last executing test programs: 1m58.183768278s ago: executing program 0 (id=8): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='msdos\x00', 0x102c88, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b00000000000800ec0003000000fab68c7a3743c33d1c1abbd5acb9f0db8b850b44678d108082075c67aafcf313599e008413bd8f12a4ffad4e9c4122455b9e3dd4625f647760ff77fd88164af092134912b9e5fe7fcdf3d593594a615a843883b65d38a88f093080fe74189d9cc2072ce956355e94f54f306cae6573fe822fa97d8df3c584b470b36cf05ca77910a655f25f936b1f"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) syz_open_dev$loop(0x0, 0x0, 0x187540) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1fd) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000240)=0x204) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uac2.usb0/c_ssize\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='2', 0x1) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$NL80211_CMD_DEL_PMK(r5, 0x0, 0x4040001) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) 1m54.590425615s ago: executing program 0 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120000000a0000000400000003"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r3, &(0x7f0000000380), &(0x7f0000000440)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001008010000000000000000000700000a54000000060a030400000000000000000a0000010900010073797a3100000000200004801c0001800a00010072656469720000000c00028008000340000000010900020073797a32000000000500074062000000140000001100010000000000000000000a00000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) fanotify_init(0x8, 0x8000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYBLOB="31030300"/18, @ANYRES32=r2], 0x24}}, 0x0) 1m51.666159682s ago: executing program 0 (id=16): syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000200)={0xe4}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) syz_usb_connect$uac3(0x1, 0x108, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="050f050010"], 0x4, [{0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x402}}, {0x0, 0x0}, {0x0, 0x0}]}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m48.306475056s ago: executing program 0 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x9a240, 0x0) r0 = open(&(0x7f0000000080)='./config\x00', 0x0, 0x42) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='1', 0x1) 1m47.976297978s ago: executing program 0 (id=23): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x80080) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) write(r1, &(0x7f0000000200)='1', 0x1) r4 = getpid() sched_setscheduler(r4, 0x3, &(0x7f0000000080)=0x3cf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x80000000000003) recvmmsg(r1, &(0x7f0000002380)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000340)=""/142, 0x8e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/127, 0x7f}, {&(0x7f0000001480)=""/191, 0xbf}, {&(0x7f0000001540)=""/4, 0x4}, {&(0x7f0000001580)=""/148, 0x94}], 0x6, &(0x7f00000016c0)=""/145, 0x91}, 0x2}, {{&(0x7f0000001780)=@pppoe, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001800)=""/138, 0x8a}], 0x1, &(0x7f0000001900)=""/224, 0xe0}, 0x5}, {{&(0x7f0000001a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001a80)=""/38, 0x26}, {&(0x7f0000001ac0)=""/198, 0xc6}, {&(0x7f0000001bc0)=""/4, 0x4}, {&(0x7f0000001c00)=""/53, 0x35}, {&(0x7f0000001c40)=""/238, 0xee}, {&(0x7f0000001d40)=""/63, 0x3f}, {&(0x7f0000001d80)=""/5, 0x5}, {&(0x7f0000001dc0)=""/194, 0xc2}, {&(0x7f0000001ec0)=""/240, 0xf0}, {&(0x7f00000021c0)=""/125, 0x7d}], 0xa, &(0x7f0000002300)=""/83, 0x53}, 0x2}], 0x3, 0x1, &(0x7f0000002440)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x39) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r8 = open$dir(&(0x7f0000000000)='./file1\x00', 0x303040, 0x94) fspick(r8, &(0x7f0000000140)='./file0/file1\x00', 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={'batadv0\x00', {0x2, 0x4e25, @local}}) 1m46.244254684s ago: executing program 0 (id=25): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0000102, 0x0, 0x9}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3, 0x7fc00}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x1ff, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0xe, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x3, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x3fc, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x6, 0x2ec74d53, 0xb, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xc, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x9, 0x6, 0xa, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x8, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x2, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5205, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x4, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x46e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x3, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0xffffffff, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x8000002, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x7fff}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x500}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0x40}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0xfffffffe, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x1c0000, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x80401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x404, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 1m30.9959075s ago: executing program 32 (id=25): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0000102, 0x0, 0x9}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3, 0x7fc00}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x1ff, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0xe, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x3, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x3fc, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x6, 0x2ec74d53, 0xb, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xc, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x9, 0x6, 0xa, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x8, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x2, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5205, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x4, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x46e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x3, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0xffffffff, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x8000002, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x7fff}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x500}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0x40}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0xfffffffe, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x1c0000, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x80401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x404, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 16.079658013s ago: executing program 4 (id=236): socket$netlink(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000001800), &(0x7f0000000540)=0x8b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) (async) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x18) r3 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41535900002000000010902270001010080fa0904000003ff000000070502020002"], 0x0) syz_usb_ep_read(r3, 0x2, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2110cc661668000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x8880}, 0x4000000) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) listen(0xffffffffffffffff, 0x10) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000400), 0x0, 0x400) socket(0x10, 0x2, 0x0) 7.898636804s ago: executing program 3 (id=255): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/uevent_helper', 0x242, 0x2b0) sendfile(r1, r1, 0x0, 0xa) write$char_usb(r0, 0x0, 0x56) 6.971648457s ago: executing program 4 (id=258): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, 0x0, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r6, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x800001, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r2}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000000)=0x2) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @broadcast, 'gre0\x00'}}, 0x1e) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x8}) 6.884800943s ago: executing program 5 (id=259): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) ioctl$KVM_TDX_FINALIZE_VM(r0, 0xc008aeba, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0x4, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb, 0x9}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.702719995s ago: executing program 1 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000a80)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f00000005c0)=""/103, 0x67}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000700)=""/16, 0x10}, {&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/206, 0xce}, {&(0x7f0000000980)=""/69, 0x45}], 0x8}, 0x40) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2888}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2888}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000300), 0x2, r5}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000300), 0x2, r5}, 0x38) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="903f937ee9ed7a889405419e7956c8871dbf2a09122778f781f357fa4de1fb8733ba562194026e8334a33f5e4385a7eb235de19014e5e981e5d534a57afa610892b19c9c6c4be1ce9a8e1ced11cc7ec7774417aee14836634cacabb183ff16556f167f861d4e9a5e9e300c1956267f85cbb4be65395830af900e5b913c0de7c5cce9b8cf225a64d879d30af2d4d24050b6509bce1762d40396ff0bba72a2153d0660e15007b1804e8f8b662c63fb20f10a736c2136e85ad4af221e51dee08af1b4362864bfa733e87a9dd82dfe76b847596b7c77b6e87c9d74384b2574ee9f991edcd00d51ccad702cd2ce530bb827866b73cbf53b4b2a73441b2a64fe4358ed") 6.171300329s ago: executing program 2 (id=262): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xcc, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0xb8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x2c004080}, 0x20040840) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000580)='7', 0x1) write$char_usb(r3, &(0x7f0000000bc0)="be", 0x1) syz_usb_disconnect(r2) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'nq\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/115, 0x73}, {&(0x7f0000000640)=""/169, 0xa9}], 0x2, &(0x7f0000000740)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000800)=""/38, 0x26}, {&(0x7f0000000880)=""/123, 0x7b}, {&(0x7f0000000900)=""/9, 0x9}], 0x3, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000a80)=""/210, 0xd2}, {&(0x7f0000000c00)=""/179, 0xb3}, {&(0x7f0000000cc0)=""/26, 0x1a}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000000e00)=""/76, 0x4c}, {&(0x7f0000000e80)=""/104, 0x68}, {&(0x7f0000000f00)=""/90, 0x5a}, {&(0x7f0000000f80)=""/18, 0x12}, {&(0x7f0000000fc0)=""/5, 0x5}], 0x9}}, {{&(0x7f00000010c0), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001140)=""/126, 0x7e}, {&(0x7f00000011c0)=""/2, 0x2}, {&(0x7f0000001200)=""/162, 0xa2}], 0x3, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x4, 0x2002, &(0x7f00000014c0)={0x0, 0x989680}) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0xffffffffffffffff, 0x20000) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e", 0x21) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cgroups\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000180)) 6.169838482s ago: executing program 5 (id=263): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffe, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 5.996482692s ago: executing program 5 (id=264): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) close_range(r8, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) 5.995508699s ago: executing program 4 (id=265): setns(0xffffffffffffffff, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x4, 0x1, 0xdf}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x22f1, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0xfffffffd, 0x260}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SEND_ZC={0x2f, 0x8, 0x4, r4, 0x0, 0x0, 0x8004, 0x0, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fchdir(r7) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xa880, 0x104) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 5.330708684s ago: executing program 3 (id=266): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 5.045452207s ago: executing program 5 (id=267): r0 = userfaultfd(0x80801) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0', 0x1) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000000c0), 0x80) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0xffffffffffffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r2], 0x298}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000180)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x29, 0x3, 0xe}, 0x2c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 4.455798351s ago: executing program 1 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b700009100f0ffff0bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 4.353098872s ago: executing program 5 (id=269): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x79, @mcast1, 0xe, 0x3}, 0x20) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000280)={0x40, 0x36, 0x5, "d0ed6d80fe"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58", 0x98}, {&(0x7f0000000600)="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", 0xe76}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}], 0x1, 0x40800) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000000040)={0x100000d, 0xc, 0x8}) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.743693171s ago: executing program 4 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000200)) splice(r2, 0x0, r4, 0x0, 0x800000000082, 0xf) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$VIDIOC_S_AUDIO(r5, 0x40345622, &(0x7f0000000040)={0x2, "66aaa5b992f5bbf81c25d7669a8f29af1a29553bf43bd9edaec16ca182675f05", 0x1, 0x1}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x24044080) 3.739091149s ago: executing program 3 (id=271): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4566, 0x4, 0x1, 0xd, 0xc, 0x19, 0x6}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x1, 0x80000, r0}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000140)={0xa3, 0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0100001000010000000000fcdbdf25fc000000000000000000000000000001fe80000000000000000000000000004e21000202000000620000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010101000000000000000000000000000000fe3200000000000000000000000000000000000000000000000000000006000000000000000100ffffffffffff080000000000000001000000000000000900000000000000fdffff7f0000000043050000000000000400000000000000ffffffffffffff7ffcffffffffffffffe4eb0000000000000200000000000000000000002cbd7008013500000200000050000000000000000c001c00", @ANYRES32=r9, @ANYBLOB="0100000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000040"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x1, r10}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000003040)) 3.556412857s ago: executing program 4 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x13}, 0x44) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000000c0)={0x0, 'erspan0\x00', {}, 0x1}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/205, 0xcd}], 0x1, &(0x7f0000000140)=""/19, 0x13}, 0x40000010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x44086}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f0000001480)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x40, 0x6, {{0x27, 0x4, 0x2, 0x1a, 0x9c, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0x7, 0x5d, [@multicast2]}, @end, @ssrr={0x89, 0x13, 0xf7, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010101]}, @lsrr={0x83, 0xb, 0xa4, [@empty, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x9d, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x6f4}, {@multicast2, 0x2}, {@rand_addr=0x64010100, 0x7f}, {@rand_addr=0x64010102, 0xe7}]}, @ssrr={0x89, 0x7, 0xe4, [@multicast1]}, @rr={0x7, 0xb, 0x5a, [@local, @multicast1]}, @ssrr={0x89, 0x1f, 0xa, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @private=0xa010100, @multicast1, @loopback]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x88}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x50}}, 0x0) 2.838617829s ago: executing program 2 (id=273): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20030000", @ANYRES16=r1, @ANYBLOB="010028bd7000f9dbdf252600000008000300", @ANYRES32=r2, @ANYBLOB="04003400"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) 2.837830805s ago: executing program 1 (id=274): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x2000) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.752721307s ago: executing program 3 (id=275): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, 0x0, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r6, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x800001, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r2}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000000)=0x2) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @broadcast, 'gre0\x00'}}, 0x1e) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x8}) 2.618673281s ago: executing program 2 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) 2.499187558s ago: executing program 4 (id=277): syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) setuid(0xee01) fchmod(r2, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="32ec0400230800003c0012800b00010069703667726500002c00028014000700ff00000000000000000000000000000114000600000000000000030000000000000000010800040005000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_setup(0x202, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}}, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x22, 0x0, [{0x40000001, 0x7, 0x1, 0x8, 0x2, 0x6, 0xffff8003}]}) set_mempolicy(0x2, &(0x7f00000001c0)=0x1, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x3d}}, 0x40) r8 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r9 = fsmount(r8, 0x0, 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) 2.473637674s ago: executing program 1 (id=278): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x800001, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r2}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000000)=0x2) connect$pppoe(r1, 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x8}) 2.188403659s ago: executing program 2 (id=279): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000dc0)=@newqdisc={0x154, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}]}}]}, 0x154}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000049f000/0x3000)=nil, 0x3000, 0x2000, 0xd3c28bec76034d2a, &(0x7f0000452000/0x2000)=nil) gettid() r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(r4) splice(r4, &(0x7f0000000180)=0x5, r4, &(0x7f00000001c0), 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x3, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=[0xfffffffffffffffb, 0x8], 0x0, 0x8003, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r3, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, 0x0, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r5, 0xfffff000) 2.147428639s ago: executing program 3 (id=280): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4566, 0x4, 0x1, 0xd, 0xc, 0x19, 0x6}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x1, 0x80000, r0}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000140)={0xa3, 0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0100001000010000000000fcdbdf25fc000000000000000000000000000001fe80000000000000000000000000004e21000202000000620000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010101000000000000000000000000000000fe3200000000000000000000000000000000000000000000000000000006000000000000000100ffffffffffff080000000000000001000000000000000900000000000000fdffff7f0000000043050000000000000400000000000000ffffffffffffff7ffcffffffffffffffe4eb0000000000000200000000000000000000002cbd7008013500000200000050000000000000000c001c00", @ANYRES32=r9, @ANYBLOB="0100000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000040"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x1, r10}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000003040)) 1.516407716s ago: executing program 2 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x83) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x408, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.435346557s ago: executing program 1 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000200)) splice(r2, 0x0, r4, 0x0, 0x800000000082, 0xf) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$VIDIOC_S_AUDIO(r5, 0x40345622, &(0x7f0000000040)={0x2, "66aaa5b992f5bbf81c25d7669a8f29af1a29553bf43bd9edaec16ca182675f05", 0x1, 0x1}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x24044080) 226.425556ms ago: executing program 2 (id=283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) close_range(r8, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) 178.620429ms ago: executing program 3 (id=284): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005000000000000008000000018000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000001850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x50}}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x1, 0x0, {0x0, 0x1, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0xc050) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x71}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x14, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0x8, 0x37, 0xfff7}}, @mesh_id={0x72, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48140}, 0x44000005) write(r5, &(0x7f0000000400)='20000000 20080000 500 32000\x00', 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x54, r8, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2d, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @random="8bf4d20785ee", {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x2}, {0x1, 0x1}, {0x60, 0x1}]}, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 115.28037ms ago: executing program 5 (id=285): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000180)=@other={0x20300002000006a5, &(0x7f0000000280)}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000480)={'veth1\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r7, &(0x7f00000000c0)=0x7, 0x12) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) 0s ago: executing program 1 (id=286): read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0xa, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000013006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080002000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sendfile(r6, r7, 0x0, 0x201f00) kernel console output (not intermixed with test programs): forwarding state [ 73.993310][ T184] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.993442][ T184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.046033][ T5599] Bluetooth: hci1: command tx timeout [ 74.176762][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.399981][ T5603] veth0_vlan: entered promiscuous mode [ 74.415045][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.442751][ T5603] veth1_vlan: entered promiscuous mode [ 74.589023][ T5603] veth0_macvtap: entered promiscuous mode [ 74.599516][ T5598] veth0_vlan: entered promiscuous mode [ 74.604603][ T5603] veth1_macvtap: entered promiscuous mode [ 74.665313][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.673311][ T5598] veth1_vlan: entered promiscuous mode [ 74.711459][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.879789][ T5598] veth0_macvtap: entered promiscuous mode [ 74.913959][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.914483][ T5598] veth1_macvtap: entered promiscuous mode [ 74.916080][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.916189][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.916217][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.916249][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.002196][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.049720][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.055016][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.068042][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.124516][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.136102][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.136378][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.189869][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.189927][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.218107][ T143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.236524][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.245640][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.246667][ T31] audit: type=1400 audit(1788732501.139:151): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/root/syzkaller.5Uuerm/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.248186][ T31] audit: type=1400 audit(1788732501.149:152): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.254005][ T31] audit: type=1400 audit(1788732501.149:153): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/root/syzkaller.5Uuerm/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.259221][ T31] audit: type=1400 audit(1788732501.159:154): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.272166][ T31] audit: type=1400 audit(1788732501.169:155): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/root/syzkaller.5Uuerm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.278204][ T31] audit: type=1400 audit(1788732501.179:156): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/root/syzkaller.5Uuerm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.291987][ T31] audit: type=1400 audit(1788732501.189:157): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.304639][ T31] audit: type=1400 audit(1788732501.199:158): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.329958][ T31] audit: type=1400 audit(1788732501.229:159): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="gadgetfs" ino=7419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.366017][ T31] audit: type=1400 audit(1788732501.259:160): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.543077][ T5603] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.560004][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.560026][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.653971][ T5595] veth0_vlan: entered promiscuous mode [ 75.662021][ T5596] veth0_vlan: entered promiscuous mode [ 75.672595][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.672632][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.715029][ T5595] veth1_vlan: entered promiscuous mode [ 75.885588][ T5792] kAFS: No cell specified [ 75.965069][ T5596] veth1_vlan: entered promiscuous mode [ 75.976670][ T5599] Bluetooth: hci2: command tx timeout [ 75.977584][ T5599] Bluetooth: hci4: command tx timeout [ 75.980542][ T5599] Bluetooth: hci3: command tx timeout [ 75.980650][ T5599] Bluetooth: hci0: command tx timeout [ 76.127461][ T52] Bluetooth: hci1: command tx timeout [ 76.357078][ T5597] veth0_vlan: entered promiscuous mode [ 76.681598][ T5597] veth1_vlan: entered promiscuous mode [ 77.470162][ T5596] veth0_macvtap: entered promiscuous mode [ 77.557891][ T5595] veth0_macvtap: entered promiscuous mode [ 77.710787][ T5596] veth1_macvtap: entered promiscuous mode [ 77.766175][ T5595] veth1_macvtap: entered promiscuous mode [ 77.863552][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.874667][ T5597] veth0_macvtap: entered promiscuous mode [ 77.889788][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.919725][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.939593][ T5597] veth1_macvtap: entered promiscuous mode [ 77.965167][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.024037][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.046880][ T52] Bluetooth: hci0: command tx timeout [ 78.047323][ T52] Bluetooth: hci3: command tx timeout [ 78.047365][ T52] Bluetooth: hci4: command tx timeout [ 78.047390][ T52] Bluetooth: hci2: command tx timeout [ 78.098653][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.137917][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.148786][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.159633][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.171222][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.181399][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.206311][ T5599] Bluetooth: hci1: command tx timeout [ 78.261070][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.261114][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.502542][ T5801] ima: Unable to open file: /e (-2) [ 78.747558][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.756201][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.756240][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.756267][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.756294][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.756321][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.756348][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.828043][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.828090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.870672][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.870717][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.973281][ T5797] ima: policy update failed [ 78.991812][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.991852][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.609112][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.609197][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.713551][ T5811] kAFS: No cell specified [ 80.514477][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.514529][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.018263][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 81.026345][ T31] audit: type=1400 audit(1788732506.919:190): avc: denied { create } for pid=5807 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.207806][ T31] audit: type=1400 audit(1788732507.109:191): avc: denied { ioctl } for pid=5807 comm="syz.1.2" path="socket:[9232]" dev="sockfs" ino=9232 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.472004][ T31] audit: type=1400 audit(1788732507.329:192): avc: denied { create } for pid=5807 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.667048][ T31] audit: type=1400 audit(1788732507.559:193): avc: denied { create } for pid=5807 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.827352][ T31] audit: type=1400 audit(1788732507.699:194): avc: denied { getopt } for pid=5807 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.827575][ T31] audit: type=1400 audit(1788732507.699:195): avc: denied { connect } for pid=5807 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.827713][ T31] audit: type=1400 audit(1788732507.699:196): avc: denied { name_connect } for pid=5807 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 81.952970][ T5823] jffs2: notice: (5823) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.029689][ T31] audit: type=1400 audit(1788732507.929:197): avc: denied { create } for pid=5822 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.081345][ T31] audit: type=1400 audit(1788732507.969:199): avc: denied { setopt } for pid=5807 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.094292][ T31] audit: type=1400 audit(1788732507.959:198): avc: denied { mount } for pid=5822 comm="syz.2.3" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.898314][ T983] cfg80211: failed to load regulatory.db [ 83.036045][ T5828] kAFS: No cell specified [ 83.586216][ T5703] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.594393][ T5834] jffs2: notice: (5834) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.910943][ T5703] usb 4-1: Using ep0 maxpacket: 16 [ 84.941616][ T5835] fuse: Bad value for 'fd' [ 84.969965][ T5703] usb 4-1: device descriptor read/all, error -71 [ 86.052734][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 86.053520][ T31] audit: type=1400 audit(2000000000.660:217): avc: denied { open } for pid=5842 comm="syz.3.13" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 86.107024][ T5854] netlink: 5 bytes leftover after parsing attributes in process `syz.1.15'. [ 86.150710][ T5854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.232940][ T5689] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.340216][ T5858] netlink: 'syz.1.15': attribute type 5 has an invalid length. [ 86.410369][ T5689] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 86.496807][ T5689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.573101][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.573186][ T5689] usb 1-1: Product: syz [ 86.574289][ T5689] usb 1-1: Manufacturer: syz [ 86.574343][ T5689] usb 1-1: SerialNumber: syz [ 86.882225][ T5689] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 86.933056][ T31] audit: type=1400 audit(2000000001.650:218): avc: denied { execute } for pid=5861 comm="syz.2.17" name="file1" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.933743][ T5862] process 'syz.2.17' launched './file1' with NULL argv: empty string added [ 86.935007][ T31] audit: type=1400 audit(2000000001.650:219): avc: denied { mount } for pid=5860 comm="syz.1.18" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 86.935329][ T31] audit: type=1400 audit(2000000001.650:220): avc: denied { execute_no_trans } for pid=5861 comm="syz.2.17" path="/2/file1" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.964104][ T5845] autofs4:pid:5845:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 86.964184][ T31] audit: type=1400 audit(2000000001.680:221): avc: denied { ioctl } for pid=5842 comm="syz.3.13" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 86.978125][ T31] audit: type=1400 audit(2000000001.700:222): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 87.113002][ T5843] syzkaller0: entered promiscuous mode [ 87.113036][ T5843] syzkaller0: entered allmulticast mode [ 87.128466][ T31] audit: type=1400 audit(2000000001.850:223): avc: denied { mount } for pid=5860 comm="syz.1.18" name="/" dev="ramfs" ino=9329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 87.188993][ T31] audit: type=1400 audit(2000000001.900:224): avc: denied { watch watch_reads } for pid=5860 comm="syz.1.18" path="/" dev="ramfs" ino=9329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 87.230223][ T31] audit: type=1400 audit(2000000001.950:225): avc: denied { read } for pid=5865 comm="syz.2.20" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.230325][ T31] audit: type=1400 audit(2000000001.950:226): avc: denied { open } for pid=5865 comm="syz.2.20" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.308886][ T5864] Zero length message leads to an empty skb [ 87.397136][ T5689] gspca_mr97310a: reg write [21] error -110 [ 87.397658][ T5689] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -110 [ 87.602020][ T5850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.612091][ T5850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.335086][ T5703] usb 1-1: USB disconnect, device number 2 [ 89.159512][ T5886] FAULT_INJECTION: forcing a failure. [ 89.159512][ T5886] name failslab, interval 1, probability 0, space 0, times 1 [ 89.159612][ T5886] CPU: 1 UID: 0 PID: 5886 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(full) [ 89.159639][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 89.159651][ T5886] Call Trace: [ 89.159663][ T5886] [ 89.159674][ T5886] dump_stack_lvl+0x100/0x190 [ 89.159724][ T5886] should_fail_ex.cold+0x5/0xa [ 89.159756][ T5886] should_failslab+0xc2/0x120 [ 89.159785][ T5886] __kmalloc_noprof+0xfc/0x840 [ 89.159805][ T5886] ? rcu_is_watching+0x13/0xc0 [ 89.159837][ T5886] ? tomoyo_realpath_from_path+0xb6/0x690 [ 89.159866][ T5886] tomoyo_realpath_from_path+0xb6/0x690 [ 89.159894][ T5886] tomoyo_path_number_perm+0x23c/0x580 [ 89.159922][ T5886] ? tomoyo_path_number_perm+0x22e/0x580 [ 89.159949][ T5886] ? __print_lock_name+0x60/0x80 [ 89.159984][ T5886] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 89.160021][ T5886] ? do_raw_spin_lock+0x128/0x260 [ 89.160045][ T5886] ? find_held_lock+0x2b/0x80 [ 89.160086][ T5886] ? find_held_lock+0x2b/0x80 [ 89.160111][ T5886] ? current_check_access_path+0x262/0x420 [ 89.160143][ T5886] ? __pfx_current_check_access_path+0x10/0x10 [ 89.160173][ T5886] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.160202][ T5886] ? simple_lookup+0xfc/0x1d0 [ 89.160240][ T5886] tomoyo_path_mknod+0x164/0x190 [ 89.160269][ T5886] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 89.160298][ T5886] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.160335][ T5886] security_path_mknod+0x161/0x300 [ 89.160363][ T5886] filename_mknodat+0x241/0x7f0 [ 89.160392][ T5886] ? __pfx_filename_mknodat+0x10/0x10 [ 89.160416][ T5886] ? strncpy_from_user+0x19d/0x2d0 [ 89.160442][ T5886] ? do_getname+0x191/0x390 [ 89.160473][ T5886] __x64_sys_mknodat+0xb5/0xf0 [ 89.160498][ T5886] do_syscall_64+0x123/0x790 [ 89.160527][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.160547][ T5886] RIP: 0033:0x7f7ddc19e159 [ 89.160566][ T5886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.160583][ T5886] RSP: 002b:00007f7ddcfc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 89.160609][ T5886] RAX: ffffffffffffffda RBX: 00007f7ddc425fa0 RCX: 00007f7ddc19e159 [ 89.160624][ T5886] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 89.160637][ T5886] RBP: 00007f7ddc235024 R08: 0000000000000000 R09: 0000000000000000 [ 89.160651][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.160664][ T5886] R13: 00007f7ddc426038 R14: 00007f7ddc425fa0 R15: 00007ffd815ce0c8 [ 89.160694][ T5886] [ 89.165390][ T5886] ERROR: Out of memory at tomoyo_realpath_from_path. [ 91.740103][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 91.740144][ T31] audit: type=1400 audit(2000000006.460:245): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 92.003625][ T31] audit: type=1400 audit(2000000006.720:246): avc: denied { read } for pid=5896 comm="syz.1.26" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 92.003785][ T31] audit: type=1400 audit(2000000006.720:247): avc: denied { open } for pid=5896 comm="syz.1.26" path="/dev/input/mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 92.060059][ T31] audit: type=1400 audit(2000000006.780:248): avc: denied { write } for pid=5896 comm="syz.1.26" name="event3" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.060121][ T31] audit: type=1400 audit(2000000006.780:249): avc: denied { open } for pid=5896 comm="syz.1.26" path="/dev/input/event3" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.417452][ T5689] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.586088][ T5689] usb 2-1: Using ep0 maxpacket: 32 [ 92.588387][ T5689] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 92.589271][ T5689] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 92.589294][ T5689] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 92.589312][ T5689] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 92.589379][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.589403][ T5689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.589425][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.589443][ T5689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 92.589462][ T5689] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 92.589496][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.618417][ T5689] usb 2-1: config 0 descriptor?? [ 92.845625][ T5689] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 93.123605][ T31] audit: type=1400 audit(2000000007.830:250): avc: denied { mount } for pid=5896 comm="syz.1.26" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 93.146649][ T31] audit: type=1400 audit(2000000007.870:251): avc: denied { search } for pid=5896 comm="syz.1.26" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.146834][ T31] audit: type=1400 audit(2000000007.870:252): avc: denied { search } for pid=5896 comm="syz.1.26" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.146953][ T31] audit: type=1400 audit(2000000007.870:253): avc: denied { search } for pid=5896 comm="syz.1.26" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.147135][ T31] audit: type=1400 audit(2000000007.870:254): avc: denied { search } for pid=5896 comm="syz.1.26" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.223166][ T56] IPVS: starting estimator thread 0... [ 94.316611][ T5904] IPVS: using max 48 ests per chain, 115200 per kthread [ 94.576699][ T5906] binder: 5905:5906 ioctl 4018620d 0 returned -22 [ 94.702296][ T5906] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5906 comm=syz.4.29 [ 95.114627][ T5703] usb 2-1: USB disconnect, device number 2 [ 95.142812][ T5703] usblp0: removed [ 98.570439][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 98.576710][ T31] audit: type=1400 audit(2000000013.290:268): avc: denied { create } for pid=5941 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.603417][ T31] audit: type=1400 audit(2000000013.320:269): avc: denied { create } for pid=5941 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.660546][ T31] audit: type=1400 audit(2000000013.380:270): avc: denied { prog_run } for pid=5941 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 98.844263][ T31] audit: type=1400 audit(2000000013.560:271): avc: denied { name_bind } for pid=5937 comm="syz.2.37" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 98.844653][ T31] audit: type=1400 audit(2000000013.560:272): avc: denied { node_bind } for pid=5937 comm="syz.2.37" saddr=224.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 99.018270][ T31] audit: type=1400 audit(2000000013.740:273): avc: denied { bind } for pid=5950 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.054783][ T31] audit: type=1400 audit(2000000013.770:274): avc: denied { map } for pid=5950 comm="syz.2.39" path="socket:[9480]" dev="sockfs" ino=9480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.079798][ T31] audit: type=1400 audit(2000000013.770:275): avc: denied { read write } for pid=5950 comm="syz.2.39" path="socket:[9480]" dev="sockfs" ino=9480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.314478][ T5956] atomic_op ffff8880292089e0 conn xmit_atomic 0000000000000000 [ 99.332569][ T31] audit: type=1400 audit(2000000014.020:276): avc: denied { bind } for pid=5952 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.352157][ T31] audit: type=1400 audit(2000000014.030:277): avc: denied { write } for pid=5952 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.560074][ T5954] comedi comedi3: pcl711: I/O base address not correctly aligned [ 99.743956][ T5959] FAULT_INJECTION: forcing a failure. [ 99.743956][ T5959] name failslab, interval 1, probability 0, space 0, times 0 [ 99.744027][ T5959] CPU: 1 UID: 0 PID: 5959 Comm: syz.1.40 Not tainted syzkaller #0 PREEMPT(full) [ 99.744051][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 99.744061][ T5959] Call Trace: [ 99.744068][ T5959] [ 99.744074][ T5959] dump_stack_lvl+0x100/0x190 [ 99.744121][ T5959] should_fail_ex.cold+0x5/0xa [ 99.744147][ T5959] should_failslab+0xc2/0x120 [ 99.744169][ T5959] __kmalloc_cache_noprof+0x91/0x6d0 [ 99.744195][ T5959] ? ip_vs_dh_init_svc+0x3f/0xb0 [ 99.744227][ T5959] ? __pfx_ip_vs_dh_init_svc+0x10/0x10 [ 99.744256][ T5959] ip_vs_dh_init_svc+0x3f/0xb0 [ 99.744285][ T5959] ip_vs_bind_scheduler+0x45/0xb0 [ 99.744315][ T5959] ip_vs_add_service+0x9cb/0x2240 [ 99.744345][ T5959] ? __ip_vs_service_find+0x4d0/0x9c0 [ 99.744388][ T5959] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 99.744408][ T5959] do_ip_vs_set_ctl+0xb86/0xc90 [ 99.744432][ T5959] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 99.744455][ T5959] ? rcu_is_watching+0x13/0xc0 [ 99.744487][ T5959] ? find_held_lock+0x2b/0x80 [ 99.744513][ T5959] ? nf_sockopt_find.isra.0+0x222/0x290 [ 99.744536][ T5959] ? nf_sockopt_find.isra.0+0x222/0x290 [ 99.744566][ T5959] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.744601][ T5959] ? nf_setsockopt+0x8d/0xf0 [ 99.744620][ T5959] nf_setsockopt+0x8d/0xf0 [ 99.744641][ T5959] ip_setsockopt+0xcb/0xf0 [ 99.744670][ T5959] udp_setsockopt+0x64/0xb0 [ 99.744694][ T5959] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 99.744721][ T5959] do_sock_setsockopt+0xf3/0x1d0 [ 99.744744][ T5959] __sys_setsockopt+0x195/0x220 [ 99.744765][ T5959] __x64_sys_setsockopt+0xbd/0x160 [ 99.744779][ T5959] ? do_syscall_64+0xae/0x790 [ 99.744797][ T5959] ? lockdep_hardirqs_on+0x7d/0x110 [ 99.744816][ T5959] do_syscall_64+0x123/0x790 [ 99.744837][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.744853][ T5959] RIP: 0033:0x7f659c39e159 [ 99.744869][ T5959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.744884][ T5959] RSP: 002b:00007f659d1e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 99.744901][ T5959] RAX: ffffffffffffffda RBX: 00007f659c625fa0 RCX: 00007f659c39e159 [ 99.744912][ T5959] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 000000000000000b [ 99.744922][ T5959] RBP: 00007f659c435024 R08: 000000000000002c R09: 0000000000000000 [ 99.744932][ T5959] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 99.744941][ T5959] R13: 00007f659c626038 R14: 00007f659c625fa0 R15: 00007fff1a02b858 [ 99.744963][ T5959] [ 99.754036][ T5959] IPVS: ip_vs_bind_scheduler(): init error [ 100.206003][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.459700][ T25] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice= 5.18 [ 100.528411][ T25] usb 4-1: config 4 has an invalid interface number: 27 but max is 0 [ 100.541432][ T25] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 100.541460][ T25] usb 4-1: config 4 has no interface number 0 [ 100.541493][ T25] usb 4-1: too many endpoints for config 4 interface 27 altsetting 52: 244, using maximum allowed: 30 [ 100.541524][ T25] usb 4-1: config 4 interface 27 altsetting 52 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 100.541551][ T25] usb 4-1: config 4 interface 27 has no altsetting 0 [ 100.541581][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.934644][ T25] usb 4-1: string descriptor 0 read error: -71 [ 100.956764][ T25] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 101.969167][ T25] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 101.969211][ T25] stv0680 4-1:4.27: STV(e): camera ping failed!! [ 101.979137][ T25] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 101.979169][ T25] stv0680 4-1:4.27: last error: 0, command = 0x0 [ 102.006616][ T25] usb 4-1: USB disconnect, device number 4 [ 102.248552][ T5978] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 102.248851][ T5978] block device autoloading is deprecated and will be removed. [ 102.794393][ T5993] FAULT_INJECTION: forcing a failure. [ 102.794393][ T5993] name failslab, interval 1, probability 0, space 0, times 0 [ 102.794436][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT(full) [ 102.794458][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 102.794469][ T5993] Call Trace: [ 102.794476][ T5993] [ 102.794482][ T5993] dump_stack_lvl+0x100/0x190 [ 102.794518][ T5993] should_fail_ex.cold+0x5/0xa [ 102.794547][ T5993] should_failslab+0xc2/0x120 [ 102.794568][ T5993] __kmalloc_cache_noprof+0x91/0x6d0 [ 102.794594][ T5993] ? ip_vs_dh_init_svc+0x3f/0xb0 [ 102.794622][ T5993] ? __pfx_ip_vs_dh_init_svc+0x10/0x10 [ 102.794655][ T5993] ip_vs_dh_init_svc+0x3f/0xb0 [ 102.794683][ T5993] ip_vs_bind_scheduler+0x45/0xb0 [ 102.794711][ T5993] ip_vs_add_service+0x9cb/0x2240 [ 102.794740][ T5993] ? __ip_vs_service_find+0x4d0/0x9c0 [ 102.794770][ T5993] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 102.794794][ T5993] do_ip_vs_set_ctl+0xb86/0xc90 [ 102.794821][ T5993] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 102.794846][ T5993] ? rcu_is_watching+0x13/0xc0 [ 102.794885][ T5993] ? find_held_lock+0x2b/0x80 [ 102.794911][ T5993] ? nf_sockopt_find.isra.0+0x222/0x290 [ 102.794936][ T5993] ? nf_sockopt_find.isra.0+0x222/0x290 [ 102.794966][ T5993] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.795004][ T5993] ? nf_setsockopt+0x8d/0xf0 [ 102.795019][ T5993] nf_setsockopt+0x8d/0xf0 [ 102.795038][ T5993] ip_setsockopt+0xcb/0xf0 [ 102.795062][ T5993] udp_setsockopt+0x64/0xb0 [ 102.795081][ T5993] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 102.795104][ T5993] do_sock_setsockopt+0xf3/0x1d0 [ 102.795127][ T5993] __sys_setsockopt+0x195/0x220 [ 102.795147][ T5993] __x64_sys_setsockopt+0xbd/0x160 [ 102.795162][ T5993] ? do_syscall_64+0xae/0x790 [ 102.795181][ T5993] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.795199][ T5993] do_syscall_64+0x123/0x790 [ 102.795220][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.795238][ T5993] RIP: 0033:0x7f554979e159 [ 102.795253][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.795268][ T5993] RSP: 002b:00007f554a6c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.795285][ T5993] RAX: ffffffffffffffda RBX: 00007f5549a25fa0 RCX: 00007f554979e159 [ 102.795296][ T5993] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 000000000000000b [ 102.795305][ T5993] RBP: 00007f5549835024 R08: 000000000000002c R09: 0000000000000000 [ 102.795315][ T5993] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 102.795325][ T5993] R13: 00007f5549a26038 R14: 00007f5549a25fa0 R15: 00007fff98f89ca8 [ 102.795349][ T5993] [ 102.795391][ T5993] IPVS: ip_vs_bind_scheduler(): init error [ 103.146711][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.239009][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.565895][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.568050][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 104.568068][ T31] audit: type=1400 audit(2000000018.870:305): avc: denied { read write } for pid=6009 comm="syz.2.57" name="userio" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.568110][ T31] audit: type=1400 audit(2000000018.870:306): avc: denied { open } for pid=6009 comm="syz.2.57" path="/dev/userio" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.844058][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.844268][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.077569][ T31] audit: type=1400 audit(2000000019.800:307): avc: denied { name_bind } for pid=6014 comm="syz.2.58" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 105.100841][ T31] audit: type=1400 audit(2000000019.820:308): avc: denied { connect } for pid=6014 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.100891][ T31] audit: type=1400 audit(2000000019.820:309): avc: denied { write } for pid=6014 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.102586][ T6005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6005 comm=syz.1.55 [ 105.140640][ T6006] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6006 comm=syz.1.55 [ 105.141860][ T6005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6005 comm=syz.1.55 [ 105.702126][ T31] audit: type=1400 audit(2000000020.420:310): avc: denied { ioctl } for pid=6024 comm="syz.4.60" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.771657][ T31] audit: type=1400 audit(2000000020.490:311): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 105.868983][ T31] audit: type=1400 audit(2000000020.590:312): avc: denied { setopt } for pid=6024 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.902850][ T31] audit: type=1400 audit(2000000020.620:313): avc: denied { read } for pid=6024 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.941698][ T31] audit: type=1400 audit(2000000020.660:314): avc: denied { ioctl } for pid=6032 comm="syz.3.62" path="socket:[9091]" dev="sockfs" ino=9091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.078587][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 106.078628][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.081771][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.118506][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.118561][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.715420][ T6042] netlink: 56 bytes leftover after parsing attributes in process `syz.1.64'. [ 107.322540][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.337241][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.352120][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 107.361962][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.371579][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.492047][ T52] Bluetooth: hci5: command tx timeout [ 111.204382][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.178109][ T52] Bluetooth: hci5: command tx timeout [ 113.149312][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 113.149358][ T31] audit: type=1400 audit(2000000027.850:318): avc: denied { ioctl } for pid=6086 comm="syz.1.72" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.327028][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.396075][ T5787] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.408365][ T31] audit: type=1400 audit(2000000028.130:319): avc: denied { create } for pid=6079 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.409804][ T31] audit: type=1400 audit(2000000028.130:320): avc: denied { bind } for pid=6079 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.411414][ T31] audit: type=1400 audit(2000000028.130:321): avc: denied { setopt } for pid=6079 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.412926][ T31] audit: type=1400 audit(2000000028.130:322): avc: denied { accept } for pid=6079 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.414279][ T31] audit: type=1400 audit(2000000028.130:323): avc: denied { read } for pid=6079 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.526047][ T31] audit: type=1400 audit(2000000028.240:324): avc: denied { write } for pid=6079 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.668817][ T5787] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 113.684069][ T5787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.713543][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.713637][ T5787] usb 2-1: Product: syz [ 113.728677][ T5787] usb 2-1: Manufacturer: syz [ 113.734796][ T5787] usb 2-1: SerialNumber: syz [ 114.206047][ T52] Bluetooth: hci5: command tx timeout [ 114.389988][ T5787] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 114.513312][ T6092] jffs2: notice: (6092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 114.562940][ T31] audit: type=1400 audit(2000000029.280:325): avc: denied { write } for pid=6091 comm="syz.3.74" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.764087][ T31] audit: type=1400 audit(2000000029.420:326): avc: denied { add_name } for pid=6091 comm="syz.3.74" name="blkio.bfq.group_wait_time" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.822471][ T31] audit: type=1400 audit(2000000029.540:327): avc: denied { create } for pid=6091 comm="syz.3.74" name="blkio.bfq.group_wait_time" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 114.924846][ T5787] gspca_mr97310a: reg write [21] error -110 [ 114.938079][ T5787] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -110 [ 116.041868][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.078162][ T6104] FAULT_INJECTION: forcing a failure. [ 116.078162][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 116.078218][ T6104] CPU: 0 UID: 0 PID: 6104 Comm: syz.3.75 Not tainted syzkaller #0 PREEMPT(full) [ 116.078243][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 116.078268][ T6104] Call Trace: [ 116.078275][ T6104] [ 116.078283][ T6104] dump_stack_lvl+0x100/0x190 [ 116.078321][ T6104] should_fail_ex.cold+0x5/0xa [ 116.078351][ T6104] should_failslab+0xc2/0x120 [ 116.078374][ T6104] __kmalloc_cache_noprof+0x91/0x6d0 [ 116.078399][ T6104] ? bus_add_driver+0x92/0x5b0 [ 116.078435][ T6104] bus_add_driver+0x92/0x5b0 [ 116.078461][ T6104] driver_register+0x1e2/0x360 [ 116.078479][ T6104] ? rcu_is_watching+0x13/0xc0 [ 116.078505][ T6104] usb_gadget_register_driver_owner+0x132/0x210 [ 116.078539][ T6104] raw_ioctl+0x1a85/0x2b80 [ 116.078570][ T6104] ? __pfx_raw_ioctl+0x10/0x10 [ 116.078592][ T6104] ? selinux_file_ioctl+0x13b/0x290 [ 116.078609][ T6104] ? selinux_file_ioctl+0xb6/0x290 [ 116.078625][ T6104] ? __pfx_raw_ioctl+0x10/0x10 [ 116.078649][ T6104] __x64_sys_ioctl+0x18e/0x210 [ 116.078670][ T6104] do_syscall_64+0x123/0x790 [ 116.078693][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.078710][ T6104] RIP: 0033:0x7f554979ddeb [ 116.078724][ T6104] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 116.078742][ T6104] RSP: 002b:00007f554a6c4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.078760][ T6104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f554979ddeb [ 116.078770][ T6104] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 116.078780][ T6104] RBP: 00007f554a6c5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 116.078790][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.078800][ T6104] R13: 00002000000002c0 R14: 0000000000000000 R15: 0000000000000000 [ 116.078824][ T6104] [ 116.078832][ T6104] UDC core: USB Raw Gadget: driver registration failed: -12 [ 116.078846][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 116.084333][ T6104] binder: 6103:6104 ioctl c0306201 200000000080 returned -14 [ 116.286956][ T52] Bluetooth: hci5: command tx timeout [ 116.417843][ T5703] usb 2-1: USB disconnect, device number 3 [ 116.452595][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.990553][ T42] bridge_slave_1: left allmulticast mode [ 117.001114][ T42] bridge_slave_1: left promiscuous mode [ 117.002797][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.088908][ T42] bridge_slave_0: left allmulticast mode [ 117.088970][ T42] bridge_slave_0: left promiscuous mode [ 117.092080][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.757001][ T6129] jffs2: notice: (6129) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 118.800025][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 118.800066][ T31] audit: type=1400 audit(2000000033.520:331): avc: denied { write } for pid=6128 comm="syz.1.80" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.850871][ T31] audit: type=1400 audit(2000000033.570:332): avc: denied { write } for pid=6128 comm="syz.1.80" name="blkio.bfq.group_wait_time" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.875096][ T31] audit: type=1400 audit(2000000033.590:333): avc: denied { map } for pid=6132 comm="syz.4.81" path="socket:[9851]" dev="sockfs" ino=9851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 119.053271][ T6139] syz.2.82 uses obsolete (PF_INET,SOCK_PACKET) [ 119.063026][ T31] audit: type=1400 audit(2000000033.780:334): avc: denied { setopt } for pid=6136 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.085606][ T31] audit: type=1400 audit(2000000033.800:335): avc: denied { connect } for pid=6136 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.137194][ T6140] affs: No valid root block on device nullb0 [ 119.225933][ T31] audit: type=1400 audit(2000000033.910:336): avc: denied { bind } for pid=6114 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.225993][ T31] audit: type=1400 audit(2000000033.920:337): avc: denied { listen } for pid=6114 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.226042][ T31] audit: type=1400 audit(2000000033.930:338): avc: denied { accept } for pid=6114 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.226080][ T31] audit: type=1400 audit(2000000033.940:339): avc: denied { write } for pid=6116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.969603][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.998156][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.060482][ T42] bond0 (unregistering): Released all slaves [ 120.075863][ T31] audit: type=1400 audit(2000000034.790:340): avc: denied { write } for pid=6158 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.596384][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 120.618637][ T6167] FAULT_INJECTION: forcing a failure. [ 120.618637][ T6167] name failslab, interval 1, probability 0, space 0, times 0 [ 120.633082][ T6167] CPU: 0 UID: 0 PID: 6167 Comm: syz.3.86 Not tainted syzkaller #0 PREEMPT(full) [ 120.633117][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 120.633130][ T6167] Call Trace: [ 120.633138][ T6167] [ 120.633147][ T6167] dump_stack_lvl+0x100/0x190 [ 120.633192][ T6167] should_fail_ex.cold+0x5/0xa [ 120.633223][ T6167] should_failslab+0xc2/0x120 [ 120.633248][ T6167] __kmalloc_cache_noprof+0x91/0x6d0 [ 120.633280][ T6167] ? ip_vs_dh_init_svc+0x3f/0xb0 [ 120.633318][ T6167] ? __pfx_ip_vs_dh_init_svc+0x10/0x10 [ 120.633348][ T6167] ip_vs_dh_init_svc+0x3f/0xb0 [ 120.633381][ T6167] ip_vs_bind_scheduler+0x45/0xb0 [ 120.633413][ T6167] ip_vs_add_service+0x9cb/0x2240 [ 120.633447][ T6167] ? __ip_vs_service_find+0x4d0/0x9c0 [ 120.633480][ T6167] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 120.633506][ T6167] do_ip_vs_set_ctl+0xb86/0xc90 [ 120.633534][ T6167] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 120.633568][ T6167] ? rcu_is_watching+0x13/0xc0 [ 120.633604][ T6167] ? find_held_lock+0x2b/0x80 [ 120.633647][ T6167] ? nf_sockopt_find.isra.0+0x222/0x290 [ 120.633671][ T6167] ? nf_sockopt_find.isra.0+0x222/0x290 [ 120.633706][ T6167] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.633749][ T6167] ? nf_setsockopt+0x8d/0xf0 [ 120.633769][ T6167] nf_setsockopt+0x8d/0xf0 [ 120.633792][ T6167] ip_setsockopt+0xcb/0xf0 [ 120.633821][ T6167] udp_setsockopt+0x64/0xb0 [ 120.633847][ T6167] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 120.633875][ T6167] do_sock_setsockopt+0xf3/0x1d0 [ 120.633905][ T6167] __sys_setsockopt+0x195/0x220 [ 120.633929][ T6167] __x64_sys_setsockopt+0xbd/0x160 [ 120.633947][ T6167] ? do_syscall_64+0xae/0x790 [ 120.633969][ T6167] ? lockdep_hardirqs_on+0x7d/0x110 [ 120.633992][ T6167] do_syscall_64+0x123/0x790 [ 120.634017][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.634038][ T6167] RIP: 0033:0x7f554979e159 [ 120.634056][ T6167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.634074][ T6167] RSP: 002b:00007f554a6c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 120.634094][ T6167] RAX: ffffffffffffffda RBX: 00007f5549a25fa0 RCX: 00007f554979e159 [ 120.634106][ T6167] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 000000000000000b [ 120.634117][ T6167] RBP: 00007f5549835024 R08: 000000000000002c R09: 0000000000000000 [ 120.634129][ T6167] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 120.634139][ T6167] R13: 00007f5549a26038 R14: 00007f5549a25fa0 R15: 00007fff98f89ca8 [ 120.634166][ T6167] [ 120.721258][ T6164] FAULT_INJECTION: forcing a failure. [ 120.721258][ T6164] name failslab, interval 1, probability 0, space 0, times 0 [ 120.721297][ T6164] CPU: 1 UID: 0 PID: 6164 Comm: syz.1.85 Not tainted syzkaller #0 PREEMPT(full) [ 120.721322][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 120.721334][ T6164] Call Trace: [ 120.721341][ T6164] [ 120.721348][ T6164] dump_stack_lvl+0x100/0x190 [ 120.721383][ T6164] should_fail_ex.cold+0x5/0xa [ 120.721411][ T6164] should_failslab+0xc2/0x120 [ 120.721436][ T6164] kmem_cache_alloc_noprof+0x92/0x6a0 [ 120.721454][ T6164] ? ceph_msg_new2+0x3e/0x4f0 [ 120.721479][ T6164] ceph_msg_new2+0x3e/0x4f0 [ 120.721499][ T6164] ceph_monc_init+0x5ed/0xcd0 [ 120.721526][ T6164] ceph_create_client+0x25e/0x370 [ 120.721552][ T6164] ceph_get_tree+0x1a4/0x1fd0 [ 120.721574][ T6164] ? bpf_lsm_capable+0x9/0x10 [ 120.721598][ T6164] ? security_capable+0x80/0x260 [ 120.721639][ T6164] vfs_get_tree+0x92/0x320 [ 120.721664][ T6164] vfs_cmd_create+0xd7/0x2a0 [ 120.721681][ T6164] __do_sys_fsconfig+0x55a/0xcb0 [ 120.721698][ T6164] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 120.721724][ T6164] do_syscall_64+0x123/0x790 [ 120.721747][ T6164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.721770][ T6164] RIP: 0033:0x7f659c39e159 [ 120.721786][ T6164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.721803][ T6164] RSP: 002b:00007f659d1e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 120.721820][ T6164] RAX: ffffffffffffffda RBX: 00007f659c625fa0 RCX: 00007f659c39e159 [ 120.721830][ T6164] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 120.721840][ T6164] RBP: 00007f659c435024 R08: 0000000000000000 R09: 0000000000000000 [ 120.721849][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.721859][ T6164] R13: 00007f659c626038 R14: 00007f659c625fa0 R15: 00007fff1a02b858 [ 120.721881][ T6164] [ 120.881535][ T6167] IPVS: ip_vs_bind_scheduler(): init error [ 121.098202][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.098721][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.098880][ T6048] bridge_slave_0: entered allmulticast mode [ 121.110220][ T6048] bridge_slave_0: entered promiscuous mode [ 121.141019][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.141136][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.141302][ T6048] bridge_slave_1: entered allmulticast mode [ 121.151576][ T6048] bridge_slave_1: entered promiscuous mode [ 121.404766][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.421396][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.671669][ T6048] team0: Port device team_slave_0 added [ 123.740100][ T6048] team0: Port device team_slave_1 added [ 123.913732][ T42] hsr_slave_0: left promiscuous mode [ 123.926501][ T42] hsr_slave_1: left promiscuous mode [ 123.927403][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.927464][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.950756][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.950803][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.002680][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 124.007683][ T6202] jffs2: notice: (6202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 124.028463][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 124.028481][ T31] audit: type=1400 audit(2000000038.750:352): avc: denied { write } for pid=6200 comm="syz.3.92" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.034692][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 124.078328][ T42] veth1_macvtap: left promiscuous mode [ 124.078389][ T42] veth0_macvtap: left promiscuous mode [ 124.078468][ T42] veth1_vlan: left promiscuous mode [ 124.078595][ T42] veth0_vlan: left promiscuous mode [ 124.281102][ T31] audit: type=1400 audit(2000000039.000:353): avc: denied { bind } for pid=6204 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.301987][ T31] audit: type=1400 audit(2000000039.000:354): avc: denied { name_bind } for pid=6204 comm="syz.1.93" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 124.302043][ T31] audit: type=1400 audit(2000000039.000:355): avc: denied { node_bind } for pid=6204 comm="syz.1.93" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 124.302083][ T31] audit: type=1400 audit(2000000039.020:356): avc: denied { write } for pid=6204 comm="syz.1.93" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.302114][ T31] audit: type=1400 audit(2000000039.020:357): avc: denied { name_connect } for pid=6204 comm="syz.1.93" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 124.402702][ T6219] atomic_op ffff888069f611e0 conn xmit_atomic 0000000000000000 [ 124.415596][ T31] audit: type=1400 audit(2000000039.130:358): avc: denied { write } for pid=6176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.631509][ T31] audit: type=1400 audit(2000000039.350:359): avc: denied { write } for pid=6221 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.413412][ T42] team0 (unregistering): Port device team_slave_1 removed [ 125.423061][ T42] team0 (unregistering): Port device team_slave_0 removed [ 125.531263][ T5703] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 125.685468][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.685512][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.685534][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.709638][ T5703] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.710141][ T5703] usb 4-1: not running at top speed; connect to a high speed hub [ 125.710166][ T5703] usb 4-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 125.711135][ T5703] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 125.711166][ T5703] usb 4-1: config 5 interface 0 has no altsetting 1 [ 125.711272][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 125.712616][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.712627][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.712646][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.715223][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.715245][ T5703] usb 4-1: Product: syz [ 125.715258][ T5703] usb 4-1: Manufacturer: syz [ 125.715271][ T5703] usb 4-1: SerialNumber: syz [ 126.389801][ T6048] hsr_slave_0: entered promiscuous mode [ 126.463415][ T6048] hsr_slave_1: entered promiscuous mode [ 129.281833][ T5703] usb 4-1: USB disconnect, device number 5 [ 129.390336][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.550719][ T6262] kAFS: No cell specified [ 130.377527][ T6267] jffs2: notice: (6267) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 130.482675][ T6048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.274405][ T6048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.330787][ T6048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.505456][ T6048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.516305][ T6048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.590332][ T6048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.598035][ T6048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.638631][ T6048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.671729][ T31] audit: type=1400 audit(2000000046.390:360): avc: denied { write } for pid=6246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.783001][ T31] audit: type=1400 audit(2000000046.500:361): avc: denied { write } for pid=6286 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.868215][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 132.032595][ T31] audit: type=1400 audit(2000000046.750:362): avc: denied { ioctl } for pid=6294 comm="syz.3.107" path="socket:[10697]" dev="sockfs" ino=10697 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.058111][ T31] audit: type=1400 audit(2000000046.780:363): avc: denied { read write } for pid=6294 comm="syz.3.107" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.087922][ T31] audit: type=1400 audit(2000000046.810:364): avc: denied { open } for pid=6294 comm="syz.3.107" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.200989][ T31] audit: type=1400 audit(2000000046.920:365): avc: denied { watch watch_reads } for pid=6303 comm="syz.1.110" path="/29" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.307523][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.375218][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.392457][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.392556][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.428632][ T184] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.428720][ T184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.476060][ T5729] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.506213][ T5703] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.637482][ T5729] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 132.639970][ T5729] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 132.640001][ T5729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.640020][ T5729] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 132.640052][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.645421][ T6299] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.716254][ T5703] usb 5-1: Using ep0 maxpacket: 32 [ 132.722252][ T5703] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 132.732643][ T5703] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 132.740989][ T5703] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 132.752923][ T5703] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 132.764172][ T5703] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 132.778421][ T5703] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.787848][ T5703] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 132.796461][ T5703] usb 5-1: Product: syz [ 132.800717][ T5703] usb 5-1: Manufacturer: syz [ 132.806534][ T5703] usb 5-1: SerialNumber: syz [ 132.816701][ T5703] usb 5-1: config 0 descriptor?? [ 132.830763][ T5703] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 132.888016][ T5703] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 132.985150][ T6324] ip6gre1: entered allmulticast mode [ 133.157338][ T986] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.167830][ T25] usb 4-1: USB disconnect, device number 6 [ 133.171890][ T52] Bluetooth: hci2: Reading Intel version command failed (-71) [ 133.222571][ T6309] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 133.225592][ T5729] usb 5-1: USB disconnect, device number 2 [ 133.229848][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 133.243314][ T6326] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 133.244533][ T31] audit: type=1400 audit(2000000047.960:366): avc: denied { write } for pid=6298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.276240][ T5729] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 133.324929][ T986] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 133.328791][ T986] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 133.328820][ T986] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.328840][ T986] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.328872][ T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.384797][ T6314] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 133.518809][ T6075] IPVS: starting estimator thread 0... [ 133.519823][ T6335] jffs2: notice: (6335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 133.594183][ T31] audit: type=1400 audit(2000000048.310:367): avc: denied { write } for pid=6339 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.645901][ T6336] IPVS: using max 59 ests per chain, 141600 per kthread [ 133.808934][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.815539][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.961123][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 134.017767][ T31] audit: type=1400 audit(2000000048.740:368): avc: denied { connect } for pid=6344 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.020141][ T31] audit: type=1400 audit(2000000048.740:369): avc: denied { write } for pid=6344 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.051039][ T6348] can0: slcan on ttyS3. [ 134.147607][ T6348] can0 (unregistered): slcan off ttyS3. [ 134.273297][ T52] Bluetooth: hci2: Reading Intel version command failed (-71) [ 134.283615][ T25] usb 3-1: USB disconnect, device number 2 [ 134.799098][ T52] Bluetooth: hci1: SCO packet too small [ 134.931783][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.380666][ T6386] kAFS: No cell specified [ 138.473692][ T6399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'. [ 138.515446][ T6048] veth0_vlan: entered promiscuous mode [ 138.558893][ T6048] veth1_vlan: entered promiscuous mode [ 138.574196][ T6401] jffs2: notice: (6401) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 138.610548][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 138.610605][ T31] audit: type=1400 audit(2000000053.330:376): avc: denied { write } for pid=6400 comm="syz.3.124" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.650053][ T6048] veth0_macvtap: entered promiscuous mode [ 138.653397][ T6048] veth1_macvtap: entered promiscuous mode [ 138.756467][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.774444][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.867696][ T5815] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.867941][ T5815] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.868342][ T5815] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.927723][ T184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.976233][ T31] audit: type=1400 audit(2000000053.700:377): avc: denied { ioctl } for pid=6405 comm="syz.4.125" path="socket:[11650]" dev="sockfs" ino=11650 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.077457][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.077504][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.259868][ T6075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.259910][ T6075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.345088][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 139.375650][ T31] audit: type=1400 audit(2000000054.090:378): avc: denied { mounton } for pid=6048 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 139.969186][ T5729] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.093640][ T31] audit: type=1400 audit(2000000054.810:379): avc: denied { name_bind } for pid=6422 comm="syz.4.129" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 140.126650][ T31] audit: type=1400 audit(2000000054.840:380): avc: denied { create } for pid=6422 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 140.147495][ T5729] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 140.158338][ T31] audit: type=1400 audit(2000000054.880:381): avc: denied { ioctl } for pid=6422 comm="syz.4.129" path="socket:[11668]" dev="sockfs" ino=11668 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 140.184062][ T5729] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.184108][ T5729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.184137][ T5729] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.184161][ T5729] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.184205][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.296314][ T6426] kAFS: No cell specified [ 140.525568][ T31] audit: type=1400 audit(2000000055.240:382): avc: denied { write } for pid=6422 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 142.326515][ T6415] loop8: detected capacity change from 0 to 16384 [ 142.412665][ T6433] loop8: detected capacity change from 16384 to 16383 [ 142.470383][ T5703] usb 4-1: USB disconnect, device number 7 [ 142.531870][ T6442] netlink: 'syz.5.132': attribute type 1 has an invalid length. [ 142.531909][ T6442] netlink: 84 bytes leftover after parsing attributes in process `syz.5.132'. [ 142.531953][ T6442] netlink: 40 bytes leftover after parsing attributes in process `syz.5.132'. [ 142.644625][ T31] audit: type=1400 audit(2000000057.360:383): avc: denied { load_policy } for pid=6437 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 142.674508][ T6443] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 142.674809][ T6443] SELinux: failed to load policy [ 142.764723][ T6439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.787088][ T31] audit: type=1400 audit(2000000057.500:384): avc: denied { create } for pid=6437 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.190076][ T31] audit: type=1400 audit(2000000057.800:385): avc: denied { read write } for pid=6453 comm="syz.5.135" name="vbi0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 143.430331][ T6470] jffs2: notice: (6470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 143.642123][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 143.642167][ T31] audit: type=1400 audit(2000000058.360:389): avc: denied { create } for pid=6472 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.668801][ T4930] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 143.737275][ T6479] capability: warning: `syz.2.139' uses 32-bit capabilities (legacy support in use) [ 143.825899][ T4930] usb 4-1: Using ep0 maxpacket: 32 [ 143.831496][ T4930] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 143.841508][ T4930] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 143.841541][ T4930] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 143.841582][ T4930] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 143.841609][ T4930] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 143.841627][ T4930] usb 4-1: config 0 interface 0 has no altsetting 0 [ 143.885921][ T5729] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.903473][ T4930] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 143.903511][ T4930] usb 4-1: Product: syz [ 143.903540][ T4930] usb 4-1: Manufacturer: syz [ 143.903557][ T4930] usb 4-1: SerialNumber: syz [ 143.930639][ T4930] usb 4-1: config 0 descriptor?? [ 143.938447][ T4930] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 144.065135][ T4930] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 144.372181][ T4930] usb 4-1: USB disconnect, device number 8 [ 144.559944][ T4930] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 144.563513][ T5729] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 144.572771][ T5729] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 144.572802][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.572879][ T5729] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 144.572911][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.602216][ T6075] IPVS: starting estimator thread 0... [ 144.654349][ T6475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 144.765959][ T6486] IPVS: using max 76 ests per chain, 182400 per kthread [ 144.921480][ T31] audit: type=1400 audit(2000000059.640:390): avc: denied { append } for pid=6474 comm="syz.4.140" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 144.972568][ T31] audit: type=1400 audit(2000000059.690:391): avc: denied { read } for pid=6474 comm="syz.4.140" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.999305][ T31] audit: type=1400 audit(2000000059.720:392): avc: denied { open } for pid=6474 comm="syz.4.140" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 145.466051][ T31] audit: type=1400 audit(2000000060.180:393): avc: denied { write } for pid=6487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.506394][ T31] audit: type=1400 audit(2000000060.220:394): avc: denied { unmount } for pid=6048 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 145.677740][ T31] audit: type=1400 audit(2000000060.390:395): avc: denied { write } for pid=6511 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.806160][ T5703] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 145.939479][ T31] audit: type=1400 audit(2000000060.660:396): avc: denied { write } for pid=6521 comm="syz.4.145" path="socket:[11176]" dev="sockfs" ino=11176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.964175][ T6522] Bluetooth: MGMT ver 1.23 [ 145.986830][ T5703] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 145.998654][ T5703] usb 6-1: config index 0 descriptor too short (asked for 9, got 0) [ 145.998727][ T5703] usb 6-1: can't read configurations, error -22 [ 146.056613][ T6526] bridge_slave_0: left allmulticast mode [ 146.063159][ T6526] bridge_slave_0: left promiscuous mode [ 146.071666][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.090220][ T6526] bridge_slave_1: left allmulticast mode [ 146.096896][ T6526] bridge_slave_1: left promiscuous mode [ 146.097755][ T5787] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 146.110551][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.124418][ T6526] bond0: (slave bond_slave_0): Releasing backup interface [ 146.135602][ T6526] bond0: (slave bond_slave_1): Releasing backup interface [ 146.143677][ T5703] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 146.162022][ T6526] team0: Port device team_slave_0 removed [ 146.172239][ T6526] team0: Port device team_slave_1 removed [ 146.179470][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.187427][ T6526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.197097][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.204358][ T31] audit: type=1400 audit(2000000060.920:397): avc: denied { write } for pid=6516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.216596][ T6526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.237337][ T6526] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.248313][ T5787] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 146.249375][ T5787] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 146.249403][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 146.249422][ T5787] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 146.249450][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.260965][ T6517] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 146.326668][ T5703] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.337990][ T5703] usb 6-1: config index 0 descriptor too short (asked for 9, got 0) [ 146.338093][ T5703] usb 6-1: can't read configurations, error -22 [ 146.338360][ T5703] usb usb6-port1: attempt power cycle [ 146.386640][ T31] audit: type=1400 audit(2000000061.100:398): avc: denied { create } for pid=6525 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 146.392952][ T6529] team0: Port device xfrm0 added [ 146.442706][ T6531] tipc: Started in network mode [ 146.442758][ T6531] tipc: Node identity 6efc95b1b9ea, cluster identity 4711 [ 146.443052][ T6531] tipc: Enabled bearer , priority 0 [ 146.523305][ T52] Bluetooth: hci2: Reading Intel version command failed (-71) [ 146.558167][ T5787] usb 2-1: USB disconnect, device number 4 [ 146.671875][ T6543] jffs2: notice: (6543) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 146.705930][ T5703] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 146.739099][ T5703] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.750862][ T5703] usb 6-1: config index 0 descriptor too short (asked for 9, got 0) [ 146.750973][ T5703] usb 6-1: can't read configurations, error -22 [ 146.898334][ T5703] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 146.935983][ T6551] netlink: 'syz.3.150': attribute type 11 has an invalid length. [ 146.936021][ T6551] netlink: 36 bytes leftover after parsing attributes in process `syz.3.150'. [ 146.957469][ T5703] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.971177][ T5703] usb 6-1: config index 0 descriptor too short (asked for 9, got 0) [ 146.971225][ T5703] usb 6-1: can't read configurations, error -22 [ 146.994609][ T5703] usb usb6-port1: unable to enumerate USB device [ 147.575028][ T5787] tipc: Node number set to 3608581553 [ 147.967306][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 147.984966][ T6573] syz_tun: entered allmulticast mode [ 147.993011][ T6573] syz_tun: left allmulticast mode [ 148.265586][ T6579] kAFS: No cell specified [ 148.377848][ T52] Bluetooth: hci6: command 0xfc05 tx timeout [ 148.377917][ T5599] Bluetooth: hci6: Reading Intel version command failed (-110) [ 148.378837][ T52] Bluetooth: hci6: Resetting usb device. [ 149.924520][ T986] usb 3-1: USB disconnect, device number 3 [ 150.516610][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 150.516681][ T31] audit: type=1400 audit(2000000065.220:404): avc: denied { read } for pid=6583 comm="syz.1.156" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 150.516833][ T31] audit: type=1400 audit(2000000065.220:405): avc: denied { open } for pid=6583 comm="syz.1.156" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 150.516974][ T31] audit: type=1400 audit(2000000065.230:406): avc: denied { ioctl } for pid=6583 comm="syz.1.156" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 150.954643][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 151.247096][ T4930] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 151.895836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 151.918120][ T4930] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 151.933083][ T4930] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 151.933123][ T4930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 151.933142][ T4930] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 151.933175][ T4930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.944936][ T6591] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 151.952085][ T6598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.033850][ T6609] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 152.052704][ T6591] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 152.072897][ T6591] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 152.091251][ T6591] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 152.106474][ T6591] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 152.107887][ T6591] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 152.116474][ T31] audit: type=1400 audit(2000000066.830:407): avc: denied { getopt } for pid=6608 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.162537][ T6591] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 152.367453][ T31] audit: type=1400 audit(2000000067.090:408): avc: denied { write } for pid=6581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.405563][ T6602] SELinux: policydb magic number 0x9beacfc7 does not match expected magic number 0xf97cff8c [ 152.405834][ T6602] SELinux: failed to load policy [ 152.539600][ T5787] usb 2-1: USB disconnect, device number 5 [ 152.541024][ T5599] Bluetooth: hci2: Reading Intel version command failed (-71) [ 152.681860][ T31] audit: type=1400 audit(2000000067.400:409): avc: denied { write } for pid=6616 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.900220][ T6623] random: crng reseeded on system resumption [ 152.901659][ T31] audit: type=1400 audit(2000000067.620:410): avc: denied { write } for pid=6617 comm="syz.4.163" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 152.901988][ T31] audit: type=1400 audit(2000000067.620:411): avc: denied { open } for pid=6617 comm="syz.4.163" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 153.045113][ T31] audit: type=1400 audit(2000000067.760:412): avc: denied { ioctl } for pid=6617 comm="syz.4.163" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 153.490346][ T31] audit: type=1400 audit(2000000068.210:413): avc: denied { map } for pid=6628 comm="syz.1.166" path="socket:[11954]" dev="sockfs" ino=11954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.289823][ T6647] netdevsim netdevsim5 netdevsim2: IPsec offload requires 128 bit authentication [ 156.605893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 157.115954][ T5703] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 157.416715][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 157.433814][ T5703] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 157.469000][ T5703] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.469037][ T5703] usb 6-1: config 0 interface 0 has no altsetting 0 [ 157.469071][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.552468][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 157.552545][ T31] audit: type=1400 audit(2000000072.270:416): avc: denied { setopt } for pid=6660 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.935315][ T5703] usb 6-1: config 0 descriptor?? [ 158.559786][ T5702] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 158.957218][ T5702] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 158.998308][ T5702] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 158.998359][ T5702] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.998398][ T5702] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 158.998437][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.566599][ T6679] netlink: 658 bytes leftover after parsing attributes in process `syz.5.170'. [ 159.918138][ T6669] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 160.329142][ T5703] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 160.341330][ T5703] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 160.349143][ T5703] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 160.349171][ T5703] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 160.349193][ T5703] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 160.349213][ T5703] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 160.349234][ T5703] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 160.349252][ T5703] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 160.349277][ T5703] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 160.349299][ T5703] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 160.468359][ T5703] pantherlord 0003:0810:0001.0001: hidraw0: USB HID v7f.ff Device [HID 0810:0001] on usb-dummy_hcd.5-1/input0 [ 160.699104][ T986] usb 6-1: USB disconnect, device number 6 [ 161.063616][ T6686] fido_id[6686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 161.838425][ T6696] netdevsim netdevsim3 netdevsim2: IPsec offload requires 128 bit authentication [ 161.901349][ T5599] Bluetooth: hci2: Reading Intel version command failed (-71) [ 161.912346][ T5703] usb 5-1: USB disconnect, device number 3 [ 162.765458][ T31] audit: type=1400 audit(2000000077.480:417): avc: denied { map } for pid=6713 comm="syz.5.184" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 162.828592][ T6714] binder: 6713:6714 ioctl c0306201 200000000200 returned -14 [ 162.892834][ T6714] ======================================================= [ 162.892834][ T6714] WARNING: The mand mount option has been deprecated and [ 162.892834][ T6714] and is ignored by this kernel. Remove the mand [ 162.892834][ T6714] option from the mount to silence this warning. [ 162.892834][ T6714] ======================================================= [ 162.899381][ T31] audit: type=1400 audit(2000000077.610:418): avc: denied { name_connect } for pid=6715 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 162.900304][ T30] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.906150][ T6714] 9p: Bad value for 'rfdno' [ 163.073136][ T31] audit: type=1400 audit(2000000077.770:419): avc: denied { mount } for pid=6715 comm="syz.3.185" name="/" dev="autofs" ino=12534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 163.073347][ T31] audit: type=1400 audit(2000000077.780:420): avc: denied { shutdown } for pid=6715 comm="syz.3.185" lport=48075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.073947][ T31] audit: type=1400 audit(2000000077.790:421): avc: denied { read } for pid=6715 comm="syz.3.185" lport=48075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.111039][ T5703] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.257862][ T30] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.290801][ T5703] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 163.308620][ T30] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 163.308663][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.308692][ T30] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 163.308713][ T30] usb 3-1: config 1 has no interface number 1 [ 163.308749][ T30] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 163.308776][ T30] usb 3-1: too many endpoints for config 1 interface 2 altsetting 1: 133, using maximum allowed: 30 [ 163.308807][ T30] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 133 [ 163.403886][ T5703] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 163.416033][ T5703] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 163.426591][ T5703] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 163.426838][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.610569][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.610621][ T30] usb 3-1: Product: syz [ 163.610647][ T30] usb 3-1: Manufacturer: syz [ 163.610659][ T30] usb 3-1: SerialNumber: syz [ 163.766401][ T6717] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 164.442019][ T5729] usb 2-1: USB disconnect, device number 6 [ 164.481050][ T5599] Bluetooth: hci2: Reading Intel version command failed (-71) [ 164.491739][ T30] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 164.491822][ T30] usb 3-1: MIDIStreaming interface descriptor not found [ 164.597598][ T31] audit: type=1400 audit(2000000079.320:422): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 164.880514][ T31] audit: type=1400 audit(2000000079.600:423): avc: denied { name_bind } for pid=6727 comm="syz.5.188" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 164.894495][ T30] usb 3-1: USB disconnect, device number 4 [ 165.056228][ T5787] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 165.206680][ T5787] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 165.210231][ T5787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.210278][ T5787] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 165.212614][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.212649][ T5787] usb 5-1: Product: syz [ 165.212696][ T5787] usb 5-1: Manufacturer: syz [ 165.212715][ T5787] usb 5-1: SerialNumber: syz [ 165.726979][ T5787] usb 5-1: config 0 descriptor?? [ 165.844172][ T6750] udevd[6750]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.422568][ T6764] netdevsim netdevsim5 netdevsim2: IPsec offload requires 128 bit authentication [ 166.476901][ T31] audit: type=1400 audit(2000000081.200:424): avc: denied { create } for pid=6761 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.813127][ T6765] team0: Port device xfrm0 removed [ 166.825242][ T6765] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.852194][ T31] audit: type=1400 audit(2000000081.570:425): avc: denied { connect } for pid=6761 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.892307][ T6766] team0: Port device xfrm0 added [ 166.943131][ T31] audit: type=1400 audit(2000000081.660:426): avc: denied { create } for pid=6769 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.945314][ T6768] tipc: Enabling of bearer rejected, already enabled [ 167.062331][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.199'. [ 167.382143][ T6773] netlink: 72 bytes leftover after parsing attributes in process `syz.1.198'. [ 167.388555][ T6782] faux_driver vgem: [drm] Unknown color mode 5; guessing buffer size. [ 167.886215][ T25] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 168.036992][ T25] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 168.037933][ T25] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 168.037961][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 168.040055][ T25] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 168.040078][ T25] usb 6-1: Product: syz [ 168.040091][ T25] usb 6-1: Manufacturer: syz [ 168.040110][ T25] usb 6-1: SerialNumber: syz [ 168.044237][ T25] usb 6-1: config 0 descriptor?? [ 168.082548][ T25] usb 6-1: selecting invalid altsetting 0 [ 168.101777][ T5702] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.285852][ T5702] usb 3-1: Using ep0 maxpacket: 8 [ 168.305021][ T5702] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.379401][ T5702] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.419377][ T5702] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.419436][ T5702] usb 3-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 168.419468][ T5702] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 168.419496][ T5702] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 168.419521][ T5702] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.419569][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.666855][ T30] usb 5-1: USB disconnect, device number 4 [ 168.870394][ T25] usb 6-1: USB disconnect, device number 7 [ 169.078657][ T5702] usb 3-1: usb_control_msg returned -32 [ 169.153258][ T5702] usbtmc 3-1:16.0: can't read capabilities [ 170.069478][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.317893][ T6812] netdevsim netdevsim3 netdevsim2: IPsec offload requires 128 bit authentication [ 170.706259][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 170.706514][ T31] audit: type=1400 audit(2000000085.420:429): avc: denied { audit_write } for pid=6805 comm="syz.4.209" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 170.706565][ T31] audit: type=1107 audit(2000000085.420:430): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='x2n#ep^Ց"BÔNdtܕуRvZ0~%}\F>Y@Mre>1&'aI0Y_V#q9~9/kBtʋ3q&Y!"tUxzDڽ/?ņ|sP.#˶q=8tO`M߰ނG%R8.' [ 171.091790][ T5717] usb 3-1: USB disconnect, device number 5 [ 171.120983][ T6823] binder: 6822:6823 unknown command 0 [ 171.121037][ T6823] binder: 6822:6823 ioctl c0306201 2000000004c0 returned -22 [ 171.121904][ T6832] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 171.133603][ T31] audit: type=1400 audit(2000000085.850:431): avc: denied { relabelto } for pid=6830 comm="syz.3.214" name="47" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 171.136699][ T31] audit: type=1400 audit(2000000085.850:432): avc: denied { associate } for pid=6830 comm="syz.3.214" name="47" dev="tmpfs" ino=270 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:memory_device_t:s0" [ 171.138586][ T6823] binder: 6822:6823 ioctl c0306201 200000000180 returned -14 [ 171.202491][ T6823] binder: 6822:6823 ioctl c0105872 200000000200 returned -22 [ 171.246672][ T31] audit: type=1400 audit(2000000085.970:433): avc: denied { bind } for pid=6824 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.307028][ T31] audit: type=1400 audit(2000000086.020:434): avc: denied { write } for pid=5603 comm="syz-executor" name="47" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 171.307080][ T31] audit: type=1400 audit(2000000086.020:435): avc: denied { remove_name } for pid=5603 comm="syz-executor" name="binderfs" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 171.383501][ T31] audit: type=1400 audit(2000000086.030:436): avc: denied { write } for pid=5603 comm="syz-executor" name="47" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 171.383554][ T31] audit: type=1400 audit(2000000086.090:437): avc: denied { write } for pid=5603 comm="syz-executor" name="47" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 171.383605][ T31] audit: type=1400 audit(2000000086.090:438): avc: denied { write } for pid=5603 comm="syz-executor" name="47" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 171.623376][ T6840] kAFS: No cell specified [ 171.735976][ T5717] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 172.157115][ T5717] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 172.408497][ T5717] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 172.408571][ T5717] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.408607][ T5717] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.485323][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.485368][ T5717] usb 3-1: Product: syz [ 172.485395][ T5717] usb 3-1: Manufacturer: syz [ 172.485413][ T5717] usb 3-1: SerialNumber: syz [ 172.554661][ T6836] could not allocate digest TFM handle rmd256-generic [ 173.335962][ T5717] usb 3-1: config 0 descriptor?? [ 173.343029][ T6834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.446200][ T5717] gs_usb 3-1:0.0: Couldn't send data format (err=-110) [ 174.446255][ T5717] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 174.546266][ T5729] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 174.695939][ T5729] usb 6-1: Using ep0 maxpacket: 16 [ 174.702334][ T5729] usb 6-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 174.713258][ T5729] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 174.718124][ T5599] Bluetooth: hci4: link tx timeout [ 174.718259][ T5599] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 174.727714][ T5729] usb 6-1: config 0 has no interface number 0 [ 174.727767][ T5729] usb 6-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 174.727795][ T5729] usb 6-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 174.727819][ T5729] usb 6-1: config 0 interface 246 has no altsetting 0 [ 174.776138][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.776167][ T5729] usb 6-1: Product: syz [ 174.776182][ T5729] usb 6-1: Manufacturer: syz [ 174.776196][ T5729] usb 6-1: SerialNumber: syz [ 174.808496][ T5703] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 174.822014][ T5729] usb 6-1: config 0 descriptor?? [ 174.933830][ T6866] kAFS: No cell specified [ 174.996501][ T5703] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 175.023732][ T5703] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 175.023799][ T5703] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 175.023821][ T5703] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 175.023851][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.519870][ T6334] usb 3-1: USB disconnect, device number 6 [ 175.840290][ T6860] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 176.779482][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 176.956513][ T52] Bluetooth: hci2: Reading Intel version command failed (-71) [ 176.961006][ T5703] usb 2-1: USB disconnect, device number 7 [ 177.133132][ T5729] usb 6-1: USB disconnect, device number 8 [ 178.072793][ T5729] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 178.171423][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 178.171475][ T31] audit: type=1400 audit(2000000092.890:442): avc: denied { ioctl } for pid=6880 comm="syz.1.227" path="socket:[13590]" dev="sockfs" ino=13590 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.181973][ T5729] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 179.194213][ T5729] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.207932][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.216128][ T5729] usb 6-1: Product: syz [ 179.216190][ T5729] usb 6-1: Manufacturer: syz [ 179.216210][ T5729] usb 6-1: SerialNumber: syz [ 179.404610][ T5729] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 179.818721][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.819083][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.916219][ T5729] gspca_mr97310a: reg write [21] error -110 [ 179.923437][ T5729] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -110 [ 179.987504][ T5729] usb 6-1: USB disconnect, device number 9 [ 180.055797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.987547][ T31] audit: type=1400 audit(2000000095.710:443): avc: denied { ioctl } for pid=6907 comm="syz.2.233" path="socket:[12963]" dev="sockfs" ino=12963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.382275][ T6916] FAULT_INJECTION: forcing a failure. [ 181.382275][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 181.382316][ T6916] CPU: 0 UID: 0 PID: 6916 Comm: syz.3.235 Not tainted syzkaller #0 PREEMPT(full) [ 181.382342][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 181.382355][ T6916] Call Trace: [ 181.382360][ T6916] [ 181.382367][ T6916] dump_stack_lvl+0x100/0x190 [ 181.382415][ T6916] should_fail_ex.cold+0x5/0xa [ 181.382446][ T6916] should_failslab+0xc2/0x120 [ 181.382472][ T6916] kmem_cache_alloc_noprof+0x92/0x6a0 [ 181.382494][ T6916] ? mas_preallocate+0xc22/0xee0 [ 181.382523][ T6916] mas_preallocate+0xc22/0xee0 [ 181.382547][ T6916] ? __pfx_mas_preallocate+0x10/0x10 [ 181.382575][ T6916] ? anon_vma_name+0x5a/0x250 [ 181.382601][ T6916] __split_vma+0x2f8/0x1de0 [ 181.382630][ T6916] ? __pfx___split_vma+0x10/0x10 [ 181.382651][ T6916] ? is_bpf_text_address+0x25/0x1a0 [ 181.382688][ T6916] vma_modify+0x137b/0x29b0 [ 181.382720][ T6916] ? __pfx_vma_modify+0x10/0x10 [ 181.382744][ T6916] ? __lock_acquire+0x4c5/0x1ec0 [ 181.382775][ T6916] vma_modify_flags_uffd+0x312/0x470 [ 181.382801][ T6916] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 181.382836][ T6916] ? __pfx_vma_can_userfault+0x10/0x10 [ 181.382862][ T6916] ? __pfx___might_resched+0x10/0x10 [ 181.382884][ T6916] userfaultfd_register_range+0x4be/0x770 [ 181.382916][ T6916] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 181.382946][ T6916] ? vma_can_userfault+0x124/0x3f0 [ 181.382972][ T6916] ? __pfx_vma_can_userfault+0x10/0x10 [ 181.382998][ T6916] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.383023][ T6916] userfaultfd_register+0x900/0xe40 [ 181.383056][ T6916] ? __pfx_userfaultfd_register+0x10/0x10 [ 181.383092][ T6916] ? tomoyo_path_number_perm+0x188/0x580 [ 181.383125][ T6916] userfaultfd_ioctl+0x2e6e/0x61d0 [ 181.383155][ T6916] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.383177][ T6916] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 181.383202][ T6916] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 181.383226][ T6916] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 181.383263][ T6916] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 181.383292][ T6916] ? __fget_files+0x34/0x3d0 [ 181.383326][ T6916] ? selinux_file_ioctl+0x13b/0x290 [ 181.383345][ T6916] ? selinux_file_ioctl+0xb6/0x290 [ 181.383365][ T6916] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 181.383396][ T6916] ? __x64_sys_ioctl+0x18e/0x210 [ 181.383416][ T6916] __x64_sys_ioctl+0x18e/0x210 [ 181.383434][ T6916] do_syscall_64+0x123/0x790 [ 181.383460][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.383478][ T6916] RIP: 0033:0x7f554979e159 [ 181.383495][ T6916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.383514][ T6916] RSP: 002b:00007f554a6c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.383535][ T6916] RAX: ffffffffffffffda RBX: 00007f5549a25fa0 RCX: 00007f554979e159 [ 181.383550][ T6916] RDX: 0000200000000080 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 181.383565][ T6916] RBP: 00007f5549835024 R08: 0000000000000000 R09: 0000000000000000 [ 181.383577][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.383587][ T6916] R13: 00007f5549a26038 R14: 00007f5549a25fa0 R15: 00007fff98f89ca8 [ 181.383610][ T6916] [ 181.647946][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.773503][ T6923] kAFS: No cell specified [ 182.227967][ T25] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 182.241496][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 182.253048][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.311407][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 182.311704][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.621045][ T6918] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.900033][ T5599] Bluetooth: hci2: Reading Intel version command failed (-71) [ 184.187360][ T6928] capability: warning: `syz.3.240' uses deprecated v2 capabilities in a way that may be insecure [ 184.263777][ T25] usb 2-1: USB disconnect, device number 8 [ 185.462939][ T6942] jffs2: notice: (6942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 185.736996][ T986] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 185.799148][ T6949] ima: policy update failed [ 185.803913][ T31] audit: type=1802 audit(2000000100.520:444): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.247" res=0 errno=0 [ 185.905823][ T986] usb 3-1: Using ep0 maxpacket: 16 [ 185.906577][ T986] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01d8, bcdDevice=84.2e [ 185.907478][ T986] usb 3-1: config 255 has an invalid interface number: 91 but max is 2 [ 185.907501][ T986] usb 3-1: config 255 has an invalid interface number: 6 but max is 2 [ 185.907520][ T986] usb 3-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 185.907536][ T986] usb 3-1: config 255 has an invalid interface number: 167 but max is 2 [ 185.907554][ T986] usb 3-1: config 255 has no interface number 0 [ 185.907568][ T986] usb 3-1: config 255 has no interface number 1 [ 185.907584][ T986] usb 3-1: config 255 has no interface number 2 [ 185.907636][ T986] usb 3-1: config 255 interface 6 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 185.907656][ T986] usb 3-1: config 255 interface 6 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 185.907679][ T986] usb 3-1: config 255 interface 6 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 185.907698][ T986] usb 3-1: config 255 interface 6 altsetting 2 bulk endpoint 0xB has invalid maxpacket 64 [ 185.907715][ T986] usb 3-1: config 255 interface 6 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 185.907752][ T986] usb 3-1: config 255 interface 6 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 185.907774][ T986] usb 3-1: config 255 interface 6 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 185.907794][ T986] usb 3-1: config 255 interface 6 altsetting 2 endpoint 0xC has invalid maxpacket 96, setting to 64 [ 185.907817][ T986] usb 3-1: config 255 interface 6 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 185.907835][ T986] usb 3-1: config 255 interface 6 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 185.907858][ T986] usb 3-1: config 255 interface 6 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 185.907874][ T986] usb 3-1: config 255 interface 6 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 185.907893][ T986] usb 3-1: config 255 interface 6 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 185.907910][ T986] usb 3-1: config 255 interface 91 has no altsetting 0 [ 185.907925][ T986] usb 3-1: config 255 interface 6 has no altsetting 0 [ 185.907938][ T986] usb 3-1: config 255 interface 167 has no altsetting 0 [ 185.912198][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.912218][ T986] usb 3-1: Product: syz [ 185.912231][ T986] usb 3-1: Manufacturer: 퉺햓攣휄龆岑먷毨遀둽繙钴࡭쵴杔谗ᇪ蠞㙍ᦡ왫 [ 185.912249][ T986] usb 3-1: SerialNumber: syz [ 185.919103][ T986] ftdi_sio 3-1:255.91: FTDI USB Serial Device converter detected [ 185.928826][ T986] ftdi_sio ttyUSB0: unknown device type: 0x842e [ 185.961011][ T31] audit: type=1400 audit(2000000100.670:445): avc: denied { getopt } for pid=6953 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.128443][ T986] ftdi_sio 3-1:255.6: FTDI USB Serial Device converter detected [ 186.136047][ T986] ftdi_sio ttyUSB1: unknown device type: 0x842e [ 186.171155][ T986] ftdi_sio 3-1:255.167: FTDI USB Serial Device converter detected [ 186.175410][ T986] ftdi_sio ttyUSB2: unknown device type: 0x842e [ 186.186266][ T986] usb 3-1: USB disconnect, device number 7 [ 186.195717][ T986] ftdi_sio 3-1:255.91: device disconnected [ 186.252597][ T986] ftdi_sio 3-1:255.6: device disconnected [ 186.264574][ T986] ftdi_sio 3-1:255.167: device disconnected [ 186.856103][ T5703] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 187.056568][ T5703] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 187.068831][ T5703] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 187.068878][ T5703] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.068900][ T5703] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 187.068931][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.087842][ T6970] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 187.117907][ T986] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 187.276610][ T986] usb 5-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 187.277494][ T986] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.277534][ T986] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 187.277569][ T986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.455891][ T5703] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 187.493564][ T986] usb 5-1: dvb_usb_v2: usb_bulk_msg() write length=12, actual=0 [ 187.508819][ T986] dvb_usb_af9035 5-1:1.0: probe with driver dvb_usb_af9035 failed with error -5 [ 187.533185][ T6978] kAFS: No cell specified [ 187.550953][ T5599] Bluetooth: hci2: Reading Intel version command failed (-71) [ 187.625301][ T5729] usb 4-1: USB disconnect, device number 9 [ 187.805925][ T5703] usb 3-1: device descriptor read/64, error -71 [ 188.275903][ T5703] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 188.905074][ T5703] usb 3-1: device descriptor read/64, error -71 [ 189.062769][ T5703] usb usb3-port1: attempt power cycle [ 189.440332][ T10] usb 5-1: USB disconnect, device number 5 [ 189.566221][ T5703] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 189.586266][ T5703] usb 3-1: device descriptor read/8, error -71 [ 189.816544][ T5729] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 190.057477][ T5703] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 190.076495][ T5703] usb 3-1: device descriptor read/8, error -71 [ 190.085080][ T5729] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.086394][ T5729] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.086420][ T5729] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.086438][ T5729] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.086485][ T5729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 190.086512][ T5729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 190.087723][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.087743][ T5729] usb 4-1: Product: syz [ 190.087758][ T5729] usb 4-1: Manufacturer: syz [ 190.107022][ T5729] cdc_wdm 4-1:1.0: skipping garbage [ 190.107063][ T5729] cdc_wdm 4-1:1.0: skipping garbage [ 190.115433][ T5729] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 190.115455][ T5729] cdc_wdm 4-1:1.0: Unknown control protocol [ 190.195943][ T5703] usb usb3-port1: unable to enumerate USB device [ 190.249211][ T6991] jffs2: notice: (6991) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 190.375251][ T31] audit: type=1400 audit(2000000105.090:446): avc: denied { read write } for pid=6982 comm="syz.3.255" name="cdc-wdm0" dev="devtmpfs" ino=2871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 190.375543][ T31] audit: type=1400 audit(2000000105.090:447): avc: denied { open } for pid=6982 comm="syz.3.255" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 190.569476][ T5703] usb 4-1: USB disconnect, device number 10 [ 191.416020][ T5703] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 192.211395][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 192.222455][ T5599] Bluetooth: hci0: command 0x0406 tx timeout [ 192.223481][ T5599] Bluetooth: hci3: command 0x0406 tx timeout [ 192.337513][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 192.375645][ T5703] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 192.387800][ T5703] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 192.387852][ T5703] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 192.387887][ T5703] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 192.387912][ T5703] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 192.387937][ T5703] usb 3-1: config 0 interface 0 has no altsetting 0 [ 192.391975][ T5703] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 192.392003][ T5703] usb 3-1: Product: syz [ 192.392018][ T5703] usb 3-1: Manufacturer: syz [ 192.392032][ T5703] usb 3-1: SerialNumber: syz [ 192.450449][ T5703] usb 3-1: config 0 descriptor?? [ 192.453910][ T5703] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 192.459433][ T5703] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 192.703690][ T5703] usb 3-1: USB disconnect, device number 12 [ 192.722714][ T5703] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 192.775408][ T7031] FAULT_INJECTION: forcing a failure. [ 192.775408][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 192.775462][ T7031] CPU: 0 UID: 0 PID: 7031 Comm: syz.5.267 Not tainted syzkaller #0 PREEMPT(full) [ 192.775486][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 192.775498][ T7031] Call Trace: [ 192.775507][ T7031] [ 192.775516][ T7031] dump_stack_lvl+0x100/0x190 [ 192.775552][ T7031] should_fail_ex.cold+0x5/0xa [ 192.775580][ T7031] should_failslab+0xc2/0x120 [ 192.775604][ T7031] __kmalloc_cache_noprof+0x91/0x6d0 [ 192.775634][ T7031] ? ip_vs_dh_init_svc+0x3f/0xb0 [ 192.775672][ T7031] ? __pfx_ip_vs_dh_init_svc+0x10/0x10 [ 192.775701][ T7031] ip_vs_dh_init_svc+0x3f/0xb0 [ 192.775728][ T7031] ip_vs_bind_scheduler+0x45/0xb0 [ 192.775753][ T7031] ip_vs_add_service+0x9cb/0x2240 [ 192.775781][ T7031] ? __ip_vs_service_find+0x4d0/0x9c0 [ 192.775807][ T7031] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 192.775828][ T7031] do_ip_vs_set_ctl+0xb86/0xc90 [ 192.775853][ T7031] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 192.775873][ T7031] ? rcu_is_watching+0x13/0xc0 [ 192.775902][ T7031] ? find_held_lock+0x2b/0x80 [ 192.775925][ T7031] ? nf_sockopt_find.isra.0+0x222/0x290 [ 192.775944][ T7031] ? nf_sockopt_find.isra.0+0x222/0x290 [ 192.775971][ T7031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.776010][ T7031] ? nf_setsockopt+0x8d/0xf0 [ 192.776025][ T7031] nf_setsockopt+0x8d/0xf0 [ 192.776046][ T7031] ip_setsockopt+0xcb/0xf0 [ 192.776070][ T7031] udp_setsockopt+0x64/0xb0 [ 192.776091][ T7031] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 192.776119][ T7031] do_sock_setsockopt+0xf3/0x1d0 [ 192.776143][ T7031] __sys_setsockopt+0x195/0x220 [ 192.776174][ T7031] __x64_sys_setsockopt+0xbd/0x160 [ 192.776192][ T7031] ? do_syscall_64+0xae/0x790 [ 192.776214][ T7031] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.776237][ T7031] do_syscall_64+0x123/0x790 [ 192.776261][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.776282][ T7031] RIP: 0033:0x7f2c0799e159 [ 192.776308][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.776328][ T7031] RSP: 002b:00007f2c0890b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.776349][ T7031] RAX: ffffffffffffffda RBX: 00007f2c07c25fa0 RCX: 00007f2c0799e159 [ 192.776362][ T7031] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 000000000000000b [ 192.776375][ T7031] RBP: 00007f2c07a35024 R08: 000000000000002c R09: 0000000000000000 [ 192.776387][ T7031] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 192.776398][ T7031] R13: 00007f2c07c26038 R14: 00007f2c07c25fa0 R15: 00007ffdbfa275c8 [ 192.776425][ T7031] [ 192.787437][ T7031] IPVS: ip_vs_bind_scheduler(): init error [ 193.590942][ T7041] jffs2: notice: (7041) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 193.705875][ T986] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 193.868552][ T7047] netdevsim netdevsim3 netdevsim2: IPsec offload requires 128 bit authentication [ 194.503178][ T986] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 194.504070][ T986] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.504108][ T986] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.504129][ T986] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 194.504149][ T986] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.504184][ T986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.116594][ T5729] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 195.267768][ T5729] usb 5-1: unable to get BOS descriptor or descriptor too short [ 195.272552][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.310423][ T5729] usb 5-1: not running at top speed; connect to a high speed hub [ 195.310471][ T5729] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 195.330463][ T5729] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 195.348493][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.348557][ T5729] usb 5-1: Product: syz [ 195.348585][ T5729] usb 5-1: Manufacturer: syz [ 195.348603][ T5729] usb 5-1: SerialNumber: syz [ 195.349956][ T31] audit: type=1400 audit(2000000110.070:448): avc: denied { map } for pid=7069 comm="syz.2.279" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 195.418418][ T7074] netdevsim netdevsim3 netdevsim2: IPsec offload requires 128 bit authentication [ 196.575789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 197.085022][ T986] [drm] Initialized gud 1.0.0 for 6-1:1.0 on minor 1 [ 197.118738][ T7083] jffs2: notice: (7083) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 197.186161][ T5729] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 197.208099][ T5729] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 197.216452][ T5729] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 197.225147][ T5729] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 197.273799][ T5729] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 197.401612][ T5729] usb 5-1: USB disconnect, device number 6 [ 197.466217][ T5703] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 197.532304][ T986] ================================================================== [ 197.532330][ T986] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 197.532370][ T986] Read of size 256 at addr ffff8880554b4760 by task kworker/1:2/986 [ 197.532391][ T986] [ 197.532403][ T986] CPU: 1 UID: 0 PID: 986 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 197.532430][ T986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 197.532446][ T986] Workqueue: usb_hub_wq hub_event [ 197.532477][ T986] Call Trace: [ 197.532483][ T986] [ 197.532493][ T986] dump_stack_lvl+0x100/0x190 [ 197.532527][ T986] print_report+0x13d/0x4b0 [ 197.532560][ T986] ? __virt_addr_valid+0x239/0x430 [ 197.532587][ T986] ? fbcon_prepare_logo+0x94e/0xc60 [ 197.532610][ T986] kasan_report+0xdf/0x1c0 [ 197.532641][ T986] ? fbcon_prepare_logo+0x94e/0xc60 [ 197.532668][ T986] kasan_check_range+0x10f/0x1e0 [ 197.532698][ T986] __asan_memcpy+0x23/0x60 [ 197.532735][ T986] fbcon_prepare_logo+0x94e/0xc60 [ 197.532763][ T986] fbcon_init+0x1065/0x1830 [ 197.532790][ T986] visual_init+0x320/0x620 [ 197.532837][ T986] do_bind_con_driver.isra.0+0x636/0x9c0 [ 197.532876][ T986] do_take_over_console+0x501/0x5d0 [ 197.532914][ T986] do_fbcon_takeover+0xe9/0x210 [ 197.532940][ T986] fbcon_fb_registered+0x364/0x4b0 [ 197.532967][ T986] do_register_framebuffer+0x503/0x870 [ 197.532992][ T986] ? __pfx_do_register_framebuffer+0x10/0x10 [ 197.533019][ T986] ? find_held_lock+0x2b/0x80 [ 197.533048][ T986] register_framebuffer+0x23/0x40 [ 197.533071][ T986] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 197.533104][ T986] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 197.533131][ T986] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.533160][ T986] drm_fb_helper_initial_config+0x44/0x60 [ 197.533183][ T986] drm_fbdev_client_hotplug+0x19e/0x220 [ 197.533205][ T986] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 197.533224][ T986] drm_client_register+0x197/0x280 [ 197.533249][ T986] drm_fbdev_client_setup+0x155/0x480 [ 197.533270][ T986] drm_client_setup+0x160/0x1a0 [ 197.533289][ T986] gud_probe+0x186c/0x1c60 [ 197.533315][ T986] ? __pfx_gud_probe+0x10/0x10 [ 197.533334][ T986] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 197.533356][ T986] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 197.533377][ T986] ? __pm_runtime_set_status+0x13c/0x970 [ 197.533400][ T986] usb_probe_interface+0x386/0x9b0 [ 197.533431][ T986] ? __pfx_usb_probe_interface+0x10/0x10 [ 197.533457][ T986] ? kernfs_put+0x3f/0x60 [ 197.533487][ T986] ? sysfs_create_link+0x68/0xc0 [ 197.533512][ T986] ? __pfx_usb_probe_interface+0x10/0x10 [ 197.533540][ T986] really_probe+0x241/0xa60 [ 197.533562][ T986] __driver_probe_device+0x210/0x460 [ 197.533581][ T986] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 197.533603][ T986] driver_probe_device+0x4a/0x140 [ 197.533623][ T986] __device_attach_driver+0x1df/0x320 [ 197.533643][ T986] ? __pfx___device_attach_driver+0x10/0x10 [ 197.533663][ T986] bus_for_each_drv+0x159/0x1e0 [ 197.533691][ T986] ? __pfx_bus_for_each_drv+0x10/0x10 [ 197.533719][ T986] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.533741][ T986] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 197.533762][ T986] __device_attach+0x1e4/0x4d0 [ 197.533782][ T986] ? __pfx___device_attach+0x10/0x10 [ 197.533802][ T986] ? do_raw_spin_unlock+0x145/0x1e0 [ 197.533835][ T986] device_initial_probe+0xaf/0xd0 [ 197.533856][ T986] bus_probe_device+0x64/0x160 [ 197.533889][ T986] device_add+0x121d/0x1970 [ 197.533920][ T986] ? __pfx_device_add+0x10/0x10 [ 197.533943][ T986] ? mark_held_locks+0x40/0x70 [ 197.533963][ T986] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 197.533987][ T986] usb_set_configuration+0xd97/0x1c60 [ 197.534020][ T986] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 197.534041][ T986] usb_generic_driver_probe+0xa1/0xe0 [ 197.534061][ T986] usb_probe_device+0xef/0x400 [ 197.534085][ T986] ? __pfx_usb_probe_device+0x10/0x10 [ 197.534110][ T986] really_probe+0x241/0xa60 [ 197.534129][ T986] __driver_probe_device+0x210/0x460 [ 197.534148][ T986] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 197.534170][ T986] driver_probe_device+0x4a/0x140 [ 197.534189][ T986] __device_attach_driver+0x1df/0x320 [ 197.534209][ T986] ? __pfx___device_attach_driver+0x10/0x10 [ 197.534229][ T986] bus_for_each_drv+0x159/0x1e0 [ 197.534255][ T986] ? __pfx_bus_for_each_drv+0x10/0x10 [ 197.534282][ T986] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.534304][ T986] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 197.534324][ T986] __device_attach+0x1e4/0x4d0 [ 197.534342][ T986] ? __pfx___device_attach+0x10/0x10 [ 197.534362][ T986] ? do_raw_spin_unlock+0x145/0x1e0 [ 197.534385][ T986] device_initial_probe+0xaf/0xd0 [ 197.534405][ T986] bus_probe_device+0x64/0x160 [ 197.534442][ T986] device_add+0x121d/0x1970 [ 197.534463][ T986] ? __pfx_device_add+0x10/0x10 [ 197.534484][ T986] ? usb_detect_static_quirks+0x335/0x3e0 [ 197.534508][ T986] usb_new_device.part.0+0xcc2/0x1686 [ 197.534542][ T986] ? do_raw_spin_lock+0x128/0x260 [ 197.534566][ T986] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 197.534600][ T986] ? mark_held_locks+0x40/0x70 [ 197.534621][ T986] hub_event.cold+0x1e3/0xe90 [ 197.534658][ T986] ? __pfx_hub_event+0x10/0x10 [ 197.534680][ T986] ? print_usage_bug.part.0+0x1f0/0x340 [ 197.534701][ T986] ? lock_acquire+0x1d1/0x380 [ 197.534719][ T986] ? process_one_work+0xa2c/0x1b10 [ 197.534750][ T986] ? process_one_work+0x906/0x1b10 [ 197.534781][ T986] ? process_one_work+0x906/0x1b10 [ 197.534815][ T986] process_one_work+0xac7/0x1b10 [ 197.534848][ T986] ? __pfx_process_one_work+0x10/0x10 [ 197.534876][ T986] ? lock_acquire+0x1d1/0x380 [ 197.534898][ T986] ? __pfx_hub_event+0x10/0x10 [ 197.534921][ T986] worker_thread+0x5ef/0xe50 [ 197.534950][ T986] ? __pfx_worker_thread+0x10/0x10 [ 197.534978][ T986] ? kthread+0x13a/0x450 [ 197.535004][ T986] ? __pfx_worker_thread+0x10/0x10 [ 197.535032][ T986] kthread+0x373/0x450 [ 197.535057][ T986] ? __pfx_kthread+0x10/0x10 [ 197.535088][ T986] ret_from_fork+0x730/0xd60 [ 197.535113][ T986] ? __pfx_ret_from_fork+0x10/0x10 [ 197.535135][ T986] ? __switch_to+0x800/0x10f0 [ 197.535162][ T986] ? __pfx_kthread+0x10/0x10 [ 197.535187][ T986] ret_from_fork_asm+0x1a/0x30 [ 197.535215][ T986] [ 197.535222][ T986] [ 197.535226][ T986] Allocated by task 6856: [ 197.535237][ T986] kasan_save_stack+0x30/0x50 [ 197.535258][ T986] kasan_save_track+0x14/0x30 [ 197.535275][ T986] __kasan_kmalloc+0xaa/0xb0 [ 197.535291][ T986] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 197.535317][ T986] device_add+0xd3f/0x1970 [ 197.535336][ T986] netdev_register_kobject+0x1df/0x410 [ 197.535363][ T986] register_netdevice+0x15b6/0x25a0 [ 197.535387][ T986] register_vlan_dev+0x36c/0x910 [ 197.535412][ T986] vlan_ioctl_handler+0x8e9/0xa70 [ 197.535435][ T986] sock_ioctl+0x5e9/0x6b0 [ 197.535459][ T986] __x64_sys_ioctl+0x18e/0x210 [ 197.535474][ T986] do_syscall_64+0x123/0x790 [ 197.535494][ T986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.535513][ T986] [ 197.535519][ T986] The buggy address belongs to the object at ffff8880554b4400 [ 197.535519][ T986] which belongs to the cache kmalloc-512 of size 512 [ 197.535535][ T986] The buggy address is located 592 bytes to the right of [ 197.535535][ T986] allocated 272-byte region [ffff8880554b4400, ffff8880554b4510) [ 197.535555][ T986] [ 197.535559][ T986] The buggy address belongs to the physical page: [ 197.535568][ T986] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880554b5c00 pfn:0x554b4 [ 197.535593][ T986] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 197.535607][ T986] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 197.535642][ T986] page_type: f5(slab) [ 197.535659][ T986] raw: 00fff00000000240 ffff88801c02fc80 ffffea0000b4b710 ffffea00015ec410 [ 197.535676][ T986] raw: ffff8880554b5c00 000000000010000e 00000000f5000000 0000000000000000 [ 197.535693][ T986] head: 00fff00000000240 ffff88801c02fc80 ffffea0000b4b710 ffffea00015ec410 [ 197.535710][ T986] head: ffff8880554b5c00 000000000010000e 00000000f5000000 0000000000000000 [ 197.535727][ T986] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 197.535742][ T986] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 197.535750][ T986] page dumped because: kasan: bad access detected [ 197.535758][ T986] page_owner tracks the page as allocated [ 197.535767][ T986] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5598, tgid 5598 (syz-executor), ts 92928335614 [ 197.535793][ T986] post_alloc_hook+0xfd/0x120 [ 197.535819][ T986] get_page_from_freelist+0x110d/0x35d0 [ 197.535840][ T986] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 197.535862][ T986] new_slab+0xa9/0x6e0 [ 197.535884][ T986] refill_objects+0xe3/0x410 [ 197.535904][ T986] __pcs_replace_empty_main+0x35e/0x650 [ 197.535923][ T986] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 197.535946][ T986] kernfs_fop_open+0x23d/0xd50 [ 197.535959][ T986] do_dentry_open+0x6ab/0x14d0 [ 197.535974][ T986] vfs_open+0x82/0x3f0 [ 197.535990][ T986] path_openat+0x19fa/0x2440 [ 197.536009][ T986] do_file_open+0x20e/0x430 [ 197.536027][ T986] do_sys_openat2+0x10f/0x1e0 [ 197.536045][ T986] __x64_sys_openat+0x12d/0x210 [ 197.536064][ T986] do_syscall_64+0x123/0x790 [ 197.536081][ T986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.536096][ T986] page last free pid 5598 tgid 5598 ts 92900432216 stack trace: [ 197.536107][ T986] __free_frozen_pages+0x79f/0x10f0 [ 197.536126][ T986] qlist_free_all+0x47/0xf0 [ 197.536139][ T986] kasan_quarantine_reduce+0x1a0/0x1f0 [ 197.536154][ T986] __kasan_slab_alloc+0x69/0x90 [ 197.536172][ T986] kmem_cache_alloc_noprof+0x269/0x6a0 [ 197.536190][ T986] do_getname+0x35/0x390 [ 197.536215][ T986] __x64_sys_unlink+0x36/0x70 [ 197.536234][ T986] do_syscall_64+0x123/0x790 [ 197.536252][ T986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.536270][ T986] [ 197.536274][ T986] Memory state around the buggy address: [ 197.536283][ T986] ffff8880554b4600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.536295][ T986] ffff8880554b4680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.536307][ T986] >ffff8880554b4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.536316][ T986] ^ [ 197.536326][ T986] ffff8880554b4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.536338][ T986] ffff8880554b4800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 197.536347][ T986] ================================================================== [ 197.593090][ T6712] udevd[6712]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.601222][ T31] audit: type=1400 audit(2000000112.320:449): avc: denied { read } for pid=4949 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 197.606841][ T31] audit: type=1400 audit(2000000112.330:450): avc: denied { search } for pid=4949 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.609913][ T31] audit: type=1400 audit(2000000112.330:451): avc: denied { write search } for pid=4949 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.616032][ T31] audit: type=1400 audit(2000000112.330:452): avc: denied { add_name } for pid=4949 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.616077][ T31] audit: type=1400 audit(2000000112.330:453): avc: denied { create } for pid=4949 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.617361][ T5703] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 197.619497][ T5703] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.619526][ T5703] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.619546][ T5703] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.619570][ T5703] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.619597][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.620527][ T31] audit: type=1400 audit(2000000112.330:454): avc: denied { append open } for pid=4949 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.620979][ T31] audit: type=1400 audit(2000000112.340:455): avc: denied { getattr } for pid=4949 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.649272][ T5703] usb 4-1: config 0 descriptor?? [ 197.755242][ T986] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 198.814011][ T986] CPU: 1 UID: 0 PID: 986 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 198.823294][ T986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 198.833452][ T986] Workqueue: usb_hub_wq hub_event [ 198.838503][ T986] Call Trace: [ 198.841775][ T986] [ 198.844804][ T986] dump_stack_lvl+0x100/0x190 [ 198.849488][ T986] vpanic+0x553/0x970 [ 198.853456][ T986] ? __pfx_vpanic+0x10/0x10 [ 198.857963][ T986] ? fbcon_prepare_logo+0x94e/0xc60 [ 198.863145][ T986] panic+0xd1/0xe0 [ 198.866876][ T986] ? __pfx_panic+0x10/0x10 [ 198.871281][ T986] ? fbcon_prepare_logo+0x94e/0xc60 [ 198.876490][ T986] ? preempt_schedule_common+0x3c/0xb0 [ 198.881952][ T986] check_panic_on_warn.cold+0x19/0x34 [ 198.887350][ T986] end_report.part.0+0x3a/0x90 [ 198.892143][ T986] kasan_report.cold+0xe/0x18 [ 198.896835][ T986] ? fbcon_prepare_logo+0x94e/0xc60 [ 198.902057][ T986] kasan_check_range+0x10f/0x1e0 [ 198.907016][ T986] __asan_memcpy+0x23/0x60 [ 198.911434][ T986] fbcon_prepare_logo+0x94e/0xc60 [ 198.916463][ T986] fbcon_init+0x1065/0x1830 [ 198.920973][ T986] visual_init+0x320/0x620 [ 198.925396][ T986] do_bind_con_driver.isra.0+0x636/0x9c0 [ 198.931022][ T986] do_take_over_console+0x501/0x5d0 [ 198.936238][ T986] do_fbcon_takeover+0xe9/0x210 [ 198.941086][ T986] fbcon_fb_registered+0x364/0x4b0 [ 198.946202][ T986] do_register_framebuffer+0x503/0x870 [ 198.951642][ T986] ? __pfx_do_register_framebuffer+0x10/0x10 [ 198.957614][ T986] ? find_held_lock+0x2b/0x80 [ 198.962291][ T986] register_framebuffer+0x23/0x40 [ 198.967326][ T986] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 198.974430][ T986] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 198.981957][ T986] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.987931][ T986] drm_fb_helper_initial_config+0x44/0x60 [ 198.993660][ T986] drm_fbdev_client_hotplug+0x19e/0x220 [ 198.999205][ T986] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 199.005281][ T986] drm_client_register+0x197/0x280 [ 199.010399][ T986] drm_fbdev_client_setup+0x155/0x480 [ 199.015769][ T986] drm_client_setup+0x160/0x1a0 [ 199.020611][ T986] gud_probe+0x186c/0x1c60 [ 199.025020][ T986] ? __pfx_gud_probe+0x10/0x10 [ 199.029769][ T986] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 199.035557][ T986] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 199.041371][ T986] ? __pm_runtime_set_status+0x13c/0x970 [ 199.046995][ T986] usb_probe_interface+0x386/0x9b0 [ 199.052113][ T986] ? __pfx_usb_probe_interface+0x10/0x10 [ 199.057731][ T986] ? kernfs_put+0x3f/0x60 [ 199.062065][ T986] ? sysfs_create_link+0x68/0xc0 [ 199.066992][ T986] ? __pfx_usb_probe_interface+0x10/0x10 [ 199.072621][ T986] really_probe+0x241/0xa60 [ 199.077107][ T986] __driver_probe_device+0x210/0x460 [ 199.082382][ T986] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 199.088174][ T986] driver_probe_device+0x4a/0x140 [ 199.093184][ T986] __device_attach_driver+0x1df/0x320 [ 199.098541][ T986] ? __pfx___device_attach_driver+0x10/0x10 [ 199.104439][ T986] bus_for_each_drv+0x159/0x1e0 [ 199.109300][ T986] ? __pfx_bus_for_each_drv+0x10/0x10 [ 199.114661][ T986] ? lockdep_hardirqs_on+0x7d/0x110 [ 199.119852][ T986] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 199.125647][ T986] __device_attach+0x1e4/0x4d0 [ 199.130407][ T986] ? __pfx___device_attach+0x10/0x10 [ 199.135684][ T986] ? do_raw_spin_unlock+0x145/0x1e0 [ 199.140873][ T986] device_initial_probe+0xaf/0xd0 [ 199.145893][ T986] bus_probe_device+0x64/0x160 [ 199.150660][ T986] device_add+0x121d/0x1970 [ 199.155155][ T986] ? __pfx_device_add+0x10/0x10 [ 199.159987][ T986] ? mark_held_locks+0x40/0x70 [ 199.164751][ T986] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 199.170561][ T986] usb_set_configuration+0xd97/0x1c60 [ 199.175934][ T986] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 199.182000][ T986] usb_generic_driver_probe+0xa1/0xe0 [ 199.187353][ T986] usb_probe_device+0xef/0x400 [ 199.192114][ T986] ? __pfx_usb_probe_device+0x10/0x10 [ 199.197486][ T986] really_probe+0x241/0xa60 [ 199.201992][ T986] __driver_probe_device+0x210/0x460 [ 199.207277][ T986] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 199.213081][ T986] driver_probe_device+0x4a/0x140 [ 199.218096][ T986] __device_attach_driver+0x1df/0x320 [ 199.223447][ T986] ? __pfx___device_attach_driver+0x10/0x10 [ 199.229337][ T986] bus_for_each_drv+0x159/0x1e0 [ 199.234230][ T986] ? __pfx_bus_for_each_drv+0x10/0x10 [ 199.239622][ T986] ? lockdep_hardirqs_on+0x7d/0x110 [ 199.244811][ T986] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 199.250703][ T986] __device_attach+0x1e4/0x4d0 [ 199.255474][ T986] ? __pfx___device_attach+0x10/0x10 [ 199.260753][ T986] ? do_raw_spin_unlock+0x145/0x1e0 [ 199.265955][ T986] device_initial_probe+0xaf/0xd0 [ 199.270984][ T986] bus_probe_device+0x64/0x160 [ 199.275739][ T986] device_add+0x121d/0x1970 [ 199.280247][ T986] ? __pfx_device_add+0x10/0x10 [ 199.285092][ T986] ? usb_detect_static_quirks+0x335/0x3e0 [ 199.290815][ T986] usb_new_device.part.0+0xcc2/0x1686 [ 199.296283][ T986] ? do_raw_spin_lock+0x128/0x260 [ 199.301315][ T986] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 199.307143][ T986] ? mark_held_locks+0x40/0x70 [ 199.311930][ T986] hub_event.cold+0x1e3/0xe90 [ 199.316661][ T986] ? __pfx_hub_event+0x10/0x10 [ 199.321430][ T986] ? print_usage_bug.part.0+0x1f0/0x340 [ 199.326979][ T986] ? lock_acquire+0x1d1/0x380 [ 199.331726][ T986] ? process_one_work+0xa2c/0x1b10 [ 199.336865][ T986] ? process_one_work+0x906/0x1b10 [ 199.341983][ T986] ? process_one_work+0x906/0x1b10 [ 199.347101][ T986] process_one_work+0xac7/0x1b10 [ 199.352068][ T986] ? __pfx_process_one_work+0x10/0x10 [ 199.357452][ T986] ? lock_acquire+0x1d1/0x380 [ 199.362148][ T986] ? __pfx_hub_event+0x10/0x10 [ 199.366910][ T986] worker_thread+0x5ef/0xe50 [ 199.371489][ T986] ? __pfx_worker_thread+0x10/0x10 [ 199.376590][ T986] ? kthread+0x13a/0x450 [ 199.380834][ T986] ? __pfx_worker_thread+0x10/0x10 [ 199.385951][ T986] kthread+0x373/0x450 [ 199.390019][ T986] ? __pfx_kthread+0x10/0x10 [ 199.394588][ T986] ret_from_fork+0x730/0xd60 [ 199.399178][ T986] ? __pfx_ret_from_fork+0x10/0x10 [ 199.404282][ T986] ? __switch_to+0x800/0x10f0 [ 199.408961][ T986] ? __pfx_kthread+0x10/0x10 [ 199.413562][ T986] ret_from_fork_asm+0x1a/0x30 [ 199.418350][ T986] [ 199.421666][ T986] Kernel Offset: disabled [ 199.425988][ T986] Rebooting in 86400 seconds..