last executing test programs: 6.863930507s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r0, 0xfffffffffffffffb, 0x4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fd9000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3021, 0x3, &(0x7f0000cdf000/0x3000)=nil) pipe2(&(0x7f0000000000), 0x4880) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000080)={0x1000, 0x5, 0x5772, 0x800b, 0x7, "f0968c2e0000ab8c9eaf535ee0a3370080ffff", 0x8, 0x800047f}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) 6.823054396s ago: executing program 3 (id=4): r0 = timerfd_create(0x9, 0x0) sync() timerfd_settime(r0, 0x3, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) 5.354535701s ago: executing program 3 (id=6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0x62e8}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[], 0xdd12}], 0x1}, 0x20040051) prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, 0x0, 0x212400, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, 0x0, 0x8000) 4.630774698s ago: executing program 2 (id=3): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 4.521693832s ago: executing program 0 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 4.379063603s ago: executing program 3 (id=8): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 4.308230436s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @broadcast}, 0xc) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x3, 0xb}, {0xfff3}}}, 0x24}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 4.156361177s ago: executing program 3 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa8302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48c, 0x0, 0x9}]}) 3.963058044s ago: executing program 0 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x60}}, 0x0) 3.930436192s ago: executing program 3 (id=11): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e26, 0x7fff, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmmsg$inet(r0, &(0x7f0000002500), 0x4000000000000e7, 0x2400c8c4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f00000020c0)=""/171, &(0x7f0000000000)=0xab) mkdir(&(0x7f0000000640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) chdir(&(0x7f0000001640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00222200000096070006e53f07010000002a900683749e821c0b8b923659"], 0x0}, 0x0) 3.823058199s ago: executing program 1 (id=12): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x3, {0xfbfffffe, 0x22, 0xd, 0x400017, 0x7, 0x800, 0x1, 0x5a, 0x1}}) 3.813307222s ago: executing program 2 (id=13): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000f4000040961b110000000000000109022400010000000109040008020300030009210400000122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090192008c0508950129309102c0"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x4000802) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec"], 0x0) 3.731388709s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000472e675fc5"], 0x50) setresuid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 3.659928386s ago: executing program 0 (id=14): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x3, 0x4, 0x1000, 0x0, r2, 0x0, '\x00', 0x0, r1}, 0x50) socket$tipc(0x1e, 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000005c00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000840), &(0x7f0000000140)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 3.617279891s ago: executing program 1 (id=15): lstat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x80000000c5, 0x6, 0x0, 0x200, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8000, 0x4, 0x402, 0xfffffffffffffffc, 0x100000000, 0x8d], 0x60000, 0x2011c0}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.100653854s ago: executing program 0 (id=16): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff00070581024000000705010240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x41, &(0x7f00000000c0)="04d4344290f1e1229a1d2ea9db24537a76c4cf14cdb65c7872f295eeebda28aca7f583802431ffffffffffffff7f8f17fb99d7cda1fdf4378746470f7de2216a09") 2.728835022s ago: executing program 4 (id=17): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x1, 0x1, 0x17, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x10, 0xffffffff, 0xc}}) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syncfs(r1) 2.268017967s ago: executing program 4 (id=18): unshare(0x78040280) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) 1.371861452s ago: executing program 0 (id=19): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0xd, 0x3, "94ab97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.287154225s ago: executing program 1 (id=20): syz_usb_connect$cdc_ecm(0x0, 0x150, &(0x7f0000001900)={{0x12, 0x1, 0x340, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x1, 0x1, 0xe, 0xe0, 0x4, "", [{{0x9, 0x4, 0x0, 0x5c, 0x2, 0x2, 0x6, 0x0, 0xd9, {{0x5}, {0x5, 0x24, 0x0, 0xa96}, {0xd, 0x24, 0xf, 0x1, 0x5d2a, 0x4, 0xf, 0x8}, [@mdlm_detail={0x103, 0x24, 0x13, 0x7, "87765b4692241b6ac76b54198f7e41068f50d77efdb8da5a95f87e58564d777bba9c89b54c030163afd732a6737f7de93b674151d2280cf832928192b4dd00b562391af9627dcd78a8c6c2d73ac0eb7d5da6530fe3f082c04b61ee7a4836150c09a8cbcb2c5d566b49e12c87219afd2d30d300853676af273c8ad45ef89b11b113cc91a01d1b6af782a9efd5a2b1aa98d37c479db1df00d8f5d8ff7732dbd59eca659acaa24a3b03dc5ece7cf07b63e89fded0d6ff5eb42383c7a35f3d3e543d3a763d6c68be96485ca2d6445c769a1bb5629e941ac2bc1a51bddd55dce0cc5f91d885548d5631871550577862b5a8793c361a40ce22e18d2800e61a1f5b98"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x3, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x90, 0x9, 0x7d}}}}}]}}]}}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0}) 1.264911752s ago: executing program 4 (id=21): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x21, 0x57, 0xd1, 0x10, 0x547, 0x6801, 0xf370, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0x16, 0xef, 0x0, 0x92, 0xa2, 0xa3, 0x5}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfad, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xa, 0x7, 0x3, {0x7, 0x25, 0x1, 0xc, 0x7, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x2, 0x2, {0x7, 0x25, 0x1, 0x4, 0x7, 0x3df}}}}}}}}]}}, 0x0) 1.212112379s ago: executing program 3 (id=22): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) wait4(0x0, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) r0 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="03"], 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) 1.148159527s ago: executing program 2 (id=23): syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001300)=ANY=[@ANYBLOB="0007ebffffff"], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=24): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xfa, 0x47, 0x59, 0x8, 0x124a, 0x4023, 0x234a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x6, 0x40, 0x7, "", [{{0x9, 0x4, 0x8c, 0x8, 0x2, 0xc2, 0xbe, 0x19, 0x9, [], [{{0x9, 0x5, 0xb, 0x2, 0x10, 0x7, 0xa1, 0x3}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x7, 0x0, 0xd}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, &(0x7f0000000500)={0x20, 0x6, 0x8e, {0x8e, 0x7, "41ded9fc659b86bebe5d6d2805025f79a71c3a381adb3735645fec6afec3bf617800842c5a1f0c4b901fd8b2190259a7c5374c85cb403600ce13992f9d938deaff41e4968e2c75e6e070614a0fae4d20fa6235b8bfab7a870dc2387e2589ae1064c5e24a5ce80e9626cf23332c6f4424dfc9289ed7db0f3543436632d33677ddebcb3882da722d41398fb300"}}, &(0x7f0000000740)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "896ebed47ab8f7df87965738bb299e2c90c3c9aebed04ebd2232f87b30ba574620e0bb299d04b8e1bd0d53e7ef5c33533c8071e6bc686846bd65ba6cd379abb793c4a3d45c2b7251e60f241beddb55ced609660e70e157f550e3d224cbf53e2fd4bdeb0d0ca6c9afc03cff806192324ff2c74b98c56f3ad08a63afbeaa038da04d122e56d87c95eed2efa30c04cb58fa14b7f785379d3d4b4163621ab824e88f4b04584d83af15882bd5d1d7dcf9f5bbb7"}}, &(0x7f0000000800)={0x0, 0x22, 0x18, {[@main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0xb, "3e2947c6"}, @main=@item_4={0x3, 0x0, 0xb, "7cdcea00"}, @local=@item_4={0x3, 0x2, 0xa, "4e7c6feb"}, @local=@item_012={0x2, 0x2, 0xa, "55f7"}, @main=@item_4={0x3, 0x0, 0xc, "697256b7"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x392}}}}, &(0x7f0000000b80)={0x2c, &(0x7f00000008c0)={0x20, 0x7, 0x3, "276af5"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xc7}, &(0x7f0000000a80)={0x20, 0x1, 0xa3, "41c76464ddcd3f207ece9f344ea8fe9153551e10d75ec70e229bf7ba84e37960601f05b47f4727cce067cd56c8fe23073540196f6248290b14944de54f8619275263d8de7ba59f42dc71206ced5b718a440c38b73a7a850222efba00be756b961af7b57caaf67eb0f060f36235dd12b6b5f65b563da6e68b9c9fd1d984f12a4ae8b0f481bf20bbf11fa9280b85c7e544e1457b7c83bd88b8dc2ef5ec5a58d04c7704f5"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x2}}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x35, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0xd5, 0x5f, 0xc8, 0x8, 0x499, 0x89a4, 0x4fcd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x2, 0x0, 0x30, 0x5, "", [{{0x9, 0x4, 0xe8, 0x80, 0x1, 0xff, 0xa5, 0x73, 0x50, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x81, 0x2, 0x1}]}], [{{0x9, 0x5, 0x8, 0x2, 0x400, 0x6, 0x6, 0x1}}]}}]}}]}}, 0x0) syz_usb_connect$uac1(0xf, 0xc3, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1503, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0xeb, 0x90, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x28}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x2, 0x9, 0x7, 0x6e, 0x7}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0x1, 0x8, "ff7a462ede"}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0xe3, '{'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x29c8, 0x407, 0x80, "90e247b0ef6812"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x6, 0x6, "9710a346a01f9a"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x1a, 0xce, 0xce}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x8000, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x5, 0x9, {0x7, 0x25, 0x1, 0x4, 0x5, 0xff9e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xa, 0x0, 0x10, {0x7, 0x25, 0x1, 0xc, 0x4d, 0x7}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0xd, 0x7f, 0x81, 0x20, 0x5}, 0xf8, &(0x7f0000000300)={0x5, 0xf, 0xf8, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xf, 0x0, 0x5, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "bc3cd6559df2cbf5c5e3fd6fdc023aaa"}, @generic={0xb9, 0x10, 0xa, "bf153cbfc51dcc1a21d75a3a61daaf32c36faedc13ec0312470e2b6d85dd9bb29bbaed60f8d6a6de60a8e4f0fbcd1450d23d7a826464f91d64a007f9c0b7d0c969e049322373ec19ad381fa5c522e240cd8e23063e5200aa16c699eb1931512403f49617bce9f6d5cad5ebc53127e601813809620b2c788068095d49ff372347900d831cd7dcd6ab269b4ba8bf5cbc631a708a1aeb3e50d5d37b6616d107e825a11748135904cf3fa24d2a72d3021e2124ee7ecd184a"}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x81, 0xff00, 0x5, [0x30, 0xff0028]}]}, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44c}}, {0xd6, &(0x7f0000000600)=@string={0xd6, 0x3, "5353955d52b412d2058ce527a0f7e9912ae32a69700e5f687ea07d93ef0b8ecd6422b03ce1f452e447d4620da45d61936bc8b8b8c4860a64ab14e885777f126acfd9039591d82a13102051b2d7cf2f480cc301da2eb41bfbfe5fd0ddf09537223dd0d40e3fdcfc9eaf17e7716b9af439221ce437cf2d3f1080c5314464ff9b8e138c8feb719ddb55cb3ec4dcf3496d527d66ab5c79276a23d5982c752668b79f6df6b0f30979019742f2cbadb6f249046f70a93d6911823da17b5d266417f79dece5dda39fb8bb672c52e3046a77e4c13ee6e006"}}]}) syz_usb_connect$cdc_ncm(0x2, 0x87, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x4, 0x20, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "f892f0cc2a51"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x6d4a, 0x0, 0x7, 0x7}, {0x6, 0x24, 0x1a, 0x2, 0xe}, [@country_functional={0x6, 0x24, 0x7, 0xc, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x43, 0xc}, @obex={0x5, 0x24, 0x15, 0x1ff}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x8, 0xf9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe, 0x4, 0x5}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x300, 0x8, 0x7, 0xe, 0x40, 0x9}, 0xf, &(0x7f0000000cc0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x896b534ef305f848, 0x8, 0x12, 0x9, 0x1}]}, 0x2, [{0x96, &(0x7f0000000d00)=@string={0x96, 0x3, "47b9d86d41a67c51526218d50d40623680ada77e97e8d8415d1cc9551dd84276a73432c3a5a407b394bd470f60b82256e8337b2fc8cff689384b642dd5810ad415ce75af43d82d52023db407250e8774f56ec0c5064a924c88d508b91bba4ecfc8ac7ba1e146194c02a16bbf709772b7a934c33efbd2a1b5116c55b8230853efb6f36bb1d788eafdc17f14771bd2f0a4497bf585"}}, {0x79, &(0x7f0000000dc0)=@string={0x79, 0x3, "d36ac16f81995462a6d88f9a9ca2fd22b9a0e5570e0251d2c4824c44a180dafe4bba8f84e38c47f6e92f85be74e401744b6bcbe080ea125279bba16bee92b06779ad4e58d6a8a77a6873211c10bdd59394adf80b1716b0282eceba0b2beceb84f9f047476a2d99f37b487c5700d9816ad5bc9025b4eba4"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 58.476959][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 58.476976][ T31] audit: type=1400 audit(1790166269.741:129): avc: denied { mounton } for pid=5586 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.478289][ T31] audit: type=1400 audit(1790166269.741:130): avc: denied { mount } for pid=5586 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.479864][ T5586] cgroup: Unknown subsys name 'net' [ 58.480891][ T31] audit: type=1400 audit(1790166269.741:131): avc: denied { unmount } for pid=5586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.595803][ T5586] cgroup: Unknown subsys name 'cpuset' [ 58.597983][ T5586] cgroup: Unknown subsys name 'rlimit' [ 58.731742][ T31] audit: type=1400 audit(1790166269.991:132): avc: denied { setattr } for pid=5586 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.732100][ T31] audit: type=1400 audit(1790166269.991:133): avc: denied { create } for pid=5586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.732293][ T31] audit: type=1400 audit(1790166269.991:134): avc: denied { write } for pid=5586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.732518][ T31] audit: type=1400 audit(1790166269.991:135): avc: denied { read } for pid=5586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.750795][ T31] audit: type=1400 audit(1790166270.011:136): avc: denied { mounton } for pid=5586 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.750836][ T31] audit: type=1400 audit(1790166270.011:137): avc: denied { mount } for pid=5586 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.875877][ T5588] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.876245][ T31] audit: type=1400 audit(1790166270.141:138): avc: denied { relabelto } for pid=5588 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.831273][ T5586] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.487432][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 63.487447][ T31] audit: type=1400 audit(1790166274.751:146): avc: denied { ioctl } for pid=5597 comm="syz-executor" path="socket:[4866]" dev="sockfs" ino=4866 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.533649][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.539616][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.540467][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.540817][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.540907][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.541613][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.543053][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.543356][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.543663][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.544584][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.544795][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.545033][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.555326][ T31] audit: type=1400 audit(1790166274.811:147): avc: denied { read } for pid=5598 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.560101][ T31] audit: type=1400 audit(1790166274.821:148): avc: denied { open } for pid=5597 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.560275][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.561734][ T31] audit: type=1400 audit(1790166274.821:149): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.574696][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.582005][ T31] audit: type=1400 audit(1790166274.841:150): avc: denied { module_request } for pid=5597 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.587458][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.668495][ T31] audit: type=1400 audit(1790166274.931:151): avc: denied { sys_module } for pid=5597 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.740708][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.743506][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.743923][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.744477][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.744941][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.808143][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.809308][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.809725][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.811686][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.812098][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.962666][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.962775][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.962856][ T5604] bridge_slave_0: entered allmulticast mode [ 64.974608][ T5604] bridge_slave_0: entered promiscuous mode [ 64.976754][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.976820][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.978456][ T5604] bridge_slave_1: entered allmulticast mode [ 64.979770][ T5604] bridge_slave_1: entered promiscuous mode [ 64.980809][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.980879][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.980956][ T5614] bridge_slave_0: entered allmulticast mode [ 64.982588][ T5614] bridge_slave_0: entered promiscuous mode [ 65.039167][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.039251][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.039338][ T5614] bridge_slave_1: entered allmulticast mode [ 65.040762][ T5614] bridge_slave_1: entered promiscuous mode [ 65.095639][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.122132][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.132858][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.134767][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.183560][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.183656][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.183717][ T5597] bridge_slave_0: entered allmulticast mode [ 65.184428][ T5597] bridge_slave_0: entered promiscuous mode [ 65.200618][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.200719][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.200799][ T5597] bridge_slave_1: entered allmulticast mode [ 65.202052][ T5597] bridge_slave_1: entered promiscuous mode [ 65.248518][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.248598][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.248691][ T5598] bridge_slave_0: entered allmulticast mode [ 65.249715][ T5598] bridge_slave_0: entered promiscuous mode [ 65.264523][ T5614] team0: Port device team_slave_0 added [ 65.284100][ T5604] team0: Port device team_slave_0 added [ 65.284232][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.284338][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.284428][ T5616] bridge_slave_0: entered allmulticast mode [ 65.285579][ T5616] bridge_slave_0: entered promiscuous mode [ 65.299269][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.299341][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.299429][ T5598] bridge_slave_1: entered allmulticast mode [ 65.300540][ T5598] bridge_slave_1: entered promiscuous mode [ 65.313327][ T5614] team0: Port device team_slave_1 added [ 65.325622][ T5604] team0: Port device team_slave_1 added [ 65.335162][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.335261][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.335339][ T5616] bridge_slave_1: entered allmulticast mode [ 65.337236][ T5616] bridge_slave_1: entered promiscuous mode [ 65.374702][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.378388][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.418632][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.418646][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.418662][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.435960][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.435973][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.435990][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.438111][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.438121][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.438139][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.441284][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.443692][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.446484][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.447875][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.447884][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.447902][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.449752][ T5597] team0: Port device team_slave_0 added [ 65.479717][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.487992][ T5597] team0: Port device team_slave_1 added [ 65.519758][ T5616] team0: Port device team_slave_0 added [ 65.565296][ T5603] Bluetooth: hci0: command tx timeout [ 65.565441][ T52] Bluetooth: hci1: command tx timeout [ 65.577239][ T5604] hsr_slave_0: entered promiscuous mode [ 65.578017][ T5604] hsr_slave_1: entered promiscuous mode [ 65.580722][ T5616] team0: Port device team_slave_1 added [ 65.600020][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.600032][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.600049][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.601571][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.601581][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.601598][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.614233][ T5598] team0: Port device team_slave_0 added [ 65.652789][ T5598] team0: Port device team_slave_1 added [ 65.653002][ T52] Bluetooth: hci2: command tx timeout [ 65.654022][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.654032][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.654049][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.659528][ T5614] hsr_slave_0: entered promiscuous mode [ 65.660193][ T5614] hsr_slave_1: entered promiscuous mode [ 65.660648][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 65.660701][ T5614] Cannot create hsr debugfs directory [ 65.817002][ T52] Bluetooth: hci3: command tx timeout [ 65.818083][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.818129][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.874415][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.874428][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.874444][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.884025][ T52] Bluetooth: hci4: command tx timeout [ 65.911436][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.911450][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.911467][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.944080][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.944094][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.944111][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.009404][ T5616] hsr_slave_0: entered promiscuous mode [ 66.010099][ T5616] hsr_slave_1: entered promiscuous mode [ 66.010594][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 66.010608][ T5616] Cannot create hsr debugfs directory [ 66.043942][ T5597] hsr_slave_0: entered promiscuous mode [ 66.044386][ T5597] hsr_slave_1: entered promiscuous mode [ 66.044715][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 66.044730][ T5597] Cannot create hsr debugfs directory [ 66.090911][ T5598] hsr_slave_0: entered promiscuous mode [ 66.091346][ T5598] hsr_slave_1: entered promiscuous mode [ 66.091638][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 66.091653][ T5598] Cannot create hsr debugfs directory [ 66.357125][ T5604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.360410][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.361021][ T5604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.385332][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.401743][ T5604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.404918][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.413869][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.419859][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.470895][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.476476][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.479171][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.484815][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.485375][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.490582][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.494598][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.501006][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.585005][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.589107][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.601881][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.615311][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.616943][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.617440][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.621108][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.653001][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.656225][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.689141][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.691738][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.728174][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.728231][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.742158][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.750365][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.750936][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.756608][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.781803][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.781872][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.789184][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.789405][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.800347][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.825546][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.827994][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.840869][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.840912][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.876870][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.876955][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.939639][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.950277][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.969052][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.971013][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.971637][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.983758][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.010254][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.012334][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.070521][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.111874][ T31] audit: type=1400 audit(1790166278.371:152): avc: denied { sys_module } for pid=5604 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.125567][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.133740][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.170522][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.170649][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.185455][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.185528][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.196371][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.226011][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.226082][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.259118][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.259195][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.406441][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.467908][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.489732][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.489813][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.530078][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.530181][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.655890][ T5603] Bluetooth: hci0: command tx timeout [ 67.655970][ T52] Bluetooth: hci1: command tx timeout [ 67.727852][ T52] Bluetooth: hci2: command tx timeout [ 67.885405][ T52] Bluetooth: hci3: command tx timeout [ 67.950925][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.966934][ T52] Bluetooth: hci4: command tx timeout [ 67.985025][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.103174][ T5604] veth0_vlan: entered promiscuous mode [ 68.146330][ T5604] veth1_vlan: entered promiscuous mode [ 68.176928][ T5614] veth0_vlan: entered promiscuous mode [ 68.206542][ T5614] veth1_vlan: entered promiscuous mode [ 68.250465][ T5604] veth0_macvtap: entered promiscuous mode [ 68.259194][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.262023][ T5604] veth1_macvtap: entered promiscuous mode [ 68.305838][ T5614] veth0_macvtap: entered promiscuous mode [ 68.319826][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.326534][ T5614] veth1_macvtap: entered promiscuous mode [ 68.332265][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.346199][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.366373][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.366474][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.389632][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.425070][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.466240][ T5616] veth0_vlan: entered promiscuous mode [ 68.473096][ T1008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.473130][ T1008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.473157][ T1008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.473182][ T1008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.529824][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.572738][ T5616] veth1_vlan: entered promiscuous mode [ 68.608114][ T5597] veth0_vlan: entered promiscuous mode [ 68.611552][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.611567][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.635649][ T5597] veth1_vlan: entered promiscuous mode [ 68.685322][ T1008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.686034][ T1008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.686072][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.686085][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.740342][ T5616] veth0_macvtap: entered promiscuous mode [ 68.762495][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.762512][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.766565][ T5616] veth1_macvtap: entered promiscuous mode [ 68.799566][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.799582][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.821097][ T5597] veth0_macvtap: entered promiscuous mode [ 68.840025][ T31] audit: type=1400 audit(1790166280.101:153): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.6Kdn5P/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.841964][ T31] audit: type=1400 audit(1790166280.101:154): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.842425][ T5597] veth1_macvtap: entered promiscuous mode [ 68.853856][ T31] audit: type=1400 audit(1790166280.111:155): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.E7Ojvk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.863445][ T31] audit: type=1400 audit(1790166280.111:156): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.866205][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.878172][ T31] audit: type=1400 audit(1790166280.141:157): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.6Kdn5P/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.887575][ T31] audit: type=1400 audit(1790166280.141:158): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.E7Ojvk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.893763][ T31] audit: type=1400 audit(1790166280.161:159): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.904010][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.916672][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.924374][ T31] audit: type=1400 audit(1790166280.191:160): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.929664][ T31] audit: type=1400 audit(1790166280.191:161): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="gadgetfs" ino=8000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.945952][ T31] audit: type=1400 audit(1790166280.191:162): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.995389][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.123734][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.139383][ T5604] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.158160][ T5598] veth0_vlan: entered promiscuous mode [ 69.160262][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.160304][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.160333][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.160360][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.160388][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.160417][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.160445][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.171349][ T5598] veth1_vlan: entered promiscuous mode [ 69.337134][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.337153][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.537248][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.537267][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.538953][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.538968][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.756917][ T5603] Bluetooth: hci0: command tx timeout [ 69.758249][ T52] Bluetooth: hci1: command tx timeout [ 69.813695][ T52] Bluetooth: hci2: command tx timeout [ 69.963881][ T52] Bluetooth: hci3: command tx timeout [ 70.054199][ T52] Bluetooth: hci4: command tx timeout [ 71.011827][ T5598] veth0_macvtap: entered promiscuous mode [ 71.066096][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.066130][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.465934][ T5598] veth1_macvtap: entered promiscuous mode [ 71.732453][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.758616][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.803936][ T5603] Bluetooth: hci0: command tx timeout [ 71.803974][ T52] Bluetooth: hci1: command tx timeout [ 71.805038][ T155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.805070][ T155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.805105][ T155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.805134][ T155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.883263][ T52] Bluetooth: hci2: command tx timeout [ 71.940487][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 72.056785][ T52] Bluetooth: hci3: command tx timeout [ 72.071707][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.071725][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.125616][ T52] Bluetooth: hci4: command tx timeout [ 72.180574][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.180591][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.063516][ T5701] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.113035][ T2317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.114588][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.234428][ T5701] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 73.235814][ T5701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.235839][ T5701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8204, setting to 1024 [ 73.235873][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.238806][ T5701] usb 2-1: config 0 descriptor?? [ 73.262984][ T2317] usb 4-1: Using ep0 maxpacket: 16 [ 73.265100][ T9] usb 3-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 73.266693][ T2317] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.267704][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.267726][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.267743][ T9] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.267763][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 73.267805][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.268417][ T2317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.268439][ T2317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.268456][ T2317] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.268484][ T2317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.273183][ T5793] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 73.430511][ T9] usb 3-1: config 0 descriptor?? [ 73.440550][ T2317] usb 4-1: config 0 descriptor?? [ 73.451131][ T5793] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 73.463912][ T5793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.463959][ T5793] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 73.467444][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.467465][ T5793] usb 1-1: Product: syz [ 73.467478][ T5793] usb 1-1: Manufacturer: syz [ 73.467491][ T5793] usb 1-1: SerialNumber: syz [ 73.699620][ T5701] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 73.699656][ T5701] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 73.699676][ T5701] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 73.699696][ T5701] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 73.702285][ T5701] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 73.711764][ T5701] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 73.869753][ T9] input: HID 1b96:0011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B96:0011.0002/input/input5 [ 73.890319][ T5701] playstation 0003:054C:0DF2.0001: Invalid byte count transferred, expected 20 got 0 [ 73.890343][ T5701] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 73.890399][ T5701] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 73.890413][ T5701] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 73.905416][ T5701] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 73.940442][ T9] ntrig 0003:1B96:0011.0002: offset (1) exceeds report_count (1) [ 73.940540][ T9] ntrig 0003:1B96:0011.0002: offset (2) exceeds report_count (1) [ 73.940558][ T9] ntrig 0003:1B96:0011.0002: offset (3) exceeds report_count (1) [ 73.940573][ T9] ntrig 0003:1B96:0011.0002: offset (4) exceeds report_count (1) [ 73.940587][ T9] ntrig 0003:1B96:0011.0002: offset (5) exceeds report_count (1) [ 73.940604][ T9] ntrig 0003:1B96:0011.0002: offset (39) exceeds report_count (1) [ 73.940621][ T9] ntrig 0003:1B96:0011.0002: offset (9) exceeds report_count (1) [ 73.940636][ T9] ntrig 0003:1B96:0011.0002: offset (25) exceeds report_count (1) [ 73.985741][ C0] usb 1-1: received EP1 urb->status = -2 [ 73.985778][ T5793] usb 1-1: unable to init card! (ret=-110) [ 73.986615][ T5793] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 73.988942][ T2317] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 73.988963][ T2317] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 73.988980][ T2317] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 73.988997][ T2317] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 73.989013][ T2317] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 74.006566][ T2317] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input6 [ 74.074554][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 74.074568][ T31] audit: type=1400 audit(1790166285.331:193): avc: denied { read } for pid=5825 comm="syz.2.13" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.074619][ T31] audit: type=1400 audit(1790166285.331:194): avc: denied { open } for pid=5825 comm="syz.2.13" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.102475][ T9] ntrig 0003:1B96:0011.0002: input,hidraw0: USB HID v0.04 Joystick [HID 1b96:0011] on usb-dummy_hcd.2-1/input0 [ 74.131377][ T31] audit: type=1400 audit(1790166285.391:195): avc: denied { ioctl } for pid=5825 comm="syz.2.13" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.187253][ T5701] usb 1-1: USB disconnect, device number 2 [ 74.201787][ T2317] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 74.234320][ T2317] usb 4-1: USB disconnect, device number 2 [ 74.237030][ T190] usb 2-1: USB disconnect, device number 2 [ 74.241488][ T5826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.241907][ T5826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.255478][ T31] audit: type=1400 audit(1790166285.521:196): avc: denied { create } for pid=5843 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.316712][ T9] usb 3-1: USB disconnect, device number 2 [ 74.381699][ T5853] fido_id[5853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 74.501800][ T5854] fido_id[5854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 75.023005][ T5701] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.103033][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.133000][ T2317] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.163359][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.193003][ T5701] usb 1-1: Using ep0 maxpacket: 16 [ 75.193451][ T5701] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 75.194238][ T5701] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 75.197320][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.197341][ T5701] usb 1-1: Product: syz [ 75.197354][ T5701] usb 1-1: Manufacturer: syz [ 75.197366][ T5701] usb 1-1: SerialNumber: syz [ 75.199256][ T5701] usb 1-1: config 0 descriptor?? [ 75.202860][ T5701] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 75.204447][ T5701] usb 1-1: Detected FT232R [ 75.226748][ T5793] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.273109][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 75.273874][ T9] usb 5-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=f3.70 [ 75.275031][ T9] usb 5-1: config 1 has an invalid interface number: 22 but max is 0 [ 75.275048][ T9] usb 5-1: config 1 has no interface number 0 [ 75.275070][ T9] usb 5-1: config 1 interface 22 has no altsetting 0 [ 75.277097][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.277115][ T9] usb 5-1: Product: syz [ 75.277126][ T9] usb 5-1: Manufacturer: syz [ 75.277138][ T9] usb 5-1: SerialNumber: syz [ 75.303543][ T2317] usb 2-1: Using ep0 maxpacket: 32 [ 75.306124][ T2317] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.306158][ T2317] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.307295][ T2317] usb 2-1: config 1 has an invalid descriptor of length 26, skipping remainder of the config [ 75.307345][ T2317] usb 2-1: config 1 interface 0 altsetting 92 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.307364][ T2317] usb 2-1: config 1 interface 0 has no altsetting 0 [ 75.309381][ T2317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.309417][ T2317] usb 2-1: Product: syz [ 75.309428][ T2317] usb 2-1: Manufacturer: syz [ 75.309440][ T2317] usb 2-1: SerialNumber: syz [ 75.344696][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 75.345301][ T30] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.346140][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.346155][ T30] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.348362][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.348378][ T30] usb 4-1: Product: syz [ 75.348390][ T30] usb 4-1: Manufacturer: syz [ 75.348401][ T30] usb 4-1: SerialNumber: syz [ 75.360243][ T30] usb 4-1: 0:2 : does not exist [ 75.415966][ T5701] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 75.423565][ T5793] usb 3-1: Using ep0 maxpacket: 32 [ 75.453331][ T5793] usb 3-1: unable to get BOS descriptor or descriptor too short [ 75.453364][ T5793] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 75.454372][ T5793] usb 3-1: config 3 has an invalid interface number: 223 but max is 1 [ 75.454411][ T5793] usb 3-1: config 3 has an invalid interface number: 25 but max is 1 [ 75.454426][ T5793] usb 3-1: config 3 has an invalid interface number: 223 but max is 1 [ 75.454442][ T5793] usb 3-1: config 3 has no interface number 0 [ 75.454454][ T5793] usb 3-1: config 3 has no interface number 1 [ 75.454488][ T5793] usb 3-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 75.454504][ T5793] usb 3-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 75.454545][ T5793] usb 3-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 75.454571][ T5793] usb 3-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 75.454591][ T5793] usb 3-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 75.454610][ T5793] usb 3-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82 [ 75.454629][ T5793] usb 3-1: config 3 interface 223 has no altsetting 1 [ 75.454642][ T5793] usb 3-1: config 3 interface 25 has no altsetting 0 [ 75.456638][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.456655][ T5793] usb 3-1: Product: syz [ 75.456666][ T5793] usb 3-1: Manufacturer: syz [ 75.456678][ T5793] usb 3-1: SerialNumber: syz [ 75.487511][ T5860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.487877][ T5860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.503584][ T9] gspca_main: touptek-2.14.0 probing 0547:6801 [ 75.513771][ T9] usb 5-1: USB disconnect, device number 2 [ 75.550508][ T2317] cdc_ether 2-1:1.0: skipping garbage [ 75.550523][ T2317] cdc_ether 2-1:1.0: skipping garbage [ 75.550534][ T2317] cdc_ether 2-1:1.0: skipping garbage [ 75.550544][ T2317] cdc_ether 2-1:1.0: skipping garbage [ 75.550862][ T2317] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 75.564674][ T2317] usb 2-1: USB disconnect, device number 3 [ 75.666935][ T5866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.667306][ T5866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.676141][ T5866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.676470][ T5866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.749244][ T30] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 75.750576][ T5701] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 75.798849][ T30] usb 4-1: USB disconnect, device number 3 [ 75.850418][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.871644][ T5701] usb 1-1: USB disconnect, device number 3 [ 75.882802][ T5866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.894835][ T5866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.907174][ T5701] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 75.907669][ T5701] ftdi_sio 1-1:0.0: device disconnected [ 75.958392][ T5793] usbtv 3-1:3.223: Fushicai USBTV007 Audio-Video Grabber [ 75.964074][ T5793] usb 3-1: USB disconnect, device number 3 [ 76.055168][ T984] cfg80211: failed to load regulatory.db [ 76.101537][ T5793] [ 76.103879][ T5793] ========================= [ 76.108368][ T5793] WARNING: held lock freed! [ 76.112856][ T5793] syzkaller #0 Not tainted [ 76.117252][ T5793] ------------------------- [ 76.121735][ T5793] kworker/0:7/5793 is freeing memory ffff88802be22000-ffff88802be227ff, with a lock still held there! [ 76.132644][ T5793] ffff88802be221a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 76.142732][ T5793] locks held by kworker/0:7/5793: 5, last CPU#0: [ 76.149035][ T5793] #0: ffff8880242e4940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 76.159804][ T5793] #1: ffffc90004e67d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 76.171007][ T5793] #2: ffff88802ac561d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 76.179864][ T5793] #3: ffff888033af61d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 76.189077][ T5793] #4: ffff88802be221a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 76.199595][ T5793] [ 76.199595][ T5793] stack backtrace: [ 76.205464][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 76.214813][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 76.224848][ T5793] Workqueue: usb_hub_wq hub_event [ 76.229865][ T5793] Call Trace: [ 76.233121][ T5793] [ 76.236033][ T5793] dump_stack_lvl+0x100/0x190 [ 76.240695][ T5793] debug_check_no_locks_freed+0x115/0x120 [ 76.246402][ T5793] ? device_release+0xd0/0x270 [ 76.251150][ T5793] ? device_release+0xd2/0x270 [ 76.255897][ T5793] kfree+0x180/0x6d0 [ 76.259778][ T5793] ? put_device+0x24/0x30 [ 76.264091][ T5793] ? __pfx_usb_release_interface+0x10/0x10 [ 76.269891][ T5793] device_release+0xd2/0x270 [ 76.274468][ T5793] kobject_put+0x1f7/0x640 [ 76.278875][ T5793] put_device+0x1f/0x30 [ 76.283022][ T5793] v4l2_device_disconnect+0x60/0xc0 [ 76.288212][ T5793] usbtv_video_free+0x25/0x30 [ 76.292880][ T5793] usbtv_disconnect+0x58/0xa0 [ 76.297553][ T5793] usb_unbind_interface+0x1dd/0x9e0 [ 76.302744][ T5793] ? __pfx_usb_unbind_interface+0x10/0x10 [ 76.308454][ T5793] device_remove+0x12a/0x180 [ 76.313035][ T5793] device_release_driver_internal+0x44e/0x620 [ 76.319090][ T5793] bus_remove_device+0x2bc/0x560 [ 76.324014][ T5793] ? __pfx_bus_remove_device+0x10/0x10 [ 76.329453][ T5793] ? __pfx_device_remove_attrs+0x10/0x10 [ 76.335065][ T5793] device_del+0x376/0x9b0 [ 76.339378][ T5793] ? __pfx_device_del+0x10/0x10 [ 76.344209][ T5793] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 76.349909][ T5793] ? lock_acquire+0x1d1/0x380 [ 76.354564][ T5793] usb_disable_device+0x367/0x810 [ 76.359571][ T5793] ? mark_held_locks+0x40/0x70 [ 76.364327][ T5793] usb_disconnect+0x2e2/0x9a0 [ 76.368993][ T5793] hub_event+0x1bb1/0x4420 [ 76.373409][ T5793] ? __lock_acquire+0x5c0/0x1f40 [ 76.378326][ T5793] ? __pfx_hub_event+0x10/0x10 [ 76.383072][ T5793] ? lockdep_count_forward_deps+0x180/0x200 [ 76.388945][ T5793] ? lock_acquire+0x1d1/0x380 [ 76.393598][ T5793] ? process_one_work+0xa2c/0x1b10 [ 76.398701][ T5793] ? process_one_work+0x906/0x1b10 [ 76.403794][ T5793] ? process_one_work+0x906/0x1b10 [ 76.408894][ T5793] process_one_work+0xac7/0x1b10 [ 76.413819][ T5793] ? __pfx_process_one_work+0x10/0x10 [ 76.419175][ T5793] ? lock_acquire+0x1d1/0x380 [ 76.423834][ T5793] ? __pfx_hub_event+0x10/0x10 [ 76.428583][ T5793] worker_thread+0x5ef/0xe50 [ 76.433169][ T5793] ? __pfx_worker_thread+0x10/0x10 [ 76.438278][ T5793] ? kthread+0x13a/0x450 [ 76.442504][ T5793] ? __pfx_worker_thread+0x10/0x10 [ 76.447597][ T5793] kthread+0x373/0x450 [ 76.451651][ T5793] ? __pfx_kthread+0x10/0x10 [ 76.456223][ T5793] ret_from_fork+0x730/0xd60 [ 76.460792][ T5793] ? __pfx_ret_from_fork+0x10/0x10 [ 76.465884][ T5793] ? __switch_to+0x800/0x10f0 [ 76.470543][ T5793] ? __pfx_kthread+0x10/0x10 [ 76.475115][ T5793] ret_from_fork_asm+0x1a/0x30 [ 76.479862][ T5793] [ 76.540919][ ** replaying previous printk message ** [ 76.540919][ T5793] ================================================================== [ 76.540933][ T5793] BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x935/0x9e0 [ 76.540965][ T5793] Read of size 8 at addr ffff88802be22008 by task kworker/0:7/5793 [ 76.540979][ T5793] [ 76.540987][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 76.541008][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 76.541020][ T5793] Workqueue: usb_hub_wq hub_event [ 76.541046][ T5793] Call Trace: [ 76.541053][ T5793] [ 76.541060][ T5793] dump_stack_lvl+0x100/0x190 [ 76.541087][ T5793] print_report+0x13d/0x4b0 [ 76.541113][ T5793] ? __virt_addr_valid+0x239/0x430 [ 76.541132][ T5793] ? usb_unbind_interface+0x935/0x9e0 [ 76.541158][ T5793] kasan_report+0xdf/0x1c0 [ 76.541181][ T5793] ? usb_unbind_interface+0x935/0x9e0 [ 76.541209][ T5793] usb_unbind_interface+0x935/0x9e0 [ 76.541239][ T5793] ? __pfx_usb_unbind_interface+0x10/0x10 [ 76.541266][ T5793] device_remove+0x12a/0x180 [ 76.541287][ T5793] device_release_driver_internal+0x44e/0x620 [ 76.541313][ T5793] bus_remove_device+0x2bc/0x560 [ 76.541332][ T5793] ? __pfx_bus_remove_device+0x10/0x10 [ 76.541350][ T5793] ? __pfx_device_remove_attrs+0x10/0x10 [ 76.541372][ T5793] device_del+0x376/0x9b0 [ 76.541394][ T5793] ? __pfx_device_del+0x10/0x10 [ 76.541414][ T5793] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 76.541436][ T5793] ? lock_acquire+0x1d1/0x380 [ 76.541456][ T5793] usb_disable_device+0x367/0x810 [ 76.541478][ T5793] ? mark_held_locks+0x40/0x70 [ 76.541509][ T5793] usb_disconnect+0x2e2/0x9a0 [ 76.541534][ T5793] hub_event+0x1bb1/0x4420 [ 76.541564][ T5793] ? __lock_acquire+0x5c0/0x1f40 [ 76.541586][ T5793] ? __pfx_hub_event+0x10/0x10 [ 76.541611][ T5793] ? lockdep_count_forward_deps+0x180/0x200 [ 76.541638][ T5793] ? lock_acquire+0x1d1/0x380 [ 76.541656][ T5793] ? process_one_work+0xa2c/0x1b10 [ 76.541684][ T5793] ? process_one_work+0x906/0x1b10 [ 76.541710][ T5793] ? process_one_work+0x906/0x1b10 [ 76.541737][ T5793] process_one_work+0xac7/0x1b10 [ 76.541767][ T5793] ? __pfx_process_one_work+0x10/0x10 [ 76.541792][ T5793] ? lock_acquire+0x1d1/0x380 [ 76.541812][ T5793] ? __pfx_hub_event+0x10/0x10 [ 76.541836][ T5793] worker_thread+0x5ef/0xe50 [ 76.541864][ T5793] ? __pfx_worker_thread+0x10/0x10 [ 76.541891][ T5793] ? kthread+0x13a/0x450 [ 76.541915][ T5793] ? __pfx_worker_thread+0x10/0x10 [ 76.541941][ T5793] kthread+0x373/0x450 [ 76.541965][ T5793] ? __pfx_kthread+0x10/0x10 [ 76.541990][ T5793] ret_from_fork+0x730/0xd60 [ 76.542010][ T5793] ? __pfx_ret_from_fork+0x10/0x10 [ 76.542030][ T5793] ? __switch_to+0x800/0x10f0 [ 76.542054][ T5793] ? __pfx_kthread+0x10/0x10 [ 76.542078][ T5793] ret_from_fork_asm+0x1a/0x30 [ 76.542103][ T5793] [ 76.542109][ T5793] [ 76.542114][ T5793] Allocated by task 5793: [ 76.542122][ T5793] kasan_save_stack+0x30/0x50 [ 76.542142][ T5793] kasan_save_track+0x14/0x30 [ 76.542159][ T5793] __kasan_kmalloc+0xaa/0xb0 [ 76.542176][ T5793] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 76.542202][ T5793] usb_set_configuration+0x10cb/0x1c60 [ 76.542224][ T5793] usb_generic_driver_probe+0xa1/0xe0 [ 76.542243][ T5793] usb_probe_device+0xef/0x400 [ 76.542266][ T5793] really_probe+0x241/0xa60 [ 76.542285][ T5793] __driver_probe_device+0x210/0x460 [ 76.542304][ T5793] driver_probe_device+0x4a/0x140 [ 76.542323][ T5793] __device_attach_driver+0x1df/0x320 [ 76.542343][ T5793] bus_for_each_drv+0x159/0x1e0 [ 76.542357][ T5793] __device_attach+0x1e4/0x4d0 [ 76.542376][ T5793] device_initial_probe+0xaf/0xd0 [ 76.542396][ T5793] bus_probe_device+0x64/0x160 [ 76.542412][ T5793] device_add+0x121d/0x1970 [ 76.542434][ T5793] usb_new_device.part.0+0xcc2/0x1686 [ 76.542458][ T5793] hub_event.cold+0x1e3/0xe90 [ 76.542481][ T5793] process_one_work+0xac7/0x1b10 [ 76.542505][ T5793] worker_thread+0x5ef/0xe50 [ 76.542530][ T5793] kthread+0x373/0x450 [ 76.542552][ T5793] ret_from_fork+0x730/0xd60 [ 76.542569][ T5793] ret_from_fork_asm+0x1a/0x30 [ 76.542586][ T5793] [ 76.542590][ T5793] Freed by task 5793: [ 76.542598][ T5793] kasan_save_stack+0x30/0x50 [ 76.542615][ T5793] kasan_save_track+0x14/0x30 [ 76.542639][ T5793] kasan_save_free_info+0x3b/0x70 [ 76.542662][ T5793] __kasan_slab_free+0x5f/0x80 [ 76.542680][ T5793] kfree+0x22b/0x6d0 [ 76.542701][ T5793] device_release+0xd2/0x270 [ 76.542726][ T5793] kobject_put+0x1f7/0x640 [ 76.542742][ T5793] put_device+0x1f/0x30 [ 76.542756][ T5793] v4l2_device_disconnect+0x60/0xc0 [ 76.542780][ T5793] usbtv_video_free+0x25/0x30 [ 76.542805][ T5793] usbtv_disconnect+0x58/0xa0 [ 76.542827][ T5793] usb_unbind_interface+0x1dd/0x9e0 [ 76.542852][ T5793] device_remove+0x12a/0x180 [ 76.542869][ T5793] device_release_driver_internal+0x44e/0x620 [ 76.542891][ T5793] bus_remove_device+0x2bc/0x560 [ 76.542906][ T5793] device_del+0x376/0x9b0 [ 76.542922][ T5793] usb_disable_device+0x367/0x810 [ 76.542941][ T5793] usb_disconnect+0x2e2/0x9a0 [ 76.542963][ T5793] hub_event+0x1bb1/0x4420 [ 76.542985][ T5793] process_one_work+0xac7/0x1b10 [ 76.543010][ T5793] worker_thread+0x5ef/0xe50 [ 76.543035][ T5793] kthread+0x373/0x450 [ 76.543057][ T5793] ret_from_fork+0x730/0xd60 [ 76.543074][ T5793] ret_from_fork_asm+0x1a/0x30 [ 76.543091][ T5793] [ 76.543095][ T5793] The buggy address belongs to the object at ffff88802be22000 [ 76.543095][ T5793] which belongs to the cache kmalloc-2k of size 2048 [ 76.543109][ T5793] The buggy address is located 8 bytes inside of [ 76.543109][ T5793] freed 2048-byte region [ffff88802be22000, ffff88802be22800) [ 76.543124][ T5793] [ 76.543128][ T5793] The buggy address belongs to the physical page: [ 76.543135][ T5793] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802be27000 pfn:0x2be20 [ 76.543152][ T5793] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 76.543165][ T5793] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 76.543181][ T5793] page_type: f5(slab) [ 76.543197][ T5793] raw: 00fff00000000240 ffff88801c035000 ffffea0000d6f210 ffffea0000ab6a10 [ 76.543213][ T5793] raw: ffff88802be27000 0000000000080006 00000000f5000000 0000000000000000 [ 76.543229][ T5793] head: 00fff00000000240 ffff88801c035000 ffffea0000d6f210 ffffea0000ab6a10 [ 76.543245][ T5793] head: ffff88802be27000 0000000000080006 00000000f5000000 0000000000000000 [ 76.543261][ T5793] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 76.543276][ T5793] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 76.543285][ T5793] page dumped because: kasan: bad access detected [ 76.543293][ T5793] page_owner tracks the page as allocated [ 76.543299][ T5793] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5597, tgid 5597 (syz-executor), ts 64728541074 [ 76.543327][ T5793] post_alloc_hook+0xfd/0x120 [ 76.543353][ T5793] get_page_from_freelist+0x110d/0x35d0 [ 76.543368][ T5793] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 76.543384][ T5793] new_slab+0xa9/0x6e0 [ 76.543397][ T5793] refill_objects+0xe3/0x410 [ 76.543411][ T5793] __pcs_replace_empty_main+0x35e/0x650 [ 76.543437][ T5793] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 76.543462][ T5793] rtnl_newlink+0x139/0x2620 [ 76.543484][ T5793] rtnetlink_rcv_msg+0x95e/0xe90 [ 76.543505][ T5793] netlink_rcv_skb+0x159/0x420 [ 76.543524][ T5793] netlink_unicast+0x585/0x850 [ 76.543542][ T5793] netlink_sendmsg+0x8b0/0xda0 [ 76.543560][ T5793] __sys_sendto+0x48b/0x4e0 [ 76.543578][ T5793] __x64_sys_sendto+0xe0/0x1c0 [ 76.543595][ T5793] do_syscall_64+0x123/0x790 [ 76.543625][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.543642][ T5793] page last free pid 5628 tgid 5628 ts 64004615619 stack trace: [ 76.543654][ T5793] __free_frozen_pages+0x79f/0x10f0 [ 76.543676][ T5793] qlist_free_all+0x47/0xf0 [ 76.543692][ T5793] kasan_quarantine_reduce+0x1a0/0x1f0 [ 76.543710][ T5793] __kasan_slab_alloc+0x69/0x90 [ 76.543730][ T5793] kmem_cache_alloc_noprof+0x269/0x6a0 [ 76.543746][ T5793] vm_area_alloc+0x1f/0x160 [ 76.543768][ T5793] __mmap_region+0x1096/0x32e0 [ 76.543793][ T5793] mmap_region+0x3db/0x6d0 [ 76.543807][ T5793] do_mmap+0x12c7/0x1c30 [ 76.543826][ T5793] vm_mmap_pgoff+0x28d/0x470 [ 76.543844][ T5793] ksys_mmap_pgoff+0xe4/0x610 [ 76.543862][ T5793] __x64_sys_mmap+0x125/0x190 [ 76.543880][ T5793] do_syscall_64+0x123/0x790 [ 76.543904][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.543921][ T5793] [ 76.543926][ T5793] Memory state around the buggy address: [ 76.543933][ T5793] ffff88802be21f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.543945][ T5793] ffff88802be21f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.543957][ T5793] >ffff88802be22000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.543966][ T5793] ^ [ 76.543974][ T5793] ffff88802be22080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.543986][ T5793] ffff88802be22100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.543995][ T5793] ================================================================== [ 76.544830][ T5793] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.429988][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 77.439350][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 77.449403][ T5793] Workqueue: usb_hub_wq hub_event [ 77.454442][ T5793] Call Trace: [ 77.457713][ T5793] [ 77.460651][ T5793] dump_stack_lvl+0x100/0x190 [ 77.465313][ T5793] vpanic+0x553/0x970 [ 77.469279][ T5793] ? __pfx_vpanic+0x10/0x10 [ 77.473765][ T5793] ? rcu_is_watching+0x13/0xc0 [ 77.478534][ T5793] ? usb_unbind_interface+0x935/0x9e0 [ 77.483896][ T5793] panic+0xd1/0xe0 [ 77.487597][ T5793] ? __pfx_panic+0x10/0x10 [ 77.492000][ T5793] ? usb_unbind_interface+0x935/0x9e0 [ 77.497370][ T5793] ? preempt_schedule_common+0x3c/0xb0 [ 77.502817][ T5793] check_panic_on_warn.cold+0x19/0x34 [ 77.508170][ T5793] end_report.part.0+0x3a/0x90 [ 77.512919][ T5793] kasan_report.cold+0xe/0x18 [ 77.517581][ T5793] ? usb_unbind_interface+0x935/0x9e0 [ 77.522942][ T5793] usb_unbind_interface+0x935/0x9e0 [ 77.528131][ T5793] ? __pfx_usb_unbind_interface+0x10/0x10 [ 77.533837][ T5793] device_remove+0x12a/0x180 [ 77.538409][ T5793] device_release_driver_internal+0x44e/0x620 [ 77.544460][ T5793] bus_remove_device+0x2bc/0x560 [ 77.549378][ T5793] ? __pfx_bus_remove_device+0x10/0x10 [ 77.554818][ T5793] ? __pfx_device_remove_attrs+0x10/0x10 [ 77.560436][ T5793] device_del+0x376/0x9b0 [ 77.564750][ T5793] ? __pfx_device_del+0x10/0x10 [ 77.569583][ T5793] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 77.575284][ T5793] ? lock_acquire+0x1d1/0x380 [ 77.579952][ T5793] usb_disable_device+0x367/0x810 [ 77.584959][ T5793] ? mark_held_locks+0x40/0x70 [ 77.589705][ T5793] usb_disconnect+0x2e2/0x9a0 [ 77.594368][ T5793] hub_event+0x1bb1/0x4420 [ 77.598778][ T5793] ? __lock_acquire+0x5c0/0x1f40 [ 77.603696][ T5793] ? __pfx_hub_event+0x10/0x10 [ 77.608452][ T5793] ? lockdep_count_forward_deps+0x180/0x200 [ 77.614332][ T5793] ? lock_acquire+0x1d1/0x380 [ 77.619003][ T5793] ? process_one_work+0xa2c/0x1b10 [ 77.624117][ T5793] ? process_one_work+0x906/0x1b10 [ 77.629229][ T5793] ? process_one_work+0x906/0x1b10 [ 77.634349][ T5793] process_one_work+0xac7/0x1b10 [ 77.639280][ T5793] ? __pfx_process_one_work+0x10/0x10 [ 77.644637][ T5793] ? lock_acquire+0x1d1/0x380 [ 77.649299][ T5793] ? __pfx_hub_event+0x10/0x10 [ 77.654046][ T5793] worker_thread+0x5ef/0xe50 [ 77.658626][ T5793] ? __pfx_worker_thread+0x10/0x10 [ 77.663723][ T5793] ? kthread+0x13a/0x450 [ 77.667948][ T5793] ? __pfx_worker_thread+0x10/0x10 [ 77.673042][ T5793] kthread+0x373/0x450 [ 77.677094][ T5793] ? __pfx_kthread+0x10/0x10 [ 77.681670][ T5793] ret_from_fork+0x730/0xd60 [ 77.686240][ T5793] ? __pfx_ret_from_fork+0x10/0x10 [ 77.691331][ T5793] ? __switch_to+0x800/0x10f0 [ 77.695992][ T5793] ? __pfx_kthread+0x10/0x10 [ 77.700566][ T5793] ret_from_fork_asm+0x1a/0x30 [ 77.705314][ T5793] [ 77.708533][ T5793] Kernel Offset: disabled [ 77.712837][ T5793] Rebooting in 86400 seconds..