5799] usb 6-1: Using ep0 maxpacket: 16 [ 997.373785][T14080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 997.382269][ T5799] usb 6-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 997.395322][ T5799] usb 6-1: config 0 interface 0 has no altsetting 0 [ 997.403349][ T5799] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 997.406356][T17752] i2c i2c-1: unsupported multi-msg i2c transaction [ 997.412487][ T5799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.443722][ T5799] usb 6-1: config 0 descriptor?? [ 997.497271][ T5725] usb 5-1: USB disconnect, device number 105 [ 997.883369][ T5799] kovaplus 0003:1E7D:2D50.0088: unknown main item tag 0x2 [ 997.902528][ T5799] kovaplus 0003:1E7D:2D50.0088: unknown main item tag 0x0 [ 997.912899][T17775] lo speed is unknown, defaulting to 1000 [ 997.917823][ T5799] kovaplus 0003:1E7D:2D50.0088: unknown main item tag 0x0 [ 997.938763][ T5799] kovaplus 0003:1E7D:2D50.0088: unknown main item tag 0x0 [ 997.954497][ T5799] kovaplus 0003:1E7D:2D50.0088: unknown main item tag 0x0 [ 997.971938][ T5799] kovaplus 0003:1E7D:2D50.0088: unknown main item tag 0x0 [ 997.989991][ T5799] kovaplus 0003:1E7D:2D50.0088: unknown main item tag 0x0 [ 998.005120][ T5799] kovaplus 0003:1E7D:2D50.0088: unknown main item tag 0x0 [ 998.031455][ T5799] kovaplus 0003:1E7D:2D50.0088: unknown main item tag 0x0 [ 998.055646][ T5799] kovaplus 0003:1E7D:2D50.0088: unknown main item tag 0x0 [ 998.116975][ T5799] kovaplus 0003:1E7D:2D50.0088: hidraw0: USB HID v0.81 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 998.702533][ T5799] kovaplus 0003:1E7D:2D50.0088: couldn't init struct kovaplus_device [ 998.725267][T17775] wlan0 speed is unknown, defaulting to 1000 [ 998.730511][ T5799] kovaplus 0003:1E7D:2D50.0088: couldn't install mouse [ 998.748660][ T5799] kovaplus 0003:1E7D:2D50.0088: probe with driver kovaplus failed with error -71 [ 998.846285][ T5799] usb 6-1: USB disconnect, device number 18 [ 998.931577][T13864] syz_tun (unregistering): left allmulticast mode [ 999.518158][ T5621] Bluetooth: hci3: command tx timeout [ 999.590111][T15344] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 999.620370][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 999.955558][T15344] usb 5-1: Using ep0 maxpacket: 32 [ 999.977808][T15344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 1000.004664][T15344] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1000.036600][T15344] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1000.059313][T15344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.071229][T17815] FAULT_INJECTION: forcing a failure. [ 1000.071229][T17815] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.100702][ T48] Bluetooth: (null): Invalid header checksum [ 1000.114100][T15344] usb 5-1: config 0 descriptor?? [ 1000.115826][T17815] CPU: 0 UID: 0 PID: 17815 Comm: syz.0.3187 Tainted: G L syzkaller #0 PREEMPT(full) [ 1000.115851][T17815] Tainted: [L]=SOFTLOCKUP [ 1000.115857][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1000.115867][T17815] Call Trace: [ 1000.115873][T17815] [ 1000.115880][T17815] dump_stack_lvl+0x100/0x190 [ 1000.115905][T17815] should_fail_ex.cold+0x5/0xa [ 1000.115926][T17815] should_failslab+0xc2/0x120 [ 1000.115948][T17815] __kmalloc_noprof+0xfc/0x820 [ 1000.115966][T17815] ? rcu_is_watching+0x12/0xc0 [ 1000.115989][T17815] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1000.116011][T17815] tomoyo_realpath_from_path+0xb6/0x690 [ 1000.116031][T17815] tomoyo_path_number_perm+0x23c/0x580 [ 1000.116052][T17815] ? tomoyo_path_number_perm+0x22e/0x580 [ 1000.116075][T17815] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1000.116118][T17815] ? find_held_lock+0x2b/0x80 [ 1000.116148][T17815] ? __fget_files+0x215/0x3d0 [ 1000.116163][T17815] ? hook_file_ioctl_common+0x140/0x440 [ 1000.116180][T17815] ? __fget_files+0x215/0x3d0 [ 1000.116200][T17815] ? __fget_files+0x21f/0x3d0 [ 1000.116220][T17815] security_file_ioctl+0xd3/0x230 [ 1000.116243][T17815] __x64_sys_ioctl+0xb7/0x210 [ 1000.116267][T17815] do_syscall_64+0x115/0x870 [ 1000.116286][T17815] ? clear_bhb_loop+0x40/0x90 [ 1000.116305][T17815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.116321][T17815] RIP: 0033:0x7ff6a679de99 [ 1000.116336][T17815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.116350][T17815] RSP: 002b:00007ff6a7693028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1000.116371][T17815] RAX: ffffffffffffffda RBX: 00007ff6a6a25fa0 RCX: 00007ff6a679de99 [ 1000.116382][T17815] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 1000.116392][T17815] RBP: 00007ff6a7693090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.116402][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.116411][T17815] R13: 00007ff6a6a26038 R14: 00007ff6a6a25fa0 R15: 00007ffc3b96d828 [ 1000.116434][T17815] [ 1000.116440][T17815] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1000.335632][ T13] Bluetooth: (null): Invalid header checksum [ 1000.354236][ T13] Bluetooth: (null): Invalid header checksum [ 1001.243625][T10325] Bluetooth: (null): Invalid header checksum [ 1001.262349][T10325] Bluetooth: (null): Invalid header checksum [ 1001.275916][T10325] Bluetooth: (null): Invalid header checksum [ 1001.296672][T10325] Bluetooth: (null): Invalid header checksum [ 1001.318461][T10325] Bluetooth: (null): Invalid header checksum [ 1001.339150][T10325] Bluetooth: (null): Invalid header checksum [ 1001.363560][T10325] Bluetooth: (null): Invalid header checksum [ 1001.385877][T17775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.413863][T17775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.434230][T17775] bridge_slave_0: entered allmulticast mode [ 1001.456679][T17775] bridge_slave_0: entered promiscuous mode [ 1001.482376][T17775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.500712][T17775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.520230][T17775] bridge_slave_1: entered allmulticast mode [ 1001.536489][T17775] bridge_slave_1: entered promiscuous mode [ 1001.602616][T17775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.610051][ T5621] Bluetooth: hci3: command tx timeout [ 1001.636144][T17775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.751623][T15344] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0089/input/input97 [ 1001.779969][T17775] team0: Port device team_slave_0 added [ 1001.822114][T17775] team0: Port device team_slave_1 added [ 1001.871266][T15344] sony 0003:054C:03D5.0089: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 1001.953101][T15344] usb 5-1: USB disconnect, device number 106 [ 1001.973943][T17775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.012171][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.039242][T17827] fido_id[17827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1002.092116][T17775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.127092][T17775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.144434][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.235584][T17830] overlayfs: failed lookup in lower (newroot/4, name='file0', err=-40): overlapping layers [ 1002.249067][T17775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.337083][T17775] hsr_slave_0: entered promiscuous mode [ 1002.351741][T17775] hsr_slave_1: entered promiscuous mode [ 1002.360054][T17775] debugfs: 'hsr0' already exists in 'hsr' [ 1002.371826][T17833] overlayfs: failed lookup in lower (newroot/4, name='file0', err=-40): overlapping layers [ 1002.384043][T17775] Cannot create hsr debugfs directory [ 1002.690170][T15344] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1002.850825][T15344] usb 1-1: Using ep0 maxpacket: 16 [ 1002.871413][T15344] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.904497][T15344] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1002.919301][T15344] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1002.935817][T15344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.963271][T15344] usb 1-1: config 0 descriptor?? [ 1003.409376][T15344] mcp2221 0003:04D8:00DD.008A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1004.520308][ T5621] Bluetooth: hci3: command tx timeout [ 1004.740745][T17836] i2c i2c-1: unsupported multi-msg i2c transaction [ 1004.740975][T17775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1004.799217][ T5799] usb 1-1: USB disconnect, device number 111 [ 1004.806800][T17864] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1004.815650][T17864] overlayfs: missing 'lowerdir' [ 1005.594825][T17864] IPVS: Scheduler module ip_vs_ not found [ 1005.648451][T17775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1005.658372][T17775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1005.691016][T17775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1005.708653][T17775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1005.727660][T17775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1005.736135][T17775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1005.758604][T17775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1005.774273][T17869] lo speed is unknown, defaulting to 1000 [ 1005.850986][T17869] wlan0 speed is unknown, defaulting to 1000 [ 1006.243268][T17775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.441337][T17775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.494695][T10325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.501861][T10325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.570387][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.577692][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.585641][ T5621] Bluetooth: hci3: command tx timeout [ 1006.621776][T17775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1006.633007][T17775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1007.810399][ T5732] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1007.991224][ T5732] usb 1-1: Using ep0 maxpacket: 32 [ 1008.022436][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 1008.064338][ T5732] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1008.070568][ T30] audit: type=1400 audit(3932494696.157:1663): avc: denied { ioctl } for pid=17907 comm="syz.4.3207" path="socket:[77219]" dev="sockfs" ino=77219 ioctlcmd=0xaf84 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1008.138275][ T5732] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1008.177236][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.200741][T17775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.239060][ T5732] usb 1-1: config 0 descriptor?? [ 1008.343327][T17910] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3207'. [ 1008.354300][T17775] veth0_vlan: entered promiscuous mode [ 1008.377149][T17775] veth1_vlan: entered promiscuous mode [ 1008.492205][T15344] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1008.548143][T17775] veth0_macvtap: entered promiscuous mode [ 1008.575855][T17775] veth1_macvtap: entered promiscuous mode [ 1008.622097][T17775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.654426][T15344] usb 6-1: config 0 has an invalid interface number: 70 but max is 0 [ 1008.667424][T17775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.672722][T15344] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.713753][T15344] usb 6-1: config 0 has no interface number 0 [ 1008.725145][ T5732] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.008B/input/input98 [ 1008.742791][T15344] usb 6-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 1008.773600][T15344] usb 6-1: config 0 interface 70 altsetting 5 endpoint 0xB has invalid wMaxPacketSize 0 [ 1008.797218][T15344] usb 6-1: config 0 interface 70 has no altsetting 0 [ 1008.817492][T15344] usb 6-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 1008.838209][T15344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.859737][ T5732] sony 0003:054C:03D5.008B: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 1008.878425][T15344] usb 6-1: Product: syz [ 1008.885652][ T221] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.897908][T15344] usb 6-1: Manufacturer: syz [ 1008.916262][ T221] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.930154][ T5732] usb 1-1: USB disconnect, device number 112 [ 1008.936195][T15344] usb 6-1: SerialNumber: syz [ 1008.955387][T15344] usb 6-1: config 0 descriptor?? [ 1008.969174][ T221] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.000161][ T221] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.145486][T17915] fido_id[17915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1009.194033][ T30] audit: type=1400 audit(3932494697.278:1664): avc: denied { watch } for pid=17911 comm="syz.5.3208" path="/27/file1" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1010.912881][ T30] audit: type=1400 audit(3932494697.278:1665): avc: denied { watch_sb watch_reads } for pid=17911 comm="syz.5.3208" path="/27/file1" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1010.979858][T15344] ti_usb_3410_5052 6-1:0.70: TI USB 3410 1 port adapter converter detected [ 1011.917627][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.069202][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.114491][T15344] ti_usb_3410_5052 6-1:0.70: missing endpoints [ 1012.180900][T15344] usb 6-1: USB disconnect, device number 19 [ 1012.328518][T17929] netlink: 'syz.5.3212': attribute type 1 has an invalid length. [ 1013.206853][T17932] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1013.215658][T17932] overlayfs: missing 'lowerdir' [ 1013.404631][T10327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.421645][T10327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.512627][T17931] IPVS: Scheduler module ip_vs_ not found [ 1015.807738][T14080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1015.818430][T14080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1015.825597][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1015.840223][T14080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1015.854578][T14080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1015.867803][T14080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1015.998990][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1016.008610][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 1016.030139][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1016.084678][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1016.167257][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.315634][ T24] usb 6-1: config 0 descriptor?? [ 1017.169882][ T24] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.008C/input/input99 [ 1017.311722][ T24] sony 0003:054C:03D5.008C: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 1017.382151][ T24] usb 6-1: USB disconnect, device number 20 [ 1017.472895][T17972] fido_id[17972]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1017.488795][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1017.639645][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1017.651550][ T9] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1017.691475][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.731995][ T9] usb 3-1: Product: syz [ 1017.744831][ T9] usb 3-1: Manufacturer: syz [ 1017.755458][T17954] lo speed is unknown, defaulting to 1000 [ 1017.766467][ T9] usb 3-1: SerialNumber: syz [ 1017.782860][T17984] IPv6: NLM_F_CREATE should be specified when creating new route [ 1017.879203][ T5732] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1017.938917][ T5621] Bluetooth: hci0: command tx timeout [ 1018.001899][T17969] ALSA: seq fatal error: cannot create timer (-22) [ 1018.058898][ T5732] usb 1-1: Using ep0 maxpacket: 16 [ 1018.069225][ T5732] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.107631][ T5732] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1018.128689][ T5732] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1018.158137][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.198032][ T5732] usb 1-1: config 0 descriptor?? [ 1018.228730][ T9] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1018.253772][ T9] mxuport 3-1:254.0: probe with driver mxuport failed with error -5 [ 1018.278006][T17954] wlan0 speed is unknown, defaulting to 1000 [ 1018.440099][ T5342] usb 3-1: USB disconnect, device number 103 [ 1018.624382][ T5732] mcp2221 0003:04D8:00DD.008D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1019.024975][T17981] i2c i2c-1: unsupported multi-msg i2c transaction [ 1019.057165][ T5732] usb 1-1: USB disconnect, device number 113 [ 1019.136361][T17954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.146452][T17954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.155789][T17954] bridge_slave_0: entered allmulticast mode [ 1019.171479][T17954] bridge_slave_0: entered promiscuous mode [ 1019.179781][T17954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.189361][T17954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.198322][T17954] bridge_slave_1: entered allmulticast mode [ 1019.209069][T17954] bridge_slave_1: entered promiscuous mode [ 1019.293064][T17954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.366723][T17954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.428615][T17954] team0: Port device team_slave_0 added [ 1019.437031][T17954] team0: Port device team_slave_1 added [ 1019.488765][T17954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.495942][T17954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.525001][T17954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.547836][T17954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.555242][T17954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.009699][ T5621] Bluetooth: hci0: command tx timeout [ 1020.089222][T17954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.172641][T17954] hsr_slave_0: entered promiscuous mode [ 1020.180049][ T30] audit: type=1400 audit(3932494708.278:1666): avc: denied { getopt } for pid=18000 comm="syz.3.3227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1020.201979][T17954] hsr_slave_1: entered promiscuous mode [ 1020.208395][T17954] debugfs: 'hsr0' already exists in 'hsr' [ 1020.224465][T17954] Cannot create hsr debugfs directory [ 1022.151095][ T5621] Bluetooth: hci0: command tx timeout [ 1023.098676][T15344] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1023.229352][T15344] usb 6-1: device descriptor read/64, error -71 [ 1023.468685][T15344] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1023.527093][T17954] team0: Port device netdevsim1 removed [ 1023.635448][T15344] usb 6-1: device descriptor read/64, error -71 [ 1023.717643][T18048] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1023.726559][T18048] overlayfs: missing 'lowerdir' [ 1023.855998][T15344] usb usb6-port1: attempt power cycle [ 1024.168592][ T5621] Bluetooth: hci0: command tx timeout [ 1024.415792][T18050] IPVS: Scheduler module ip_vs_ not found [ 1024.819769][T15344] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1024.859511][T15344] usb 6-1: device descriptor read/8, error -71 [ 1025.101787][T17954] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1025.109228][T15344] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1025.139124][T15344] usb 6-1: device descriptor read/8, error -71 [ 1025.148226][T17954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1025.166308][T17954] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1025.192792][T17954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1025.215570][T17954] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1025.233840][T17954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1025.247046][T17954] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1025.259550][T15344] usb usb6-port1: unable to enumerate USB device [ 1025.280301][T17954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1025.414518][T17954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.428900][ T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1025.459428][T17954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.481832][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.488952][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.513579][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.520711][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.588852][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1025.595931][ T9] usb 3-1: no configurations [ 1025.601481][ T9] usb 3-1: can't read configurations, error -22 [ 1026.545510][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1026.711281][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1027.628953][ T9] usb 3-1: no configurations [ 1027.858384][ T9] usb 3-1: can't read configurations, error -22 [ 1027.865276][ T9] usb usb3-port1: attempt power cycle [ 1028.133079][T18088] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3249'. [ 1028.169519][T18091] binder: 18090:18091 ioctl c0306201 200000000940 returned -22 [ 1028.325551][T18094] binder: 18093:18094 ioctl c0306201 200000000940 returned -22 [ 1028.578730][ T9] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 1028.729265][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1028.758761][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1028.760052][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 1028.760082][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1028.760119][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1028.760142][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.762423][ T9] usb 3-1: config 0 descriptor?? [ 1028.786901][T17954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.040470][T14562] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1029.213433][T14562] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.391972][T14562] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1029.549780][T14562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.558186][ T9] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.008E/input/input100 [ 1029.587327][T14562] usb 4-1: config 0 descriptor?? [ 1029.612380][T14562] pwc: Askey VC010 type 2 USB webcam detected. [ 1029.643907][T17954] veth0_vlan: entered promiscuous mode [ 1029.670927][T17954] veth1_vlan: entered promiscuous mode [ 1029.675476][ T9] sony 0003:054C:03D5.008E: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 1029.730126][ T9] usb 3-1: USB disconnect, device number 107 [ 1029.763812][T17954] veth0_macvtap: entered promiscuous mode [ 1029.782537][T17954] veth1_macvtap: entered promiscuous mode [ 1029.857642][T17954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.934099][T17954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1029.940962][T18119] fido_id[18119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1029.995437][ T221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.034256][ T221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.034294][ T221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.034321][ T221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.041042][T14562] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1030.041994][T14562] pwc: recv_control_msg error -32 req 02 val 2700 [ 1030.042494][T14562] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1030.043001][T14562] pwc: recv_control_msg error -32 req 04 val 1000 [ 1030.043478][T14562] pwc: recv_control_msg error -32 req 04 val 1300 [ 1030.044381][T14562] pwc: recv_control_msg error -32 req 04 val 1400 [ 1030.045768][T14562] pwc: recv_control_msg error -32 req 02 val 2000 [ 1030.056073][T14562] pwc: recv_control_msg error -32 req 02 val 2100 [ 1030.058005][T14562] pwc: recv_control_msg error -32 req 04 val 1500 [ 1030.334610][T14562] pwc: recv_control_msg error -71 req 02 val 2400 [ 1030.360071][T14562] pwc: recv_control_msg error -71 req 02 val 2600 [ 1030.375203][T14562] pwc: recv_control_msg error -71 req 02 val 2900 [ 1030.381033][T14562] pwc: recv_control_msg error -71 req 02 val 2800 [ 1030.381712][T14562] pwc: recv_control_msg error -71 req 04 val 1100 [ 1030.382099][T14562] pwc: recv_control_msg error -71 req 04 val 1200 [ 1030.640997][T14562] pwc: Registered as video103. [ 1030.642556][T14562] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input101 [ 1030.651529][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.651607][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.659043][T14562] usb 4-1: USB disconnect, device number 113 [ 1030.905843][T11545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.905865][T11545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.446130][T18142] 9pnet_fd: Insufficient options for proto=fd [ 1032.453630][T18142] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1032.879604][ T5732] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1033.188154][ T5732] usb 1-1: device descriptor read/64, error -71 [ 1033.514634][ T5732] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1034.028015][ T5747] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1034.035728][ T5732] usb 1-1: device descriptor read/64, error -71 [ 1034.084452][ T9] IPVS: starting estimator thread 0... [ 1034.196960][ T5747] usb 5-1: Using ep0 maxpacket: 16 [ 1034.204594][ T5732] usb usb1-port1: attempt power cycle [ 1034.214085][ T5747] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.226982][ T5747] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1034.236204][ T5747] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1034.246336][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.623285][ T5732] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1034.648022][ T5747] usb 5-1: config 0 descriptor?? [ 1034.658010][T18163] IPVS: using max 77 ests per chain, 184800 per kthread [ 1034.680748][ T5732] usb 1-1: device descriptor read/8, error -71 [ 1034.928114][ T5732] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1034.947963][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1034.959752][ T5732] usb 1-1: device descriptor read/8, error -71 [ 1035.068150][ T5732] usb usb1-port1: unable to enumerate USB device [ 1035.078797][ T5747] mcp2221 0003:04D8:00DD.008F: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1035.179705][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1035.196432][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.232581][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.263840][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1035.299964][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1036.318816][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.349012][ T10] usb 6-1: config 0 descriptor?? [ 1036.455565][ T5732] usb 5-1: USB disconnect, device number 107 [ 1037.132200][ T10] hid_parser_main: 31 callbacks suppressed [ 1037.132224][ T10] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 1037.233180][ T10] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 1037.254315][ T10] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 1037.341816][ T10] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 1037.654652][ T10] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 1037.672173][ T10] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 1037.693661][ T10] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 1037.715985][ T10] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 1037.737004][ T10] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 1037.757601][ T10] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 1037.778806][ T5342] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1037.806111][ T10] microsoft 0003:045E:07DA.0090: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1037.839003][ T10] microsoft 0003:045E:07DA.0090: no inputs found [ 1037.863914][ T10] microsoft 0003:045E:07DA.0090: could not initialize ff, continuing anyway [ 1037.900249][ T10] usb 6-1: USB disconnect, device number 25 [ 1037.929087][ T5342] usb 3-1: device descriptor read/64, error -71 [ 1038.022099][T18202] fido_id[18202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1038.247269][ T5342] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1038.987729][ T5342] usb 3-1: device descriptor read/64, error -71 [ 1040.073273][ T5342] usb usb3-port1: attempt power cycle [ 1040.489707][T14562] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1040.858195][T14562] usb 6-1: Using ep0 maxpacket: 32 [ 1040.949351][T14562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 1040.987288][T14562] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1041.017717][T14562] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1041.050772][T14562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.155716][T14562] usb 6-1: config 0 descriptor?? [ 1041.239615][T18236] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3289'. [ 1041.303045][T18236] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3289'. [ 1041.749618][ T5747] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1043.209610][T14562] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.0091/input/input103 [ 1043.504081][ T5747] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1043.562548][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.612411][T14562] sony 0003:054C:03D5.0091: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 1043.629137][T18251] FAULT_INJECTION: forcing a failure. [ 1043.629137][T18251] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.644171][ T5747] usb 5-1: Product: syz [ 1043.662179][ T5747] usb 5-1: Manufacturer: syz [ 1043.751383][ T5747] usb 5-1: SerialNumber: syz [ 1043.756451][T18251] CPU: 0 UID: 0 PID: 18251 Comm: syz.3.3294 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.756481][T18251] Tainted: [L]=SOFTLOCKUP [ 1043.756488][T18251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.756499][T18251] Call Trace: [ 1043.756506][T18251] [ 1043.756513][T18251] dump_stack_lvl+0x100/0x190 [ 1043.756541][T18251] should_fail_ex.cold+0x5/0xa [ 1043.756565][T18251] should_failslab+0xc2/0x120 [ 1043.756589][T18251] __kmalloc_noprof+0xfc/0x820 [ 1043.756610][T18251] ? __pfx_dynamic_dname+0x10/0x10 [ 1043.756636][T18251] ? tomoyo_encode2+0xfb/0x3c0 [ 1043.756658][T18251] tomoyo_encode2+0xfb/0x3c0 [ 1043.756679][T18251] tomoyo_encode+0x29/0x50 [ 1043.756695][T18251] tomoyo_realpath_from_path+0x18c/0x690 [ 1043.756719][T18251] tomoyo_path_number_perm+0x23c/0x580 [ 1043.756743][T18251] ? tomoyo_path_number_perm+0x22e/0x580 [ 1043.756770][T18251] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1043.756827][T18251] ? find_held_lock+0x2b/0x80 [ 1043.756855][T18251] ? __fget_files+0x215/0x3d0 [ 1043.756873][T18251] ? hook_file_ioctl_common+0x140/0x440 [ 1043.756892][T18251] ? __fget_files+0x215/0x3d0 [ 1043.756914][T18251] ? __fget_files+0x21f/0x3d0 [ 1043.756936][T18251] security_file_ioctl+0xd3/0x230 [ 1043.756963][T18251] __x64_sys_ioctl+0xb7/0x210 [ 1043.756992][T18251] do_syscall_64+0x115/0x870 [ 1043.757011][T18251] ? clear_bhb_loop+0x40/0x90 [ 1043.757033][T18251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.757051][T18251] RIP: 0033:0x7febf139de99 [ 1043.757065][T18251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.757081][T18251] RSP: 002b:00007febf225d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1043.757098][T18251] RAX: ffffffffffffffda RBX: 00007febf1625fa0 RCX: 00007febf139de99 [ 1043.757109][T18251] RDX: 00002000000000c0 RSI: 000000000000541b RDI: 0000000000000004 [ 1043.757120][T18251] RBP: 00007febf225d090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.757130][T18251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1043.757140][T18251] R13: 00007febf1626038 R14: 00007febf1625fa0 R15: 00007ffd1c2da318 [ 1043.757165][T18251] [ 1043.757183][T18251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1043.768018][ T5747] usb 5-1: config 0 descriptor?? [ 1043.822644][T14562] usb 6-1: USB disconnect, device number 26 [ 1043.969189][ T5747] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 108 [ 1044.136018][T18253] fido_id[18253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1045.377602][ T5799] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1045.415228][ T5747] (null): failure reading functionality [ 1045.424832][ T5747] i2c i2c-1: failure reading functionality [ 1045.431572][ T5747] i2c i2c-1: connected i2c-tiny-usb device [ 1045.527870][ T5747] usb 5-1: USB disconnect, device number 108 [ 1045.537389][ T5799] usb 4-1: Using ep0 maxpacket: 8 [ 1045.543858][ T5799] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.589707][ T5799] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=54.41 [ 1045.595248][T18280] Mass Storage Function, version: 2009/09/11 [ 1045.607298][ T30] audit: type=1400 audit(2000000004.990:1667): avc: denied { write } for pid=18278 comm="syz.2.3303" name="functions" dev="configfs" ino=9070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1045.625842][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.631589][T18280] LUN: removable file: (no medium) [ 1045.669484][ T5799] usb 4-1: Product: syz [ 1045.784767][ T5799] usb 4-1: Manufacturer: syz [ 1045.960353][ T5799] usb 4-1: SerialNumber: syz [ 1046.207495][ T5799] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 1046.364706][ T5799] usb 4-1: USB disconnect, device number 114 [ 1048.094344][T18301] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1049.078554][T18310] netlink: 'syz.0.3301': attribute type 12 has an invalid length. [ 1049.924778][T18310] netlink: 'syz.0.3301': attribute type 29 has an invalid length. [ 1050.001883][T18310] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3301'. [ 1051.589836][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1051.826966][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1052.499111][ T9] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1052.684003][ T9] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1052.694695][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.702814][ T9] usb 6-1: Product: syz [ 1052.707234][ T9] usb 6-1: Manufacturer: syz [ 1052.711848][ T9] usb 6-1: SerialNumber: syz [ 1052.746593][ T9] usb 6-1: config 0 descriptor?? [ 1052.859049][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1052.900383][ T9] usb 6-1: setting power ON [ 1052.936598][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1053.091376][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1053.489360][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1053.504708][T18338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.523689][ T9] usb 6-1: media controller created [ 1053.529674][T18338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.928790][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.057138][ T5747] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 1055.084251][T18361] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1055.090804][T18361] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1056.310249][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1056.330731][ T9] usb 6-1: selecting invalid altsetting 6 [ 1056.356756][ T9] usb 6-1: digital interface selection failed (-22) [ 1056.365161][T18361] vhci_hcd vhci_hcd.0: Device attached [ 1056.389146][ T5732] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1056.391640][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1056.466848][ T5732] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1056.480623][ T9] usb 6-1: setting power OFF [ 1056.515871][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1056.558189][ T5747] usb 4-1: config 0 has no interfaces? [ 1056.564259][ T5747] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1056.568204][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1056.601505][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.609721][ T9] (NULL device *): no alternate interface [ 1056.628944][ T5747] usb 4-1: config 0 descriptor?? [ 1056.671454][ T30] audit: type=1400 audit(2000000016.070:1668): avc: denied { getopt } for pid=18377 comm="syz.5.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1056.713828][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1056.744045][ T9] usb 6-1: USB disconnect, device number 27 [ 1056.744169][T18383] tmpfs: Bad value for 'mpol' [ 1056.778267][ T30] audit: type=1400 audit(2000000016.180:1669): avc: denied { mounton } for pid=18382 comm="syz.0.3331" path="/47/file0" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1056.778301][T18383] bpf: Bad value for 'uid' [ 1056.944984][T18365] usbip_core: unknown command [ 1056.956753][ T5747] usb 4-1: USB disconnect, device number 115 [ 1056.965612][T18365] vhci_hcd: unknown pdu 117964806 [ 1056.977879][T18365] usbip_core: unknown command [ 1056.987740][T18035] vhci_hcd vhci_hcd.3: stop threads [ 1056.994135][T18035] vhci_hcd vhci_hcd.3: release socket [ 1057.002864][T18035] vhci_hcd vhci_hcd.3: disconnect device [ 1057.076687][ T9] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1057.237844][T14562] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1057.481178][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1057.489167][ T9] usb 6-1: can't read configurations, error -71 [ 1057.597397][T14562] usb 1-1: device descriptor read/64, error -71 [ 1057.907059][T14562] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1058.288781][T14562] usb 1-1: device descriptor read/64, error -71 [ 1058.460642][T14562] usb usb1-port1: attempt power cycle [ 1059.654629][T14562] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1059.739152][T14562] usb 1-1: device descriptor read/8, error -71 [ 1059.996558][T14562] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1060.179634][T18423] FAULT_INJECTION: forcing a failure. [ 1060.179634][T18423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.206777][T18423] CPU: 0 UID: 0 PID: 18423 Comm: syz.0.3342 Tainted: G L syzkaller #0 PREEMPT(full) [ 1060.206807][T18423] Tainted: [L]=SOFTLOCKUP [ 1060.206820][T18423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1060.206829][T18423] Call Trace: [ 1060.206836][T18423] [ 1060.206843][T18423] dump_stack_lvl+0x100/0x190 [ 1060.206870][T18423] should_fail_ex.cold+0x5/0xa [ 1060.206892][T18423] _copy_from_iter+0x1f4/0x1690 [ 1060.206920][T18423] ? __pfx__copy_from_iter+0x10/0x10 [ 1060.206936][T18423] ? trace_kmalloc+0xeb/0x110 [ 1060.206949][T18423] ? __kasan_kmalloc+0xaa/0xb0 [ 1060.206963][T18423] ? __kmalloc_noprof+0x343/0x820 [ 1060.206976][T18423] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1060.206993][T18423] kernfs_fop_write_iter+0x186/0x5f0 [ 1060.207009][T18423] vfs_write+0x6ac/0x1050 [ 1060.207028][T18423] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1060.207043][T18423] ? __pfx_vfs_write+0x10/0x10 [ 1060.207069][T18423] ksys_write+0x12a/0x250 [ 1060.207091][T18423] ? __pfx_ksys_write+0x10/0x10 [ 1060.207121][T18423] do_syscall_64+0x115/0x870 [ 1060.207133][T18423] ? clear_bhb_loop+0x40/0x90 [ 1060.207147][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.207158][T18423] RIP: 0033:0x7ff6a679de99 [ 1060.207168][T18423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.207179][T18423] RSP: 002b:00007ff6a7693028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1060.207191][T18423] RAX: ffffffffffffffda RBX: 00007ff6a6a25fa0 RCX: 00007ff6a679de99 [ 1060.207198][T18423] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000003 [ 1060.207204][T18423] RBP: 00007ff6a7693090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.207211][T18423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.207217][T18423] R13: 00007ff6a6a26038 R14: 00007ff6a6a25fa0 R15: 00007ffc3b96d828 [ 1060.207231][T18423] [ 1060.554939][T14562] usb 1-1: device not accepting address 121, error -71 [ 1060.562196][T14562] usb usb1-port1: unable to enumerate USB device [ 1060.684677][T18430] binder: BINDER_SET_CONTEXT_MGR already set [ 1060.690761][T18430] binder: 18425:18430 ioctl 4018620d 200000004a80 returned -16 [ 1060.699437][ T10] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1060.987157][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1060.999321][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1061.011267][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1061.058241][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1061.067534][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.086098][ T10] usb 4-1: Product: syz [ 1061.097875][ T10] usb 4-1: Manufacturer: syz [ 1061.115683][ T10] usb 4-1: SerialNumber: syz [ 1061.164243][ T10] usb 4-1: config 0 descriptor?? [ 1061.181559][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1061.203416][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1061.766430][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 1061.839446][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1061.857008][T18424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3343'. [ 1061.886642][ T5732] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1061.937713][T18446] [ 1061.940093][T18446] ====================================================== [ 1061.947112][T18446] WARNING: possible circular locking dependency detected [ 1061.954135][T18446] syzkaller #0 Tainted: G L [ 1061.960114][T18446] ------------------------------------------------------ [ 1061.967153][T18446] syz.5.3348/18446 is trying to acquire lock: [ 1061.973215][T18446] ffff88803564a450 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 1061.981943][T18446] [ 1061.981943][T18446] but task is already holding lock: [ 1061.989310][T18446] ffff888076068920 (&common->filesem){+.+.}-{4:4}, at: fsg_store_file+0x193/0x450 [ 1061.998551][T18446] [ 1061.998551][T18446] which lock already depends on the new lock. [ 1061.998551][T18446] [ 1062.008957][T18446] [ 1062.008957][T18446] the existing dependency chain (in reverse order) is: [ 1062.017953][T18446] [ 1062.017953][T18446] -> #6 (&common->filesem){+.+.}-{4:4}: [ 1062.025671][T18446] lock_acquire+0x1b9/0x370 [ 1062.030677][T18446] down_write+0x8b/0x1f0 [ 1062.035426][T18446] fsg_store_file+0x193/0x450 [ 1062.040601][T18446] configfs_write_iter+0x302/0x4e0 [ 1062.046210][T18446] vfs_write+0x6ac/0x1050 [ 1062.051051][T18446] ksys_write+0x12a/0x250 [ 1062.055888][T18446] do_syscall_64+0x115/0x870 [ 1062.060984][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.067393][T18446] [ 1062.067393][T18446] -> #5 (&p->frag_sem){++++}-{4:4}: [ 1062.074759][T18446] lock_acquire+0x1b9/0x370 [ 1062.079764][T18446] down_read+0x99/0x4c0 [ 1062.084417][T18446] configfs_read_iter+0x346/0x6f0 [ 1062.089942][T18446] __kernel_read+0x397/0xad0 [ 1062.095030][T18446] integrity_kernel_read+0x7e/0xb0 [ 1062.100638][T18446] ima_calc_file_hash_tfm+0x25e/0x350 [ 1062.106502][T18446] ima_calc_file_hash+0x1e3/0x380 [ 1062.112018][T18446] ima_collect_measurement+0x94f/0xb30 [ 1062.117992][T18446] process_measurement+0xdfe/0x2350 [ 1062.123695][T18446] ima_file_check+0xc3/0x110 [ 1062.128788][T18446] security_file_post_open+0xc4/0x210 [ 1062.134670][T18446] path_openat+0x985/0x4280 [ 1062.139669][T18446] do_file_open+0x20e/0x430 [ 1062.144677][T18446] do_sys_openat2+0x10f/0x1e0 [ 1062.149847][T18446] __x64_sys_openat+0x12d/0x210 [ 1062.155202][T18446] do_syscall_64+0x115/0x870 [ 1062.160293][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.166686][T18446] [ 1062.166686][T18446] -> #4 (&buffer->mutex){+.+.}-{4:4}: [ 1062.174212][T18446] lock_acquire+0x1b9/0x370 [ 1062.179212][T18446] __mutex_lock+0x1a4/0x1bd0 [ 1062.184311][T18446] configfs_read_iter+0x79/0x6f0 [ 1062.189758][T18446] __kernel_read+0x397/0xad0 [ 1062.194842][T18446] integrity_kernel_read+0x7e/0xb0 [ 1062.200454][T18446] ima_calc_file_hash_tfm+0x25e/0x350 [ 1062.206320][T18446] ima_calc_file_hash+0x1e3/0x380 [ 1062.211846][T18446] ima_collect_measurement+0x94f/0xb30 [ 1062.217799][T18446] process_measurement+0xdfe/0x2350 [ 1062.223500][T18446] ima_file_check+0xc3/0x110 [ 1062.228579][T18446] security_file_post_open+0xc4/0x210 [ 1062.234455][T18446] path_openat+0x985/0x4280 [ 1062.239448][T18446] do_file_open+0x20e/0x430 [ 1062.244451][T18446] do_sys_openat2+0x10f/0x1e0 [ 1062.249618][T18446] __x64_sys_openat+0x12d/0x210 [ 1062.254973][T18446] do_syscall_64+0x115/0x870 [ 1062.260054][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.266439][T18446] [ 1062.266439][T18446] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1062.275012][T18446] lock_acquire+0x1b9/0x370 [ 1062.280011][T18446] __mutex_lock+0x1a4/0x1bd0 [ 1062.285097][T18446] process_measurement+0x5ab/0x2350 [ 1062.290797][T18446] ima_file_check+0xc3/0x110 [ 1062.295888][T18446] security_file_post_open+0xc4/0x210 [ 1062.301764][T18446] path_openat+0x985/0x4280 [ 1062.306769][T18446] do_file_open_root+0x2f6/0x5a0 [ 1062.312208][T18446] file_open_root+0x1c6/0x3f0 [ 1062.317384][T18446] kernel_read_file_from_path_initns+0x189/0x260 [ 1062.324209][T18446] _request_firmware+0x733/0x13c0 [ 1062.329724][T18446] request_firmware+0x35/0x50 [ 1062.334900][T18446] reg_reload_regdb+0x85/0x460 [ 1062.340160][T18446] genl_family_rcv_msg_doit+0x214/0x300 [ 1062.346197][T18446] genl_rcv_msg+0x560/0x800 [ 1062.351191][T18446] netlink_rcv_skb+0x159/0x420 [ 1062.356444][T18446] genl_rcv+0x28/0x40 [ 1062.360917][T18446] netlink_unicast+0x585/0x850 [ 1062.366171][T18446] netlink_sendmsg+0x8b0/0xda0 [ 1062.371426][T18446] ____sys_sendmsg+0xa4d/0xbe0 [ 1062.376690][T18446] ___sys_sendmsg+0x190/0x1e0 [ 1062.381890][T18446] __sys_sendmsg+0x160/0x210 [ 1062.386977][T18446] do_syscall_64+0x115/0x870 [ 1062.392067][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.398460][T18446] [ 1062.398460][T18446] -> #2 (cb_lock){++++}-{4:4}: [ 1062.405374][T18446] lock_acquire+0x1b9/0x370 [ 1062.410391][T18446] down_read+0x99/0x4c0 [ 1062.415051][T18446] genl_rcv+0x19/0x40 [ 1062.419523][T18446] netlink_unicast+0x585/0x850 [ 1062.424783][T18446] netlink_sendmsg+0x8b0/0xda0 [ 1062.430047][T18446] sock_sendmsg+0x394/0x410 [ 1062.435045][T18446] splice_to_socket+0xb3c/0x11a0 [ 1062.440475][T18446] do_splice+0x109c/0x1f90 [ 1062.445391][T18446] __do_splice+0x33b/0x370 [ 1062.450308][T18446] __x64_sys_splice+0x187/0x250 [ 1062.455655][T18446] do_syscall_64+0x115/0x870 [ 1062.460746][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.467141][T18446] [ 1062.467141][T18446] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1062.474490][T18446] lock_acquire+0x1b9/0x370 [ 1062.479516][T18446] __mutex_lock+0x1a4/0x1bd0 [ 1062.484607][T18446] pipe_lock+0x69/0x80 [ 1062.489190][T18446] iter_file_splice_write+0x1fd/0x10b0 [ 1062.495160][T18446] do_splice+0x109c/0x1f90 [ 1062.500078][T18446] __do_splice+0x33b/0x370 [ 1062.504995][T18446] __x64_sys_splice+0x187/0x250 [ 1062.510338][T18446] do_syscall_64+0x115/0x870 [ 1062.515424][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.521821][T18446] [ 1062.521821][T18446] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 1062.529177][T18446] check_prev_add+0xeb/0xe60 [ 1062.534258][T18446] __lock_acquire+0x136c/0x1a40 [ 1062.539602][T18446] lock_acquire+0x1b9/0x370 [ 1062.544599][T18446] mnt_want_write+0x6f/0x410 [ 1062.549680][T18446] path_openat+0xad9/0x4280 [ 1062.554682][T18446] do_file_open+0x20e/0x430 [ 1062.559684][T18446] file_open_name+0x1c3/0x3e0 [ 1062.564858][T18446] filp_open+0x2e/0x50 [ 1062.569420][T18446] fsg_lun_open+0x6b/0x7b0 [ 1062.574348][T18446] fsg_store_file+0x1e7/0x450 [ 1062.579525][T18446] configfs_write_iter+0x302/0x4e0 [ 1062.585131][T18446] vfs_write+0x6ac/0x1050 [ 1062.589961][T18446] ksys_write+0x12a/0x250 [ 1062.594797][T18446] do_syscall_64+0x115/0x870 [ 1062.599878][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.606270][T18446] [ 1062.606270][T18446] other info that might help us debug this: [ 1062.606270][T18446] [ 1062.616475][T18446] Chain exists of: [ 1062.616475][T18446] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 1062.616475][T18446] [ 1062.629049][T18446] Possible unsafe locking scenario: [ 1062.629049][T18446] [ 1062.636467][T18446] CPU0 CPU1 [ 1062.641799][T18446] ---- ---- [ 1062.647142][T18446] lock(&common->filesem); [ 1062.651615][T18446] lock(&p->frag_sem); [ 1062.658258][T18446] lock(&common->filesem); [ 1062.665252][T18446] rlock(sb_writers#6); [ 1062.669469][T18446] [ 1062.669469][T18446] *** DEADLOCK *** [ 1062.669469][T18446] [ 1062.677580][T18446] 5 locks held by syz.5.3348/18446: [ 1062.682743][T18446] #0: ffff88807a6470b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1062.691766][T18446] #1: ffff88801e730450 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1062.700797][T18446] #2: ffff888068736480 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 1062.710619][T18446] #3: ffff888058e5c970 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1062.720335][T18446] #4: ffff888076068920 (&common->filesem){+.+.}-{4:4}, at: fsg_store_file+0x193/0x450 [ 1062.729969][T18446] [ 1062.729969][T18446] stack backtrace: [ 1062.735840][T18446] CPU: 0 UID: 0 PID: 18446 Comm: syz.5.3348 Tainted: G L syzkaller #0 PREEMPT(full) [ 1062.735856][T18446] Tainted: [L]=SOFTLOCKUP [ 1062.735860][T18446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1062.735867][T18446] Call Trace: [ 1062.735871][T18446] [ 1062.735877][T18446] dump_stack_lvl+0x100/0x190 [ 1062.735892][T18446] print_circular_bug.cold+0x178/0x1c7 [ 1062.735910][T18446] check_noncircular+0x146/0x160 [ 1062.735922][T18446] ? __lock_acquire+0xd5b/0x1a40 [ 1062.735936][T18446] check_prev_add+0xeb/0xe60 [ 1062.735949][T18446] __lock_acquire+0x136c/0x1a40 [ 1062.735962][T18446] ? try_to_unlazy+0x296/0x910 [ 1062.735978][T18446] lock_acquire+0x1b9/0x370 [ 1062.735990][T18446] ? path_openat+0xad9/0x4280 [ 1062.736001][T18446] ? __pfx___might_resched+0x10/0x10 [ 1062.736014][T18446] mnt_want_write+0x6f/0x410 [ 1062.736024][T18446] ? path_openat+0xad9/0x4280 [ 1062.736035][T18446] path_openat+0xad9/0x4280 [ 1062.736048][T18446] ? __pfx_path_openat+0x10/0x10 [ 1062.736058][T18446] ? kasan_save_stack+0x30/0x50 [ 1062.736070][T18446] ? kasan_save_track+0x14/0x30 [ 1062.736081][T18446] ? __kasan_slab_alloc+0x89/0x90 [ 1062.736094][T18446] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1062.736105][T18446] ? do_getname_kernel+0x5d/0x250 [ 1062.736117][T18446] ? filp_open+0x1d/0x50 [ 1062.736128][T18446] ? fsg_lun_open+0x6b/0x7b0 [ 1062.736140][T18446] ? fsg_store_file+0x1e7/0x450 [ 1062.736152][T18446] do_file_open+0x20e/0x430 [ 1062.736163][T18446] ? __pfx_do_file_open+0x10/0x10 [ 1062.736180][T18446] ? rcu_is_watching+0x12/0xc0 [ 1062.736196][T18446] file_open_name+0x1c3/0x3e0 [ 1062.736209][T18446] ? __pfx_file_open_name+0x10/0x10 [ 1062.736221][T18446] ? do_getname_kernel+0x5d/0x250 [ 1062.736234][T18446] ? __asan_memcpy+0x3c/0x60 [ 1062.736244][T18446] ? do_getname_kernel+0x1be/0x250 [ 1062.736256][T18446] filp_open+0x2e/0x50 [ 1062.736271][T18446] fsg_lun_open+0x6b/0x7b0 [ 1062.736287][T18446] ? __pfx_down_read+0x10/0x10 [ 1062.736320][T18446] fsg_store_file+0x1e7/0x450 [ 1062.736339][T18446] configfs_write_iter+0x302/0x4e0 [ 1062.736360][T18446] vfs_write+0x6ac/0x1050 [ 1062.736380][T18446] ? __pfx_configfs_write_iter+0x10/0x10 [ 1062.736392][T18446] ? __pfx_vfs_write+0x10/0x10 [ 1062.736412][T18446] ksys_write+0x12a/0x250 [ 1062.736428][T18446] ? __pfx_ksys_write+0x10/0x10 [ 1062.736445][T18446] do_syscall_64+0x115/0x870 [ 1062.736457][T18446] ? clear_bhb_loop+0x40/0x90 [ 1062.736468][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.736479][T18446] RIP: 0033:0x7f072db9de99 [ 1062.736490][T18446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.736501][T18446] RSP: 002b:00007f072eb12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1062.736512][T18446] RAX: ffffffffffffffda RBX: 00007f072de25fa0 RCX: 00007f072db9de99 [ 1062.736519][T18446] RDX: 0000000000000001 RSI: 0000200000000f00 RDI: 0000000000000003 [ 1062.736526][T18446] RBP: 00007f072dc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1062.736532][T18446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.736538][T18446] R13: 00007f072de26038 R14: 00007f072de25fa0 R15: 00007fff6d0c4d58 [ 1062.736549][T18446] [ 1063.067125][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1063.098195][ T30] audit: type=1400 audit(2000000022.451:1670): avc: denied { write } for pid=5593 comm="syz-executor" path="pipe:[5366]" dev="pipefs" ino=5366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1063.201458][T18446] mass_storage.usb0/lun.0: unable to open backing file: f [ 1063.377159][ T5747] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1063.592981][T11540] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.738725][T11540] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.851534][T11540] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.878496][ T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1063.885480][ T10] em28xx 4-1:0.0: No AC97 audio processor [ 1063.903380][ T10] usb 4-1: USB disconnect, device number 116 [ 1063.911544][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 1063.918516][ T10] em28xx 4-1:0.0: Freeing device [ 1063.924589][T11540] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.002510][T11540] bridge_slave_1: left allmulticast mode [ 1064.008515][T11540] bridge_slave_1: left promiscuous mode [ 1064.014154][T11540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.024081][T11540] bridge_slave_0: left allmulticast mode [ 1064.029846][T11540] bridge_slave_0: left promiscuous mode [ 1064.035460][T11540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.070518][T11540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.089944][T11540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.099187][T11540] bond0 (unregistering): Released all slaves [ 1064.221086][ T30] audit: type=1400 audit(2000000023.621:1671): avc: denied { write } for pid=18461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.279287][ T30] audit: type=1400 audit(2000000023.681:1672): avc: denied { write } for pid=18472 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.327347][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1064.377423][T11540] hsr_slave_0: left promiscuous mode [ 1064.383220][T11540] hsr_slave_1: left promiscuous mode [ 1064.391282][T11540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1064.398775][T11540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.414894][T11540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.422664][T11540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.434487][T11540] veth1_macvtap: left promiscuous mode [ 1064.440726][T11540] veth0_macvtap: left promiscuous mode [ 1064.446315][T11540] veth1_vlan: left promiscuous mode [ 1064.451611][T11540] veth0_vlan: left promiscuous mode [ 1064.524616][ T30] audit: type=1400 audit(2000000023.921:1673): avc: denied { write } for pid=18475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.548524][T11540] team0 (unregistering): Port device team_slave_1 removed [ 1064.565467][T11540] team0 (unregistering): Port device team_slave_0 removed [ 1064.597167][ T30] audit: type=1400 audit(2000000024.001:1674): avc: denied { write } for pid=18486 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.650363][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1064.810552][T11540] IPVS: stop unused estimator thread 0... [ 1064.858595][ T30] audit: type=1400 audit(2000000024.261:1675): avc: denied { write } for pid=18489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.895181][ T30] audit: type=1400 audit(2000000024.291:1676): avc: denied { write } for pid=18500 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.920268][T11540] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.935886][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1064.962771][T11540] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.032066][T11540] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.070482][ T30] audit: type=1400 audit(2000000024.471:1677): avc: denied { write } for pid=18503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1065.103785][ T30] audit: type=1400 audit(2000000024.501:1678): avc: denied { write } for pid=18514 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1065.142031][T11540] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.158516][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1065.237361][T11540] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.291450][T11540] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.321723][T11540] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.360715][ T30] audit: type=1400 audit(2000000024.761:1679): avc: denied { write } for pid=18520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1065.387837][T11540] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.418632][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1065.474929][T11540] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.539885][T11540] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.593689][T11540] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.640308][T11540] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.652866][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1065.715811][T11540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.771504][T11540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.812324][T11540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.864603][T11540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.880060][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1065.968079][T11540] bridge_slave_1: left allmulticast mode [ 1065.974220][T11540] bridge_slave_1: left promiscuous mode [ 1065.980980][T11540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.989727][T11540] bridge_slave_0: left allmulticast mode [ 1065.995401][T11540] bridge_slave_0: left promiscuous mode [ 1066.001380][T11540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.012818][T11540] bridge_slave_1: left allmulticast mode [ 1066.018878][T11540] bridge_slave_1: left promiscuous mode [ 1066.024547][T11540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.037866][T11540] bridge_slave_0: left allmulticast mode [ 1066.043591][T11540] bridge_slave_0: left promiscuous mode [ 1066.049482][T11540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.060525][T11540] bridge_slave_1: left allmulticast mode [ 1066.067763][T11540] bridge_slave_1: left promiscuous mode [ 1066.073442][T11540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.082307][T11540] bridge_slave_0: left allmulticast mode [ 1066.092929][T11540] bridge_slave_0: left promiscuous mode [ 1066.099038][T11540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.110164][T11540] bridge_slave_1: left allmulticast mode [ 1066.115936][T11540] bridge_slave_1: left promiscuous mode [ 1066.121733][T11540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.129715][T11540] bridge_slave_0: left allmulticast mode [ 1066.135342][T11540] bridge_slave_0: left promiscuous mode [ 1066.141122][T11540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.212231][T11540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.221920][T11540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.231217][T11540] bond0 (unregistering): Released all slaves [ 1066.256002][T11540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.265522][T11540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.275638][T11540] bond0 (unregistering): Released all slaves [ 1066.323880][T11540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.339797][T11540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.349097][T11540] bond0 (unregistering): Released all slaves [ 1066.369618][T11540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.379850][T11540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.394642][T11540] bond0 (unregistering): Released all slaves [ 1066.402545][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1066.651037][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1066.831306][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1067.003500][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1067.261195][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1067.301093][T11540] hsr_slave_0: left promiscuous mode [ 1067.320606][T11540] hsr_slave_1: left promiscuous mode [ 1067.326574][T11540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.333973][T11540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.342774][T11540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.350349][T11540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.361046][T11540] hsr_slave_0: left promiscuous mode [ 1067.368439][T11540] hsr_slave_1: left promiscuous mode [ 1067.374136][T11540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.381733][T11540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.389972][T11540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.397441][T11540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.407095][T11540] hsr_slave_0: left promiscuous mode [ 1067.412746][T11540] hsr_slave_1: left promiscuous mode [ 1067.418531][T11540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.425913][T11540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.433701][T11540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.441690][T11540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.451445][T11540] hsr_slave_0: left promiscuous mode [ 1067.457993][T11540] hsr_slave_1: left promiscuous mode [ 1067.463723][T11540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.471391][T11540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.483059][T11540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.490726][T11540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.507849][T11540] veth1_macvtap: left promiscuous mode [ 1067.513417][T11540] veth0_macvtap: left promiscuous mode [ 1067.519152][T11540] veth1_vlan: left promiscuous mode [ 1067.524402][T11540] veth0_vlan: left promiscuous mode [ 1067.530802][T11540] veth1_macvtap: left promiscuous mode [ 1067.536859][T11540] veth0_macvtap: left promiscuous mode [ 1067.542378][T11540] veth1_vlan: left promiscuous mode [ 1067.547646][T11540] veth0_vlan: left promiscuous mode [ 1067.553358][T11540] veth1_macvtap: left promiscuous mode [ 1067.558898][T11540] veth0_macvtap: left promiscuous mode [ 1067.564386][T11540] veth1_vlan: left promiscuous mode [ 1067.569660][T11540] veth0_vlan: left promiscuous mode [ 1067.575312][T11540] veth1_macvtap: left promiscuous mode [ 1067.580824][T11540] veth0_macvtap: left promiscuous mode [ 1067.586626][T11540] veth1_vlan: left promiscuous mode [ 1067.591873][T11540] veth0_vlan: left promiscuous mode [ 1067.710935][T11540] team0 (unregistering): Port device team_slave_1 removed [ 1067.720245][T11540] team0 (unregistering): Port device team_slave_0 removed [ 1067.783437][T11540] team0 (unregistering): Port device team_slave_1 removed [ 1067.793017][T11540] team0 (unregistering): Port device team_slave_0 removed [ 1067.859987][T11540] team0 (unregistering): Port device team_slave_1 removed [ 1067.869308][T11540] team0 (unregistering): Port device team_slave_0 removed [ 1067.942275][T11540] team0 (unregistering): Port device team_slave_1 removed [ 1067.951502][T11540] team0 (unregistering): Port device team_slave_0 removed [ 1067.978940][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1068.169999][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1068.170011][ T30] audit: type=1400 audit(2000000027.561:1697): avc: denied { write } for pid=18651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.231891][ T30] audit: type=1400 audit(2000000027.631:1698): avc: denied { write } for pid=18662 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.303719][ T5270] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1068.481183][ T30] audit: type=1400 audit(2000000027.871:1699): avc: denied { write } for pid=18665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.519854][ T30] audit: type=1400 audit(2000000027.911:1700): avc: denied { write } for pid=18676 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.583066][ T5270] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1068.752229][ T30] audit: type=1400 audit(2000000028.141:1701): avc: denied { write } for pid=18679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.791486][ T30] audit: type=1400 audit(2000000028.181:1702): avc: denied { write } for pid=18690 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.814632][ T5270] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1068.960504][ T30] audit: type=1400 audit(2000000028.361:1703): avc: denied { write } for pid=18693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1069.012674][ T30] audit: type=1400 audit(2000000028.411:1704): avc: denied { write } for pid=18704 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1069.052744][ T5270] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1069.158844][ T30] audit: type=1400 audit(2000000028.561:1705): avc: denied { write } for pid=18707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1069.191769][ T30] audit: type=1400 audit(2000000028.591:1706): avc: denied { write } for pid=18718 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1069.217527][ T5270] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1069.373471][ T5270] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1069.522414][ T5270] 8021q: adding VLAN 0 to HW filter on device eth20