last executing test programs: 22.949794253s ago: executing program 0 (id=8371): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) r4 = syz_open_procfs(r2, &(0x7f0000000040)='fd/4\x00') pread64(r4, &(0x7f00000002c0)=""/68, 0x44, 0x8) 22.942333233s ago: executing program 0 (id=8372): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) 22.936007483s ago: executing program 0 (id=8373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 21.920459845s ago: executing program 0 (id=8378): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x0, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x3c}}, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) 15.723198567s ago: executing program 2 (id=8411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 15.679151221s ago: executing program 2 (id=8412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000090000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r8, &(0x7f0000000080)='./file0\x00') add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 14.82120404s ago: executing program 2 (id=8416): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) 14.81380973s ago: executing program 2 (id=8417): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004) 14.475343578s ago: executing program 4 (id=8420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000090000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r7, &(0x7f0000000080)='./file0\x00') add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 13.58923289s ago: executing program 4 (id=8424): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0xfe}, 0x658}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) syz_emit_ethernet(0x7e, &(0x7f0000000580)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xd, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x1c}, @cipso={0x86, 0x21, 0x0, [{0x7, 0x6, "5408beea"}, {0x1, 0xfffffc1e, "8d6bd32f"}, {0x1, 0x8, "f72f1c2b9641"}, {0x5, 0x7, "988f05bed6"}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'sit0\x00', {0x2, 0x0, @multicast2}}) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 12.743363728s ago: executing program 4 (id=8429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x751f}, 0x48) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) 11.85293073s ago: executing program 4 (id=8433): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x10001, 0x0, 0x8000, 0x21ed, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609fbbb000006c00fc010000000000000000000000000000fe8000"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2b}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$evdev(&(0x7f0000000780), 0x9, 0x2000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$sock(r0, &(0x7f0000000280)={&(0x7f0000000380)=@in={0x2, 0x4e22, @local}, 0x80, &(0x7f0000000040)=[{&(0x7f00000005c0)}, {&(0x7f00000007c0)="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", 0xfc}], 0x2, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xce2}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}], 0x30}, 0x11) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x20000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 10.982510061s ago: executing program 4 (id=8435): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) 10.73876908s ago: executing program 0 (id=8432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0x0, 0x0, 0x205fffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = add_key$user(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)="a9d7796dba362e74932fc2ddae1af622615bec5ff3de6ec24d938b5f04a68c44c5f60f8b7471736eeb219e1155b4c1dbe2a4e0c38edc434e5512971cc2c13f0d17fa5dffa050e379dba2814c61be22ab1b2397fda09217f7067cac67ce515f7370a53cf7a1e09990b92e428532c2986efac55fc17bf473cc32d9a9256c7f7f158887c2f246b3aea9530f79e91ead14682febc6", 0x93, 0xfffffffffffffffa) keyctl$set_timeout(0xf, r5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a00"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) vmsplice(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000050006"], 0x48}}, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r8, &(0x7f0000000080)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14) 10.099682432s ago: executing program 4 (id=8438): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) ftruncate(r0, 0x6) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="00020c0000000c00025821fa91f49e2ec788b090393353554ef70b04ebb331d43bf263e323cb020858eae856f52e8295c0e714a485b28e586674fe7bbfe6f3f9a37dd848b634cfaf651e8e330bf5c145de2825342027f7345543c9d605b991ee7e54fc15480b0a84bdaf79124fd90701b91ef091438166451ecb1d39b079ab552e2e18f1e7a946b335b6e86d0b76c878241ff2e6903e9fae2c773e27061df8"], 0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d02"], 0x0, 0x3e}, 0x20) ptrace(0x10, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x6}, 0x48) write$selinux_load(0xffffffffffffffff, 0x0, 0x20) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) unshare(0x40000600) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x6, 0x0, @remote={0x6}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sync_file_range(r0, 0x0, 0x0, 0x6) 9.675070566s ago: executing program 0 (id=8442): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x0, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x3c}}, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) 5.376024654s ago: executing program 3 (id=8460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1c, 0x0, 0x4, 0xff, 0x1400, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@usrjquota}, {@sb={'sb', 0x3d, 0x5}}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@noacl}, {@data_err_abort}]}, 0xfe, 0x451, &(0x7f00000016c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4.80368571s ago: executing program 1 (id=8461): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0) 4.755032815s ago: executing program 1 (id=8463): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f0000000b40)="$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") sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0xd0}}, 0x2000081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8=r4, @ANYRES64=r1, @ANYRES8, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000300)="cca3", 0x2}, {&(0x7f00000004c0)="3e39db193b5db1c6fbb14056e195f17dbb483c4e3548299e4e1246da605ccefe5118c804ef288a4c451caee51487de6fd2f9a5a10e7ff25c8a0d4990a257e0baeab98a794d486a959c0852d77d62b2b62ba728d2c6071243f777b26c20571596230e4b40981353fe495059f4e968ec0b3b1066089c10a1c60da3c5c75825e7ac0846eadf6bf1e8dba0610818d649ab7762f822ecfa0b720a0fc74609b32f9d2e1f5d747d86b3547065d9fe4ddf50c1992eb6e5bbc47eac866d", 0xb9}, {&(0x7f0000000580)="ab80e82efaf47a73dc2316b4a499ded0eafca0cd2de6990e27be6b47feef8d3f3a27e147de59796623c884112d7ae6db75f5981e0cdf1b06140ae38bff166bb4f33b86e7b7da1f3a1d6fd809749fdb6dfb5b3678921a7ea484c00b06169801e5700a67095d3e423998ff54749ef8a3fa742ecf41330364cd0919dbde9e10bdc8a838d4e2501f41d870c402738289cd31f54af07e4c69f52ab258a068c606feb33ca44370db9d23707a5b3bf98d57393712", 0xb1}, {&(0x7f0000000840)="aa4b261ed5d5e2616999e584e0ccc2aafe102717cc3f6ae945bf9ce582359c76fb6cb906260ffca2373f86660ff1bf409a7201f6c30617a34fa49d1d58448f03721f49916cfb8b78954c25670bd49929f09c08019a45d94ef9f455187370351732bf5b43f5c0b518bc9aea9508a5178b75681bbf48f1965a1dac6d7919c780f89f45da6ddc7cabfbfebeba0caeec554e44e64a8a629fa4524dd4e3b257bbc6ece4017999fd427c9a092c0aebb3eb8c56c22cba6a7417a4570743bea31f", 0xbd}, {&(0x7f0000000900)="586a604793367a0c21a70edf31a1e207b159e56f4b8d95cdc22b8e34fd6dba02fdde02d32bc7aefd0384567051e7032eb828833088631e9b1a075de0482e21ffb817ec59b8a3f9890cd3319994e1051bd6725015476021277e187ffa0cbf3c94a3a4b13696be9bf5f68f4f3e3c62ef873086e5074f91a599ab891603c9c2a8eae7c344c7fed64a0f1b0111bd746edbb211be5fe2a4c0fad5c9ee410ed0f7e0", 0x9f}, {&(0x7f0000000d80)="a4a4123c0ce7f2bfbcae3d5a1d3e5d1c9fc735dd9b5579c4b2c0dfb41d7a83985416cbbbfba52263b520a8b6f6a05514c3602130ec10d4fd0b9a5d6f8684052aa10e080f26128e00858f333fe9c1e15f7555bc13f62034", 0x57}, {&(0x7f0000000e00)="e854b8b93c5c3ae229e05fa2479483f8ca00e8cff8d1d184101847a887078284d5c9bfefe6cd60fa792f1895e32de08270835572dd1d191f4303d1239cdef252cc875f964836cd08f1946a35341bedcdeab0387e3efa5185590c179882afcda6c86323381f3a3f592e223fc0383ce02832e0a28cb4e47c22fa99311d7ec4c144892ce13cf025b09860f0f96c9fa93c53a70d3283880b33be2239d0d866543924c43e2b85fe37dc35b78621636fae7322db93a2dee5616f70e47c2552a68fa43ee3dad019aa1723c5d7327fd295ff2ac2b29ef4b8ec858e181de35f4b4abf800d6538ba68bf9fa52f5cada9825df964166ef79976", 0xf4}, {&(0x7f0000000340)="3b54e25e2007e418f90069571b803ca26a15722cb3bb1e7d059a00e02e22581b83d3bf3a7c4eb40e9cbf4bf8", 0x2c}, {&(0x7f0000000f00)="3fad00bb134666421431702a1804d53058c39a1e816669c7e0373d3670397356b71662bf9eda4fa6caa63d58dd22c202a1411f95eb7178f2bf0c6edb5090e89e42e4bbd319393f908fff47ab6ad49205a98be6c4ef01ecc670dd96ede2a06bb6b8a8eaa99634a2d535132b8d5b9965745639fb7e8c1474fc8a8582c90cea9b7464eb611cc3dcac98eecd05ca5a01f84f4c2395d9ae9f7cefa87fe1182745839797062e7f711ce1f6cde1a1d361019f901f73567ccb2b5cac02f4845a88dc7b304c8cef68f27a4c5b7cf57b40ebcb261f8149", 0xd2}], 0x9, &(0x7f00000010c0)=[@rights={{0x30, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x68, 0x4}, 0x80) 4.444446s ago: executing program 3 (id=8464): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff1d, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) recvmsg(r5, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 4.379205055s ago: executing program 3 (id=8465): socket(0x1d, 0x0, 0x9) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000827bd7000fddbdf250100000004000500080006007f020001060001004e210000080008000a010101060001004e20000006000a004e240000"], 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.149143444s ago: executing program 3 (id=8466): r0 = fsopen(&(0x7f0000000240)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(r0) 4.146491334s ago: executing program 2 (id=8462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3, 0xb08, 0x3, 0x110, 0xffffffffffffffff, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xf, 0x0, &(0x7f0000000080)) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf0a}, 0x90) fstatfs(r7, &(0x7f00000004c0)=""/22) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="1400020064756d6d79300000000400080001000000000000000000000000594ca050a2afb811e2e73df3300055fbd3ebac832e362a3675d51be83dd9413dea81a41485fa9ede83f3b0267a9d67860450be7fef3b2ec3486ca07e6906472eb1c3ccd99e7097a59682f4f73f492df7455854fdf3a0d07fa3ba83e16c9f3041306889630463631ed5b06f24", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000000140002007465616d300000000000000000000000080003000300000008000100", @ANYRES32=r8, @ANYRES64=r3], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x8008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 3.926695421s ago: executing program 1 (id=8467): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000090000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r8, &(0x7f0000000080)='./file0\x00') add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 3.250072876s ago: executing program 3 (id=8468): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000010000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@empty, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c20082, r5}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001a000f0000000000000000000a000000000000000000000008000400"], 0x24}}, 0x0) 3.183103062s ago: executing program 2 (id=8469): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004) 3.042930223s ago: executing program 1 (id=8470): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) 3.031431384s ago: executing program 1 (id=8471): r0 = fsopen(&(0x7f0000000240)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x3, 0x855, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x50, 0xd0, 0x86, 0x8, 0x2c42, 0x1636, 0x71b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x843, 0x4, 0x2, 0x8, 0xa0, 0xe, [{{0x9, 0x4, 0x1e, 0x7, 0x6, 0xb6, 0x42, 0xa6, 0x9, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x8, 0x72, '8', 'A`R'}]}], [{{0x9, 0x5, 0xe, 0x2, 0x400, 0x2, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x36}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x3, 0xfc, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x0, 0x8, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x0, 0x88, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x7f, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x3, 0x53, 0x5}}]}}, {{0x9, 0x4, 0x6c, 0x2, 0x9, 0xac, 0x5f, 0xfa, 0x4, [], [{{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x48, 0x6, 0x5, [@generic={0xc7, 0x31, "e7e632a5be2ce22c3249772e087800a01354ea86ea6f141a7a9edf966d7de703c88ae05bbf61b56dc10cb711731c3a98b6e38854bb93338fd88ac608b4e168fdaa3c3aed2114e738f67b25e4cba1464ea5b52b68ab0c63f64fe2eac7421a63f124297dc5dd4e7d647034df82aa4dc05596f6ffd06cfc0bc81085b272b3f6c06c4a7b46c2273632025b4e4ea5df8a32d9c0982f1d0765d95b185a4fec2804cf512fad8eb94d266f2d8fed6ed92937116e6be4b127b562097277bd7c2d7f2e808494b312b963"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x8}]}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x3, 0x0, 0x8}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x4, 0x8, [@generic={0xbe, 0x31, "ec45cb04ee6be68372b2835a2461c1f8b352867379687b924f4f678d8b0069fe25f2a4541c205f10ca737760aaad266c22e4e1563faf5b2caaeb5c7730794d8b949636dbc6169bd937cfdceb05d2a9e2853db8776ad9089ce5f06b18c13bc240e0b6e17f395634c925083651404f8b0514bea4f7ecb74879872a6ea51518d21384127295a37a155affccb39e139d05d0510c063748ea9852aa2060eae0a128150007f5d431d3466baeed1d52c21b60a3a5f2586a411247c46beb33e9"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xf4, 0x6, 0x8f}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x1, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x8}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x81, 0xd, 0x7}}, {{0x9, 0x5, 0x1, 0x1c, 0x20, 0x9, 0x10, 0x2, [@generic={0xab, 0x9, "da6a8660213ff10680708878f3bb9f7b3263e9f8a552218682487a5253d21c18ef39bc1ee19b69e019d9520ec89f0cf497f48266a93f56dd0b94f7f74fb4b8e4483041c3aad81695637fef98942669296c141618876edd4e50d60897ab54b62ac7ca453c1bea291bd2a1131658e819d78c8d8d86922265ece5be51e0e3a58a484d8a928cf334b359e4126e624842d844f2a51b7e30654c45ca6b5a69a4e509eac8cf668de61a19d4ee"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x9, 0x66, 0x5}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x6, 0x3, 0x4, [@generic={0x20, 0x22, "91be4af8fb555934805d9c3e8c6eeee50cb10fe7b8feaf0985a1fda2615d"}]}}]}}, {{0x9, 0x4, 0x82, 0x3, 0x10, 0x28, 0xdf, 0xe7, 0xa, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "32dd22ef81"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x2c8, 0x401, 0xff81, 0x3}, {0x6, 0x24, 0x1a, 0xfffd, 0x28}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0xb, 0xc6}]}, @hid_hid={0x9, 0x21, 0x8000, 0x1, 0x1, {0x22, 0x99e}}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x5, 0x1, 0x7f}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x3, 0xa, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x3}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0xb, 0x4, 0x8}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x3, 0x6, 0x6, [@generic={0xb6, 0x31, "bf8a7c2006fd6d3e369b9ec000cab366f07ef4b9ddb45c4bc892faa54e9dedd2601d680405a0066196b4aa47acdef44ba5ea8bf57e7397a70653dd95088701c4d393ee50c49d64a655390683894f909c5e59c7bdf9e7f087c3a61b019f59a526b1628ce3099196437e461aafd1e9dc4d4452f9e57e70c7446cc6a26bbef84b154312b7f093170b5d91369e6b34385627aad04e4cf8a1d2a8f7d7f35ed7a9bc6997c3767718b615a3dea77671993ed354afd549a8"}, @generic={0x3, 0x10, '\b'}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x6, 0xfe, 0x40}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x8, 0x4, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x5, 0x1, 0x4, [@generic={0xa0, 0x6, "43bf75db10d6337542c2a2b996e87dd243f8d6669a0708b2163e6605b2e364d77ca1bc5f1cf87e895a5461d136c71633d0f9d9b180d3bb7f4a4a44132ff354cb4f30d59d5083932f65112edf681c3fda3b451dbe92daddb39eaf0bca163f66f0d57a9d043215da01d1fae278d8d57b287a35f0434422016f97c4e406694cfb878b1a6258e505f7b05e54b140989d4123b9e1f8c6464c266db606b10ff6e4"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x0, 0xc, 0xaa, [@generic={0xb9, 0x24, "65158d07038d34b2fcc86b7f27f539a81a023ff353447c25c2ac26ef3d74e2f85f1bf9425e622207f304460d1e6534cf5cfd5bcca3d975389633054df04541f858a62d3445c94a88d97d1ea28a87b2c0de049033273f5bb45672f9f249f543a5d0a2a67317081a6ca3625890595618aae58a782ea8f14fa496e57e38d69ae012178866c6f729395fd5dde0c0cda46c4556d771c46d982fa43bb02e2a00e28264e713e33627fe9c6774982dadce628d8cf6bcf603705387"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x2, 0x2, 0x6}}, {{0x9, 0x5, 0xd, 0x9, 0x20, 0x0, 0xfc, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}, @generic={0x92, 0xb, "64adb6dc714611cc253c026d47a8b07001d8b48f52a45adff8ce80c532d3b769c57fa4f3b1fde67faba31a40758f234da2696357c369ab650ff04850e96a01d2b30ee62fee4c585bbb00a11a49def4d1c6837e099e38ed7a6627c25e1bff3859fda87f7ae5d989c98168eacb1649da8bb06483c66294c239e76b16f3591c309e625326a6d021a035a9b44379cc193467"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x1, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x4ce}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x4, 0x30, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x800}, @generic={0xe, 0x22, "c6695373752d276c499c3386"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x6, 0x2, 0x5}}, {{0x9, 0x5, 0x7, 0x6, 0x400, 0x1, 0x24, 0x0, [@generic={0x57, 0x31, "af9a6e734e94641aa3593d31394eec452a308e75625c5f86de585d5e9b7c059b83c1f3f8effd51c5e827e3edb401e9fab7cbb084077adfc3bd218d62f9e8ea2ca4c472ab27e86993470a004073c2db868b1a003c1d"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x9, 0x6, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x5, 0x7, 0xe, [@generic={0x33, 0x8, "b37073f2e5c24873811dc9dfcb3f59c1957e3f41e94237bcdb11ff662f78cd63bb0d18a0ac0ec2ffbc8c3b31fe813013e5"}]}}]}}, {{0x9, 0x4, 0x62, 0x8, 0x2, 0xfe, 0xe, 0x79, 0x67, [@hid_hid={0x9, 0x21, 0x8, 0xfa, 0x1, {0x22, 0xce8}}, @hid_hid={0x9, 0x21, 0x80, 0x5, 0x1, {0x22, 0xf11}}], [{{0x9, 0x5, 0xc, 0x0, 0x200, 0x34, 0xc8, 0x2, [@generic={0xae, 0xf, "b9b20fc7241b20f84c81a772a39218913a774a308f1d6440be20771594f8c330ac27235f1507cf1a1bf01cce67288983dc25fed207f640e524c3087aa34407696a2b4c683fd237143abcaea6f08e6da57a5a5e3a6fa137ac84c8f62fc607dd3cb8ffd8a60de4c38183b2296f647ff267ff9ed6adc67493c2febceae2519e3ddc0e1d075f752502e916f49aa987411c88be5834a779472ac6bd6f315e03ab154f5a5413723edd7034b51e24c3"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xfffd}]}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0xfb, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0x0, 0x5, 0x40, 0x2}, 0x16, &(0x7f0000000040)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x5, 0x352}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xff}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='ipi_raise\x00', r4}, 0x10) close(r0) 195.090004ms ago: executing program 3 (id=8472): r0 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x5, 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "6f7f5e18"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 1 (id=8473): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x40086610, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0x6628, 0x0) write$P9_RSETATTR(r9, &(0x7f00000000c0)={0x7, 0x1b, 0x1}, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) kernel console output (not intermixed with test programs): 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.671406][T14128] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1700.681332][T14128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.707984][T14128] usb 3-1: config 0 descriptor?? [ 1700.735897][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.747547][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.757300][ T288] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1700.766380][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.778030][ T288] usb 1-1: config 0 descriptor?? [ 1700.809835][ T4795] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.00B0/input/input66 [ 1700.897129][ T4795] microsoft 0003:045E:07DA.00B0: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1701.095909][ T650] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1701.186780][T14128] samsung 0003:0419:0600.00B1: item fetching failed at offset 2/5 [ 1701.194931][T14128] samsung 0003:0419:0600.00B1: parse failed [ 1701.201492][T14128] samsung: probe of 0003:0419:0600.00B1 failed with error -22 [ 1701.257865][ T288] hid-led 0003:1D34:000A.00B2: unknown main item tag 0x0 [ 1701.277111][ T4795] usb 4-1: USB disconnect, device number 12 [ 1701.375842][ T650] usb 2-1: Using ep0 maxpacket: 16 [ 1701.389961][T14128] usb 3-1: USB disconnect, device number 30 [ 1701.466318][ T288] hid-led 0003:1D34:000A.00B2: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 1701.478137][ T288] hid-led 0003:1D34:000A.00B2: Dream Cheeky Webmail Notifier initialized [ 1701.495914][ T650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.506678][ T650] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1701.519208][ T650] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1701.528096][ T650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.536809][ T650] usb 2-1: config 0 descriptor?? [ 1701.670048][T14128] usb 1-1: USB disconnect, device number 7 [ 1701.885976][ T24] kauditd_printk_skb: 111 callbacks suppressed [ 1701.885988][ T24] audit: type=1326 audit(1723826095.339:10031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31446 comm="syz.4.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1701.934598][ T24] audit: type=1326 audit(1723826095.339:10032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31446 comm="syz.4.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1701.987598][ T24] audit: type=1326 audit(1723826095.339:10033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31446 comm="syz.4.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1702.012466][ T24] audit: type=1326 audit(1723826095.339:10034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31446 comm="syz.4.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1702.022853][ T650] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00B3/input/input67 [ 1702.041997][ T24] audit: type=1326 audit(1723826095.339:10035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31446 comm="syz.4.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1702.065865][T14128] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1702.157352][T31460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.164370][T31460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.179941][T31460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.186820][T31460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.194004][T31460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.200787][T31460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.208073][T31460] device bridge0 entered promiscuous mode [ 1702.443264][ T650] microsoft 0003:045E:07DA.00B3: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1702.462209][ T24] audit: type=1326 audit(1723826095.339:10036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31446 comm="syz.4.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1702.490378][ T24] audit: type=1326 audit(1723826095.339:10037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31446 comm="syz.4.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1702.528644][ T24] audit: type=1326 audit(1723826095.339:10038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31446 comm="syz.4.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1702.583471][ T24] audit: type=1326 audit(1723826095.339:10039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31446 comm="syz.4.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1702.611592][ T24] audit: type=1326 audit(1723826095.419:10040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31452 comm="syz.4.7900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1702.623422][ T650] usb 2-1: USB disconnect, device number 13 [ 1702.715740][T31467] usb usb8: usbfs: process 31467 (syz.0.7903) did not claim interface 0 before use [ 1702.958139][T14128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.969188][T14128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1702.979010][T14128] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1702.996281][T14128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.014642][T14128] usb 4-1: config 0 descriptor?? [ 1703.094890][T31471] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=31471 comm=syz.4.7904 [ 1703.450797][ T498] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1703.487186][T14128] hid-led 0003:1D34:000A.00B4: unknown main item tag 0x0 [ 1703.568866][T22268] Bluetooth: hci0: Frame reassembly failed (-84) [ 1703.696797][T14128] hid-led 0003:1D34:000A.00B4: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 1703.717710][T14128] hid-led 0003:1D34:000A.00B4: Dream Cheeky Webmail Notifier initialized [ 1703.826384][ T498] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1703.839209][ T498] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1703.850471][ T498] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1703.863536][ T498] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1703.872376][ T498] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.880825][ T498] usb 5-1: config 0 descriptor?? [ 1703.895979][T31474] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1703.899237][ T650] usb 4-1: USB disconnect, device number 13 [ 1703.902844][T31474] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1704.201358][T31497] syz.1.7913[31497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1704.201420][T31497] syz.1.7913[31497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1704.214579][T31497] fuse: Unknown parameter '0x0000000000000005' [ 1704.346750][T31474] udc-core: couldn't find an available UDC or it's busy [ 1704.353528][T31474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1704.385873][T28945] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1704.397032][T31474] binder: 31473:31474 ioctl 4c80 5 returned -22 [ 1704.621338][ T4795] usb 5-1: USB disconnect, device number 14 [ 1704.655994][T28945] usb 3-1: Using ep0 maxpacket: 16 [ 1704.815921][T28945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.826917][T28945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1704.839659][T28945] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1704.848509][T28945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.856922][T28945] usb 3-1: config 0 descriptor?? [ 1705.205843][ T4795] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1705.284652][T31529] syz.3.7924[31529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1705.284712][T31529] syz.3.7924[31529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1705.298485][T31529] fuse: Unknown parameter '0x0000000000000005' [ 1705.342266][T28945] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00B6/input/input68 [ 1705.430932][T28945] microsoft 0003:045E:07DA.00B6: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1705.608411][ T4795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.620124][ T4795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.630437][ T4795] usb 2-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 1705.642698][ T4795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.653698][ T4795] usb 2-1: config 0 descriptor?? [ 1705.838534][T28945] usb 3-1: USB disconnect, device number 31 [ 1705.918499][T31518] syz.1.7920[31518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1705.918545][T31518] syz.1.7920[31518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1706.174097][ T4795] wacom 0003:056A:00B1.00B7: unknown main item tag 0x0 [ 1706.193188][ T4795] wacom 0003:056A:00B1.00B7: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 1706.203099][ T4795] wacom 0003:056A:00B1.00B7: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.1-1/input0 [ 1706.214544][ T4795] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B1.00B7/input/input69 [ 1706.965948][ T288] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1706.999005][ T24] kauditd_printk_skb: 36 callbacks suppressed [ 1706.999016][ T24] audit: type=1326 audit(1723826100.449:10077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31552 comm="syz.0.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1707.033815][ T24] audit: type=1326 audit(1723826100.449:10078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31552 comm="syz.0.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1707.059596][ T24] audit: type=1326 audit(1723826100.449:10079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31552 comm="syz.0.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1707.123457][ T24] audit: type=1326 audit(1723826100.449:10080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31552 comm="syz.0.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1707.183683][T31560] SELinux: Context system_u:object_r:restorecond_exec_t:s0 is not valid (left unmapped). [ 1707.186810][ T24] audit: type=1326 audit(1723826100.449:10081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31552 comm="syz.0.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1707.217391][ T24] audit: type=1326 audit(1723826100.449:10082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31552 comm="syz.0.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1707.275878][ T24] audit: type=1326 audit(1723826100.449:10083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31552 comm="syz.0.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1707.389730][ T24] audit: type=1326 audit(1723826100.449:10084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31552 comm="syz.0.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1707.433198][ T24] audit: type=1326 audit(1723826100.449:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31552 comm="syz.0.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1707.456883][ T24] audit: type=1400 audit(1723826100.639:10086): avc: denied { relabelto } for pid=31559 comm="syz.3.7933" name="bus" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:restorecond_exec_t:s0" [ 1707.515901][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.526629][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1707.536179][ T288] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1707.545006][ T288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.553793][ T288] usb 5-1: config 0 descriptor?? [ 1707.705847][ T8365] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1707.808914][T28945] usb 2-1: USB disconnect, device number 14 [ 1707.934453][T31568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7934'. [ 1708.144956][ T8365] usb 4-1: Using ep0 maxpacket: 32 [ 1708.158310][ T288] hid-led 0003:1D34:000A.00B8: unknown main item tag 0x0 [ 1708.396529][ T8365] usb 4-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 1708.430482][ T8365] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1708.436130][ T288] hid-led 0003:1D34:000A.00B8: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 1708.439911][ T8365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.459713][ T288] hid-led 0003:1D34:000A.00B8: Dream Cheeky Webmail Notifier initialized [ 1708.460041][ T8365] usb 4-1: config 0 descriptor?? [ 1708.518776][ T8365] usb 4-1: bad CDC descriptors [ 1708.618254][ T8365] usb 5-1: USB disconnect, device number 15 [ 1708.731790][ T498] usb 4-1: USB disconnect, device number 14 [ 1709.459767][T31596] syz.3.7943[31596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1709.459831][T31596] syz.3.7943[31596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1709.815832][ T4795] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1710.037427][T31619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.044421][T31619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.155584][ T4795] usb 5-1: Using ep0 maxpacket: 32 [ 1710.305918][ T4795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1710.316802][ T4795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1710.326560][ T4795] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1710.353494][ T4795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.376776][ T4795] usb 5-1: config 0 descriptor?? [ 1710.946097][ T4795] usbhid 5-1:0.0: can't add hid device: -71 [ 1710.952206][ T4795] usbhid: probe of 5-1:0.0 failed with error -71 [ 1710.959437][ T4795] usb 5-1: USB disconnect, device number 16 [ 1710.994789][ T650] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1711.365926][ T650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.385817][ T650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.405831][ T650] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1711.414680][ T650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.436611][ T650] usb 2-1: config 0 descriptor?? [ 1711.596569][T31652] usb usb8: usbfs: process 31652 (syz.4.7959) did not claim interface 0 before use [ 1711.923345][T31660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7960'. [ 1712.106955][ T650] hid-led 0003:1D34:000A.00B9: unknown main item tag 0x0 [ 1712.186484][ T650] hid-led 0003:1D34:000A.00B9: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 1712.206743][ T650] hid-led 0003:1D34:000A.00B9: Dream Cheeky Webmail Notifier initialized [ 1712.405556][T28945] usb 2-1: USB disconnect, device number 15 [ 1714.534436][T31722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7980'. [ 1715.149567][ T288] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1715.396318][T31748] bridge0: port 3(erspan0) entered blocking state [ 1715.402590][T31748] bridge0: port 3(erspan0) entered disabled state [ 1715.411987][T31748] device erspan0 entered promiscuous mode [ 1715.527354][ T4795] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1715.686001][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.697056][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.707153][ T288] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1715.716793][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.728995][ T288] usb 3-1: config 0 descriptor?? [ 1715.796649][ T4795] usb 1-1: Using ep0 maxpacket: 8 [ 1715.945897][ T4795] usb 1-1: config index 0 descriptor too short (expected 2084, got 36) [ 1715.954590][ T4795] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 95 [ 1715.963030][ T4795] usb 1-1: can't read configurations, error -22 [ 1716.115843][ T4795] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1716.207165][ T288] hid-led 0003:1D34:000A.00BA: unknown main item tag 0x0 [ 1716.344072][T31761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7992'. [ 1716.375808][ T4795] usb 1-1: Using ep0 maxpacket: 8 [ 1716.426715][ T288] hid-led 0003:1D34:000A.00BA: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 1716.438918][ T288] hid-led 0003:1D34:000A.00BA: Dream Cheeky Webmail Notifier initialized [ 1716.539322][ T4795] usb 1-1: config index 0 descriptor too short (expected 2084, got 36) [ 1716.552031][ T4795] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 95 [ 1716.574553][ T4795] usb 1-1: can't read configurations, error -22 [ 1716.580808][ T4795] usb usb1-port1: attempt power cycle [ 1716.672989][T31765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7993'. [ 1716.775872][ T2835] usb 3-1: USB disconnect, device number 32 [ 1717.015839][ T4795] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1717.186107][ T4795] usb 1-1: Using ep0 maxpacket: 8 [ 1717.650146][ T4795] usb 1-1: config index 0 descriptor too short (expected 2084, got 36) [ 1717.660214][ T4795] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 95 [ 1717.672610][ T4795] usb 1-1: can't read configurations, error -22 [ 1717.835939][ T4795] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1718.208609][ T4795] usb 1-1: device descriptor read/8, error -71 [ 1718.246884][T31798] netlink: 324 bytes leftover after parsing attributes in process `syz.4.8001'. [ 1718.318436][T31799] usb usb8: usbfs: process 31799 (syz.3.8000) did not claim interface 0 before use [ 1718.515875][ T4795] usb 1-1: device descriptor read/8, error -71 [ 1718.635971][ T4795] usb usb1-port1: unable to enumerate USB device [ 1719.116373][T31816] syz.1.8007[31816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1719.116430][T31816] syz.1.8007[31816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1719.426038][T28945] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1719.925901][ T4795] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1719.945233][T31830] syz.4.8012[31830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1719.945275][T31830] syz.4.8012[31830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1720.008736][T28945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.030912][T28945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.040638][T28945] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1720.049500][T28945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.058159][T28945] usb 1-1: config 0 descriptor?? [ 1720.385892][ T4795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.414718][ T4795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.432511][ T4795] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1720.449203][ T4795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.458158][ T4795] usb 4-1: config 0 descriptor?? [ 1720.696727][T28945] hid-led 0003:1D34:000A.00BB: unknown main item tag 0x0 [ 1720.743011][ T24] kauditd_printk_skb: 53 callbacks suppressed [ 1720.743024][ T24] audit: type=1400 audit(1723826114.189:10140): avc: denied { listen } for pid=31836 comm="syz.2.8014" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1720.897013][T31841] syz.4.8015[31841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1720.897058][T31841] syz.4.8015[31841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1720.916858][T28945] hid-led 0003:1D34:000A.00BB: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 1720.939872][ T4795] samsung 0003:0419:0600.00BC: item fetching failed at offset 2/5 [ 1720.950118][ T4795] samsung 0003:0419:0600.00BC: parse failed [ 1720.956629][ T4795] samsung: probe of 0003:0419:0600.00BC failed with error -22 [ 1720.965686][T28945] hid-led 0003:1D34:000A.00BB: Dream Cheeky Webmail Notifier initialized [ 1721.118172][T28945] usb 1-1: USB disconnect, device number 12 [ 1721.140713][ T288] usb 4-1: USB disconnect, device number 15 [ 1721.465832][T28945] Bluetooth: hci0: command 0x1003 tx timeout [ 1721.472021][ T782] Bluetooth: hci0: sending frame failed (-49) [ 1722.688613][T31878] syz.3.8025[31878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1722.688656][T31878] syz.3.8025[31878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1723.113904][ T288] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1723.495920][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.506680][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1723.516242][ T288] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1723.525011][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.533814][ T288] usb 1-1: config 0 descriptor?? [ 1723.570984][ T4795] Bluetooth: hci0: command 0x1001 tx timeout [ 1723.576908][ T782] Bluetooth: hci0: sending frame failed (-49) [ 1723.585323][T28945] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1723.975860][T28945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.985846][T28945] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1723.994549][T28945] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1724.003693][T28945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.014852][T28945] usb 5-1: config 0 descriptor?? [ 1724.017084][ T288] hid-led 0003:1D34:000A.00BD: unknown main item tag 0x0 [ 1724.226392][ T288] hid-led 0003:1D34:000A.00BD: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 1724.238245][ T288] hid-led 0003:1D34:000A.00BD: Dream Cheeky Webmail Notifier initialized [ 1724.325834][T16710] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1724.427870][ T2835] usb 1-1: USB disconnect, device number 13 [ 1724.565822][T16710] usb 4-1: Using ep0 maxpacket: 16 [ 1724.685913][T16710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1724.696650][T16710] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1724.709229][T16710] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1724.718058][T16710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.726799][T16710] usb 4-1: config 0 descriptor?? [ 1725.210008][T16710] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.00BE/input/input72 [ 1725.289833][T16710] microsoft 0003:045E:07DA.00BE: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1725.663324][ T2835] Bluetooth: hci0: command 0x1009 tx timeout [ 1725.698340][ T2835] usb 4-1: USB disconnect, device number 16 [ 1725.745602][T31915] syz.2.8037[31915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1725.745645][T31915] syz.2.8037[31915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1726.141713][T28945] usb 5-1: USB disconnect, device number 17 [ 1727.105849][ T24] audit: type=1326 audit(1723826120.399:10141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31944 comm="syz.0.8048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1727.130033][ T24] audit: type=1326 audit(1723826120.399:10142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31944 comm="syz.0.8048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1727.171327][ T24] audit: type=1326 audit(1723826120.399:10143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31944 comm="syz.0.8048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1727.219561][ T24] audit: type=1326 audit(1723826120.399:10144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31944 comm="syz.0.8048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1727.243659][ T24] audit: type=1326 audit(1723826120.399:10145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31944 comm="syz.0.8048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1727.280587][ T24] audit: type=1326 audit(1723826120.399:10146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31944 comm="syz.0.8048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1727.330573][ T24] audit: type=1326 audit(1723826120.409:10147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31944 comm="syz.0.8048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1727.389803][ T24] audit: type=1326 audit(1723826120.409:10148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31944 comm="syz.0.8048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1727.425838][ T24] audit: type=1326 audit(1723826120.409:10149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31944 comm="syz.0.8048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1727.449397][ T24] audit: type=1326 audit(1723826120.409:10150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31944 comm="syz.0.8048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b195549b9 code=0x7ffc0000 [ 1727.808198][T31975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8055'. [ 1728.098021][T31985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8060'. [ 1728.114638][T31977] syz.2.8056[31977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1728.114698][T31977] syz.2.8056[31977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1728.625888][ T650] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1728.875866][ T650] usb 5-1: Using ep0 maxpacket: 8 [ 1728.995984][ T650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.006762][ T650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1729.034131][ T650] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 1729.044431][ T650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.054092][ T650] usb 5-1: config 0 descriptor?? [ 1729.182747][T32018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.189711][T32018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.196849][T32018] device bridge_slave_0 entered promiscuous mode [ 1729.203396][T32018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.210255][T32018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.217351][T32018] device bridge_slave_1 entered promiscuous mode [ 1729.271511][T32018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.278373][T32018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1729.285449][T32018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.292273][T32018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.322069][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.329400][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.336917][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1729.344220][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1729.360688][T16710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1729.368775][T16710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.375617][T16710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.383048][T16710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1729.391841][T16710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.398713][T16710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1729.420841][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1729.429016][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1729.446508][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1729.456491][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1729.464279][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1729.471611][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1729.479728][T32018] device veth0_vlan entered promiscuous mode [ 1729.494732][T14128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1729.503476][T32018] device veth1_macvtap entered promiscuous mode [ 1729.512403][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1729.526012][T14128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1729.556726][T32026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8069'. [ 1729.568116][T32026] binder: BINDER_SET_CONTEXT_MGR already set [ 1729.573957][T32026] binder: 32025:32026 ioctl 4018620d 20000040 returned -16 [ 1729.583508][T32026] binder: 32025:32026 ioctl 4010ae68 20000300 returned -22 [ 1729.590935][T32026] binder: 32025:32026 ioctl c0306201 200011c0 returned -14 [ 1729.774225][T32040] 9pnet: Insufficient options for proto=fd [ 1729.786032][ T650] usbhid 5-1:0.0: can't add hid device: -71 [ 1729.791946][ T650] usbhid: probe of 5-1:0.0 failed with error -71 [ 1729.803668][ T650] usb 5-1: USB disconnect, device number 18 [ 1729.997496][T22268] device bridge_slave_1 left promiscuous mode [ 1730.004520][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.016507][T22268] device bridge_slave_0 left promiscuous mode [ 1730.022502][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.030871][T22268] device veth1_macvtap left promiscuous mode [ 1730.040192][T22268] device veth0_vlan left promiscuous mode [ 1730.066798][T32052] fuse: Bad value for 'rootmode' [ 1730.463853][ T288] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1730.774266][T32068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8086'. [ 1730.836546][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.859760][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.870729][ T288] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1730.879934][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.892327][ T288] usb 3-1: config 0 descriptor?? [ 1731.385896][ T650] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1731.406622][T22268] device bridge_slave_1 left promiscuous mode [ 1731.413608][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.431995][T22268] device bridge_slave_0 left promiscuous mode [ 1731.460572][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.477060][ T288] samsung 0003:0419:0600.00BF: item fetching failed at offset 2/5 [ 1731.486231][T22268] device veth1_macvtap left promiscuous mode [ 1731.492374][T22268] device veth0_vlan left promiscuous mode [ 1731.496047][ T288] samsung 0003:0419:0600.00BF: parse failed [ 1731.514075][ T288] samsung: probe of 0003:0419:0600.00BF failed with error -22 [ 1731.524286][T32084] syz.4.8091[32084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1731.524467][T32084] syz.4.8091[32084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1731.677914][ T2835] usb 3-1: USB disconnect, device number 33 [ 1731.826730][T32089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.833715][T32089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.859441][T32089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.866299][T32089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1731.873378][T32089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.880175][T32089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1731.887552][T32089] device bridge0 entered promiscuous mode [ 1732.025936][ T650] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.036794][ T650] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1732.046382][ T650] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1732.055276][ T650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.067502][ T650] usb 4-1: config 0 descriptor?? [ 1732.168453][T32093] 9pnet: Insufficient options for proto=fd [ 1732.321527][T32095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8094'. [ 1732.547098][ T650] hid-led 0003:1D34:000A.00C0: unknown main item tag 0x0 [ 1732.869572][ T650] hid-led 0003:1D34:000A.00C0: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 1732.893007][ T650] hid-led 0003:1D34:000A.00C0: Dream Cheeky Webmail Notifier initialized [ 1733.018385][ T650] usb 4-1: USB disconnect, device number 17 [ 1733.302585][T32123] syz.2.8102[32123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1733.302647][T32123] syz.2.8102[32123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1733.853464][ T24] kauditd_printk_skb: 79 callbacks suppressed [ 1733.876489][ T24] audit: type=1326 audit(1723826127.029:10230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.4.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1733.903332][T32131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.910322][T32131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.918914][T32133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.925772][T32133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1733.932875][T32133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.939661][T32133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1733.946913][T32133] device bridge0 entered promiscuous mode [ 1734.036524][ T24] audit: type=1326 audit(1723826127.029:10231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.4.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1734.061618][T32137] syz.3.8106[32137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1734.061677][T32137] syz.3.8106[32137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1734.085721][ T24] audit: type=1326 audit(1723826127.029:10232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.4.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1734.120554][ T24] audit: type=1326 audit(1723826127.029:10233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.4.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1734.150844][ T24] audit: type=1326 audit(1723826127.029:10234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.4.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1734.175063][ T24] audit: type=1326 audit(1723826127.029:10235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.4.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1734.206303][ T24] audit: type=1326 audit(1723826127.029:10236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.4.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1734.313639][T32148] syz.4.8108[32148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1734.315853][T32148] syz.4.8108[32148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1734.454669][ T24] audit: type=1326 audit(1723826127.029:10237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.4.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1734.545057][ T24] audit: type=1326 audit(1723826127.029:10238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.4.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1734.785407][ T24] audit: type=1326 audit(1723826127.029:10239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.4.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744899d9b9 code=0x7ffc0000 [ 1735.251680][T32166] syz.4.8114[32166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1735.251741][T32166] syz.4.8114[32166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1735.615818][ T650] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1736.005640][ T650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.007730][T32179] usb usb8: usbfs: process 32179 (syz.0.8118) did not claim interface 0 before use [ 1736.187139][ T650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.204395][ T650] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1736.213424][ T650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.223233][ T650] usb 5-1: config 0 descriptor?? [ 1736.287021][ T1230] Bluetooth: hci0: command 0x1003 tx timeout [ 1736.293019][ T782] Bluetooth: hci0: sending frame failed (-49) [ 1736.717772][T32199] syz.0.8125[32199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1736.717815][T32199] syz.0.8125[32199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1737.025961][ T650] usbhid 5-1:0.0: can't add hid device: -71 [ 1737.044665][ T650] usbhid: probe of 5-1:0.0 failed with error -71 [ 1737.054445][ T650] usb 5-1: USB disconnect, device number 19 [ 1737.308508][T32207] usb usb8: usbfs: process 32207 (syz.1.8127) did not claim interface 0 before use [ 1737.355877][ T1230] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1737.815879][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1737.826882][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1737.837807][ T1230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1737.850477][ T1230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1737.859304][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.867964][ T1230] usb 3-1: config 0 descriptor?? [ 1737.885884][T32203] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1738.372394][ T4795] Bluetooth: hci0: command 0x1001 tx timeout [ 1738.378495][ T4123] Bluetooth: hci0: sending frame failed (-49) [ 1738.678965][T32232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8132'. [ 1738.766115][ T1230] usbhid 3-1:0.0: can't add hid device: -71 [ 1738.772542][ T1230] usbhid: probe of 3-1:0.0 failed with error -71 [ 1738.784079][ T1230] usb 3-1: USB disconnect, device number 34 [ 1738.985808][ T4795] Bluetooth: hci1: command 0x1003 tx timeout [ 1738.991884][ T4123] Bluetooth: hci1: sending frame failed (-49) [ 1739.420842][ T24] kauditd_printk_skb: 54 callbacks suppressed [ 1739.420887][ T24] audit: type=1326 audit(1723826132.859:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32239 comm="syz.2.8135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1739.575865][ T24] audit: type=1326 audit(1723826132.859:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32239 comm="syz.2.8135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1739.599667][ T24] audit: type=1326 audit(1723826132.859:10296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32239 comm="syz.2.8135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1739.623653][ T24] audit: type=1326 audit(1723826132.859:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32239 comm="syz.2.8135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1739.647315][ T24] audit: type=1326 audit(1723826132.859:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32239 comm="syz.2.8135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1739.670912][ T24] audit: type=1326 audit(1723826132.859:10299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32239 comm="syz.2.8135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1739.694728][ T24] audit: type=1326 audit(1723826132.869:10300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32239 comm="syz.2.8135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1739.729492][ T24] audit: type=1326 audit(1723826132.869:10301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32239 comm="syz.2.8135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1739.757866][ T24] audit: type=1326 audit(1723826132.869:10302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32239 comm="syz.2.8135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1739.781802][ T24] audit: type=1326 audit(1723826133.009:10303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32239 comm="syz.2.8135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1740.312849][T32254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8139'. [ 1740.321928][T32254] tipc: Started in network mode [ 1740.342287][T32254] tipc: Own node identity 1, cluster identity 4711 [ 1740.349862][T32254] tipc: 32-bit node address hash set to 1 [ 1740.425894][ T4795] Bluetooth: hci0: command 0x1009 tx timeout [ 1741.065818][ T4795] Bluetooth: hci1: command 0x1001 tx timeout [ 1741.071699][ T4123] Bluetooth: hci1: sending frame failed (-49) [ 1741.604264][ T288] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1741.995823][ T288] usb 3-1: Using ep0 maxpacket: 16 [ 1742.115910][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1742.126643][ T288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1742.139233][ T288] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1742.148034][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.156922][ T288] usb 3-1: config 0 descriptor?? [ 1742.572708][T32295] 9pnet: Insufficient options for proto=fd [ 1742.620730][T32297] netem: change failed [ 1742.643006][ T288] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00C1/input/input73 [ 1742.727177][ T288] microsoft 0003:045E:07DA.00C1: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1743.102527][ T498] usb 3-1: USB disconnect, device number 35 [ 1743.145893][ T1230] Bluetooth: hci1: command 0x1009 tx timeout [ 1744.287151][T32326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.294021][T32326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.301239][T32326] device bridge_slave_0 entered promiscuous mode [ 1744.307839][T32326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.314654][T32326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.321847][T32326] device bridge_slave_1 entered promiscuous mode [ 1744.353055][T32326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.359893][T32326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1744.367001][T32326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.373766][T32326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1744.393063][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1744.400653][ T1230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.408048][ T1230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.417273][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1744.425264][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.432111][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1744.446559][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1744.454463][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.461221][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1744.468508][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1744.476493][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1744.491530][T16710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1744.501299][T32326] device veth0_vlan entered promiscuous mode [ 1744.507672][T16710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1744.520272][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1744.528423][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1744.535570][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1744.545194][T32326] device veth1_macvtap entered promiscuous mode [ 1744.556545][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1744.564648][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1744.819612][T32341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8166'. [ 1745.016478][T32342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.023484][T32342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.061321][T32342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.068216][T32342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1745.075301][T32342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.082074][T32342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1745.089377][T32342] device bridge0 entered promiscuous mode [ 1745.423567][T22268] device erspan0 left promiscuous mode [ 1745.432057][T22268] bridge0: port 3(erspan0) entered disabled state [ 1745.440364][T32353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8170'. [ 1745.710630][ T24] kauditd_printk_skb: 47 callbacks suppressed [ 1745.710641][ T24] audit: type=1400 audit(1723826139.159:10351): avc: denied { sys_module } for pid=32357 comm="syz.3.8172" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1745.806718][T32368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8173'. [ 1745.909646][T22268] device bridge_slave_1 left promiscuous mode [ 1745.955731][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.975318][T22268] device bridge_slave_0 left promiscuous mode [ 1745.981396][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.989913][T22268] device veth1_macvtap left promiscuous mode [ 1745.996000][T22268] device veth0_vlan left promiscuous mode [ 1746.895179][ T24] audit: type=1326 audit(1723826140.199:10352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.2.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1746.903687][T32385] fuse: Unknown parameter 'group_iD' [ 1746.949354][ T24] audit: type=1326 audit(1723826140.199:10353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.2.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1746.976348][T32383] syz.4.8180[32383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1746.976411][T32383] syz.4.8180[32383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1746.990407][ T24] audit: type=1326 audit(1723826140.199:10354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.2.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1747.039359][ T24] audit: type=1326 audit(1723826140.199:10355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.2.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1747.067093][ T24] audit: type=1326 audit(1723826140.199:10356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.2.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1747.139768][T32390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.159124][T32390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.167014][T32390] device bridge_slave_0 entered promiscuous mode [ 1747.173962][T32390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.182259][T32390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.189720][T32390] device bridge_slave_1 entered promiscuous mode [ 1747.205831][ T24] audit: type=1326 audit(1723826140.199:10357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.2.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1747.242382][T32390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.249237][T32390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1747.250134][ T24] audit: type=1326 audit(1723826140.199:10358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.2.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1747.256336][T32390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.286565][T32390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1747.289094][ T24] audit: type=1326 audit(1723826140.199:10359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.2.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1747.308335][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1747.325537][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.332597][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.343619][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1747.352657][ T498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.359503][ T498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1747.398405][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1747.409507][ T24] audit: type=1326 audit(1723826140.209:10360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.2.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fff69b9 code=0x7ffc0000 [ 1747.440677][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1747.465980][ T1230] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1747.486345][ T4795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.493171][ T4795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1747.516138][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1747.523853][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1747.543568][T32390] device veth0_vlan entered promiscuous mode [ 1747.555952][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1747.564185][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1747.576549][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1747.598003][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1747.606983][T32390] device veth1_macvtap entered promiscuous mode [ 1747.617937][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1747.637824][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1747.654128][T32408] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1747.670719][T32408] tipc: Enabled bearer , priority 10 [ 1747.845905][ T1230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.856654][ T1230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.866252][ T1230] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1747.875094][ T1230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.887047][ T1230] usb 2-1: config 0 descriptor?? [ 1748.175831][ T288] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1748.414790][ T1230] hid-led 0003:1D34:000A.00C2: unknown main item tag 0x0 [ 1748.479127][T22268] device bridge_slave_1 left promiscuous mode [ 1748.485183][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.492699][T22268] device bridge_slave_0 left promiscuous mode [ 1748.498789][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.506482][T22268] device veth1_macvtap left promiscuous mode [ 1748.512367][T22268] device veth0_vlan left promiscuous mode [ 1748.616550][ T1230] hid-led 0003:1D34:000A.00C2: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 1748.628861][ T1230] hid-led 0003:1D34:000A.00C2: Dream Cheeky Webmail Notifier initialized [ 1748.666272][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.678731][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1748.698873][ T288] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1748.711155][ T288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.728123][ T288] usb 5-1: config 0 descriptor?? [ 1748.828434][ T650] usb 2-1: USB disconnect, device number 16 [ 1748.921277][T32442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.928199][T32442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.935292][T32442] device bridge0 left promiscuous mode [ 1748.953834][T32442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.960687][T32442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1748.967792][T32442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.974557][T32442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1748.982117][T32442] device bridge0 entered promiscuous mode [ 1749.356938][ T288] hid-led 0003:1D34:000A.00C3: unknown main item tag 0x0 [ 1749.515844][ T5656] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1749.576416][ T288] hid-led 0003:1D34:000A.00C3: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 1749.589138][ T288] hid-led 0003:1D34:000A.00C3: Dream Cheeky Webmail Notifier initialized [ 1749.898255][ T4795] usb 5-1: USB disconnect, device number 20 [ 1750.015876][ T5656] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1750.443144][T32468] usb usb8: usbfs: process 32468 (syz.2.8207) did not claim interface 0 before use [ 1750.594205][T32473] syz.1.8208[32473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1750.594266][T32473] syz.1.8208[32473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1751.055921][ T5656] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1751.077575][ T5656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.395091][ T24] kauditd_printk_skb: 55 callbacks suppressed [ 1751.402746][ T24] audit: type=1326 audit(1723826144.779:10416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32490 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fae1e9b9 code=0x7ffc0000 [ 1751.430743][ T24] audit: type=1326 audit(1723826144.779:10417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32490 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fae1e9b9 code=0x7ffc0000 [ 1751.456060][ T24] audit: type=1326 audit(1723826144.779:10418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32490 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04fae1e9b9 code=0x7ffc0000 [ 1751.479702][ T24] audit: type=1326 audit(1723826144.779:10419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32490 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fae1e9b9 code=0x7ffc0000 [ 1751.515167][T32496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8215'. [ 1751.524021][T32496] tipc: Started in network mode [ 1751.528871][T32496] tipc: Own node identity 1, cluster identity 4711 [ 1751.529608][ T24] audit: type=1326 audit(1723826144.779:10420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32490 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fae1e9b9 code=0x7ffc0000 [ 1751.535205][T32496] tipc: 32-bit node address hash set to 1 [ 1751.576681][ T24] audit: type=1326 audit(1723826144.779:10421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32490 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04fae1e9b9 code=0x7ffc0000 [ 1751.600393][ T24] audit: type=1326 audit(1723826144.779:10422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32490 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fae1e9b9 code=0x7ffc0000 [ 1751.677366][ T5656] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 1751.686362][ T5656] uvcvideo: No valid video chain found. [ 1751.707221][ T24] audit: type=1326 audit(1723826144.779:10423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32490 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fae1e9b9 code=0x7ffc0000 [ 1751.736411][ T24] audit: type=1326 audit(1723826144.789:10424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32490 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04fae1e9b9 code=0x7ffc0000 [ 1751.760042][ T24] audit: type=1326 audit(1723826144.789:10425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32490 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fae1e9b9 code=0x7ffc0000 [ 1751.864846][T32507] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1751.996289][T28945] usb 1-1: USB disconnect, device number 14 [ 1752.048063][T32509] tmpfs: Unknown parameter 'r' [ 1752.126300][T32510] syz.3.8220[32510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1752.555000][T32525] syz.0.8225[32525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1752.566635][T32525] syz.0.8225[32525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1752.646595][T32528] 9pnet: Insufficient options for proto=fd [ 1752.746248][ T1230] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1753.155916][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1753.166663][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1753.176169][ T1230] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1753.185024][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.193391][ T1230] usb 3-1: config 0 descriptor?? [ 1753.517200][T32544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8231'. [ 1753.584999][ T498] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1754.096884][ T1230] samsung 0003:0419:0600.00C4: item fetching failed at offset 2/5 [ 1754.104737][ T1230] samsung 0003:0419:0600.00C4: parse failed [ 1754.130935][ T1230] samsung: probe of 0003:0419:0600.00C4 failed with error -22 [ 1754.298887][ T5656] usb 3-1: USB disconnect, device number 36 [ 1754.612826][ T498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1754.623751][ T498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1754.633506][ T498] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1754.683523][ T498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.693081][ T498] usb 4-1: config 0 descriptor?? [ 1755.002557][T32576] syz.1.8240[32576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1755.002598][T32576] syz.1.8240[32576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1755.253982][ T498] hid-led 0003:1D34:000A.00C5: unknown main item tag 0x0 [ 1755.275365][T32581] netlink: 13 bytes leftover after parsing attributes in process `syz.2.8241'. [ 1755.491105][ T498] hid-led 0003:1D34:000A.00C5: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 1755.517979][ T498] hid-led 0003:1D34:000A.00C5: Dream Cheeky Webmail Notifier initialized [ 1755.695121][T28945] usb 4-1: USB disconnect, device number 18 [ 1755.910460][T32592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8244'. [ 1756.662274][T32604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8247'. [ 1756.674445][ T4795] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1756.866068][T32613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1757.156349][ T4795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.176862][ T4795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1757.262680][ T4795] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1757.272125][ T4795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.284026][ T4795] usb 3-1: config 0 descriptor?? [ 1757.604433][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 1757.604445][ T24] audit: type=1400 audit(1723826151.049:10454): avc: denied { nlmsg_write } for pid=32629 comm="syz.3.8256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1757.711785][ T24] audit: type=1400 audit(1723826151.159:10455): avc: denied { mounton } for pid=32633 comm="syz.4.8258" path="/147/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1757.766750][ T4795] samsung 0003:0419:0600.00C6: item fetching failed at offset 2/5 [ 1757.779144][ T4795] samsung 0003:0419:0600.00C6: parse failed [ 1757.795174][ T24] audit: type=1400 audit(1723826151.159:10456): avc: denied { remount } for pid=32633 comm="syz.4.8258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1757.803720][ T4795] samsung: probe of 0003:0419:0600.00C6 failed with error -22 [ 1757.986009][T32639] overlayfs: unrecognized mount option "euid>00000000000000016832" or missing value [ 1758.198720][ T498] usb 3-1: USB disconnect, device number 37 [ 1758.386178][T32657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8263'. [ 1759.166179][ T24] audit: type=1326 audit(1723826152.619:10457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32673 comm="syz.0.8272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfd4f799b9 code=0x0 [ 1759.268168][T32680] binder: 32673:32680 ioctl 400454ca 20000300 returned -22 [ 1759.282617][T32680] binder: 32673:32680 ioctl 4b3b 20000040 returned -22 [ 1759.475937][T16710] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1759.599777][ T24] audit: type=1326 audit(1723826152.989:10458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.1.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1759.624690][ T24] audit: type=1326 audit(1723826152.989:10459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.1.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1759.641458][ T650] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1759.648670][ T24] audit: type=1326 audit(1723826152.989:10460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.1.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1759.679506][ T24] audit: type=1326 audit(1723826152.989:10461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.1.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1759.703063][ T24] audit: type=1326 audit(1723826152.989:10462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.1.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1759.726759][ T24] audit: type=1326 audit(1723826152.989:10463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.1.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1759.855828][T16710] usb 4-1: Using ep0 maxpacket: 32 [ 1759.895924][ T650] usb 5-1: Using ep0 maxpacket: 16 [ 1759.975929][T16710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.986715][T16710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.996278][T16710] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1760.005465][T16710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.014503][T16710] usb 4-1: config 0 descriptor?? [ 1760.025888][ T650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.036653][ T650] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1760.049382][ T650] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1760.059147][ T650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.067744][ T650] usb 5-1: config 0 descriptor?? [ 1760.090955][T32693] syz.2.8277[32693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1760.091011][T32693] syz.2.8277[32693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1760.642495][ T650] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00C7/input/input75 [ 1760.726972][ T650] microsoft 0003:045E:07DA.00C7: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1761.142302][ T650] usb 5-1: USB disconnect, device number 21 [ 1761.236181][T16710] usbhid 4-1:0.0: can't add hid device: -71 [ 1761.242008][T16710] usbhid: probe of 4-1:0.0 failed with error -71 [ 1761.252937][T16710] usb 4-1: USB disconnect, device number 19 [ 1761.743765][T32711] syz.4.8281[32711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1761.743839][T32711] syz.4.8281[32711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1762.331340][T32719] SELinux: Context u:object_r:app_data_file:s0:c512,c768 is not valid (left unmapped). [ 1762.347305][ T4795] Bluetooth: hci0: command 0x1003 tx timeout [ 1762.358150][ T4123] Bluetooth: hci0: sending frame failed (-49) [ 1763.065854][ T5656] Bluetooth: hci1: command 0x1003 tx timeout [ 1763.072024][ T4123] Bluetooth: hci1: sending frame failed (-49) [ 1763.865822][ T498] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1764.358660][ T24] kauditd_printk_skb: 110 callbacks suppressed [ 1764.358673][ T24] audit: type=1326 audit(1723826157.659:10574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32736 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1764.388249][ T24] audit: type=1326 audit(1723826157.659:10575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32736 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1764.406756][ T498] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1764.411615][ T24] audit: type=1326 audit(1723826157.659:10576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32736 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1764.447692][ T5656] Bluetooth: hci0: command 0x1001 tx timeout [ 1764.447991][ T24] audit: type=1326 audit(1723826157.659:10577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32736 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1764.453513][ T4123] Bluetooth: hci0: sending frame failed (-49) [ 1764.477165][ T24] audit: type=1326 audit(1723826157.659:10578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32736 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1764.506214][ T24] audit: type=1326 audit(1723826157.669:10579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32736 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1764.529530][ T24] audit: type=1326 audit(1723826157.669:10580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32736 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1764.552901][ T498] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1764.561654][ T24] audit: type=1326 audit(1723826157.669:10581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32736 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1764.585108][ T498] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1764.592930][ T498] usb 5-1: SerialNumber: syz [ 1764.599143][ T24] audit: type=1326 audit(1723826157.679:10582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32736 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1764.622588][ T24] audit: type=1326 audit(1723826157.679:10583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32736 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfb9c9b9 code=0x7ffc0000 [ 1765.145806][T14128] Bluetooth: hci1: command 0x1001 tx timeout [ 1765.151652][ T4123] Bluetooth: hci1: sending frame failed (-49) [ 1765.286915][ T498] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1765.823128][T32762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8288'. [ 1766.505851][ T650] Bluetooth: hci0: command 0x1009 tx timeout [ 1766.889505][ T318] usb 5-1: USB disconnect, device number 22 [ 1766.896515][ T318] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 1766.976322][ T314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8294'. [ 1767.343079][ T650] Bluetooth: hci1: command 0x1009 tx timeout [ 1769.266197][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.273041][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.280537][ T371] device bridge_slave_0 entered promiscuous mode [ 1769.287681][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.294569][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.301742][ T371] device bridge_slave_1 entered promiscuous mode [ 1769.336106][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.342957][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1769.350076][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.356845][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1769.402766][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1769.411077][ T498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.418663][ T498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.436991][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1769.444963][ T498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.452121][ T498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1769.460304][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1769.468682][ T498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.475669][ T498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1769.482924][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1769.491126][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1769.504507][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1769.512809][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1769.524308][ T371] device veth0_vlan entered promiscuous mode [ 1769.531311][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1769.539286][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1769.552836][ T371] device veth1_macvtap entered promiscuous mode [ 1769.559634][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1769.567293][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1769.574471][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1769.582773][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1769.591021][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1769.603483][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1769.611935][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1769.627140][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1769.635322][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1769.771903][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.778864][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.786063][ T384] device bridge0 left promiscuous mode [ 1770.006511][T22268] device bridge_slave_1 left promiscuous mode [ 1770.012547][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.019765][ T4795] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1770.027650][T22268] device bridge_slave_0 left promiscuous mode [ 1770.033622][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.041331][T22268] device veth1_macvtap left promiscuous mode [ 1770.047289][T22268] device veth0_vlan left promiscuous mode [ 1770.263748][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.270897][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.278451][ T386] device bridge_slave_0 entered promiscuous mode [ 1770.287155][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.294035][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.301460][ T386] device bridge_slave_1 entered promiscuous mode [ 1770.397210][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.404070][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.411157][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.417943][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1770.443573][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1770.450712][ T4795] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1770.459902][ T1230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.467637][ T1230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.485405][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1770.493609][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1770.502019][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.508864][ T8365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1770.516842][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1770.525650][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1770.534022][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.540871][ T8365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.549094][ T4795] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1770.557860][ T4795] usb 4-1: can't read configurations, error -71 [ 1770.564293][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1770.573928][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1770.582819][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1770.591668][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1770.643562][ T386] device veth0_vlan entered promiscuous mode [ 1770.674590][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1770.684304][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1770.694591][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1770.709177][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1770.720054][ T386] device veth1_macvtap entered promiscuous mode [ 1770.728532][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1770.735700][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1770.743022][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1770.750895][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1770.758979][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1770.769817][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1770.777838][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1770.789334][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1770.797859][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1770.877461][T22268] tipc: Disabling bearer [ 1770.882499][T22268] tipc: Left network mode [ 1771.045580][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.052825][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.060077][ T410] device bridge_slave_0 entered promiscuous mode [ 1771.069312][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.076466][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.083723][ T410] device bridge_slave_1 entered promiscuous mode [ 1771.120926][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.127774][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1771.134835][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.141671][ T410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1771.169102][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1771.176956][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.183981][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.194704][T28945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1771.202898][T28945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.209749][T28945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1771.226679][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1771.234575][ T650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.241422][ T650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1771.249224][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1771.256966][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1771.269944][T28945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1771.281303][ T410] device veth0_vlan entered promiscuous mode [ 1771.287800][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1771.295652][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1771.303306][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1771.325198][ T410] device veth1_macvtap entered promiscuous mode [ 1771.332333][T14128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1771.348125][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1771.356777][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1771.615916][ T24] kauditd_printk_skb: 23 callbacks suppressed [ 1771.615965][ T24] audit: type=1326 audit(1723826165.019:10607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=419 comm="syz.0.8307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636a1569b9 code=0x7ffc0000 [ 1771.677438][ T24] audit: type=1326 audit(1723826165.019:10608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=419 comm="syz.0.8307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636a1569b9 code=0x7ffc0000 [ 1771.700764][ T24] audit: type=1326 audit(1723826165.029:10609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=419 comm="syz.0.8307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f636a1569b9 code=0x7ffc0000 [ 1771.725301][ T24] audit: type=1326 audit(1723826165.029:10610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=419 comm="syz.0.8307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636a1569b9 code=0x7ffc0000 [ 1771.753189][T22268] device bridge_slave_1 left promiscuous mode [ 1771.754830][ T24] audit: type=1326 audit(1723826165.029:10611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=419 comm="syz.0.8307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636a1569b9 code=0x7ffc0000 [ 1771.760474][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.868509][T22268] device bridge_slave_0 left promiscuous mode [ 1771.880613][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.896236][T22268] device veth1_macvtap left promiscuous mode [ 1771.902143][T22268] device veth0_vlan left promiscuous mode [ 1772.078885][ T432] syz.3.8313[432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1772.078946][ T432] syz.3.8313[432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1773.483220][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.501126][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1773.508226][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.514990][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1773.522350][ T453] device bridge0 entered promiscuous mode [ 1773.741000][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1773.753904][T22268] device bridge_slave_1 left promiscuous mode [ 1773.765041][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.772596][T22268] device bridge_slave_0 left promiscuous mode [ 1773.782816][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.795661][T22268] device veth1_macvtap left promiscuous mode [ 1774.666161][T16710] Bluetooth: hci0: command 0x1003 tx timeout [ 1774.672432][ T782] Bluetooth: hci0: sending frame failed (-49) [ 1775.292163][ T487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8327'. [ 1775.661020][ T491] tmpfs: Unknown parameter 'r' [ 1775.680637][ T24] audit: type=1107 audit(1723826169.129:10612): pid=490 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1775.746596][ T493] syz.2.8329[493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1775.875855][T16710] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1776.135851][ T5656] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1776.147295][ T502] FAULT_INJECTION: forcing a failure. [ 1776.147295][ T502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1776.160232][ T502] CPU: 1 PID: 502 Comm: syz.4.8332 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 1776.169737][ T502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1776.179632][ T502] Call Trace: [ 1776.182765][ T502] dump_stack_lvl+0x1e2/0x24b [ 1776.187277][ T502] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1776.192573][ T502] dump_stack+0x15/0x17 [ 1776.196556][ T502] should_fail+0x3c6/0x510 [ 1776.200810][ T502] should_fail_usercopy+0x1a/0x20 [ 1776.205672][ T502] copy_page_from_iter+0x398/0x6e0 [ 1776.210623][ T502] tun_get_user+0x755/0x38f0 [ 1776.215054][ T502] ? _kstrtoull+0x3a0/0x4a0 [ 1776.219389][ T502] ? tun_do_read+0x1f60/0x1f60 [ 1776.223986][ T502] ? kstrtouint_from_user+0x20a/0x2a0 [ 1776.229202][ T502] ? kstrtol_from_user+0x310/0x310 [ 1776.234140][ T502] ? queue_stack_map_delete_elem+0x10/0x10 [ 1776.239782][ T502] ? bpf_get_stack+0x31/0x40 [ 1776.244214][ T502] ? avc_policy_seqno+0x1b/0x70 [ 1776.245864][T16710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1776.248904][ T502] ? selinux_file_permission+0x2bb/0x560 [ 1776.248915][ T502] ? fsnotify_perm+0x67/0x4e0 [ 1776.248933][ T502] tun_chr_write_iter+0x1a8/0x250 [ 1776.259719][T16710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1776.265045][ T502] vfs_write+0xb4c/0xe70 [ 1776.265055][ T502] ? putname+0xe7/0x140 [ 1776.265074][ T502] ? __traceiter_kmem_cache_free+0x2e/0x50 [ 1776.271092][T16710] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1776.274418][ T502] ? kernel_write+0x3d0/0x3d0 [ 1776.274431][ T502] ? __fdget_pos+0x209/0x3a0 [ 1776.274447][ T502] ? ksys_write+0x77/0x2c0 [ 1776.284369][T16710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.288041][ T502] ksys_write+0x199/0x2c0 [ 1776.288053][ T502] ? __ia32_sys_read+0x90/0x90 [ 1776.288064][ T502] ? debug_smp_processor_id+0x17/0x20 [ 1776.288081][ T502] __x64_sys_write+0x7b/0x90 [ 1776.293057][T16710] usb 1-1: config 0 descriptor?? [ 1776.297677][ T502] do_syscall_64+0x34/0x70 [ 1776.297690][ T502] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1776.297698][ T502] RIP: 0033:0x7f744899c49f [ 1776.297709][ T502] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 1776.297716][ T502] RSP: 002b:00007f744761b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1776.392742][ T502] RAX: ffffffffffffffda RBX: 00007f7448b39f80 RCX: 00007f744899c49f [ 1776.400542][ T502] RDX: 0000000000000036 RSI: 0000000020000240 RDI: 00000000000000c8 [ 1776.408439][ T502] RBP: 00007f744761b090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.416265][ T502] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 1776.424073][ T502] R13: 0000000000000000 R14: 00007f7448b39f80 R15: 00007ffdff028978 [ 1776.426181][ T5656] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 1776.447618][ T504] syz.4.8333[504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1776.447680][ T504] syz.4.8333[504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1776.746135][T14128] Bluetooth: hci0: command 0x1001 tx timeout [ 1776.764725][ T782] Bluetooth: hci0: sending frame failed (-49) [ 1776.787729][T16710] hid-led 0003:1D34:000A.00C8: unknown main item tag 0x0 [ 1776.996595][T16710] hid-led 0003:1D34:000A.00C8: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 1777.009284][T16710] hid-led 0003:1D34:000A.00C8: Dream Cheeky Webmail Notifier initialized [ 1777.075891][ T5656] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1777.084832][ T5656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.247081][ T4795] usb 1-1: USB disconnect, device number 15 [ 1777.302472][ T514] syz.4.8336[514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1777.302503][ T514] syz.4.8336[514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1777.578752][ T5656] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 1777.596752][ T5656] uvcvideo: No valid video chain found. [ 1777.784552][ T5656] usb 2-1: USB disconnect, device number 17 [ 1778.754791][ T24] audit: type=1326 audit(1723826172.199:10613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.2.8343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0523c29b9 code=0x7ffc0000 [ 1778.781772][ T538] FAULT_INJECTION: forcing a failure. [ 1778.781772][ T538] name failslab, interval 1, probability 0, space 0, times 0 [ 1778.783587][ T24] audit: type=1326 audit(1723826172.229:10614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.2.8343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0523c29b9 code=0x7ffc0000 [ 1778.795427][ T538] CPU: 0 PID: 538 Comm: syz.2.8343 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 1778.826960][ T538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1778.836852][ T538] Call Trace: [ 1778.839986][ T538] dump_stack_lvl+0x1e2/0x24b [ 1778.844496][ T538] ? panic+0x812/0x812 [ 1778.848403][ T538] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1778.853701][ T538] dump_stack+0x15/0x17 [ 1778.857688][ T538] should_fail+0x3c6/0x510 [ 1778.861940][ T538] ? __alloc_skb+0x80/0x510 [ 1778.866283][ T538] __should_failslab+0xa4/0xe0 [ 1778.870880][ T538] should_failslab+0x9/0x20 [ 1778.875222][ T538] kmem_cache_alloc+0x3d/0x2e0 [ 1778.879821][ T538] __alloc_skb+0x80/0x510 [ 1778.883984][ T538] ? kmem_cache_alloc+0x168/0x2e0 [ 1778.888849][ T538] ? audit_log_start+0x48c/0x9b0 [ 1778.893638][ T538] audit_log_start+0x4ae/0x9b0 [ 1778.898220][ T538] ? _kstrtoull+0x3a0/0x4a0 [ 1778.902574][ T538] ? audit_serial+0x30/0x30 [ 1778.906900][ T538] ? kstrtol_from_user+0x310/0x310 [ 1778.911847][ T538] ? memset+0x35/0x40 [ 1778.915666][ T538] ? __fsnotify_parent+0x4b9/0x6c0 [ 1778.920614][ T538] audit_seccomp+0x61/0x1e0 [ 1778.924954][ T538] __seccomp_filter+0xd03/0x1e10 [ 1778.929726][ T538] ? vfs_write+0x852/0xe70 [ 1778.933980][ T538] ? __secure_computing+0x300/0x300 [ 1778.939014][ T538] ? kmem_cache_free+0xa9/0x1e0 [ 1778.943704][ T538] ? kernel_write+0x3d0/0x3d0 [ 1778.948213][ T538] ? __kasan_check_write+0x14/0x20 [ 1778.953160][ T538] ? mutex_lock+0xa5/0x110 [ 1778.957414][ T538] ? mutex_trylock+0xa0/0xa0 [ 1778.961843][ T538] ? fput_many+0x160/0x1b0 [ 1778.966092][ T538] ? fput+0x1a/0x20 [ 1778.969738][ T538] ? ksys_write+0x260/0x2c0 [ 1778.974079][ T538] ? __ia32_sys_read+0x90/0x90 [ 1778.978677][ T538] __secure_computing+0xf0/0x300 [ 1778.983453][ T538] syscall_enter_from_user_mode+0xbf/0x1a0 [ 1778.989094][ T538] do_syscall_64+0x13/0x70 [ 1778.993346][ T538] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1778.999073][ T538] RIP: 0033:0x7fb0523c29b9 [ 1779.003327][ T538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1779.022771][ T538] RSP: 002b:00007fb051040038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1779.031012][ T538] RAX: ffffffffffffffda RBX: 00007fb05255ef80 RCX: 00007fb0523c29b9 [ 1779.038823][ T538] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000240 [ 1779.046633][ T538] RBP: 00007fb051040090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.054444][ T538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.062258][ T538] R13: 0000000000000000 R14: 00007fb05255ef80 R15: 00007ffd0605baa8 [ 1779.070628][ T5656] Bluetooth: hci0: command 0x1009 tx timeout [ 1779.087284][ T24] audit: type=1326 audit(1723826172.229:10615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.2.8343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0523c29b9 code=0x7ffc0000 [ 1779.110716][ T24] audit: type=1326 audit(1723826172.229:10616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.2.8343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fb0523c29b9 code=0x7ffc0000 [ 1779.167294][ T538] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 1779.266744][ T538] audit: out of memory in audit_log_start [ 1779.316969][ T24] audit: type=1326 audit(1723826172.229:10617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.2.8343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0523c29b9 code=0x7ffc0000 [ 1779.318442][ T538] incfs: Can't find or create .index dir in ./file0 [ 1779.346740][ T538] incfs: mount failed -14 [ 1779.375823][ T24] audit: type=1326 audit(1723826172.229:10618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.2.8343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb0523c29b9 code=0x7ffc0000 [ 1779.420905][ T24] audit: type=1326 audit(1723826172.229:10619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.2.8343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0523c29b9 code=0x7ffc0000 [ 1779.445134][ T550] netlink: 'syz.4.8346': attribute type 3 has an invalid length. [ 1779.454822][ T550] netlink: 'syz.4.8346': attribute type 3 has an invalid length. [ 1779.462684][ T24] audit: type=1326 audit(1723826172.229:10620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.2.8343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb0523c29b9 code=0x7ffc0000 [ 1781.087333][ T584] usb usb8: usbfs: process 584 (syz.0.8357) did not claim interface 0 before use [ 1781.760923][ T603] tmpfs: Unknown parameter 'r' [ 1782.130654][ T618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.137560][ T618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.144604][ T618] device bridge_slave_0 entered promiscuous mode [ 1782.151256][ T618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.158160][ T618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.165384][ T618] device bridge_slave_1 entered promiscuous mode [ 1782.197730][ T618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.204563][ T618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1782.211665][ T618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.218452][ T618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1782.236391][ T4795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.244389][ T4795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.252035][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1782.259600][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1782.274415][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1782.282468][ T4795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.289311][ T4795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1782.296597][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1782.304497][ T4795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.311243][ T4795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1782.318397][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1782.326475][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1782.339128][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1782.349824][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1782.355907][T16710] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1782.359220][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1782.371952][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1782.379812][ T618] device veth0_vlan entered promiscuous mode [ 1782.390129][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1782.398886][ T618] device veth1_macvtap entered promiscuous mode [ 1782.407979][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1782.417604][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1782.865913][T16710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.877013][T16710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.886746][T16710] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1782.895645][T16710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.904205][T16710] usb 5-1: config 0 descriptor?? [ 1783.036664][ T641] device bridge0 entered promiscuous mode [ 1783.336518][ T643] 9pnet: Insufficient options for proto=fd [ 1783.397191][T16710] hid-led 0003:1D34:000A.00C9: unknown main item tag 0x0 [ 1783.698704][ T653] syz.0.8378[653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1783.699085][ T653] syz.0.8378[653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1783.715283][T16710] hid-led 0003:1D34:000A.00C9: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 1783.738386][T16710] hid-led 0003:1D34:000A.00C9: Dream Cheeky Webmail Notifier initialized [ 1784.404012][ T498] usb 5-1: USB disconnect, device number 23 [ 1784.469056][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 1784.469066][ T24] audit: type=1400 audit(1723826177.919:10649): avc: denied { setopt } for pid=661 comm="syz.1.8380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1784.494861][T31226] device bridge_slave_1 left promiscuous mode [ 1784.501073][T31226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.508571][T31226] device bridge_slave_0 left promiscuous mode [ 1784.514523][T31226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.522648][T31226] device veth1_macvtap left promiscuous mode [ 1784.528522][T31226] device veth0_vlan left promiscuous mode [ 1784.616351][ T667] 9pnet: Insufficient options for proto=fd [ 1785.307377][ T680] 9pnet: Insufficient options for proto=fd [ 1785.946095][ T695] netlink: 'syz.2.8389': attribute type 3 has an invalid length. [ 1786.186321][T28945] Bluetooth: hci0: command 0x1003 tx timeout [ 1786.206202][ T782] Bluetooth: hci0: sending frame failed (-49) [ 1786.446349][ T702] overlayfs: failed to resolve './file0/../file0': -2 [ 1786.578386][ T705] usb usb8: usbfs: process 705 (syz.3.8392) did not claim interface 0 before use [ 1787.065814][T28945] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1787.115728][ T716] 9pnet: Insufficient options for proto=fd [ 1787.516166][T28945] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.526973][T28945] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.536737][T28945] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1787.543256][T28945] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1787.557614][T28945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.602678][T28945] usb 3-1: config 0 descriptor?? [ 1788.166359][ T736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8402'. [ 1788.210919][T28945] hid-multitouch 0003:1FD2:6007.00CA: collection stack underflow [ 1788.219737][T28945] hid-multitouch 0003:1FD2:6007.00CA: item 0 4 0 12 parsing failed [ 1788.242553][T28945] hid-multitouch: probe of 0003:1FD2:6007.00CA failed with error -22 [ 1788.283256][ T1230] Bluetooth: hci0: command 0x1001 tx timeout [ 1788.289213][ T782] Bluetooth: hci0: sending frame failed (-49) [ 1788.399066][ T742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8404'. [ 1788.775847][ T650] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1789.008033][ T756] usb usb8: usbfs: process 756 (syz.4.8408) did not claim interface 0 before use [ 1789.195820][ T650] usb 2-1: Using ep0 maxpacket: 16 [ 1789.329445][ T650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.341150][ T650] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1789.355801][ T650] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1789.364654][ T650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.493675][ T650] usb 2-1: config 0 descriptor?? [ 1789.783202][T28945] usb 3-1: USB disconnect, device number 38 [ 1789.812865][ T765] netlink: 324 bytes leftover after parsing attributes in process `syz.4.8410'. [ 1789.979840][ T650] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00CB/input/input76 [ 1790.050875][ T770] 9pnet: Insufficient options for proto=fd [ 1790.058655][ T650] microsoft 0003:045E:07DA.00CB: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1790.355826][ T8365] Bluetooth: hci0: command 0x1009 tx timeout [ 1790.455552][ T8365] usb 2-1: USB disconnect, device number 18 [ 1790.761325][ T783] syz.2.8417[783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1790.761382][ T783] syz.2.8417[783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1791.271284][ T798] 9pnet: Insufficient options for proto=fd [ 1792.728548][ T816] incfs: Can't find or create .index dir in ./file0 [ 1792.735022][ T816] incfs: mount failed -14 [ 1792.957270][ T828] 9pnet: Insufficient options for proto=fd [ 1792.985811][ T650] Bluetooth: hci1: command 0x1003 tx timeout [ 1792.991689][ T4123] Bluetooth: hci1: sending frame failed (-49) [ 1793.145817][ T305] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1793.505862][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.516579][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1793.526109][ T305] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1793.534916][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.543667][ T305] usb 2-1: config 0 descriptor?? [ 1794.392562][ T837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.399473][ T837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.406642][ T837] device bridge_slave_0 entered promiscuous mode [ 1794.413261][ T837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.420130][ T837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.427248][ T837] device bridge_slave_1 entered promiscuous mode [ 1794.459246][ T837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.466106][ T837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1794.473165][ T837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.480011][ T837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1794.498594][T28945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.506027][T28945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.507898][ T305] hid-led 0003:1D34:000A.00CC: unknown main item tag 0x0 [ 1794.537117][T28945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1794.544329][T28945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1794.563475][T28945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1794.571526][T28945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.578379][T28945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1794.589960][T28945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1794.599812][T28945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.606664][T28945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1794.656713][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1794.664528][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1794.677294][ T837] device veth0_vlan entered promiscuous mode [ 1794.690111][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1794.699117][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1794.706820][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1794.714092][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1794.722882][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1794.734633][ T24] audit: type=1400 audit(1723826188.179:10650): avc: denied { mounton } for pid=853 comm="syz.3.8437" path="/22/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1794.745876][ T854] 9pnet: Insufficient options for proto=fd [ 1794.757750][ T305] hid-led 0003:1D34:000A.00CC: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 1794.763662][ T837] device veth1_macvtap entered promiscuous mode [ 1794.774786][ T305] hid-led 0003:1D34:000A.00CC: Dream Cheeky Webmail Notifier initialized [ 1794.784697][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1794.800952][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1794.976338][ T861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8432'. [ 1794.979555][T28945] usb 2-1: USB disconnect, device number 19 [ 1795.066274][ T1230] Bluetooth: hci1: command 0x1001 tx timeout [ 1795.073957][ T40] Bluetooth: hci1: sending frame failed (-49) [ 1795.166459][ T7] device bridge_slave_1 left promiscuous mode [ 1795.172412][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.179666][ T7] device bridge_slave_0 left promiscuous mode [ 1795.185599][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.193138][ T7] device veth1_macvtap left promiscuous mode [ 1795.199017][ T7] device veth0_vlan left promiscuous mode [ 1795.505869][ T866] fuse: Unknown parameter 'group_i00000000000000000000' [ 1795.513266][ T866] syz.1.8439[866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1795.513298][ T866] syz.1.8439[866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1795.765881][T28945] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1795.857544][ T876] syz.0.8442[876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1795.857619][ T876] syz.0.8442[876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1796.067751][T28945] usb 5-1: Using ep0 maxpacket: 32 [ 1796.255889][T28945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.266654][T28945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1796.276152][T28945] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1796.285177][T28945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.293879][T28945] usb 5-1: config 0 descriptor?? [ 1796.538935][ T890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.545917][ T890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.559331][ T890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.566171][ T890] bridge0: port 2(bridge_slave_1) entered listening state [ 1796.573168][ T890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.579972][ T890] bridge0: port 1(bridge_slave_0) entered listening state [ 1796.587358][ T890] device bridge0 entered promiscuous mode [ 1797.145857][ T8365] Bluetooth: hci1: command 0x1009 tx timeout [ 1797.295109][ T901] fuse: Unknown parameter 'group_i00000000000000000000' [ 1797.302629][ T901] syz.3.8450[901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1797.302665][ T901] syz.3.8450[901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1797.565865][T28945] usbhid 5-1:0.0: can't add hid device: -71 [ 1797.582710][T28945] usbhid: probe of 5-1:0.0 failed with error -71 [ 1797.590416][T28945] usb 5-1: USB disconnect, device number 24 [ 1798.119273][T28945] Bluetooth: hci0: command 0x1003 tx timeout [ 1798.125270][ T4123] Bluetooth: hci0: sending frame failed (-49) [ 1798.233841][ T910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8452'. [ 1799.104206][ T922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8455'. [ 1800.185883][T28945] Bluetooth: hci0: command 0x1001 tx timeout [ 1800.194964][ T4123] Bluetooth: hci0: sending frame failed (-49) [ 1800.307084][ T941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.314011][ T941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.321128][ T941] device bridge0 left promiscuous mode [ 1800.333318][ T941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.340166][ T941] bridge0: port 2(bridge_slave_1) entered listening state [ 1800.347171][ T941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.353951][ T941] bridge0: port 1(bridge_slave_0) entered listening state [ 1800.361474][ T941] device bridge0 entered promiscuous mode [ 1800.835137][ T947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.842232][ T947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.849615][ T947] device bridge_slave_0 entered promiscuous mode [ 1800.856375][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.863214][ T947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.870450][ T947] device bridge_slave_1 entered promiscuous mode [ 1801.147032][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.153898][ T947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1801.160993][ T947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.167780][ T947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1801.187306][ T4795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.197151][ T4795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.204588][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1801.212015][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1801.227059][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1801.235058][ T4795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.241928][ T4795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1801.249472][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1801.258268][ T4795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.265111][ T4795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1801.279907][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1801.288191][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1801.303856][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1801.318379][ T947] device veth0_vlan entered promiscuous mode [ 1801.332710][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1801.340977][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1801.353006][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1801.366001][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1801.376561][ T947] device veth1_macvtap entered promiscuous mode [ 1801.387632][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1801.401874][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1801.832661][ T979] 9pnet: Insufficient options for proto=fd [ 1802.056447][T22268] device bridge_slave_1 left promiscuous mode [ 1802.062487][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.070239][T22268] device bridge_slave_0 left promiscuous mode [ 1802.076341][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.084215][T22268] device veth1_macvtap left promiscuous mode [ 1802.090405][T22268] device veth0_vlan left promiscuous mode [ 1802.266077][ T1230] Bluetooth: hci0: command 0x1009 tx timeout [ 1802.351721][ T984] syz.2.8469[984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1802.351785][ T984] syz.2.8469[984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1802.585985][T16710] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1802.885799][T16710] usb 4-1: device descriptor read/64, error -71 [ 1802.995855][ T650] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1803.236310][ T650] usb 2-1: Using ep0 maxpacket: 8 [ 1803.275898][T16710] usb 4-1: device descriptor read/64, error -71 [ 1803.435930][ T650] usb 2-1: config 2 has an invalid interface number: 30 but max is 3 [ 1803.443839][ T650] usb 2-1: config 2 has an invalid interface number: 108 but max is 3 [ 1803.451832][ T650] usb 2-1: config 2 has an invalid interface number: 130 but max is 3 [ 1803.459810][ T650] usb 2-1: config 2 has an invalid interface number: 98 but max is 3 [ 1803.467697][ T650] usb 2-1: config 2 has no interface number 0 [ 1803.473576][ T650] usb 2-1: config 2 has no interface number 1 [ 1803.479654][ T650] usb 2-1: config 2 has no interface number 2 [ 1803.485515][ T650] usb 2-1: config 2 has no interface number 3 [ 1803.491480][ T650] usb 2-1: config 2 interface 30 altsetting 7 bulk endpoint 0xE has invalid maxpacket 1024 [ 1803.501270][ T650] usb 2-1: config 2 interface 30 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1803.511948][ T650] usb 2-1: config 2 interface 30 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1803.522519][ T650] usb 2-1: config 2 interface 30 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1803.533197][ T650] usb 2-1: config 2 interface 30 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 1803.543613][ T650] usb 2-1: config 2 interface 108 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1803.554400][T16710] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1803.561800][ T650] usb 2-1: config 2 interface 108 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1803.572617][ T650] usb 2-1: config 2 interface 108 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 1803.583118][ T650] usb 2-1: config 2 interface 108 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 1803.593631][ T650] usb 2-1: config 2 interface 108 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1803.604115][ T650] usb 2-1: config 2 interface 108 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 1803.614690][ T650] usb 2-1: config 2 interface 108 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1803.625142][ T650] usb 2-1: config 2 interface 108 altsetting 2 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1803.635935][ T650] usb 2-1: config 2 interface 130 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1803.646389][ T650] usb 2-1: config 2 interface 130 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1803.656951][ T650] usb 2-1: config 2 interface 130 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 1803.667296][ T650] usb 2-1: config 2 interface 130 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 1803.677735][ T650] usb 2-1: config 2 interface 130 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 1803.688139][ T650] usb 2-1: config 2 interface 130 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 1803.698750][ T650] usb 2-1: config 2 interface 130 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 1803.709247][ T650] usb 2-1: config 2 interface 130 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1803.719733][ T650] usb 2-1: config 2 interface 130 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1803.730245][ T650] usb 2-1: config 2 interface 130 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1803.740739][ T650] usb 2-1: config 2 interface 130 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1803.751581][ T650] usb 2-1: config 2 interface 130 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 1803.762083][ T650] usb 2-1: config 2 interface 130 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 1803.772572][ T650] usb 2-1: config 2 interface 130 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1803.783501][ T650] usb 2-1: config 2 interface 98 altsetting 8 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1803.794091][ T650] usb 2-1: config 2 interface 98 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 1803.804484][ T650] usb 2-1: config 2 interface 30 has no altsetting 0 [ 1803.810993][ T650] usb 2-1: config 2 interface 108 has no altsetting 0 [ 1803.817763][ T650] usb 2-1: config 2 interface 130 has no altsetting 0 [ 1803.824329][ T650] usb 2-1: config 2 interface 98 has no altsetting 0 [ 1803.845877][T16710] usb 4-1: device descriptor read/64, error -71 [ 1803.985967][ T650] usb 2-1: Dual-Role OTG device on HNP port [ 1804.005946][ T650] usb 2-1: New USB device found, idVendor=2c42, idProduct=1636, bcdDevice=71.b7 [ 1804.014774][ T650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.022612][ T650] usb 2-1: Product: syz [ 1804.026627][ T650] usb 2-1: Manufacturer: Ц [ 1804.030908][ T650] usb 2-1: SerialNumber: syz [ 1804.055891][ T992] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1804.245840][T16710] usb 4-1: device descriptor read/64, error -71 [ 1804.376018][T16710] usb usb4-port1: attempt power cycle [ 1804.585856][ T8365] Bluetooth: hci1: command 0x1003 tx timeout [ 1804.592108][ T4123] Bluetooth: hci1: sending frame failed (-49) [ 1804.795851][T16710] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1804.995922][T16710] usb 4-1: device descriptor read/8, error -71 [ 1805.265893][T16710] usb 4-1: device descriptor read/8, error -71 [ 1805.580778][ T998] EXT4-fs warning (device sda1): ext4_resize_fs:1959: can't read last block, resize aborted [ 1805.653301][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.661729][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.669340][ T1000] device bridge_slave_0 entered promiscuous mode [ 1805.676819][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.684123][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.692323][ T1000] device bridge_slave_1 entered promiscuous mode [ 1805.728154][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.736479][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.737649][ T650] usb 2-1: USB disconnect, device number 20 [ 1805.743542][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.755862][T16710] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1805.756076][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.789128][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1805.797420][ T498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.804491][ T498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.816542][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1805.824665][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.831533][ T5656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.839457][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1805.847822][ T498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.854674][ T498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.876530][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1805.884360][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1805.904390][ T1000] device veth0_vlan entered promiscuous mode [ 1805.909311][ T24] audit: type=1400 audit(1723826199.359:10651): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[1447]" dev="pipefs" ino=1447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: bad allocate request allocated=0 size=18446744073709551095/18446744073709551096 (errno 9: Bad file descriptor) [ 1805.914766][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1805.962254][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1805.969883][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1805.978221][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1806.102832][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.109867][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.116002][T16710] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1806.117418][ T1007] device bridge_slave_0 entered promiscuous mode [ 1806.124069][T16710] usb 4-1: can't read configurations, error -71 [ 1806.131363][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.136778][T16710] usb usb4-port1: unable to enumerate USB device [ 1806.143423][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.156749][ T1007] device bridge_slave_1 entered promiscuous mode [ 1806.188984][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.195845][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1806.202905][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.209732][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1806.226701][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1806.234059][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.241232][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.256675][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1806.264580][ T650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.271353][ T650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1806.278595][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1806.287244][ T650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.294059][ T650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1806.304248][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1806.316666][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1806.329385][ T1007] device veth0_vlan entered promiscuous mode [ 1806.336087][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1806.344237][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1806.352019][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1806.359764][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1806.368165][T22268] device bridge_slave_1 left promiscuous mode [ 1806.374084][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.381387][T22268] device bridge_slave_0 left promiscuous mode [ 1806.387415][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.394864][T22268] device veth1_macvtap left promiscuous mode [ 1806.400957][T22268] device veth0_vlan left promiscuous mode [ 1806.482062][ T1007] device veth1_macvtap entered promiscuous mode [ 1806.488944][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1806.501975][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1806.510773][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1806.666245][ T498] Bluetooth: hci1: command 0x1001 tx timeout [ 1806.672256][ T40] Bluetooth: hci1: sending frame failed (-49) [ 1806.728357][T22268] tipc: Left network mode [ 1807.526835][T22268] device bridge_slave_1 left promiscuous mode [ 1807.532748][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.540020][T22268] device bridge_slave_0 left promiscuous mode [ 1807.546105][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.553544][T22268] device bridge_slave_1 left promiscuous mode [ 1807.559534][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.566578][T22268] device bridge_slave_0 left promiscuous mode [ 1807.572459][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.580043][T22268] device bridge_slave_1 left promiscuous mode [ 1807.586039][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.592983][T22268] device bridge_slave_0 left promiscuous mode [ 1807.598998][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.606406][T22268] device bridge_slave_1 left promiscuous mode [ 1807.612291][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.619489][T22268] device bridge_slave_0 left promiscuous mode [ 1807.625376][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.633204][T22268] device veth1_macvtap left promiscuous mode [ 1807.639054][T22268] device veth0_vlan left promiscuous mode [ 1807.644642][T22268] device veth0_vlan left promiscuous mode [ 1807.650202][T22268] device veth1_macvtap left promiscuous mode [ 1807.656076][T22268] device veth1_macvtap left promiscuous mode [ 1807.661853][T22268] device veth0_vlan left promiscuous mode [ 1808.745951][ T4795] Bluetooth: hci1: command 0x1009 tx timeout [ 1809.666394][T22268] device bridge_slave_1 left promiscuous mode [ 1809.672346][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.681884][T22268] device bridge_slave_0 left promiscuous mode [ 1809.692406][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.700348][T22268] device veth1_macvtap left promiscuous mode [ 1809.706203][T22268] device veth0_vlan left promiscuous mode [ 1813.866432][T22268] device bridge_slave_1 left promiscuous mode [ 1813.872350][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.879686][T22268] device bridge_slave_0 left promiscuous mode [ 1813.885587][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.893130][T22268] device veth1_macvtap left promiscuous mode [ 1813.898977][T22268] device veth0_vlan left promiscuous mode