last executing test programs: 4m50.468032792s ago: executing program 1 (id=233): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x406d, &(0x7f0000000080)={0x0, 0x2894, 0x20, 0x3, 0x27d}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000180)={r1}, 0x1) 4m49.156533538s ago: executing program 1 (id=238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x1, 0x40, 0xa, 0x80, 0x80, 0x87}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x7661a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) accept$alg(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3bd8010090782000"], 0x0) 4m48.702180601s ago: executing program 1 (id=242): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x20002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f00000000c0)={{@hyper, 0x7}, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffa, 0x10, 0x7, 0x800, 0x1ff, 0x5}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 4m46.558745809s ago: executing program 1 (id=248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0500000000f000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000216c0000001e0a0103000000000000000007000000090002008a797a3100000000090001"], 0xf0}}, 0x0) 4m45.953744419s ago: executing program 1 (id=253): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) syz_emit_ethernet(0x1e2, &(0x7f0000007940)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1ac, 0x0, 0x0, @empty, @local, {[], "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"}}}}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000000), 0x4) r7 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x11, r7, 0x83000000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'ip6gretap0\x00', 0x2000}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) 4m45.00606357s ago: executing program 1 (id=258): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x12) dup(0xffffffffffffffff) openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x8}], 0x38) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x80040) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000000)={0x1, {0xffffffff, 0x4, 0x102, 0x800012}, {0x20000b, 0x3, 0xffffffff, 0x6}, {0x6, 0xe5}}) 4m29.778262097s ago: executing program 32 (id=258): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x12) dup(0xffffffffffffffff) openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x8}], 0x38) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x80040) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000000)={0x1, {0xffffffff, 0x4, 0x102, 0x800012}, {0x20000b, 0x3, 0xffffffff, 0x6}, {0x6, 0xe5}}) 1m7.982541217s ago: executing program 3 (id=968): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) io_setup(0x58, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r1 = syz_io_uring_setup(0x3924, &(0x7f0000000080)={0x0, 0x5, 0x10000, 0x0, 0x3}, &(0x7f0000000780)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0xfffffffc, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x40000) 1m7.934126163s ago: executing program 3 (id=969): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x9, &(0x7f0000000380)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x4000000081, 0xfffffffffffffff9}) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000100)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r4}, &(0x7f0000000400), &(0x7f00000009c0), 0x1000000}, 0x3a) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xd0}}, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x204, 0x6, 0x4}) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000000c0)=0x3200e0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000f1a71fff00000091282305e19082", @ANYRESOCT, @ANYBLOB="4270875998b26cbc64208c4288afefd9935dda526a52c807ce3b368dd3504e5dd77f6ccf163a6b1166c0d85a271aaa111e437784de00435f21cb414a1091358ec8a63ae907c3b3ca2c070c909f9f9a3325e76e260885466e4385cb65f6d71fbbd59c602a437eea2e14e1dcadeebfcc69555984aa4b375873d1f5ee31c02796e30c59"], 0x4c}}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r6, 0xffffffb3, &(0x7f0000000240)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) socket(0x10, 0x803, 0x0) 1m5.204735577s ago: executing program 3 (id=978): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x7, 0x1, 0x1, 0xc, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0x9, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0xcd, 0x3e}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x7, 0x1, 0xd3, 0x40, 0x40}, 0x101, &(0x7f00000002c0)={0x5, 0xf, 0x101, 0x4, [@generic={0xc6, 0x10, 0x2, "767bc0e30910a69dab92ef924f4bebc314e518d267c7a412761c0ad0fa6dd546afffca74c3fd040cd4ccef8bd50083aabaaca13300479d305ceb6362bd3f81eb086a64ab1082da02902304b4603ecb897664fb40ec8aeeff9549a84c3b8330cddd3c05242502e1f71611923ce0dcf817cabb83c2b64eb0235d1377c1910c8038891116f011bddc21697044d965c073a80edd98f607fe8690c6fbaffb775d73e014b8612364b69a04a64a90ab065f467f88bfacee067f28d9549567050c54ebff39d132"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x4, 0x3, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0x6b, 0x3, 0x0, 0xf0f, 0x7, [0x3f00, 0xc000, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "696286886037e14cbdbdbcf4eedca454"}]}, 0x4, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x413}}, {0xf5, &(0x7f0000000540)=@string={0xf5, 0x3, "624b8a5000998155d1b55bc03772252f2f04c99d25193f1c0749f0f3b6005e185a1228cf74e48236b4b9eca95cafc4d3658a6cfff257f6edc88d8cc76b3a35d5624da0baaf0d2615aa6f3cb0e4829460ebe9596c703d2bfe5253b84c6767c6b075229c4a8d6975ccf75b23df1d5fa90f4494eacda9a79a9e3a23c281dd7be1965d3e5e29bbeda0dbc8153c552deefd499a8b6e723fae59932e04089e9dfc262efc9d09c97bc5137e4606f30d06c6d8a2bdaf2c77537ac0dc4a5c4545ce621afa2851d71fbd524547ffcd1e70284777a4f174d3c49b3905faf40f24e74a458140ac3a612950c64720f210d45cf4e8d0e280735b"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000140)={0x0, 0x17, 0x6, "d659f3bcf097"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf250a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000001480)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x3000}}, './file0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000001640)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x43fb, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xfffffffe, 0x5}}]}}}]}, 0x64}}, 0x20000000) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x0, 0x10, 0x2, "ac22"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m1.625367089s ago: executing program 3 (id=984): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x512c65070e40915e, 0x0, 0x0, 0x0, 0x12}, 0x1c2) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140), 0x4) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(r3, 0x5, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) fsopen(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m0.692155334s ago: executing program 3 (id=991): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084149, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x66, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x8, 0x58, 0xe2, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0xb, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x200, 0x0, 0x5, 0x1, 0x1, 0x2}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r3}, 0x10) capset(&(0x7f0000000080)={0x19980330}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r2, r2, 0x0, 0x200000) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='omfs\x00', 0x2208004, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') 59.26460396s ago: executing program 3 (id=994): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x102) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, 0x0) syz_emit_ethernet(0x101, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaa3faaaaaaaaaabb88a8360081003200884845ed00eb00650000082f9078000000000a0101000420880b1c00207302eb92dce92e5ee71cbcfe2cd09c9d187973bc0f4c8931b211fc7c6ac9a3d290a347ff0ab047c6712b2a83d88f5c2c014ef02ef1d861c8e922ff5e7ff86020c6c68abcea7042bd0ddb51a389e4cfbaa7c516324c87f0800681572eecbcc732e9053715f5eb09764adf3e55183457caa65b975a8671080008000beca53ca95850e635a83992dc36c27a867dfd140d0086dd080088be000000021429c8060100000000000009080022eb000000012494b109020000000000ffff008019120800655800000004"], 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x4, 0x0, [{0x2, 0x84, 0x4, 0x9, 0xdaa, 0x0, 0xb}, {0xb, 0x8, 0x0, 0x10d, 0x800000d, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x9, 0x4, 0x4d7, 0x6, 0x3, 0x8}]}) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x2c400, 0x0) 58.376360023s ago: executing program 33 (id=994): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x102) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, 0x0) syz_emit_ethernet(0x101, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaa3faaaaaaaaaabb88a8360081003200884845ed00eb00650000082f9078000000000a0101000420880b1c00207302eb92dce92e5ee71cbcfe2cd09c9d187973bc0f4c8931b211fc7c6ac9a3d290a347ff0ab047c6712b2a83d88f5c2c014ef02ef1d861c8e922ff5e7ff86020c6c68abcea7042bd0ddb51a389e4cfbaa7c516324c87f0800681572eecbcc732e9053715f5eb09764adf3e55183457caa65b975a8671080008000beca53ca95850e635a83992dc36c27a867dfd140d0086dd080088be000000021429c8060100000000000009080022eb000000012494b109020000000000ffff008019120800655800000004"], 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x4, 0x0, [{0x2, 0x84, 0x4, 0x9, 0xdaa, 0x0, 0xb}, {0xb, 0x8, 0x0, 0x10d, 0x800000d, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x9, 0x4, 0x4d7, 0x6, 0x3, 0x8}]}) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x2c400, 0x0) 15.507567947s ago: executing program 6 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00a0ff0000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.208764045s ago: executing program 6 (id=1107): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 's}z', 0x20, 0xfcd}, 0x2f, 0xfffffffffffffffa) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x3c}}, 0x0) 14.311037583s ago: executing program 6 (id=1110): r0 = syz_open_dev$audion(&(0x7f0000000240), 0x3c000000000, 0x200000) mq_notify(r0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x9da2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x1fc, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0ac}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8e6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60d618fd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffc00}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x88}]}]}, 0x1fc}}, 0x20000000) 13.221573361s ago: executing program 0 (id=1115): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setresuid(0xee01, 0xee00, 0x0) (async) setresuid(0xee01, 0xee00, 0x0) madvise(&(0x7f0000bde000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) dup3(r2, r3, 0x0) 11.935704008s ago: executing program 6 (id=1117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x39}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000881) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x88}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0xa) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x178, 0x1403, 0x200, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x4004860) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x1f, {0x1f, 0xa, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x9, 0x801, 0x0, 0x0, {0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xad8f}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x50854}, 0x20004080) 11.312021658s ago: executing program 0 (id=1118): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x102) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(0xffffffffffffffff) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x101, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaa3faaaaaaaaaabb88a8360081003200884845ed00eb00650000082f9078000000000a0101000420880b1c00207302eb92dce92e5ee71cbcfe2cd09c9d187973bc0f4c8931b211fc7c6ac9a3d290a347ff0ab047c6712b2a83d88f5c2c014ef02ef1d861c8e922ff5e7ff86020c6c68abcea7042bd0ddb51a389e4cfbaa7c516324c87f0800681572eecbcc732e9053715f5eb09764adf3e55183457caa65b975a8671080008000beca53ca95850e635a83992dc36c27a867dfd140d0086dd080088be000000021429c8060100000000000009080022eb000000012494b109020000000000ffff008019120800655800000004"], 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x4, 0x0, [{0x2, 0x84, 0x4, 0x9, 0xdaa, 0x0, 0xb}, {0xb, 0x8, 0x0, 0x10d, 0x800000d, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x9, 0x4, 0x4d7, 0x6, 0x3, 0x8}]}) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x2c400, 0x0) 11.152182095s ago: executing program 4 (id=1120): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x102) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(0xffffffffffffffff) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x101, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaa3faaaaaaaaaabb88a8360081003200884845ed00eb00650000082f9078000000000a0101000420880b1c00207302eb92dce92e5ee71cbcfe2cd09c9d187973bc0f4c8931b211fc7c6ac9a3d290a347ff0ab047c6712b2a83d88f5c2c014ef02ef1d861c8e922ff5e7ff86020c6c68abcea7042bd0ddb51a389e4cfbaa7c516324c87f0800681572eecbcc732e9053715f5eb09764adf3e55183457caa65b975a8671080008000beca53ca95850e635a83992dc36c27a867dfd140d0086dd080088be000000021429c8060100000000000009080022eb000000012494b1090200000000"], 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) socket$inet6(0xa, 0x805, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x4, 0x0, [{0x2, 0x84, 0x4, 0x9, 0xdaa, 0x0, 0xb}, {0xb, 0x8, 0x0, 0x10d, 0x800000d, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x9, 0x4, 0x4d7, 0x6, 0x3, 0x8}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 9.296406504s ago: executing program 2 (id=1125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x177) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80186e82, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000b0000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00fa0000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.54027921s ago: executing program 4 (id=1126): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "1d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x8, "8a93f9c7bd800c87"}, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xffffffffffffba76, 0x4}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x0, 0x0, &(0x7f0000000180)={0x2, 0xff, 0x7, 0xc, 0x8, 0x8001, 0x8, 0xf}, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0x9, 0x7c3, 0x8, 0x1, 0x8}, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) sync() add_key$user(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) 8.536187601s ago: executing program 6 (id=1127): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x102) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x4, 0x0, [{0x2, 0x84, 0x4, 0x9, 0xdaa, 0x0, 0xb}, {0xb, 0x8, 0x0, 0x10d, 0x800000d, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x9, 0x4, 0x4d7, 0x6, 0x3, 0x8}]}) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x2c400, 0x0) 8.196831098s ago: executing program 2 (id=1128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00c0ff0000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.126627918s ago: executing program 0 (id=1129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0x40082104, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="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"], 0x138}}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="030300000000fddbdf253d000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) 8.066632189s ago: executing program 2 (id=1130): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) syz_open_dev$audion(&(0x7f0000000080), 0xffffffff, 0x200) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'binder1\x00'}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') 7.700591348s ago: executing program 2 (id=1132): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x62a781, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000004c0)={0x80000000, &(0x7f0000000400), &(0x7f0000000440)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000500)={r2}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) r3 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x7330, 0x0, 0x0, 0x0, 0x0) 7.642028539s ago: executing program 5 (id=1133): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r7 = dup(r6) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r7, 0x0) 6.618973329s ago: executing program 5 (id=1134): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) (async) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r5, 0x111, 0x3, 0x0, &(0x7f0000000080)) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000000feffff720af0fff8ffffff69a4f0ff000000002d040200000000001d400200000000004704000001ed000062030000000000000c440000000000007a0a00fe00ffffffd704000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 6.416657976s ago: executing program 0 (id=1135): r0 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000940)={0x0, 0x0, {0x1, 0x2, 0x7f32, 0x3}}) fsmount(r0, 0x0, 0xf) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304961) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000016c0)=""/102392, 0x18ff8) open$dir(0x0, 0x0, 0x150) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x10000, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0xe4, 0x3]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 5.793856516s ago: executing program 5 (id=1136): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x102) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(0xffffffffffffffff) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x101, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaa3faaaaaaaaaabb88a8360081003200884845ed00eb00650000082f9078000000000a0101000420880b1c00207302eb92dce92e5ee71cbcfe2cd09c9d187973bc0f4c8931b211fc7c6ac9a3d290a347ff0ab047c6712b2a83d88f5c2c014ef02ef1d861c8e922ff5e7ff86020c6c68abcea7042bd0ddb51a389e4cfbaa7c516324c87f0800681572eecbcc732e9053715f5eb09764adf3e55183457caa65b975a8671080008000beca53ca95850e635a83992dc36c2"], 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) socket$inet6(0xa, 0x805, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x4, 0x0, [{0x2, 0x84, 0x4, 0x9, 0xdaa, 0x0, 0xb}, {0xb, 0x8, 0x0, 0x10d, 0x800000d, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x9, 0x4, 0x4d7, 0x6, 0x3, 0x8}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 5.640589238s ago: executing program 2 (id=1137): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x102) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(0xffffffffffffffff) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x101, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaa3faaaaaaaaaabb88a8360081003200884845ed00eb00650000082f9078000000000a0101000420880b1c00207302eb92dce92e5ee71cbcfe2cd09c9d187973bc0f4c8931b211fc7c6ac9a3d290a347ff0ab047c6712b2a83d88f5c2c014ef02ef1d861c8e922ff5e7ff86020c6c68abcea7042bd0ddb51a389e4cfbaa7c516324c87f0800681572eecbcc732e9053715f5eb09764adf3e55183457caa65b975a8671080008000beca53ca95850e635a83992dc36c27a867dfd140d0086dd080088be000000021429c8060100000000000009080022eb000000012494b1090200000000"], 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) socket$inet6(0xa, 0x805, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x4, 0x0, [{0x2, 0x84, 0x4, 0x9, 0xdaa, 0x0, 0xb}, {0xb, 0x8, 0x0, 0x10d, 0x800000d, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x9, 0x4, 0x4d7, 0x6, 0x3, 0x8}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 4.86331943s ago: executing program 0 (id=1138): fsopen(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) sendmmsg$inet6(r4, &(0x7f0000000b00), 0x0, 0x20080058) 3.673217802s ago: executing program 4 (id=1139): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40084149, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x66, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x8, 0x58, 0xe2, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0xb, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x200, 0x0, 0x5, 0x1, 0x1, 0x2}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r3}, 0x10) capset(&(0x7f0000000080)={0x19980330}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r2, r2, 0x0, 0x200000) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='omfs\x00', 0x2208004, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') 2.807657661s ago: executing program 6 (id=1140): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x102) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x101, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaa3faaaaaaaaaabb88a8360081003200884845ed00eb00650000082f9078000000000a0101000420880b1c00207302eb92dce92e5ee71cbcfe2cd09c9d187973bc0f4c8931b211fc7c6ac9a3d290a347ff0ab047c6712b2a83d88f5c2c014ef02ef1d861c8e922ff5e7ff86020c6c68abcea7042bd0ddb51a389e4cfbaa7c516324c87f0800681572eecbcc732e9053715f5eb09764adf3e55183457caa65b975a8671080008000beca53ca95850e635a83992dc36c27a867dfd140d0086dd080088be000000021429c8060100000000000009080022eb000000012494b109020000000000ffff008019120800655800000004"], 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x4, 0x0, [{0x2, 0x84, 0x4, 0x9, 0xdaa, 0x0, 0xb}, {0xb, 0x8, 0x0, 0x10d, 0x800000d, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x9, 0x4, 0x4d7, 0x6, 0x3, 0x8}]}) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x2c400, 0x0) 2.294187651s ago: executing program 4 (id=1141): fsopen(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) sendmmsg$inet6(r4, &(0x7f0000000b00), 0x0, 0x20080058) 2.038438232s ago: executing program 2 (id=1142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) socket(0x2b, 0x80801, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x80000, 0x0, 0x1, 0x400000007, 0x3, 0xfffffffc}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) unshare(0xf807157653b15a2) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x214) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x1000, 0x8ba, 0x4, {0x4, @win={{0x3, 0x69f20258, 0x8, 0x8003}, 0x6, 0x1, &(0x7f00000002c0)={{0x0, 0x8001, 0x859, 0x1}}, 0x8, 0x0, 0xc4}}, 0x40004}) r4 = shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) bpf$PROG_LOAD(0x5, &(0x7f0000019080)={0x3, 0x16, &(0x7f0000019e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) shmdt(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000019180)='./file0\x00', 0xd00, 0x6c) getdents(r8, &(0x7f0000000200)=""/223, 0xdf) lseek(r8, 0x101, 0x1) getdents64(r8, &(0x7f0000003340)=""/48, 0x30) 1.436004105s ago: executing program 5 (id=1143): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x103, 0x3, 0xfffff9b9, 0x7e, 0x32, 0xa, 0x4}, 0x9c) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000006c0)={0xaa, 0x204}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) 1.304182454s ago: executing program 4 (id=1144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x4048043) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r4 = fanotify_init(0x1, 0x101801) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8], 0x48) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r8, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xc, 0x4, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x39a, 0x40, 0x56, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2}}, 0x40) close(r8) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) 1.179170773s ago: executing program 5 (id=1145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000080000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000000000101800000000000000000000000000ffd09500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 44.265669ms ago: executing program 4 (id=1146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES64, @ANYRES32, @ANYRES8, @ANYRES64=r1, @ANYRES64, @ANYBLOB="4f9767b65793e5"]) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0800c0000000000048f2adbc26fa866f55146583e697a3ae3793fe641fbf2f7456a75f437954532e62b73821b138e01aab0570d1fd444d06c744cc4904004f800800c800", @ANYRES32=0x0, @ANYBLOB="08009e0064010102a5fa1bc096f7698bf3a3b0d73b6a0d1e0d9454b139670292b1dceb8845000000000000"], 0x11dc}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 432.94µs ago: executing program 5 (id=1147): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) (fail_nth: 2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) 0s ago: executing program 0 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4800, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) kernel console output (not intermixed with test programs): valid interface number: 8 but max is 0 [ 285.004289][ T54] usb 3-1: config 0 has no interface number 0 [ 285.014033][ T54] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 285.063311][ T54] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 285.075130][ T54] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 285.090040][ T54] usb 3-1: Product: syz [ 285.107774][ T54] usb 3-1: SerialNumber: syz [ 285.184272][ T9006] netlink: 64 bytes leftover after parsing attributes in process `syz.4.713'. [ 285.196886][ T54] usb 3-1: config 0 descriptor?? [ 285.208536][ T54] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 285.732220][ T9] usb 3-1: USB disconnect, device number 25 [ 286.541128][ T5919] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 286.931807][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 286.968762][ T5919] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 287.009365][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.106505][ T5919] usb 3-1: config 0 descriptor?? [ 287.365888][ T5919] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 287.415868][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.479212][ T5919] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 287.504459][ T5919] usb 3-1: media controller created [ 287.593404][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.030634][ T5855] Bluetooth: hci5: command 0x0406 tx timeout [ 289.144488][ T5919] az6027: usb out operation failed. (-71) [ 289.157933][ T5919] az6027: usb out operation failed. (-71) [ 289.165601][ T5919] stb0899_attach: Driver disabled by Kconfig [ 289.317476][ T5919] az6027: no front-end attached [ 289.317476][ T5919] [ 289.325687][ T5919] az6027: usb out operation failed. (-71) [ 289.332874][ T5919] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 289.347844][ T5919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 289.383541][ T5919] dvb-usb: schedule remote query interval to 400 msecs. [ 289.395623][ T5919] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 289.435606][ T5919] usb 3-1: USB disconnect, device number 26 [ 289.522715][ T5919] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 291.649195][ T9065] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 292.343598][ T9061] netlink: 92 bytes leftover after parsing attributes in process `syz.3.727'. [ 292.398363][ T9066] netlink: 44 bytes leftover after parsing attributes in process `syz.3.727'. [ 292.421504][ T9061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.727'. [ 292.442145][ T30] audit: type=1400 audit(1754542483.020:527): avc: denied { setopt } for pid=9068 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.516276][ T30] audit: type=1400 audit(1754542483.040:528): avc: denied { getopt } for pid=9068 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.535490][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.633769][ T30] audit: type=1400 audit(1754542483.040:529): avc: denied { bind } for pid=9068 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.652803][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.911985][ T30] audit: type=1326 audit(1754542483.480:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.5.730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5aad8ebe9 code=0x0 [ 292.934691][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.791004][ T30] audit: type=1326 audit(1754542483.970:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.3.737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f763738ebe9 code=0x0 [ 293.840567][ T9086] netlink: 92 bytes leftover after parsing attributes in process `syz.4.736'. [ 293.849663][ T9086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.736'. [ 293.922154][ T9091] netlink: 44 bytes leftover after parsing attributes in process `syz.4.736'. [ 294.197372][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 294.360754][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 294.394824][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 294.404457][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.418891][ T9] usb 1-1: config 0 descriptor?? [ 294.841746][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 294.880848][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.903137][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 294.910473][ T9] usb 1-1: media controller created [ 294.991127][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.740758][ T5967] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 295.978474][ T1206] IPVS: starting estimator thread 0... [ 296.269706][ T9115] IPVS: using max 74 ests per chain, 177600 per kthread [ 296.305585][ T1206] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 296.380646][ T5967] usb 3-1: Using ep0 maxpacket: 32 [ 296.417633][ T5967] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 296.447976][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.481669][ T1206] usb 4-1: Using ep0 maxpacket: 16 [ 296.489109][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.502822][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 296.534345][ T5967] usb 3-1: config 0 descriptor?? [ 296.628337][ T1206] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=70.55 [ 296.645328][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.669220][ T1206] usb 4-1: Product: syz [ 296.702914][ T1206] usb 4-1: Manufacturer: syz [ 296.723782][ T1206] usb 4-1: SerialNumber: syz [ 296.743192][ T5967] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 296.751577][ T5967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.798572][ T5967] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 296.814787][ T1206] usb 4-1: config 0 descriptor?? [ 296.836493][ T5967] usb 3-1: media controller created [ 296.853687][ T1206] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 296.953995][ T9] az6027: usb out operation failed. (-71) [ 296.965477][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.975237][ T9] az6027: usb out operation failed. (-71) [ 296.981015][ T9] stb0899_attach: Driver disabled by Kconfig [ 296.988164][ T9] az6027: no front-end attached [ 296.988164][ T9] [ 296.997173][ T9] az6027: usb out operation failed. (-71) [ 297.034229][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 297.074619][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 297.138658][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 297.162128][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 297.263905][ T5967] az6027: usb out operation failed. (-71) [ 297.271101][ T5967] stb0899_attach: Driver disabled by Kconfig [ 297.304845][ T9] usb 1-1: USB disconnect, device number 36 [ 297.310814][ T5967] az6027: no front-end attached [ 297.310814][ T5967] [ 297.325967][ T5967] az6027: usb out operation failed. (-71) [ 297.356783][ T5967] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 297.392883][ T5967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 297.422681][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 297.441870][ T5967] dvb-usb: schedule remote query interval to 400 msecs. [ 297.461955][ T5967] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 297.507079][ T5967] usb 3-1: USB disconnect, device number 27 [ 297.593440][ T5967] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 297.939288][ T12] usb 4-1: Failed to submit usb control message: -110 [ 297.952019][ T12] usb 4-1: unable to send the bmi data to the device: -110 [ 297.972038][ T12] usb 4-1: unable to get target info from device [ 297.986770][ T12] usb 4-1: could not get target info (-110) [ 297.996871][ T12] usb 4-1: could not probe fw (-110) [ 298.342039][ T9] usb 4-1: USB disconnect, device number 24 [ 298.393483][ T54] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 298.485114][ T9141] netlink: 92 bytes leftover after parsing attributes in process `syz.3.751'. [ 298.494305][ T9141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.751'. [ 298.562922][ T9141] netlink: 44 bytes leftover after parsing attributes in process `syz.3.751'. [ 298.583840][ T54] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.593839][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.636455][ T54] usb 3-1: Product: syz [ 298.844053][ T54] usb 3-1: Manufacturer: syz [ 298.853049][ T54] usb 3-1: SerialNumber: syz [ 299.180804][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 299.370687][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 299.384059][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 299.403921][ T9] usb 5-1: can't read configurations, error -61 [ 299.564474][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 299.920806][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 299.939980][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 299.950841][ T9] usb 5-1: can't read configurations, error -61 [ 299.957441][ T9] usb usb5-port1: attempt power cycle [ 300.074041][ T54] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 300.083889][ T54] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 300.339366][ T9134] netlink: 264 bytes leftover after parsing attributes in process `syz.2.748'. [ 300.352144][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 300.365732][ T54] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 300.381982][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 300.389908][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 300.844075][ T9] usb 5-1: can't read configurations, error -61 [ 300.902772][ T9172] CIFS: Unable to determine destination address [ 300.933401][ T30] audit: type=1400 audit(1754542491.470:532): avc: denied { setopt } for pid=9170 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.984500][ T54] usb 3-1: USB disconnect, device number 28 [ 300.995034][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 300.997473][ T54] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 301.072045][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 301.082443][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 301.083308][ T30] audit: type=1400 audit(1754542491.660:533): avc: denied { create } for pid=9180 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 301.100859][ T9] usb 5-1: can't read configurations, error -61 [ 301.161498][ T9] usb usb5-port1: unable to enumerate USB device [ 301.684024][ T9204] netlink: 64 bytes leftover after parsing attributes in process `syz.3.762'. [ 302.540174][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 303.170275][ T30] audit: type=1400 audit(1754542493.600:534): avc: denied { setopt } for pid=9222 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 304.410680][ T30] audit: type=1326 audit(1754542494.980:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.5.769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5aad8ebe9 code=0x0 [ 304.433415][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.045268][ T9262] netlink: 64 bytes leftover after parsing attributes in process `syz.2.775'. [ 305.160992][ T5968] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 305.432350][ T5968] usb 1-1: Using ep0 maxpacket: 32 [ 305.545378][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 305.662054][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 305.684867][ T5968] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.696946][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 305.708747][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 305.722919][ T5968] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 305.740449][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.773953][ T5968] usb 1-1: Product: syz [ 305.799340][ T5968] usb 1-1: Manufacturer: syz [ 305.804244][ T5968] usb 1-1: SerialNumber: syz [ 305.891671][ T5968] usb 1-1: config 0 descriptor?? [ 305.934953][ T9255] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 306.226079][ T5968] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28 [ 306.260186][ T5202] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 306.318856][ T5202] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 306.352455][ T5968] usb 1-1: USB disconnect, device number 37 [ 306.358430][ C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 306.868767][ T9294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.204973][ T9301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9488 sclass=netlink_route_socket pid=9301 comm=syz.4.786 [ 307.447758][ T9311] FAULT_INJECTION: forcing a failure. [ 307.447758][ T9311] name failslab, interval 1, probability 0, space 0, times 0 [ 307.460791][ T9311] CPU: 0 UID: 0 PID: 9311 Comm: syz.0.788 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 307.460816][ T9311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.460826][ T9311] Call Trace: [ 307.460832][ T9311] [ 307.460839][ T9311] dump_stack_lvl+0x16c/0x1f0 [ 307.460875][ T9311] should_fail_ex+0x512/0x640 [ 307.460891][ T9311] ? __kmalloc_noprof+0xbf/0x510 [ 307.460910][ T9311] ? tracepoint_add_func+0x2a6/0xea0 [ 307.460929][ T9311] should_failslab+0xc2/0x120 [ 307.460948][ T9311] __kmalloc_noprof+0xd2/0x510 [ 307.460968][ T9311] ? __pfx___bpf_trace_ata_eh_link_autopsy+0x10/0x10 [ 307.460989][ T9311] tracepoint_add_func+0x2a6/0xea0 [ 307.461007][ T9311] ? __pfx___bpf_trace_ata_eh_link_autopsy+0x10/0x10 [ 307.461031][ T9311] ? __pfx___bpf_trace_ata_eh_link_autopsy+0x10/0x10 [ 307.461047][ T9311] tracepoint_probe_register_prio_may_exist+0xb9/0x100 [ 307.461068][ T9311] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 307.461089][ T9311] ? find_held_lock+0x2b/0x80 [ 307.461107][ T9311] ? __pfx___bpf_trace_ata_eh_link_autopsy+0x10/0x10 [ 307.461129][ T9311] ? __anon_inode_getfile+0x17c/0x280 [ 307.461153][ T9311] bpf_probe_register+0x189/0x200 [ 307.461178][ T9311] bpf_raw_tp_link_attach+0x2ec/0x630 [ 307.461203][ T9311] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 307.461225][ T9311] ? find_held_lock+0x2b/0x80 [ 307.461246][ T9311] ? __fget_files+0x204/0x3c0 [ 307.461276][ T9311] ? fput+0x9b/0xd0 [ 307.461299][ T9311] ? __bpf_prog_get+0x97/0x2a0 [ 307.461318][ T9311] __sys_bpf+0x23c2/0x4de0 [ 307.461344][ T9311] ? __pfx___sys_bpf+0x10/0x10 [ 307.461366][ T9311] ? ksys_write+0x190/0x250 [ 307.461388][ T9311] ? __mutex_unlock_slowpath+0x163/0x800 [ 307.461430][ T9311] ? fput+0x9b/0xd0 [ 307.461452][ T9311] ? ksys_write+0x1ac/0x250 [ 307.461469][ T9311] ? __pfx_ksys_write+0x10/0x10 [ 307.461491][ T9311] __x64_sys_bpf+0x78/0xc0 [ 307.461514][ T9311] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.461538][ T9311] do_syscall_64+0xcd/0x4c0 [ 307.461566][ T9311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.461583][ T9311] RIP: 0033:0x7fc1b9d8ebe9 [ 307.461597][ T9311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.461613][ T9311] RSP: 002b:00007fc1bac58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.461629][ T9311] RAX: ffffffffffffffda RBX: 00007fc1b9fb5fa0 RCX: 00007fc1b9d8ebe9 [ 307.461640][ T9311] RDX: 0000000000000018 RSI: 00002000000000c0 RDI: 0000000000000011 [ 307.461650][ T9311] RBP: 00007fc1bac58090 R08: 0000000000000000 R09: 0000000000000000 [ 307.461660][ T9311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.461670][ T9311] R13: 00007fc1b9fb6038 R14: 00007fc1b9fb5fa0 R15: 00007ffe60c9aa98 [ 307.461694][ T9311] [ 308.391787][ T30] audit: type=1400 audit(1754542498.970:536): avc: denied { getopt } for pid=9325 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 308.683174][ T9335] comedi comedi3: comedi_parport: I/O port conflict (0x4f27,3) [ 308.693324][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 308.940919][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 309.498645][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 309.590827][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.713779][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 309.730602][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 309.748144][ T9] usb 5-1: Product: syz [ 309.770723][ T9] usb 5-1: Manufacturer: syz [ 309.785526][ T9] usb 5-1: SerialNumber: syz [ 310.022024][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 310.180906][ T5968] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 310.227227][ T9] usb 5-1: USB disconnect, device number 19 [ 310.239820][ T9] usblp0: removed [ 310.355700][ T5968] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 310.396702][ T5968] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 310.483148][ T5968] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.532713][ T5968] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 310.542210][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 310.550291][ T5968] usb 3-1: Product: syz [ 310.560585][ T5968] usb 3-1: Manufacturer: syz [ 310.565285][ T5968] usb 3-1: SerialNumber: syz [ 310.804206][ T30] audit: type=1326 audit(1754542501.370:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.0.799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1b9d8ebe9 code=0x0 [ 311.186384][ T5968] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 311.268189][ T5968] usb 3-1: USB disconnect, device number 29 [ 311.283193][ T5968] usblp0: removed [ 311.570447][ T9359] netlink: 92 bytes leftover after parsing attributes in process `syz.0.801'. [ 311.580679][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 311.593866][ T9359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.801'. [ 311.664422][ T9359] netlink: 44 bytes leftover after parsing attributes in process `syz.0.801'. [ 311.832519][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.846133][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.861204][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 311.871865][ T9363] FAULT_INJECTION: forcing a failure. [ 311.871865][ T9363] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 311.888542][ T9363] CPU: 1 UID: 0 PID: 9363 Comm: syz.5.802 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 311.888568][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.888579][ T9363] Call Trace: [ 311.888585][ T9363] [ 311.888593][ T9363] dump_stack_lvl+0x16c/0x1f0 [ 311.888625][ T9363] should_fail_ex+0x512/0x640 [ 311.888646][ T9363] _copy_to_user+0x32/0xd0 [ 311.888668][ T9363] simple_read_from_buffer+0xcb/0x170 [ 311.888689][ T9363] proc_fail_nth_read+0x197/0x240 [ 311.888710][ T9363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.888733][ T9363] ? rw_verify_area+0xcf/0x6c0 [ 311.888766][ T9363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.888786][ T9363] vfs_read+0x1e1/0xc60 [ 311.888808][ T9363] ? __pfx___mutex_lock+0x10/0x10 [ 311.888835][ T9363] ? __pfx_vfs_read+0x10/0x10 [ 311.888861][ T9363] ? __fget_files+0x20e/0x3c0 [ 311.888889][ T9363] ksys_read+0x12a/0x250 [ 311.888906][ T9363] ? __pfx_ksys_read+0x10/0x10 [ 311.888931][ T9363] do_syscall_64+0xcd/0x4c0 [ 311.888960][ T9363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.888978][ T9363] RIP: 0033:0x7fa5aad8d5fc [ 311.888993][ T9363] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 311.889011][ T9363] RSP: 002b:00007fa5abcc9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.889029][ T9363] RAX: ffffffffffffffda RBX: 00007fa5aafb5fa0 RCX: 00007fa5aad8d5fc [ 311.889040][ T9363] RDX: 000000000000000f RSI: 00007fa5abcc90a0 RDI: 0000000000000004 [ 311.889051][ T9363] RBP: 00007fa5abcc9090 R08: 0000000000000000 R09: 0000000000000000 [ 311.889061][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.889071][ T9363] R13: 00007fa5aafb6038 R14: 00007fa5aafb5fa0 R15: 00007fff55b102c8 [ 311.889096][ T9363] [ 312.071116][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.081627][ T9] usb 5-1: config 0 descriptor?? [ 312.151495][ T9367] 9pnet_fd: Insufficient options for proto=fd [ 312.305440][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 312.326624][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 312.433494][ T9] usb 5-1: USB disconnect, device number 20 [ 312.468407][ T9383] netlink: 64 bytes leftover after parsing attributes in process `syz.3.810'. [ 313.285662][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0d [ 313.540995][ T5968] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 313.816248][ T5968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 313.845096][ T5968] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 313.857200][ T5968] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 313.878992][ T5968] usb 1-1: config 1 interface 0 has no altsetting 1 [ 313.889773][ T5968] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 313.900456][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.908710][ T5968] usb 1-1: Product: syz [ 314.000016][ T5968] usb 1-1: Manufacturer: syz [ 314.027605][ T5968] usb 1-1: SerialNumber: syz [ 314.104134][ T5968] smsusb:smsusb_probe: board id=8, interface number 0 [ 314.460140][ T30] audit: type=1400 audit(1754542505.030:538): avc: denied { write } for pid=9406 comm="syz.4.816" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 314.467530][ T9405] netlink: 72 bytes leftover after parsing attributes in process `syz.2.815'. [ 314.493155][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 314.502950][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 314.610258][ T9394] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 314.773413][ T30] audit: type=1400 audit(1754542505.240:539): avc: denied { execmem } for pid=9414 comm="syz.5.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 315.389564][ T5968] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 315.400694][ T5968] smsusb 1-1:1.0: probe with driver smsusb failed with error -71 [ 315.412057][ T5968] usb 1-1: USB disconnect, device number 38 [ 316.127719][ T9422] trusted_key: encrypted_key: insufficient parameters specified [ 316.147325][ T9422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.384682][ T9433] hpfs: Bad magic ... probably not HPFS [ 316.462367][ T30] audit: type=1400 audit(1754542507.040:540): avc: denied { listen } for pid=9434 comm="syz.3.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 316.492243][ T5912] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 316.710797][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 316.808992][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.815323][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.847722][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.861980][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.875345][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 316.895850][ T5912] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 316.920874][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.949689][ T5912] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 316.959177][ T5912] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 316.967740][ T5912] usb 1-1: Manufacturer: syz [ 316.979795][ T5912] usb 1-1: config 0 descriptor?? [ 317.070873][ T54] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 317.094328][ T9444] netlink: 140 bytes leftover after parsing attributes in process `syz.2.827'. [ 317.454221][ T54] usb 5-1: Using ep0 maxpacket: 16 [ 317.460860][ T5912] rc_core: IR keymap rc-hauppauge not found [ 317.470171][ T5912] Registered IR keymap rc-empty [ 317.478101][ T54] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 317.488212][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 317.495518][ T54] usb 5-1: config 0 has no interface number 0 [ 317.590361][ T9448] syz.2.828: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 317.622397][ T54] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 317.648515][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 317.656924][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.665159][ T9448] ,cpuset= [ 317.665268][ T54] usb 5-1: Product: syz [ 317.668316][ T54] usb 5-1: Manufacturer: syz [ 317.668331][ T54] usb 5-1: SerialNumber: syz [ 317.673166][ T5912] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 317.681259][ T9448] / [ 317.683320][ T54] usb 5-1: config 0 descriptor?? [ 317.697854][ T9448] ,mems_allowed=0-1 [ 317.764584][ T9454] fuse: Bad value for 'fd' [ 317.789374][ T5912] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29 [ 317.807205][ T30] audit: type=1326 audit(1754542508.350:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.3.829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f763738ebe9 code=0x0 [ 317.829900][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.862386][ T9448] [ 317.943203][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.2.828 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 317.943231][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.943242][ T9448] Call Trace: [ 317.943248][ T9448] [ 317.943255][ T9448] dump_stack_lvl+0x16c/0x1f0 [ 317.943289][ T9448] warn_alloc+0x248/0x3a0 [ 317.943310][ T9448] ? __pfx_warn_alloc+0x10/0x10 [ 317.943338][ T9448] ? __vcalloc_noprof+0x4d/0x80 [ 317.943358][ T9448] ? __vmalloc_node_noprof+0xad/0xf0 [ 317.943388][ T9448] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 317.943414][ T9448] ? __pfx___mutex_trylock_common+0x10/0x10 [ 317.943449][ T9448] ? __vcalloc_noprof+0x4d/0x80 [ 317.943476][ T9448] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 317.943508][ T9448] ? __pfx___mutex_lock+0x10/0x10 [ 317.943542][ T9448] ? __vcalloc_noprof+0x4d/0x80 [ 317.943561][ T9448] __vmalloc_node_noprof+0xad/0xf0 [ 317.943586][ T9448] ? __vcalloc_noprof+0x4d/0x80 [ 317.943608][ T9448] __vcalloc_noprof+0x4d/0x80 [ 317.943628][ T9448] kvm_set_memslot+0xee3/0x1380 [ 317.943656][ T9448] ? kasan_save_track+0x14/0x30 [ 317.943676][ T9448] kvm_set_memory_region+0xebc/0x1680 [ 317.943710][ T9448] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 317.943743][ T9448] kvm_vm_ioctl+0x151b/0x4000 [ 317.943771][ T9448] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 317.943806][ T9448] ? kasan_quarantine_put+0x10a/0x240 [ 317.943823][ T9448] ? lockdep_hardirqs_on+0x7c/0x110 [ 317.943851][ T9448] ? find_held_lock+0x2b/0x80 [ 317.943873][ T9448] ? tomoyo_path_number_perm+0x295/0x580 [ 317.943899][ T9448] ? tomoyo_path_number_perm+0x18d/0x580 [ 317.943920][ T9448] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 317.943950][ T9448] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.943988][ T9448] ? hook_file_ioctl_common+0x145/0x410 [ 317.944022][ T9448] ? selinux_file_ioctl+0x180/0x270 [ 317.944044][ T9448] ? selinux_file_ioctl+0xb4/0x270 [ 317.944071][ T9448] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 317.944090][ T9448] __x64_sys_ioctl+0x18e/0x210 [ 317.944119][ T9448] do_syscall_64+0xcd/0x4c0 [ 317.944147][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.944165][ T9448] RIP: 0033:0x7fdf3678ebe9 [ 317.944180][ T9448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.944197][ T9448] RSP: 002b:00007fdf3763f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.944215][ T9448] RAX: ffffffffffffffda RBX: 00007fdf369b6090 RCX: 00007fdf3678ebe9 [ 317.944226][ T9448] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000005 [ 317.944236][ T9448] RBP: 00007fdf36811e19 R08: 0000000000000000 R09: 0000000000000000 [ 317.944246][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.944256][ T9448] R13: 00007fdf369b6128 R14: 00007fdf369b6090 R15: 00007ffd9b712fb8 [ 317.944282][ T9448] [ 318.228846][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.238308][ T9448] Mem-Info: [ 318.241526][ T9448] active_anon:17528 inactive_anon:0 isolated_anon:0 [ 318.241526][ T9448] active_file:17314 inactive_file:40667 isolated_file:0 [ 318.241526][ T9448] unevictable:1794 dirty:150 writeback:0 [ 318.241526][ T9448] slab_reclaimable:10350 slab_unreclaimable:99129 [ 318.241526][ T9448] mapped:34537 shmem:4730 pagetables:1491 [ 318.241526][ T9448] sec_pagetables:0 bounce:0 [ 318.241526][ T9448] kernel_misc_reclaimable:0 [ 318.241526][ T9448] free:1278019 free_pcp:24917 free_cma:0 [ 318.286966][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.294287][ T9448] Node 0 active_anon:70112kB inactive_anon:0kB active_file:69212kB inactive_file:162464kB unevictable:5640kB isolated(anon):0kB isolated(file):0kB mapped:138144kB dirty:600kB writeback:0kB shmem:17384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12776kB pagetables:5800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.380695][ T9448] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.383382][ T54] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 318.410648][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.438736][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 318.458454][ T9448] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.487320][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.498012][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 318.507632][ T9448] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 318.515606][ T30] audit: type=1400 audit(1754542509.080:542): avc: denied { create } for pid=9424 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 318.517008][ T9448] Node 0 [ 318.536994][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 318.545767][ T30] audit: type=1400 audit(1754542509.120:543): avc: denied { read write } for pid=9459 comm="syz.3.830" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 318.547351][ T9448] DMA32 free:1229804kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54628kB inactive_anon:0kB active_file:69212kB inactive_file:161148kB unevictable:1536kB writepending:628kB present:3129332kB managed:2539452kB mlocked:0kB bounce:0kB free_pcp:76932kB local_pcp:40316kB free_cma:0kB [ 318.601730][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.611678][ T9448] lowmem_reserve[]: 0 0 1 1 1 [ 318.616262][ T30] audit: type=1400 audit(1754542509.180:544): avc: denied { open } for pid=9459 comm="syz.3.830" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 318.616563][ T9448] Node 0 [ 318.642190][ T30] audit: type=1400 audit(1754542509.220:545): avc: denied { ioctl } for pid=9459 comm="syz.3.830" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x7c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 318.648551][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 318.672004][ T9448] Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 318.698001][ T9463] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 318.709498][ T9448] lowmem_reserve[]: 0 0 0 0 0 [ 318.719444][ T9448] Node 1 Normal free:3888440kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20484kB local_pcp:11200kB free_cma:0kB [ 318.759315][ T9448] lowmem_reserve[]: 0 0 0 0 0 [ 318.764320][ T9460] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 318.770913][ T9460] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 318.804405][ T9448] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 318.822940][ T9460] vhci_hcd vhci_hcd.0: Device attached [ 318.833897][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 318.841959][ T9466] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 318.848562][ T9466] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 318.879062][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 318.903074][ T9448] Node 0 DMA32: 545*4kB (UME) 753*8kB (ME) 467*16kB (ME) 586*32kB (UME) 245*64kB (UME) 109*128kB (UME) 64*256kB (UME) 41*512kB (UME) 14*1024kB (UM) 4*2048kB (UM) 270*4096kB (UM) = 1229884kB [ 318.993662][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 319.001082][ T1206] vhci_hcd: vhci_device speed not set [ 319.010219][ T30] audit: type=1400 audit(1754542509.480:546): avc: denied { create } for pid=9436 comm="syz.4.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 319.524049][ T54] gspca_spca1528: reg_w err -71 [ 319.529078][ T54] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 319.927654][ T9466] vhci_hcd vhci_hcd.0: Device attached [ 319.951545][ T1206] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 319.959279][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 319.968877][ T54] usb 5-1: USB disconnect, device number 21 [ 319.981476][ T9460] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 319.988097][ T9460] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 320.007148][ T9448] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 320.021593][ T9448] Node 1 Normal: 166*4kB (UME) 34*8kB (UME) 25*16kB (UME) 70*32kB (UME) 29*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3888440kB [ 320.021754][ T9448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.021769][ T9448] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 320.021781][ T9448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.021793][ T9448] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 320.021806][ T9448] 59857 total pagecache pages [ 320.021813][ T9448] 0 pages in swap cache [ 320.021819][ T9448] Free swap = 124996kB [ 320.021826][ T9448] Total swap = 124996kB [ 320.021833][ T9448] 2097051 pages RAM [ 320.021839][ T9448] 0 pages HighMem/MovableOnly [ 320.021846][ T9448] 430226 pages reserved [ 320.021851][ T9448] 0 pages cma reserved [ 320.022015][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 320.060677][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 320.082793][ T5912] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 320.082817][ T5912] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 320.117202][ T9460] vhci_hcd vhci_hcd.0: Device attached [ 320.144324][ T9463] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 320.144355][ T9463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 320.144427][ T9463] vhci_hcd vhci_hcd.0: Device attached [ 320.149647][ T9467] vhci_hcd: connection closed [ 320.150700][ T9461] vhci_hcd: connection reset by peer [ 320.152882][ T9471] vhci_hcd: connection closed [ 320.153050][ T992] vhci_hcd: stop threads [ 320.153066][ T992] vhci_hcd: release socket [ 320.153404][ T992] vhci_hcd: disconnect device [ 320.155455][ T9472] vhci_hcd: connection closed [ 320.155615][ T992] vhci_hcd: stop threads [ 320.155625][ T992] vhci_hcd: release socket [ 320.155659][ T992] vhci_hcd: disconnect device [ 320.167775][ T992] vhci_hcd: stop threads [ 320.329761][ T5969] usb 1-1: USB disconnect, device number 39 [ 320.362397][ T992] vhci_hcd: release socket [ 320.366949][ T992] vhci_hcd: disconnect device [ 320.375365][ T992] vhci_hcd: stop threads [ 320.379899][ T992] vhci_hcd: release socket [ 320.394149][ T7389] udevd[7389]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 320.403484][ T992] vhci_hcd: disconnect device [ 321.122034][ T54] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 321.341245][ T54] usb 4-1: Using ep0 maxpacket: 8 [ 321.366979][ T54] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 321.384843][ T54] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.403332][ T54] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.413689][ T54] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.424229][ T54] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.437818][ T54] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 321.448432][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.941752][ T30] audit: type=1400 audit(1754542512.520:547): avc: denied { write } for pid=9476 comm="syz.5.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 322.078798][ T9499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.153972][ T9480] IPVS: length: 39 != 8 [ 322.161213][ T30] audit: type=1400 audit(1754542512.660:548): avc: denied { nlmsg_write } for pid=9476 comm="syz.5.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 322.201049][ T9499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.324595][ T30] audit: type=1400 audit(1754542512.720:549): avc: denied { create } for pid=9511 comm="syz.4.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 322.436417][ T30] audit: type=1400 audit(1754542512.720:550): avc: denied { getopt } for pid=9511 comm="syz.4.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 322.493025][ T54] usb 4-1: GET_CAPABILITIES returned 0 [ 322.498557][ T54] usbtmc 4-1:16.0: can't read capabilities [ 322.756256][ T9534] fuse: Bad value for 'fd' [ 322.824844][ T30] audit: type=1326 audit(1754542513.340:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9526 comm="syz.4.846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x0 [ 323.567259][ T9541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.849'. [ 323.607599][ T9536] usbtmc 4-1:16.0: INITIATE_CLEAR returned 8a [ 323.816522][ T54] usb 4-1: USB disconnect, device number 25 [ 323.944945][ T30] audit: type=1400 audit(1754542514.450:552): avc: denied { read } for pid=9540 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 324.258477][ T9546] netlink: 44 bytes leftover after parsing attributes in process `syz.4.848'. [ 324.406190][ T30] audit: type=1326 audit(1754542514.970:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b9d8ebe9 code=0x7fc00000 [ 324.530876][ T30] audit: type=1326 audit(1754542514.970:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1b9d8d550 code=0x7fc00000 [ 324.651757][ T30] audit: type=1326 audit(1754542514.970:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b9d8ebe9 code=0x7fc00000 [ 324.675014][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.753967][ T30] audit: type=1326 audit(1754542514.970:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b9d8ebe9 code=0x7fc00000 [ 324.777176][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.195587][ T1206] vhci_hcd: vhci_device speed not set [ 325.847628][ T9575] delete_channel: no stack [ 326.016708][ T54] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 326.100611][ T5912] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 326.210590][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 326.222819][ T54] usb 1-1: config 0 has an invalid interface number: 146 but max is 3 [ 326.231305][ T54] usb 1-1: config 0 has an invalid interface number: 65 but max is 3 [ 326.239391][ T54] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 326.280598][ T54] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 326.290889][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 326.301932][ T54] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 326.320963][ T54] usb 1-1: config 0 has no interface number 0 [ 326.331096][ T5912] usb 4-1: config 0 has an invalid interface number: 146 but max is 3 [ 326.350665][ T5912] usb 4-1: config 0 has an invalid interface number: 65 but max is 3 [ 326.350671][ T5968] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 326.379057][ T54] usb 1-1: config 0 has no interface number 1 [ 326.390584][ T54] usb 1-1: config 0 interface 146 altsetting 248 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 326.421275][ T5912] usb 4-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 326.431608][ T54] usb 1-1: config 0 interface 146 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 326.442832][ T5912] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 326.453941][ T54] usb 1-1: config 0 interface 146 altsetting 248 has a duplicate endpoint with address 0x5, skipping [ 326.480814][ T5912] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 326.500244][ T54] usb 1-1: config 0 interface 65 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 326.500628][ T5968] usb 5-1: Using ep0 maxpacket: 32 [ 326.516379][ T5912] usb 4-1: config 0 has no interface number 0 [ 326.533451][ T5912] usb 4-1: config 0 has no interface number 1 [ 326.539584][ T5912] usb 4-1: config 0 interface 146 altsetting 248 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 326.552602][ T5968] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 326.555171][ T54] usb 1-1: config 0 interface 65 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 326.568885][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.613284][ T5912] usb 4-1: config 0 interface 146 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 326.613311][ T5912] usb 4-1: config 0 interface 146 altsetting 248 has a duplicate endpoint with address 0x5, skipping [ 326.613939][ T5912] usb 4-1: config 0 interface 65 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 326.613963][ T5912] usb 4-1: config 0 interface 65 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 326.613989][ T5912] usb 4-1: config 0 interface 146 has no altsetting 0 [ 326.614006][ T5912] usb 4-1: config 0 interface 65 has no altsetting 0 [ 326.622409][ T5912] usb 4-1: New USB device found, idVendor=06be, idProduct=0800, bcdDevice=ee.23 [ 326.622448][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.622467][ T5912] usb 4-1: Product: syz [ 326.622482][ T5912] usb 4-1: Manufacturer: syz [ 326.622496][ T5912] usb 4-1: SerialNumber: syz [ 326.634152][ T5968] usb 5-1: config 0 descriptor?? [ 326.637543][ T5912] usb 4-1: config 0 descriptor?? [ 326.724773][ T54] usb 1-1: config 0 interface 146 has no altsetting 0 [ 326.731710][ T54] usb 1-1: config 0 interface 65 has no altsetting 0 [ 326.769914][ T54] usb 1-1: New USB device found, idVendor=06be, idProduct=0800, bcdDevice=ee.23 [ 326.769944][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.769963][ T54] usb 1-1: Product: syz [ 326.769978][ T54] usb 1-1: Manufacturer: syz [ 326.769993][ T54] usb 1-1: SerialNumber: syz [ 326.772395][ T54] usb 1-1: config 0 descriptor?? [ 327.010191][ T54] usb 1-1: USB disconnect, device number 40 [ 327.021130][ T5968] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 327.043065][ T5968] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 327.079397][ T5968] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 327.107304][ T5968] usb 5-1: media controller created [ 327.145494][ T5912] usb 4-1: USB disconnect, device number 26 [ 327.182605][ T5968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 328.193301][ T9606] batman_adv: batadv0: Adding interface: ipvlan2 [ 328.224711][ T9606] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.745125][ T9606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.791836][ T9606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.804506][ T9606] batman_adv: batadv0: Interface activated: ipvlan2 [ 328.970642][ T54] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 329.070873][ T5912] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 329.135346][ T54] usb 1-1: unable to get BOS descriptor or descriptor too short [ 329.150379][ T54] usb 1-1: config 192 has an invalid interface number: 142 but max is 0 [ 329.201223][ T54] usb 1-1: config 192 has no interface number 0 [ 329.220732][ T54] usb 1-1: config 192 interface 142 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 329.270777][ T54] usb 1-1: config 192 interface 142 has no altsetting 0 [ 329.281618][ T5912] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.314682][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.328566][ T54] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=1e.52 [ 329.355610][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.368422][ T5912] usb 4-1: Product: syz [ 329.385085][ T5912] usb 4-1: Manufacturer: syz [ 329.454902][ T54] usb 1-1: Product: syz [ 329.461520][ T5912] usb 4-1: SerialNumber: syz [ 329.472596][ T5968] az6027: usb out operation failed. (-110) [ 329.483473][ T5968] az6027: usb out operation failed. (-32) [ 329.493645][ T54] usb 1-1: Manufacturer: syz [ 329.507326][ T54] usb 1-1: SerialNumber: syz [ 329.538681][ T5912] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 329.604600][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 329.604618][ T30] audit: type=1400 audit(1754542520.180:558): avc: denied { firmware_load } for pid=5919 comm="kworker/1:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 329.638076][ T5968] stb0899_attach: Driver disabled by Kconfig [ 329.725976][ T5968] az6027: no front-end attached [ 329.725976][ T5968] [ 329.746846][ T5919] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 329.799177][ T5968] az6027: usb out operation failed. (-71) [ 329.815949][ T5968] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 329.966922][ T5968] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 329.973317][ T54] s2255 1-1:192.142: Could not find bulk-in endpoint [ 330.018584][ T54] Sensoray 2255 driver load failed: 0xfffffff4 [ 330.101932][ T54] s2255 1-1:192.142: probe with driver s2255 failed with error -12 [ 330.270734][ T5969] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 330.285808][ T54] usb 1-1: USB disconnect, device number 41 [ 330.630968][ T5969] usb 3-1: Using ep0 maxpacket: 16 [ 330.642314][ T5968] dvb-usb: schedule remote query interval to 400 msecs. [ 330.650850][ T5968] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 330.667501][ T5969] usb 3-1: config 0 has an invalid interface number: 146 but max is 3 [ 330.680846][ T5968] usb 5-1: USB disconnect, device number 22 [ 330.693197][ T5969] usb 3-1: config 0 has an invalid interface number: 65 but max is 3 [ 330.735909][ T5969] usb 3-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 330.765206][ T5969] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 330.812785][ T5969] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 330.830894][ T5919] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 330.839586][ T5969] usb 3-1: config 0 has no interface number 0 [ 330.846667][ T9640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.855405][ T5969] usb 3-1: config 0 has no interface number 1 [ 330.861764][ T5969] usb 3-1: config 0 interface 146 altsetting 248 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 330.869836][ T5919] ath9k_htc: Failed to initialize the device [ 330.874123][ T5968] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 330.894891][ T9640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.902957][ T5969] usb 3-1: config 0 interface 146 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 330.929674][ T5969] usb 3-1: config 0 interface 146 altsetting 248 has a duplicate endpoint with address 0x5, skipping [ 330.934589][ T5919] usb 4-1: ath9k_htc: USB layer deinitialized [ 330.943304][ T5969] usb 3-1: config 0 interface 65 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 330.980790][ T5969] usb 3-1: config 0 interface 65 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 331.023618][ T5969] usb 3-1: config 0 interface 146 has no altsetting 0 [ 331.045946][ T5969] usb 3-1: config 0 interface 65 has no altsetting 0 [ 331.058453][ T5969] usb 3-1: New USB device found, idVendor=06be, idProduct=0800, bcdDevice=ee.23 [ 331.070244][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.079502][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 331.090148][ T5969] usb 3-1: Product: syz [ 331.094344][ T5969] usb 3-1: Manufacturer: syz [ 331.098982][ T5969] usb 3-1: SerialNumber: syz [ 331.117487][ T30] audit: type=1400 audit(1754542521.690:559): avc: denied { read } for pid=9642 comm="syz.4.877" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 331.125974][ T5969] usb 3-1: config 0 descriptor?? [ 331.149656][ T30] audit: type=1400 audit(1754542521.690:560): avc: denied { open } for pid=9642 comm="syz.4.877" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 331.230720][ T9] usb 1-1: device descriptor read/64, error -71 [ 331.375024][ T5969] usb 3-1: USB disconnect, device number 30 [ 331.470814][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 331.600679][ T9] usb 1-1: device descriptor read/64, error -71 [ 331.713325][ T9] usb usb1-port1: attempt power cycle [ 331.882552][ T9643] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 331.894685][ T9643] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 331.910326][ T9643] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 331.927208][ T9643] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.934788][ T9643] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 331.946457][ T9643] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 331.952669][ T9643] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 331.959546][ T9643] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 331.965691][ T9643] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 332.011155][ T5912] usb 4-1: USB disconnect, device number 27 [ 332.054879][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 332.101140][ T9] usb 1-1: device descriptor read/8, error -71 [ 332.231876][ T54] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 332.370613][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 332.380590][ T5919] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 332.401247][ T9] usb 1-1: device descriptor read/8, error -71 [ 332.410377][ T54] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 332.424685][ T54] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 162, changing to 11 [ 332.437808][ T54] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49264, setting to 1024 [ 332.457575][ T54] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 332.467462][ T5912] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 332.491568][ T54] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 332.503136][ T54] usb 3-1: Manufacturer: syz [ 332.507917][ T54] usb 3-1: SerialNumber: syz [ 332.522385][ T9] usb usb1-port1: unable to enumerate USB device [ 332.572355][ T5919] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.588913][ T5919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 332.598419][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 332.608813][ T5919] usb 5-1: Product: syz [ 332.613410][ T5919] usb 5-1: Manufacturer: syz [ 332.618213][ T5919] usb 5-1: SerialNumber: syz [ 332.660640][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 332.667626][ T5912] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 332.677133][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.697777][ T5912] usb 4-1: config 0 descriptor?? [ 332.739559][ T54] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 332.760048][ T54] usb 3-1: USB disconnect, device number 31 [ 332.859615][ T5919] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 332.913273][ T5912] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 332.930744][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.948741][ T5912] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 332.956671][ T5912] usb 4-1: media controller created [ 332.995809][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.231892][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 333.276470][ T9669] QAT: Device 7 not found [ 333.809705][ T9676] FAULT_INJECTION: forcing a failure. [ 333.809705][ T9676] name failslab, interval 1, probability 0, space 0, times 0 [ 333.822621][ T9676] CPU: 0 UID: 0 PID: 9676 Comm: syz.5.886 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 333.822645][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.822655][ T9676] Call Trace: [ 333.822660][ T9676] [ 333.822667][ T9676] dump_stack_lvl+0x16c/0x1f0 [ 333.822701][ T9676] should_fail_ex+0x512/0x640 [ 333.822716][ T9676] ? fs_reclaim_acquire+0xae/0x150 [ 333.822736][ T9676] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 333.822751][ T9676] should_failslab+0xc2/0x120 [ 333.822764][ T9676] __kmalloc_noprof+0xd2/0x510 [ 333.822778][ T9676] tomoyo_realpath_from_path+0xc2/0x6e0 [ 333.822795][ T9676] ? tomoyo_profile+0x47/0x60 [ 333.822820][ T9676] tomoyo_path_number_perm+0x245/0x580 [ 333.822836][ T9676] ? tomoyo_path_number_perm+0x237/0x580 [ 333.822855][ T9676] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 333.822889][ T9676] ? find_held_lock+0x2b/0x80 [ 333.822903][ T9676] ? hook_file_ioctl_common+0x145/0x410 [ 333.822921][ T9676] ? __fget_files+0x20e/0x3c0 [ 333.822936][ T9676] security_file_ioctl+0x9b/0x240 [ 333.822958][ T9676] __x64_sys_ioctl+0xb7/0x210 [ 333.822984][ T9676] do_syscall_64+0xcd/0x4c0 [ 333.823010][ T9676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.823024][ T9676] RIP: 0033:0x7fa5aad8ebe9 [ 333.823033][ T9676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.823043][ T9676] RSP: 002b:00007fa5abca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.823053][ T9676] RAX: ffffffffffffffda RBX: 00007fa5aafb6090 RCX: 00007fa5aad8ebe9 [ 333.823060][ T9676] RDX: 0000200000000040 RSI: 000000004008b100 RDI: 0000000000000009 [ 333.823066][ T9676] RBP: 00007fa5abca8090 R08: 0000000000000000 R09: 0000000000000000 [ 333.823072][ T9676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.823078][ T9676] R13: 00007fa5aafb6128 R14: 00007fa5aafb6090 R15: 00007fff55b102c8 [ 333.823099][ T9676] [ 333.823184][ T9676] ERROR: Out of memory at tomoyo_realpath_from_path. [ 334.038345][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 334.045801][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 334.045842][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 334.051858][ T5168] Bluetooth: hci5: command 0x0406 tx timeout [ 334.347504][ T9675] netlink: 44 bytes leftover after parsing attributes in process `syz.2.885'. [ 335.070882][ T5912] az6027: usb out operation failed. (-110) [ 335.097496][ T5912] az6027: usb out operation failed. (-32) [ 335.109255][ T5912] stb0899_attach: Driver disabled by Kconfig [ 335.131290][ T5968] usb 5-1: USB disconnect, device number 23 [ 335.153482][ T5968] usblp0: removed [ 335.176079][ T5912] az6027: no front-end attached [ 335.176079][ T5912] [ 335.310944][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 335.419868][ T5912] az6027: usb out operation failed. (-32) [ 335.430576][ T5912] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 335.447839][ T5912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 336.096779][ T5912] dvb-usb: schedule remote query interval to 400 msecs. [ 336.111000][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 336.117150][ T5855] Bluetooth: hci5: command 0x0406 tx timeout [ 336.117159][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 336.190768][ T5912] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 336.717270][ T5919] usb 4-1: USB disconnect, device number 28 [ 337.228004][ T5919] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 337.652616][ T9719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.924344][ T9724] syz.3.897: attempt to access beyond end of device [ 337.924344][ T9724] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 339.225722][ T30] audit: type=1400 audit(1754542529.620:561): avc: denied { write } for pid=9726 comm="syz.4.898" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 339.610608][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 339.797615][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.835805][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 339.887909][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 339.916603][ T9741] IPv6: sit1: Disabled Multicast RS [ 339.935893][ T9] usb 4-1: Product: syz [ 339.950560][ T9] usb 4-1: Manufacturer: syz [ 339.967170][ T9] usb 4-1: SerialNumber: syz [ 340.104393][ T30] audit: type=1400 audit(1754542530.680:562): avc: denied { write } for pid=9743 comm="syz.5.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 340.224374][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 340.667178][ T9749] syz.0.904: attempt to access beyond end of device [ 340.667178][ T9749] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 341.919520][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.250774][ T54] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 342.287746][ T5969] usb 4-1: USB disconnect, device number 29 [ 342.296242][ T5969] usblp0: removed [ 342.410686][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 342.417133][ T54] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 342.426422][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.438334][ T54] usb 5-1: config 0 descriptor?? [ 342.497993][ T30] audit: type=1400 audit(1754542533.070:563): avc: denied { shutdown } for pid=9763 comm="syz.3.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 342.649542][ T54] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 342.658829][ T54] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.669027][ T54] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 342.676270][ T54] usb 5-1: media controller created [ 342.689162][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.770669][ T5919] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 343.142368][ T5919] usb 4-1: config 1 interface 0 has no altsetting 0 [ 343.153993][ T5919] usb 4-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.40 [ 343.166549][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.177039][ T5919] usb 4-1: Product: syz [ 343.181798][ T5919] usb 4-1: Manufacturer: ఇ [ 343.186639][ T5919] usb 4-1: SerialNumber: syz [ 344.137272][ T54] az6027: usb out operation failed. (-71) [ 344.161066][ T54] az6027: usb out operation failed. (-71) [ 344.255428][ T54] stb0899_attach: Driver disabled by Kconfig [ 344.262241][ T54] az6027: no front-end attached [ 344.262241][ T54] [ 344.269648][ T54] az6027: usb out operation failed. (-71) [ 344.276072][ T54] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 344.291364][ T54] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 344.313171][ T54] dvb-usb: schedule remote query interval to 400 msecs. [ 344.322947][ T54] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 344.408678][ T9782] fuse: Bad value for 'fd' [ 344.749719][ T30] audit: type=1326 audit(1754542535.310:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.5.913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5aad8ebe9 code=0x0 [ 344.784541][ T54] usb 5-1: USB disconnect, device number 24 [ 344.823295][ T54] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 345.460208][ T5919] usbhid 4-1:1.0: can't add hid device: -71 [ 345.476408][ T5919] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 345.513787][ T5919] usb 4-1: USB disconnect, device number 30 [ 345.955528][ T9795] netlink: 44 bytes leftover after parsing attributes in process `syz.0.917'. [ 346.068279][ T9801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.092802][ T30] audit: type=1400 audit(1754542536.670:565): avc: denied { connect } for pid=9799 comm="syz.5.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 346.874144][ T30] audit: type=1400 audit(1754542537.440:566): avc: denied { accept } for pid=9810 comm="syz.4.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.881688][ T5919] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 346.893500][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.929928][ T30] audit: type=1400 audit(1754542537.490:567): avc: denied { setattr } for pid=9811 comm="syz.0.923" name="file0" dev="tmpfs" ino=985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 347.027436][ T30] audit: type=1800 audit(1754542537.600:568): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.923" name="/newroot/179/file0" dev="tmpfs" ino=985 res=0 errno=0 [ 347.074121][ T5919] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.118643][ T5919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 347.128589][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 347.150955][ T5919] usb 3-1: Product: syz [ 347.159534][ T5919] usb 3-1: Manufacturer: syz [ 347.168100][ T5919] usb 3-1: SerialNumber: syz [ 347.511424][ T5919] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 347.737468][ T9827] fuse: Bad value for 'fd' [ 347.901856][ T30] audit: type=1326 audit(1754542538.320:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9823 comm="syz.3.924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f763738ebe9 code=0x0 [ 348.282507][ T9825] hugetlbfs: syz.5.925 (9825): Using mlock ulimits for SHM_HUGETLB is obsolete [ 348.629194][ T9840] sp0: Synchronizing with TNC [ 349.290747][ T30] audit: type=1400 audit(1754542539.810:570): avc: denied { shutdown } for pid=9847 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 349.310251][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.608579][ T5969] usb 3-1: USB disconnect, device number 32 [ 349.636988][ T5969] usblp0: removed [ 350.419072][ T9862] netlink: 64 bytes leftover after parsing attributes in process `syz.5.934'. [ 350.886504][ T9865] netlink: 92 bytes leftover after parsing attributes in process `syz.4.935'. [ 350.950628][ T9865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.935'. [ 351.111458][ T9865] netlink: 44 bytes leftover after parsing attributes in process `syz.4.935'. [ 351.589361][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'. [ 351.602688][ T9868] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 351.922084][ T30] audit: type=1400 audit(1754542542.490:571): avc: denied { view } for pid=9874 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 351.924792][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 352.119378][ T9878] fuse: Bad value for 'fd' [ 352.130789][ T30] audit: type=1326 audit(1754542542.700:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.5.939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5aad8ebe9 code=0x0 [ 352.420688][ T5969] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 353.302740][ T5969] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.317595][ T5969] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 353.327968][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 353.580929][ T30] audit: type=1326 audit(1754542544.150:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.4.944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x0 [ 353.779927][ T5969] usb 4-1: Product: syz [ 353.784197][ T5969] usb 4-1: Manufacturer: syz [ 353.788803][ T5969] usb 4-1: SerialNumber: syz [ 354.026722][ T5969] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 354.125134][ T9905] batman_adv: batadv0: Adding interface: ipvlan0 [ 354.155833][ T9905] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.283079][ T9910] netlink: 44 bytes leftover after parsing attributes in process `syz.0.947'. [ 354.309894][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.323970][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.339386][ T9905] batman_adv: batadv0: Interface activated: ipvlan0 [ 355.202454][ T9921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.209879][ T9921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.218626][ T9921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.226073][ T9921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.235981][ T9921] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 355.242761][ T9921] batman_adv: batadv0: Removing interface: ipvlan0 [ 355.346730][ T5968] usb 4-1: USB disconnect, device number 31 [ 355.356788][ T5968] usblp0: removed [ 355.493943][ T9924] mkiss: ax0: crc mode is auto. [ 355.553779][ T9925] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 355.926199][ T30] audit: type=1400 audit(2000000001.510:574): avc: denied { accept } for pid=9937 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 357.680598][ T5968] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 357.840129][ T5968] usb 3-1: Using ep0 maxpacket: 32 [ 357.851959][ T5968] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 357.875577][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.297551][ T5968] usb 3-1: config 0 descriptor?? [ 360.454588][ T9963] vxcan0: tx address claim with dest, not broadcast [ 360.468348][ T5968] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 360.470157][ T5968] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 360.479214][ T5968] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 360.500221][ T30] audit: type=1400 audit(2000000006.060:575): avc: denied { firmware_load } for pid=5968 comm="kworker/0:7" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 361.540583][ T5967] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 361.692940][ T5967] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.741694][ T5967] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 361.830652][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 361.870945][ T5967] usb 1-1: Product: syz [ 361.891267][ T5967] usb 1-1: Manufacturer: syz [ 361.895902][ T5967] usb 1-1: SerialNumber: syz [ 362.304972][ T5967] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 362.434004][ T9983] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 362.440632][ T9983] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 362.516051][ T9983] vhci_hcd vhci_hcd.0: Device attached [ 362.516696][ T9989] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 362.691140][ T1206] vhci_hcd: vhci_device speed not set [ 362.703097][ T30] audit: type=1400 audit(2000000008.300:576): avc: denied { connect } for pid=9986 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 362.828216][ T1206] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 362.856290][ T9989] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16) [ 362.862897][ T9989] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 362.873345][ T9989] vhci_hcd vhci_hcd.0: Device attached [ 362.886927][ T9983] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(13) [ 362.893530][ T9983] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 362.902566][ T9983] vhci_hcd vhci_hcd.0: Device attached [ 362.915204][ T9983] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 362.921821][ T9983] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 362.929934][ T9983] vhci_hcd vhci_hcd.0: Device attached [ 362.958634][ T9997] vhci_hcd: connection closed [ 362.958767][ T9995] vhci_hcd: connection closed [ 362.959059][ T9993] vhci_hcd: connection closed [ 362.963639][ T48] vhci_hcd: stop threads [ 362.977207][ T9984] vhci_hcd: connection reset by peer [ 362.987920][ T48] vhci_hcd: release socket [ 362.992560][ T48] vhci_hcd: disconnect device [ 362.997852][ T48] vhci_hcd: stop threads [ 363.004600][ T48] vhci_hcd: release socket [ 363.010039][ T48] vhci_hcd: disconnect device [ 363.014954][ T48] vhci_hcd: stop threads [ 363.030102][ T48] vhci_hcd: release socket [ 363.036568][ T48] vhci_hcd: disconnect device [ 363.043946][ T48] vhci_hcd: stop threads [ 363.049243][ T48] vhci_hcd: release socket [ 363.058432][ T48] vhci_hcd: disconnect device [ 363.292918][T10004] netlink: 44 bytes leftover after parsing attributes in process `syz.3.969'. [ 364.191828][ T5919] usb 1-1: USB disconnect, device number 46 [ 364.200077][ T5919] usblp0: removed [ 365.411307][T10023] netlink: 'syz.5.974': attribute type 1 has an invalid length. [ 365.427205][T10023] netlink: 75 bytes leftover after parsing attributes in process `syz.5.974'. [ 366.350693][ T5967] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 366.992818][ T5967] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 367.010220][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.048126][ T5967] usb 4-1: config 0 descriptor?? [ 367.088813][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 367.118028][ T30] audit: type=1400 audit(2000000012.710:577): avc: denied { name_connect } for pid=10048 comm="syz.0.980" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 367.155065][ T5912] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 367.259456][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.269736][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.380588][ T5919] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 367.540718][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 367.547794][ T5919] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 367.556296][ T5919] usb 1-1: config 0 has no interface number 0 [ 367.562861][ T5919] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 367.575310][ T5919] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 367.584872][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 367.593337][ T5919] usb 1-1: Product: syz [ 367.597493][ T5919] usb 1-1: SerialNumber: syz [ 367.604506][ T5919] usb 1-1: config 0 descriptor?? [ 367.613123][ T5919] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 367.621719][ T5919] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input33 [ 367.940730][ T1206] vhci_hcd: vhci_device speed not set [ 368.016594][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 368.024097][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.024665][ T5969] usb 1-1: USB disconnect, device number 47 [ 368.031049][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 368.058755][ T5969] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 368.084604][T10042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.978'. [ 369.520471][ T5967] usb 4-1: Cannot set autoneg [ 369.560153][ T5967] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 369.631896][ T5967] usb 4-1: USB disconnect, device number 32 [ 369.707470][T10063] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 369.809684][T10068] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.984'. [ 369.869003][ T30] audit: type=1400 audit(2000000015.400:578): avc: denied { setopt } for pid=10060 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.888576][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.559587][T10081] netlink: 44 bytes leftover after parsing attributes in process `syz.5.988'. [ 370.822096][T10084] fuse: Bad value for 'fd' [ 370.918536][ T30] audit: type=1326 audit(2000000016.430:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.4.989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x0 [ 371.705645][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.423969][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.514569][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.698694][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.881157][T10098] vivid-000: kernel_thread() failed [ 373.277523][ T48] bridge_slave_1: left allmulticast mode [ 373.296125][ T48] bridge_slave_1: left promiscuous mode [ 373.333509][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.350657][ T30] audit: type=1400 audit(2000000018.940:580): avc: denied { bind } for pid=10102 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 373.411642][ T30] audit: type=1400 audit(2000000018.940:581): avc: denied { node_bind } for pid=10102 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 373.458933][ T48] bridge_slave_0: left allmulticast mode [ 373.487540][ T48] bridge_slave_0: left promiscuous mode [ 373.495602][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.507772][ T30] audit: type=1400 audit(2000000018.940:582): avc: denied { read } for pid=10102 comm="syz.2.998" path="socket:[24396]" dev="sockfs" ino=24396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 373.711137][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 373.878585][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.889707][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.898367][ T24] usb 1-1: device descriptor read/64, error -71 [ 373.898484][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.914498][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.921998][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.610566][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 374.750602][ T24] usb 1-1: device descriptor read/64, error -71 [ 374.875454][ T24] usb usb1-port1: attempt power cycle [ 374.930132][T10132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1001'. [ 375.241039][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 375.273722][ T24] usb 1-1: device descriptor read/8, error -71 [ 375.316640][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.342856][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.396237][ T48] bond0 (unregistering): Released all slaves [ 375.530958][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 375.575924][T10120] wlan0 speed is unknown, defaulting to 1000 [ 375.601399][ T24] usb 1-1: device descriptor read/8, error -71 [ 375.721121][ T24] usb usb1-port1: unable to enumerate USB device [ 376.059471][ T5855] Bluetooth: hci0: command tx timeout [ 376.364851][ T5967] wlan0 speed is unknown, defaulting to 1000 [ 376.384481][ T5967] syz2: Port: 1 Link DOWN [ 376.579462][T10156] fuse: Bad value for 'fd' [ 376.694403][ T30] audit: type=1326 audit(2000000022.190:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.2.1007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf3678ebe9 code=0x0 [ 376.994074][ T48] hsr_slave_0: left promiscuous mode [ 377.011172][ T48] hsr_slave_1: left promiscuous mode [ 377.018798][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.033924][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.056034][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.076497][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.326182][ T48] veth1_macvtap: left promiscuous mode [ 377.346906][ T48] veth0_macvtap: left promiscuous mode [ 377.680656][ T48] veth1_vlan: left promiscuous mode [ 377.692380][ T48] veth0_vlan: left promiscuous mode [ 377.700616][ T5912] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 377.816222][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1010'. [ 377.883172][ T5912] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.926483][ T5912] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 377.941221][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 377.959089][ T5912] usb 1-1: Product: syz [ 377.973215][ T5912] usb 1-1: Manufacturer: syz [ 378.005085][ T5912] usb 1-1: SerialNumber: syz [ 378.116246][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.123813][ T5855] Bluetooth: hci0: command tx timeout [ 378.129814][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.326389][ T5912] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 378.513299][ T5912] usb 1-1: USB disconnect, device number 52 [ 378.549617][ T5912] usblp0: removed [ 379.291997][ T5969] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 379.704137][T10200] loop6: detected capacity change from 0 to 524287999 [ 379.968183][ T30] audit: type=1400 audit(2000000025.200:584): avc: denied { append } for pid=10191 comm="syz.0.1016" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.022218][ T30] audit: type=1326 audit(2000000025.600:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3678ebe9 code=0x7ffc0000 [ 380.074053][ T5969] usb 5-1: Using ep0 maxpacket: 32 [ 380.180897][ T5969] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 380.240525][ T5855] Bluetooth: hci0: command tx timeout [ 380.327475][ T30] audit: type=1326 audit(2000000025.600:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fdf3678ebe9 code=0x7ffc0000 [ 380.359309][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.473663][ T30] audit: type=1326 audit(2000000025.600:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3678ebe9 code=0x7ffc0000 [ 380.490966][ T5969] usb 5-1: config 0 descriptor?? [ 380.541043][ T30] audit: type=1326 audit(2000000025.600:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf3678ebe9 code=0x7ffc0000 [ 380.604090][ T30] audit: type=1326 audit(2000000025.600:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3678ebe9 code=0x7ffc0000 [ 380.669748][ T30] audit: type=1326 audit(2000000025.600:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdf3678ebe9 code=0x7ffc0000 [ 380.716503][ T30] audit: type=1326 audit(2000000025.600:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf3678ec23 code=0x7ffc0000 [ 380.730016][ T5969] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 380.741491][ T30] audit: type=1326 audit(2000000025.600:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf3678ec23 code=0x7ffc0000 [ 380.773834][ T30] audit: type=1326 audit(2000000025.600:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3678ebe9 code=0x7ffc0000 [ 381.024278][ T5969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.058174][ T5969] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 381.085536][ T5969] usb 5-1: media controller created [ 381.190573][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.507081][T10120] chnl_net:caif_netlink_parms(): no params data found [ 382.271105][ T5855] Bluetooth: hci0: command tx timeout [ 382.318291][ T48] IPVS: stop unused estimator thread 0... [ 382.328005][T10223] tipc: Started in network mode [ 382.345718][T10223] tipc: Node identity 4, cluster identity 4711 [ 382.353250][T10223] tipc: Node number set to 4 [ 382.426199][T10120] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.449373][T10120] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.457205][T10120] bridge_slave_0: entered allmulticast mode [ 382.468679][T10120] bridge_slave_0: entered promiscuous mode [ 382.485725][T10120] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.495043][T10120] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.505474][T10120] bridge_slave_1: entered allmulticast mode [ 382.514579][T10120] bridge_slave_1: entered promiscuous mode [ 382.633164][ T5969] az6027: usb out operation failed. (-71) [ 382.685784][ T5969] az6027: usb out operation failed. (-71) [ 382.701540][ T5969] stb0899_attach: Driver disabled by Kconfig [ 382.722084][ T5969] az6027: no front-end attached [ 382.722084][ T5969] [ 382.729971][ T5969] az6027: usb out operation failed. (-71) [ 382.736908][ T5969] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 382.754484][ T5969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input34 [ 382.852159][ T5969] dvb-usb: schedule remote query interval to 400 msecs. [ 382.873841][T10120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.346125][ T5969] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 383.359953][ T5969] usb 5-1: USB disconnect, device number 26 [ 383.391299][T10120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.508756][ T5969] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 383.698320][ T1206] kernel write not supported for file /sg0 (pid: 1206 comm: kworker/1:2) [ 383.739904][T10246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.745954][T10248] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1022'. [ 383.820145][T10246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.834077][T10120] team0: Port device team_slave_0 added [ 383.943162][T10120] team0: Port device team_slave_1 added [ 383.956054][T10253] netlink: 'syz.2.1023': attribute type 21 has an invalid length. [ 383.984805][T10253] netlink: 'syz.2.1023': attribute type 1 has an invalid length. [ 383.992571][T10253] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1023'. [ 384.282455][T10120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.325251][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.391002][T10120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.523275][T10120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.530931][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.556800][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.649629][T10120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.036725][T10262] ceph: No mds server is up or the cluster is laggy [ 385.057263][T10265] vxfs: WRONG superblock magic 00000000 at 1 [ 385.064975][T10265] vxfs: WRONG superblock magic 00000000 at 8 [ 385.071091][T10265] vxfs: can't find superblock. [ 385.103087][ T1206] libceph: connect (1)[c::]:6789 error -101 [ 385.110878][ T1206] libceph: mon0 (1)[c::]:6789 connect error [ 385.455900][T10120] hsr_slave_0: entered promiscuous mode [ 385.469045][T10120] hsr_slave_1: entered promiscuous mode [ 385.479607][T10120] debugfs: 'hsr0' already exists in 'hsr' [ 385.494147][T10120] Cannot create hsr debugfs directory [ 386.142345][ T5967] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 386.450646][ T5967] usb 1-1: Using ep0 maxpacket: 32 [ 386.470222][ T5967] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 386.516326][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.554154][ T5967] usb 1-1: Product: syz [ 386.571390][ T5967] usb 1-1: Manufacturer: syz [ 386.576018][ T5967] usb 1-1: SerialNumber: syz [ 386.621798][ T5967] usb 1-1: config 0 descriptor?? [ 386.657875][ T5967] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 386.758271][T10120] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 386.840205][T10120] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 387.441668][T10300] bridge0: port 3(syz_tun) entered blocking state [ 387.448731][T10300] bridge0: port 3(syz_tun) entered disabled state [ 387.515098][T10300] syz_tun: entered allmulticast mode [ 387.548936][T10300] syz_tun: entered promiscuous mode [ 387.691186][T10308] fuse: Bad value for 'fd' [ 387.710878][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 387.710918][ T30] audit: type=1326 audit(2000000033.290:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10306 comm="syz.4.1034" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x0 [ 387.994605][ T5967] gspca_stk1135: reg_w 0x3 err -110 [ 388.193679][T10312] syz.0.1028: attempt to access beyond end of device [ 388.193679][T10312] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 388.210760][T10312] syz.0.1028: attempt to access beyond end of device [ 388.210760][T10312] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 388.224007][T10312] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 388.238965][T10312] syz.0.1028: attempt to access beyond end of device [ 388.238965][T10312] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 388.252330][T10312] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 388.254345][T10300] bridge0: port 3(syz_tun) entered blocking state [ 388.261933][T10312] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 388.268735][T10300] bridge0: port 3(syz_tun) entered forwarding state [ 388.276223][T10312] UDF-fs: Scanning with blocksize 512 failed [ 388.303721][T10312] syz.0.1028: attempt to access beyond end of device [ 388.303721][T10312] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 388.318391][T10312] syz.0.1028: attempt to access beyond end of device [ 388.318391][T10312] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 388.331631][T10312] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 388.341835][T10312] syz.0.1028: attempt to access beyond end of device [ 388.341835][T10312] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 388.355069][T10312] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 388.364624][T10312] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 388.372296][T10312] UDF-fs: Scanning with blocksize 1024 failed [ 388.380640][T10312] syz.0.1028: attempt to access beyond end of device [ 388.380640][T10312] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 388.394297][T10312] syz.0.1028: attempt to access beyond end of device [ 388.394297][T10312] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 388.408706][ T5967] gspca_stk1135: serial bus timeout: status=0x00 [ 388.426315][ T5967] gspca_stk1135: Sensor write failed [ 388.431842][ T5967] gspca_stk1135: serial bus timeout: status=0x00 [ 388.438193][ T5967] gspca_stk1135: Sensor write failed [ 388.465094][T10312] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 388.475515][T10312] syz.0.1028: attempt to access beyond end of device [ 388.475515][T10312] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 388.488948][T10312] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 388.498683][T10312] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 388.506398][T10312] UDF-fs: Scanning with blocksize 2048 failed [ 388.514899][T10312] syz.0.1028: attempt to access beyond end of device [ 388.514899][T10312] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 388.530196][T10312] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 388.542399][T10312] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 388.552035][T10312] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 388.559709][T10312] UDF-fs: Scanning with blocksize 4096 failed [ 388.566358][T10312] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 388.627954][ T5967] gspca_stk1135: serial bus timeout: status=0x00 [ 388.637511][ T5967] gspca_stk1135: Sensor read failed [ 388.643966][T10120] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 388.657438][ T30] audit: type=1326 audit(2000000034.250:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 388.659241][ T5967] gspca_stk1135: serial bus timeout: status=0x00 [ 388.701855][ T5967] gspca_stk1135: Sensor read failed [ 388.720313][ T5967] gspca_stk1135: Detected sensor type unknown (0x0) [ 388.732738][ T5967] gspca_stk1135: serial bus timeout: status=0x00 [ 388.739173][ T5967] gspca_stk1135: Sensor read failed [ 388.748526][T10120] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 388.782989][ T5967] gspca_stk1135: serial bus timeout: status=0x00 [ 388.784017][ T30] audit: type=1326 audit(2000000034.250:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 388.813110][ T5967] gspca_stk1135: Sensor read failed [ 388.813140][ T5967] gspca_stk1135: serial bus timeout: status=0x00 [ 388.813150][ T5967] gspca_stk1135: Sensor write failed [ 388.813174][ T5967] gspca_stk1135: serial bus timeout: status=0x00 [ 388.823809][ T30] audit: type=1326 audit(2000000034.300:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 388.861616][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 388.959011][ T5967] gspca_stk1135: Sensor write failed [ 388.966326][ T5967] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 388.979952][ T5967] usb 1-1: USB disconnect, device number 53 [ 388.988908][ T30] audit: type=1326 audit(2000000034.300:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 389.117932][ T30] audit: type=1326 audit(2000000034.300:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 389.141327][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.150171][ T30] audit: type=1326 audit(2000000034.300:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 389.174885][ T30] audit: type=1326 audit(2000000034.300:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 389.207123][ T30] audit: type=1326 audit(2000000034.300:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 389.230834][ T30] audit: type=1326 audit(2000000034.300:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 389.254194][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.674494][T10335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1038'. [ 390.248768][T10342] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 390.255404][T10342] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 390.303107][T10342] vhci_hcd vhci_hcd.0: Device attached [ 390.390177][T10347] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 390.490125][T10120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.497394][ T9] vhci_hcd: vhci_device speed not set [ 390.529393][T10342] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 390.536020][T10342] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 390.619044][ T9] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 390.629430][T10342] vhci_hcd vhci_hcd.0: Device attached [ 390.639752][T10120] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.654358][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.662493][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.681330][T10342] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 390.687947][T10342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.701722][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.708891][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.722870][T10342] vhci_hcd vhci_hcd.0: Device attached [ 390.738626][T10347] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(21) [ 390.745254][T10347] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 391.101188][T10120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.200893][T10347] vhci_hcd vhci_hcd.0: Device attached [ 391.304759][T10350] vhci_hcd: connection closed [ 391.305476][T10354] vhci_hcd: connection closed [ 391.310274][T10345] vhci_hcd: connection reset by peer [ 391.322484][T10356] vhci_hcd: connection closed [ 391.328219][ T6286] vhci_hcd: stop threads [ 391.343635][ T6286] vhci_hcd: release socket [ 391.361161][ T6286] vhci_hcd: disconnect device [ 391.390063][ T6286] vhci_hcd: stop threads [ 391.411458][ T6286] vhci_hcd: release socket [ 391.439172][ T6286] vhci_hcd: disconnect device [ 391.463716][ T6286] vhci_hcd: stop threads [ 391.463730][ T6286] vhci_hcd: release socket [ 391.463756][ T6286] vhci_hcd: disconnect device [ 391.463997][ T6286] vhci_hcd: stop threads [ 391.464004][ T6286] vhci_hcd: release socket [ 391.464029][ T6286] vhci_hcd: disconnect device [ 392.375666][T10120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.634355][T10383] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1044'. [ 393.994912][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 393.994985][ T30] audit: type=1400 audit(2000000039.560:639): avc: denied { bind } for pid=10393 comm="syz.2.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 394.322372][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1048'. [ 394.830815][T10120] veth0_vlan: entered promiscuous mode [ 394.877975][T10120] veth1_vlan: entered promiscuous mode [ 395.134908][T10120] veth0_macvtap: entered promiscuous mode [ 395.146869][T10120] veth1_macvtap: entered promiscuous mode [ 395.166002][T10120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.007156][T10432] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 397.015879][ T9] vhci_hcd: vhci_device speed not set [ 397.027485][T10432] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 397.034014][T10432] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 397.042040][T10432] vhci_hcd vhci_hcd.0: Device attached [ 397.053554][T10429] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 397.060078][T10429] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 397.775520][T10429] vhci_hcd vhci_hcd.0: Device attached [ 397.813123][T10432] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 397.819747][T10432] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 397.932196][T10120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.957521][T10432] vhci_hcd vhci_hcd.0: Device attached [ 397.999118][ T78] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.015093][ T78] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.128221][T10437] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.150868][T10432] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 398.157511][T10432] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 398.168671][ T6286] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.180688][ T9] vhci_hcd: vhci_device speed not set [ 398.192094][T10432] vhci_hcd vhci_hcd.0: Device attached [ 398.203018][T10446] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1054'. [ 398.216672][T10437] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.256403][ T9] usb 41-1: device descriptor read/64, error -110 [ 398.309631][ T6286] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.453215][ T9] vhci_hcd: vhci_device speed not set [ 398.468405][T10433] vhci_hcd: connection closed [ 398.468518][T10443] vhci_hcd: connection closed [ 398.468604][T10435] vhci_hcd: connection closed [ 398.478541][T10431] vhci_hcd: connection closed [ 398.483373][ T7240] vhci_hcd: stop threads [ 398.504153][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.527156][ T7240] vhci_hcd: release socket [ 398.535684][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.537584][ T7240] vhci_hcd: disconnect device [ 398.544153][ T9] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 398.570748][T10436] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 398.582957][ T7240] vhci_hcd: stop threads [ 398.588846][ T7240] vhci_hcd: release socket [ 398.636083][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.653211][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.662970][T10456] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 398.731326][ T30] audit: type=1400 audit(2000000044.330:640): avc: denied { mounton } for pid=10120 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 398.738745][ T7240] vhci_hcd: disconnect device [ 398.791825][ T7240] vhci_hcd: stop threads [ 398.796147][ T7240] vhci_hcd: release socket [ 398.800794][ T7240] vhci_hcd: disconnect device [ 398.811393][ T7240] vhci_hcd: stop threads [ 398.815671][ T7240] vhci_hcd: release socket [ 398.828363][ T7240] vhci_hcd: disconnect device [ 399.221192][T10456] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.235695][T10456] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 399.248524][T10456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 399.259567][T10456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 399.271035][T10456] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.312852][T10456] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 399.362196][T10456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.377837][T10456] usb 1-1: Product: syz [ 399.382086][T10456] usb 1-1: Manufacturer: syz [ 399.386787][T10456] usb 1-1: SerialNumber: syz [ 399.412044][T10456] usb 1-1: config 0 descriptor?? [ 399.418932][T10453] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 400.120688][T10456] rc_core: IR keymap rc-xbox-dvd not found [ 400.133872][T10456] Registered IR keymap rc-empty [ 400.162293][T10456] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 400.206065][T10456] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input35 [ 400.355549][ T30] audit: type=1400 audit(2000000045.940:641): avc: denied { connect } for pid=10483 comm="syz.6.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 400.460440][ T30] audit: type=1400 audit(2000000045.950:642): avc: denied { bind } for pid=10483 comm="syz.6.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 400.650620][ T5912] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 401.048677][T10507] binfmt_misc: register: failed to install interpreter file ./file0 [ 401.236140][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 401.804653][ T5905] usb 1-1: USB disconnect, device number 54 [ 401.810666][ C0] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 401.972864][ T5912] usb 7-1: config 0 has an invalid interface number: 180 but max is 0 [ 402.631262][ T5912] usb 7-1: config 0 has no interface number 0 [ 402.637378][ T5912] usb 7-1: config 0 interface 180 has no altsetting 0 [ 403.269277][ T30] audit: type=1400 audit(2000000048.860:643): avc: denied { create } for pid=10519 comm="syz.4.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 403.472788][T10520] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.1068:10520 [ 403.482707][ T30] audit: type=1400 audit(2000000049.070:644): avc: denied { ioctl } for pid=10519 comm="syz.4.1068" path="socket:[27012]" dev="sockfs" ino=27012 ioctlcmd=0x61f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 403.598147][ T5912] usb 7-1: string descriptor 0 read error: -71 [ 403.606165][ T5912] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=f0.8f [ 403.620399][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.634082][ T5912] usb 7-1: config 0 descriptor?? [ 403.639778][ T5912] usb 7-1: can't set config #0, error -71 [ 403.701382][ T9] vhci_hcd: vhci_device speed not set [ 403.712216][ T5912] usb 7-1: USB disconnect, device number 2 [ 404.778061][T10555] bio_check_eod: 2 callbacks suppressed [ 404.778072][T10555] syz.2.1074: attempt to access beyond end of device [ 404.778072][T10555] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 405.208832][T10565] overlayfs: failed to resolve './file2': -2 [ 405.358732][T10570] netlink: 'syz.0.1077': attribute type 14 has an invalid length. [ 405.578942][T10582] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1078'. [ 406.344266][T10595] fuse: Bad value for 'fd' [ 406.801606][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 407.015715][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 407.057556][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 407.087728][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.110780][ T9] usb 1-1: config 0 descriptor?? [ 408.011339][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 408.038663][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 408.116241][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 408.158052][ T9] usb 1-1: media controller created [ 408.228091][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.056495][ T30] audit: type=1400 audit(2000000054.640:645): avc: denied { connect } for pid=10616 comm="syz.6.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.086244][ T9] az6027: usb out operation failed. (-71) [ 409.097474][ T9] az6027: usb out operation failed. (-71) [ 409.160666][ T9] stb0899_attach: Driver disabled by Kconfig [ 409.166680][ T9] az6027: no front-end attached [ 409.166680][ T9] [ 409.190005][ T9] az6027: usb out operation failed. (-71) [ 409.198311][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 409.227702][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 409.277099][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 409.305559][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 409.323566][T10636] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1091'. [ 409.343473][ T9] usb 1-1: USB disconnect, device number 55 [ 409.443288][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 409.834207][ T30] audit: type=1400 audit(2000000055.260:646): avc: denied { firmware_load } for pid=10629 comm="syz.2.1089" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 409.859039][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.014260][T10641] syz.2.1089 (10641) used greatest stack depth: 16216 bytes left [ 410.248219][ T30] audit: type=1400 audit(2000000055.830:647): avc: denied { map } for pid=10649 comm="syz.4.1094" path="socket:[27955]" dev="sockfs" ino=27955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 410.326121][T10652] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 410.524723][ T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 410.879370][ T24] usb 1-1: device descriptor read/64, error -71 [ 411.583067][ T24] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 411.720902][ T24] usb 1-1: device descriptor read/64, error -71 [ 411.840742][ T24] usb usb1-port1: attempt power cycle [ 412.210968][ T24] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 412.241612][ T24] usb 1-1: device descriptor read/8, error -71 [ 412.378368][ T30] audit: type=1400 audit(2000000057.970:648): avc: denied { map } for pid=10681 comm="syz.6.1098" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 412.409760][ T30] audit: type=1400 audit(2000000057.970:649): avc: denied { write execute } for pid=10681 comm="syz.6.1098" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 412.582217][ T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 412.860558][ T5905] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 413.542352][ T5905] usb 7-1: Using ep0 maxpacket: 32 [ 413.591425][ T24] usb 1-1: device descriptor read/8, error -71 [ 413.605260][ T5905] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 413.700785][ T24] usb usb1-port1: unable to enumerate USB device [ 414.493697][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.509531][ T5905] usb 7-1: Product: syz [ 414.514628][ T5905] usb 7-1: Manufacturer: syz [ 414.543395][ T5905] usb 7-1: SerialNumber: syz [ 414.571584][ T5905] usb 7-1: config 0 descriptor?? [ 414.750605][ T24] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 414.910694][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 414.920769][ T24] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.935148][ T24] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.946344][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 414.954515][ T24] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 414.964164][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.986609][ T24] usb 1-1: config 0 descriptor?? [ 415.207258][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'. [ 415.244741][T10702] bridge1: port 1(ip6gretap1) entered blocking state [ 415.260540][T10702] bridge1: port 1(ip6gretap1) entered disabled state [ 415.282171][T10702] ip6gretap1: entered allmulticast mode [ 415.303990][ T30] audit: type=1400 audit(2000000060.900:650): avc: denied { ioctl } for pid=10701 comm="syz.0.1102" path="socket:[28066]" dev="sockfs" ino=28066 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.305202][T10702] ip6gretap1: entered promiscuous mode [ 415.552774][ T5905] airspy 7-1:0.0: usb_control_msg() failed -71 request 0a [ 415.560083][ T5905] airspy 7-1:0.0: Could not detect board [ 415.566238][ T5905] airspy 7-1:0.0: probe with driver airspy failed with error -71 [ 415.611573][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 415.621737][ T5905] usb 7-1: USB disconnect, device number 3 [ 415.788843][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 415.814675][ T24] usb 1-1: USB disconnect, device number 60 [ 420.110863][ T5905] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 420.346248][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.363083][ T5905] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 420.886706][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.897335][ T5905] usb 7-1: config 0 descriptor?? [ 421.343288][ T5905] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 421.465312][T10787] overlayfs: failed to resolve './file1': -2 [ 421.539583][ T5905] lenovo 0003:17EF:6047.000B: Failed to switch F7/9/11 mode: -71 [ 421.591979][ T5905] lenovo 0003:17EF:6047.000B: Failed to switch middle button: -71 [ 421.721850][ T5905] lenovo 0003:17EF:6047.000B: Fn-lock setting failed: -71 [ 421.781088][ T5905] lenovo 0003:17EF:6047.000B: Sensitivity setting failed: -71 [ 421.800923][ T5905] usb 7-1: USB disconnect, device number 4 [ 422.906833][ T5905] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 423.051192][T10813] tipc: Started in network mode [ 423.089185][T10813] tipc: Node identity e0000001, cluster identity 4711 [ 423.120680][T10813] tipc: Enabling of bearer rejected, failed to enable media [ 423.162238][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.180811][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.200605][ T5905] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 423.237854][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.314106][ T5905] usb 5-1: config 0 descriptor?? [ 423.588094][T10827] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 423.594731][T10827] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 423.605566][T10827] vhci_hcd vhci_hcd.0: Device attached [ 423.612561][T10827] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.636018][T10827] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 423.642656][T10827] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 423.658655][T10827] vhci_hcd vhci_hcd.0: Device attached [ 423.784814][T10827] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 423.791441][T10827] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 423.800957][T10827] vhci_hcd vhci_hcd.0: Device attached [ 423.819410][ T5905] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 423.939000][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1133'. [ 424.302004][ T1206] vhci_hcd: vhci_device speed not set [ 424.303951][ T5968] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 424.314122][ T30] audit: type=1400 audit(2000000069.670:651): avc: denied { map } for pid=10831 comm="syz.5.1133" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 424.360769][T10827] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 424.367391][T10827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.367925][ T5905] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 424.389675][ T5968] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 424.400673][ T1206] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 424.407474][ T5968] usb 3-1: USB disconnect, device number 33 [ 424.414270][T10827] vhci_hcd vhci_hcd.0: Device attached [ 424.660765][T10828] vhci_hcd: connection reset by peer [ 424.666542][T10832] vhci_hcd: connection closed [ 424.666751][T10839] vhci_hcd: connection closed [ 424.701163][T10836] vhci_hcd: connection closed [ 424.714981][ T12] vhci_hcd: stop threads [ 425.348364][ T12] vhci_hcd: release socket [ 425.353137][ T12] vhci_hcd: disconnect device [ 425.358463][ T12] vhci_hcd: stop threads [ 425.363265][ T12] vhci_hcd: release socket [ 425.368400][ T12] vhci_hcd: disconnect device [ 425.376647][ T12] vhci_hcd: stop threads [ 425.391494][ T12] vhci_hcd: release socket [ 425.400714][ T12] vhci_hcd: disconnect device [ 425.446541][ T12] vhci_hcd: stop threads [ 425.492377][ T12] vhci_hcd: release socket [ 425.542895][ T12] vhci_hcd: disconnect device [ 425.700235][ T30] audit: type=1326 audit(2000000071.290:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10801 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 426.054606][ T30] audit: type=1326 audit(2000000071.600:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10801 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 426.186473][ T30] audit: type=1326 audit(2000000071.650:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10801 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 426.411849][ T30] audit: type=1326 audit(2000000071.980:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10801 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 426.753448][ T30] audit: type=1326 audit(2000000071.980:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10801 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb518ebe9 code=0x7ffc0000 [ 427.452583][ T5912] usb 5-1: USB disconnect, device number 27 [ 428.163195][T10888] syz.4.1139: attempt to access beyond end of device [ 428.163195][T10888] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 429.824666][ T1206] vhci_hcd: vhci_device speed not set [ 430.029984][T10916] vxcan0: tx address claim with dest, not broadcast [ 430.884271][ T5912] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 431.314451][ T5912] usb 3-1: config 0 has no interfaces? [ 431.346274][ T5912] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 431.408648][T10934] FAULT_INJECTION: forcing a failure. [ 431.408648][T10934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.409954][T10934] [ 431.409963][T10934] ====================================================== [ 431.409969][T10934] WARNING: possible circular locking dependency detected [ 431.409977][T10934] 6.16.0-syzkaller-11852-g479058002c32 #0 Not tainted [ 431.409987][T10934] ------------------------------------------------------ [ 431.409992][T10934] syz.5.1147/10934 is trying to acquire lock: [ 431.410001][T10934] ffffffff8e4ce7a0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 431.410044][T10934] [ 431.410044][T10934] but task is already holding lock: [ 431.410049][T10934] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 431.410087][T10934] [ 431.410087][T10934] which lock already depends on the new lock. [ 431.410087][T10934] [ 431.410092][T10934] [ 431.410092][T10934] the existing dependency chain (in reverse order) is: [ 431.410097][T10934] [ 431.410097][T10934] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 431.410117][T10934] _raw_spin_lock_nested+0x31/0x40 [ 431.410139][T10934] raw_spin_rq_lock_nested+0x29/0x130 [ 431.410157][T10934] task_rq_lock+0xcf/0x490 [ 431.410175][T10934] cgroup_move_task+0x81/0x2a0 [ 431.410195][T10934] css_set_move_task+0x288/0x5f0 [ 431.410209][T10934] cgroup_post_fork+0x201/0x9e0 [ 431.410227][T10934] copy_process+0x5cfa/0x7690 [ 431.410249][T10934] kernel_clone+0xfc/0x930 [ 431.410268][T10934] user_mode_thread+0xc7/0x110 [ 431.410289][T10934] rest_init+0x23/0x2b0 [ 431.410304][T10934] start_kernel+0x3ee/0x4d0 [ 431.410320][T10934] x86_64_start_reservations+0x18/0x30 [ 431.410336][T10934] x86_64_start_kernel+0x130/0x190 [ 431.410353][T10934] common_startup_64+0x13e/0x148 [ 431.410370][T10934] [ 431.410370][T10934] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 431.410390][T10934] _raw_spin_lock_irqsave+0x3a/0x60 [ 431.410409][T10934] try_to_wake_up+0xb7/0x1870 [ 431.410427][T10934] __wake_up_common+0x135/0x1f0 [ 431.410453][T10934] __wake_up+0x31/0x60 [ 431.410469][T10934] tty_port_default_wakeup+0x2a/0x40 [ 431.410481][T10934] serial8250_tx_chars+0x68e/0x860 [ 431.410494][T10934] serial8250_handle_irq+0x761/0xcb0 [ 431.410506][T10934] serial8250_default_handle_irq+0x9a/0x250 [ 431.410519][T10934] serial8250_interrupt+0xf5/0x1b0 [ 431.410532][T10934] __handle_irq_event_percpu+0x22c/0x7d0 [ 431.410547][T10934] handle_irq_event+0xab/0x1e0 [ 431.410560][T10934] handle_edge_irq+0x3ca/0x9e0 [ 431.410572][T10934] __common_interrupt+0xdf/0x250 [ 431.410588][T10934] common_interrupt+0xba/0xe0 [ 431.410602][T10934] asm_common_interrupt+0x26/0x40 [ 431.410613][T10934] pv_native_safe_halt+0xf/0x20 [ 431.410629][T10934] default_idle+0x13/0x20 [ 431.410640][T10934] default_idle_call+0x6d/0xb0 [ 431.410650][T10934] do_idle+0x391/0x510 [ 431.410663][T10934] cpu_startup_entry+0x4f/0x60 [ 431.410676][T10934] start_secondary+0x21d/0x2b0 [ 431.410694][T10934] common_startup_64+0x13e/0x148 [ 431.410712][T10934] [ 431.410712][T10934] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 431.410727][T10934] _raw_spin_lock_irqsave+0x3a/0x60 [ 431.410742][T10934] __wake_up+0x1c/0x60 [ 431.410756][T10934] tty_port_default_wakeup+0x2a/0x40 [ 431.410767][T10934] serial8250_tx_chars+0x68e/0x860 [ 431.410778][T10934] serial8250_handle_irq+0x761/0xcb0 [ 431.410790][T10934] serial8250_default_handle_irq+0x9a/0x250 [ 431.410803][T10934] serial8250_interrupt+0xf5/0x1b0 [ 431.410815][T10934] __handle_irq_event_percpu+0x22c/0x7d0 [ 431.410830][T10934] handle_irq_event+0xab/0x1e0 [ 431.410843][T10934] handle_edge_irq+0x3ca/0x9e0 [ 431.410855][T10934] __common_interrupt+0xdf/0x250 [ 431.410871][T10934] common_interrupt+0xba/0xe0 [ 431.410882][T10934] asm_common_interrupt+0x26/0x40 [ 431.410893][T10934] pv_native_safe_halt+0xf/0x20 [ 431.410908][T10934] default_idle+0x13/0x20 [ 431.410918][T10934] default_idle_call+0x6d/0xb0 [ 431.410928][T10934] do_idle+0x391/0x510 [ 431.410941][T10934] cpu_startup_entry+0x4f/0x60 [ 431.410955][T10934] start_secondary+0x21d/0x2b0 [ 431.410971][T10934] common_startup_64+0x13e/0x148 [ 431.410983][T10934] [ 431.410983][T10934] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 431.410998][T10934] _raw_spin_lock_irqsave+0x3a/0x60 [ 431.411013][T10934] serial8250_console_write+0x181/0x1890 [ 431.411026][T10934] console_flush_all+0x801/0xc60 [ 431.411039][T10934] console_unlock+0xd8/0x210 [ 431.411051][T10934] vprintk_emit+0x418/0x6d0 [ 431.411065][T10934] _printk+0xc7/0x100 [ 431.411073][T10934] register_console+0xc2d/0x11b0 [ 431.411088][T10934] univ8250_console_init+0x5f/0x90 [ 431.411105][T10934] console_init+0x14f/0x680 [ 431.411119][T10934] start_kernel+0x29f/0x4d0 [ 431.411132][T10934] x86_64_start_reservations+0x18/0x30 [ 431.411145][T10934] x86_64_start_kernel+0x130/0x190 [ 431.411155][T10934] common_startup_64+0x13e/0x148 [ 431.411165][T10934] [ 431.411165][T10934] -> #0 (console_owner){-.-.}-{0:0}: [ 431.411177][T10934] __lock_acquire+0x12a6/0x1ce0 [ 431.411192][T10934] lock_acquire+0x179/0x350 [ 431.411206][T10934] console_lock_spinning_enable+0xb0/0xd0 [ 431.411217][T10934] console_flush_all+0x7aa/0xc60 [ 431.411228][T10934] console_unlock+0xd8/0x210 [ 431.411238][T10934] vprintk_emit+0x418/0x6d0 [ 431.411249][T10934] _printk+0xc7/0x100 [ 431.411256][T10934] should_fail_ex+0x4e7/0x640 [ 431.411265][T10934] strncpy_from_user+0x3b/0x2e0 [ 431.411278][T10934] strncpy_from_user_nofault+0x7f/0x180 [ 431.411290][T10934] bpf_probe_read_compat_str+0xe8/0x180 [ 431.411301][T10934] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 431.411308][T10934] bpf_trace_run4+0x252/0x5b0 [ 431.411317][T10934] __bpf_trace_sched_switch+0x145/0x190 [ 431.411328][T10934] __traceiter_sched_switch+0x6c/0xc0 [ 431.411338][T10934] __schedule+0x183b/0x5de0 [ 431.411350][T10934] preempt_schedule_irq+0x51/0x90 [ 431.411364][T10934] irqentry_exit+0x36/0x90 [ 431.411377][T10934] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 431.411386][T10934] lock_acquire+0x62/0x350 [ 431.411401][T10934] __fget_files+0x45/0x3c0 [ 431.411411][T10934] fdget+0x1a9/0x210 [ 431.411420][T10934] __sys_sendmsg+0xc9/0x220 [ 431.411434][T10934] do_syscall_64+0xcd/0x4c0 [ 431.411448][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.411457][T10934] [ 431.411457][T10934] other info that might help us debug this: [ 431.411457][T10934] [ 431.411460][T10934] Chain exists of: [ 431.411460][T10934] console_owner --> &p->pi_lock --> &rq->__lock [ 431.411460][T10934] [ 431.411474][T10934] Possible unsafe locking scenario: [ 431.411474][T10934] [ 431.411477][T10934] CPU0 CPU1 [ 431.411479][T10934] ---- ---- [ 431.411482][T10934] lock(&rq->__lock); [ 431.411488][T10934] lock(&p->pi_lock); [ 431.411494][T10934] lock(&rq->__lock); [ 431.411500][T10934] lock(console_owner); [ 431.411506][T10934] [ 431.411506][T10934] *** DEADLOCK *** [ 431.411506][T10934] [ 431.411509][T10934] 5 locks held by syz.5.1147/10934: [ 431.411514][T10934] #0: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: __fget_files+0x34/0x3c0 [ 431.411537][T10934] #1: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 431.411560][T10934] #2: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 431.411582][T10934] #3: ffffffff8e5aebe0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 431.411602][T10934] #4: ffffffff8e5aec50 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 431.411625][T10934] [ 431.411625][T10934] stack backtrace: [ 431.411630][T10934] CPU: 0 UID: 0 PID: 10934 Comm: syz.5.1147 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 431.411642][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.411649][T10934] Call Trace: [ 431.411652][T10934] [ 431.411656][T10934] dump_stack_lvl+0x116/0x1f0 [ 431.411672][T10934] print_circular_bug+0x275/0x350 [ 431.411687][T10934] check_noncircular+0x14c/0x170 [ 431.411708][T10934] __lock_acquire+0x12a6/0x1ce0 [ 431.411726][T10934] lock_acquire+0x179/0x350 [ 431.411741][T10934] ? console_lock_spinning_enable+0x9f/0xd0 [ 431.411754][T10934] ? console_lock_spinning_enable+0x88/0xd0 [ 431.411767][T10934] console_lock_spinning_enable+0xb0/0xd0 [ 431.411778][T10934] ? console_lock_spinning_enable+0x9f/0xd0 [ 431.411789][T10934] console_flush_all+0x7aa/0xc60 [ 431.411802][T10934] ? __pfx_console_flush_all+0x10/0x10 [ 431.411816][T10934] ? is_printk_cpu_sync_owner+0x32/0x40 [ 431.411831][T10934] console_unlock+0xd8/0x210 [ 431.411842][T10934] ? __pfx_console_unlock+0x10/0x10 [ 431.411854][T10934] ? do_raw_spin_unlock+0xe0/0x230 [ 431.411865][T10934] ? _printk+0xc7/0x100 [ 431.411874][T10934] ? __down_trylock_console_sem+0xb0/0x140 [ 431.411884][T10934] vprintk_emit+0x418/0x6d0 [ 431.411896][T10934] ? __pfx_vprintk_emit+0x10/0x10 [ 431.411908][T10934] ? __bad_area_nosemaphore+0x38b/0x690 [ 431.411918][T10934] ? do_user_addr_fault+0x927/0x1370 [ 431.411929][T10934] _printk+0xc7/0x100 [ 431.411937][T10934] ? __pfx__printk+0x10/0x10 [ 431.411945][T10934] ? rcu_is_watching+0x12/0xc0 [ 431.411960][T10934] ? __pfx____ratelimit+0x10/0x10 [ 431.411973][T10934] ? __lock_acquire+0x62e/0x1ce0 [ 431.411989][T10934] should_fail_ex+0x4e7/0x640 [ 431.411998][T10934] strncpy_from_user+0x3b/0x2e0 [ 431.412013][T10934] strncpy_from_user_nofault+0x7f/0x180 [ 431.412026][T10934] bpf_probe_read_compat_str+0xe8/0x180 [ 431.412036][T10934] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 431.412044][T10934] bpf_trace_run4+0x252/0x5b0 [ 431.412055][T10934] ? __pfx_bpf_trace_run4+0x10/0x10 [ 431.412066][T10934] ? __lock_acquire+0xb97/0x1ce0 [ 431.412082][T10934] __bpf_trace_sched_switch+0x145/0x190 [ 431.412094][T10934] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 431.412106][T10934] ? lock_acquire+0x179/0x350 [ 431.412122][T10934] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 431.412136][T10934] __traceiter_sched_switch+0x6c/0xc0 [ 431.412146][T10934] ? set_next_task_rt+0x403/0x6a0 [ 431.412161][T10934] __schedule+0x183b/0x5de0 [ 431.412173][T10934] ? trace_sched_exit_tp+0xd1/0x120 [ 431.412184][T10934] ? __schedule+0x11a3/0x5de0 [ 431.412200][T10934] ? __pfx___schedule+0x10/0x10 [ 431.412213][T10934] ? __pfx___schedule+0x10/0x10 [ 431.412229][T10934] preempt_schedule_irq+0x51/0x90 [ 431.412243][T10934] irqentry_exit+0x36/0x90 [ 431.412257][T10934] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 431.412267][T10934] RIP: 0010:lock_acquire+0x62/0x350 [ 431.412283][T10934] Code: d7 3d 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 2a 13 0f 0f 82 74 02 00 00 8b 35 2a 5c 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 d6 3d 12 0f 85 c7 02 00 00 48 83 c4 [ 431.412293][T10934] RSP: 0018:ffffc900051dfd08 EFLAGS: 00000206 [ 431.412301][T10934] RAX: 0000000000000046 RBX: ffffffff8e5c1160 RCX: 00000000ef9d33e4 [ 431.412307][T10934] RDX: 0000000000000000 RSI: ffffffff8de28340 RDI: ffffffff8c161100 [ 431.412313][T10934] RBP: 0000000000000002 R08: 0ac0d5affe09d4ff R09: 0000000000000000 [ 431.412319][T10934] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 431.412324][T10934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.412334][T10934] ? ksys_write+0x190/0x250 [ 431.412345][T10934] __fget_files+0x45/0x3c0 [ 431.412355][T10934] ? __fget_files+0x34/0x3c0 [ 431.412365][T10934] ? __mutex_unlock_slowpath+0x163/0x800 [ 431.412382][T10934] fdget+0x1a9/0x210 [ 431.412392][T10934] __sys_sendmsg+0xc9/0x220 [ 431.412406][T10934] ? __fget_files+0x20e/0x3c0 [ 431.412416][T10934] ? __pfx___sys_sendmsg+0x10/0x10 [ 431.412435][T10934] do_syscall_64+0xcd/0x4c0 [ 431.412450][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.412460][T10934] RIP: 0033:0x7fa5aad8ebe9 [ 431.412467][T10934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.412477][T10934] RSP: 002b:00007fa5abc87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.412486][T10934] RAX: ffffffffffffffda RBX: 00007fa5aafb6180 RCX: 00007fa5aad8ebe9 [ 431.412492][T10934] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000006 [ 431.412498][T10934] RBP: 00007fa5abc87090 R08: 0000000000000000 R09: 0000000000000000 [ 431.412504][T10934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.412509][T10934] R13: 00007fa5aafb6218 R14: 00007fa5aafb6180 R15: 00007fff55b102c8 [ 431.412518][T10934] [ 432.638557][T10934] CPU: 0 UID: 0 PID: 10934 Comm: syz.5.1147 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 432.638572][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.638578][T10934] Call Trace: [ 432.638583][T10934] [ 432.638587][T10934] dump_stack_lvl+0x116/0x1f0 [ 432.638605][T10934] should_fail_ex+0x512/0x640 [ 432.638615][T10934] strncpy_from_user+0x3b/0x2e0 [ 432.638631][T10934] strncpy_from_user_nofault+0x7f/0x180 [ 432.638644][T10934] bpf_probe_read_compat_str+0xe8/0x180 [ 432.638656][T10934] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 432.638664][T10934] bpf_trace_run4+0x252/0x5b0 [ 432.638675][T10934] ? __pfx_bpf_trace_run4+0x10/0x10 [ 432.638687][T10934] ? __lock_acquire+0xb97/0x1ce0 [ 432.638707][T10934] __bpf_trace_sched_switch+0x145/0x190 [ 432.638720][T10934] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 432.638732][T10934] ? lock_acquire+0x179/0x350 [ 432.638748][T10934] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 432.638762][T10934] __traceiter_sched_switch+0x6c/0xc0 [ 432.638773][T10934] ? set_next_task_rt+0x403/0x6a0 [ 432.638787][T10934] __schedule+0x183b/0x5de0 [ 432.638802][T10934] ? trace_sched_exit_tp+0xd1/0x120 [ 432.638812][T10934] ? __schedule+0x11a3/0x5de0 [ 432.638828][T10934] ? __pfx___schedule+0x10/0x10 [ 432.638841][T10934] ? __pfx___schedule+0x10/0x10 [ 432.638857][T10934] preempt_schedule_irq+0x51/0x90 [ 432.638872][T10934] irqentry_exit+0x36/0x90 [ 432.638886][T10934] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 432.638897][T10934] RIP: 0010:lock_acquire+0x62/0x350 [ 432.638913][T10934] Code: d7 3d 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 2a 13 0f 0f 82 74 02 00 00 8b 35 2a 5c 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 d6 3d 12 0f 85 c7 02 00 00 48 83 c4 [ 432.638923][T10934] RSP: 0018:ffffc900051dfd08 EFLAGS: 00000206 [ 432.638932][T10934] RAX: 0000000000000046 RBX: ffffffff8e5c1160 RCX: 00000000ef9d33e4 [ 432.638938][T10934] RDX: 0000000000000000 RSI: ffffffff8de28340 RDI: ffffffff8c161100 [ 432.638944][T10934] RBP: 0000000000000002 R08: 0ac0d5affe09d4ff R09: 0000000000000000 [ 432.638950][T10934] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 432.638956][T10934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.638966][T10934] ? ksys_write+0x190/0x250 [ 432.638977][T10934] __fget_files+0x45/0x3c0 [ 432.638988][T10934] ? __fget_files+0x34/0x3c0 [ 432.638997][T10934] ? __mutex_unlock_slowpath+0x163/0x800 [ 432.639014][T10934] fdget+0x1a9/0x210 [ 432.639025][T10934] __sys_sendmsg+0xc9/0x220 [ 432.639040][T10934] ? __fget_files+0x20e/0x3c0 [ 432.639050][T10934] ? __pfx___sys_sendmsg+0x10/0x10 [ 432.639069][T10934] do_syscall_64+0xcd/0x4c0 [ 432.639085][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.639095][T10934] RIP: 0033:0x7fa5aad8ebe9 [ 432.639102][T10934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.639112][T10934] RSP: 002b:00007fa5abc87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.639120][T10934] RAX: ffffffffffffffda RBX: 00007fa5aafb6180 RCX: 00007fa5aad8ebe9 [ 432.639127][T10934] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000006 [ 432.639132][T10934] RBP: 00007fa5abc87090 R08: 0000000000000000 R09: 0000000000000000 [ 432.639138][T10934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 432.639144][T10934] R13: 00007fa5aafb6218 R14: 00007fa5aafb6180 R15: 00007fff55b102c8 [ 432.639153][T10934] [ 433.051071][ T5905] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 433.381257][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.389352][ T5912] usb 3-1: Product: syz [ 433.393558][ T5912] usb 3-1: Manufacturer: syz [ 433.398144][ T5912] usb 3-1: SerialNumber: syz [ 433.406601][ T5912] usb 3-1: config 0 descriptor?? [ 433.683338][T10934] bridge0: port 3(syz_tun) entered disabled state [ 433.693172][T10934] syz_tun (unregistering): left allmulticast mode [ 433.699622][T10934] syz_tun (unregistering): left promiscuous mode [ 433.706047][T10934] bridge0: port 3(syz_tun) entered disabled state [ 433.778856][ T992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.869795][ T5912] usb 3-1: can't set config #0, error -71 [ 433.889647][ T5912] usb 3-1: USB disconnect, device number 34 [ 434.048400][ T992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.086401][ T992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.214609][ T992] bridge_slave_1: left allmulticast mode [ 434.220274][ T992] bridge_slave_1: left promiscuous mode [ 434.226140][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.237331][ T992] bridge_slave_0: left allmulticast mode [ 434.244683][ T992] bridge_slave_0: left promiscuous mode [ 434.250351][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.353480][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.368439][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.380001][ T992] bond0 (unregistering): Released all slaves [ 434.434302][ T992] : left promiscuous mode [ 434.473020][ T992] IPVS: stopping backup sync thread 6940 ... [ 434.585170][ T992] hsr_slave_0: left promiscuous mode [ 434.594215][ T992] hsr_slave_1: left promiscuous mode [ 434.602315][ T992] veth1_macvtap: left promiscuous mode [ 434.607776][ T992] veth0_macvtap: left promiscuous mode [ 434.687929][ T992] team0 (unregistering): Port device team_slave_1 removed [ 434.708548][ T992] team0 (unregistering): Port device C removed [ 434.997350][ T992] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.048719][ T992] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.094268][ T992] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.147303][ T992] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.234574][ T992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.274783][ T992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.308482][ T992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.368394][ T992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.453747][ T992] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.498780][ T992] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.546897][ T992] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.604815][ T992] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.701377][ T992] bridge_slave_1: left allmulticast mode [ 435.707045][ T992] bridge_slave_1: left promiscuous mode [ 435.716568][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.726064][ T992] bridge_slave_0: left allmulticast mode [ 435.731919][ T992] bridge_slave_0: left promiscuous mode [ 435.737603][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.747809][ T992] bridge_slave_1: left allmulticast mode [ 435.753629][ T992] bridge_slave_1: left promiscuous mode [ 435.759298][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.768149][ T992] bridge_slave_0: left allmulticast mode [ 435.773914][ T992] bridge_slave_0: left promiscuous mode [ 435.779545][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.907017][ T992] ip6gretap1: left allmulticast mode [ 435.912816][ T992] ip6gretap1: left promiscuous mode [ 435.918368][ T992] bridge1: port 1(ip6gretap1) entered disabled state [ 435.926824][ T992] bridge_slave_1: left allmulticast mode [ 435.940160][ T992] bridge_slave_1: left promiscuous mode [ 435.945918][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.953958][ T992] bridge_slave_0: left allmulticast mode [ 435.959569][ T992] bridge_slave_0: left promiscuous mode [ 435.965356][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.073847][ T992] bond_slave_0: left promiscuous mode [ 436.079271][ T992] bond_slave_1: left promiscuous mode [ 436.178792][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.189254][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.199201][ T992] bond0 (unregistering): Released all slaves [ 436.292355][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.302353][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.312440][ T992] bond0 (unregistering): Released all slaves [ 436.378644][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.388347][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.397774][ T992] bond0 (unregistering): Released all slaves [ 436.458329][ T992] tipc: Left network mode [ 436.858983][ T992] hsr_slave_0: left promiscuous mode [ 436.866579][ T992] hsr_slave_1: left promiscuous mode [ 436.873708][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.881171][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.888705][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.896279][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.906021][ T992] hsr_slave_0: left promiscuous mode [ 436.912007][ T992] hsr_slave_1: left promiscuous mode [ 436.917648][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.925738][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.933532][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.941702][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.949376][ T992] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 436.956735][ T992] batman_adv: batadv0: Removing interface: ipvlan2 [ 436.966922][ T992] hsr_slave_0: left promiscuous mode [ 436.975632][ T992] hsr_slave_1: left promiscuous mode [ 436.981885][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.989264][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.997242][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.007534][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.022674][ T992] veth1_macvtap: left promiscuous mode [ 437.028174][ T992] veth0_macvtap: left promiscuous mode [ 437.034798][ T992] veth1_macvtap: left promiscuous mode [ 437.040292][ T992] veth0_macvtap: left promiscuous mode [ 437.046049][ T992] veth1_vlan: left promiscuous mode [ 437.051324][ T992] veth0_vlan: left promiscuous mode [ 437.057436][ T992] veth1_macvtap: left promiscuous mode [ 437.063266][ T992] veth0_macvtap: left promiscuous mode [ 437.068806][ T992] veth1_vlan: left promiscuous mode [ 437.074101][ T992] veth0_vlan: left promiscuous mode [ 437.191508][ T992] team0 (unregistering): Port device team_slave_1 removed [ 437.323862][ T992] team0 (unregistering): Port device team_slave_1 removed [ 437.340620][ T992] team0 (unregistering): Port device team_slave_0 removed [ 437.448167][ T992] team0 (unregistering): Port device team_slave_1 removed [ 437.459005][ T992] team0 (unregistering): Port device team_slave_0 removed [ 439.552542][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.558838][ T1297] ieee802154 phy1 wpan1: encryption failed: -22