last executing test programs: 17.533336157s ago: executing program 1 (id=720): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000006a2ddcf6177a81001900886445000028000000570006907800000000ac1414aa00004e2278691f7c61332b4d9a14e1515251b1bf6f1e6cddc91d304460f8d2748ca9ba6d8d9089acb9c8f4d3b1fbb60316ce6d6d79630d866e5ea6d805d4419dd81c81ec48457219ae5400f0a516f2c8ad4971521711e3a4a4555b9e8ca3015753eeee1c3481d0e93e33b643204b2cb2301bb8588b1a94a05e7fbd6f677b9b4ab06d01ee3e12e4dcbe68de86523f96e9ad", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5405000090780000"], 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0xca, 0x5}, 0x8) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x45, 0x0, 0xfffffffb, 0x3, &(0x7f0000000080)="22b6", 0x7f, 0x0, 0x1, {0x0, r7}}) socket$netlink(0x10, 0x3, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000001b00)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1a, @void, @value}, 0x94) dup2(r8, r8) openat$dir(0xffffffffffffff9c, 0x0, 0xc0, 0x61) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') preadv(r10, &(0x7f00000005c0)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x2004, @fd=r6, 0x7fffffffffffffff, 0xfe7c, 0x0, 0x0, 0x1, {0x1, r7}}) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x5d) 11.452636704s ago: executing program 3 (id=727): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000001840)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) socket(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x24b1c8e587c59b17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client0\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000, 0xfffffffc}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000300)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x4, 0x6, 0x0, 0x5, 0x9, 0x0, "14086739"}}, 0x11c) setpriority(0x2, 0x0, 0xffffffffffffffcd) close_range(r3, 0xffffffffffffffff, 0x0) 10.536789464s ago: executing program 1 (id=730): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xc0586300}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000c80)="cb", 0x1}], 0x1}}], 0x1, 0x4c000) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x440a42) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501", @ANYRES8=r1], 0x0) 9.632974405s ago: executing program 2 (id=734): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1000}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x18) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000240)=[0x1, 0x1], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) readlink(0x0, &(0x7f0000000040)=""/211, 0xd3) recvfrom$inet(r0, &(0x7f00000005c0)=""/4096, 0x1000, 0x40012101, &(0x7f0000000140)={0x2, 0x4e27, @local}, 0x10) userfaultfd(0x801) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 7.464578808s ago: executing program 1 (id=737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048804}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000b00)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setopts(0x4200, r2, 0x6, 0x26) sched_setscheduler(0x0, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f0000000040), 0x0) 7.438388718s ago: executing program 2 (id=738): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "128c00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc0000000000000080feffe809005300fff5dd000000100001000d0c1000000000000000000000000069c4a426c14264fc0d24ab87af2e4e615461425d3bb13a7e4279572e19aa6a632c71371bbec8c4a2386f4746086c96340d9713fd572d30e4ad88885d68127eed5a70afc7d93c324f0c4bbbc935c67f16590457d413a888b7870baef78634df1b684e6a9157230d8ddabdf6e90eb4743d60f8ac38759a0668791d000000000000", 0xd8}], 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000280)={0x2, {{0xa, 0x4e21, 0x53a9, @ipv4={'\x00', '\xff\xff', @remote}, 0xf}}, {{0xa, 0x4e20, 0x2, @private1, 0x2}}}, 0x108) 7.055712548s ago: executing program 2 (id=739): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x200000000009, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d, 0x1, {}, 0x0, 0x0, 0xffffffffffffffff}) close_range(r1, r0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x8080) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, 0x0, &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001980)=ANY=[], 0x0) 6.768467034s ago: executing program 4 (id=740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xcf7}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200102, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000010b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r5}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getaddr={0x14, 0x16, 0x10, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2044050}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000280)={0xffffffffffffffff, 0x3, 0x824, 0x1, 0x100}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r8, 0x40485404, &(0x7f0000000440)={{0x3, 0x0, 0xff, 0x2, 0x3}, 0x8, 0xf}) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) r9 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r9, 0x4c08, 0x591) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000300)={r9, 0x0, {0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x8, 0x1d, 0x18, "8ec639610a0000004998eaaa441f699ed7ab1d3e77c3f4d6ca4a03ffa60008000000000000e7996a5f808971ae30a675e2be3e4215d03cd86d0e5277627f00", "b4c9aa6a07b92326b44575e6fd4a1bc2bde5e3d7c9a8ac49a62d8b9a51a07a4706609b9acddcc5bd312e91e613f952828f27dad0ddd74ff4cb95059b0a2b6bf3", "bbdf74fa8d2b5ddd612f8b5425570b9e3308926148382f069240ca3d53a31fd1", [0x2638, 0x3]}}) 6.739538706s ago: executing program 1 (id=741): r0 = socket(0x29, 0x3, 0x3d02) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(0xffffffffffffffff, &(0x7f00000002c0)="4e08a0ef9ac7f14143949466fbb7d16dbb8b2049c0bba0eaf39d88e72bec9edfea49a56f4e718451bfdee5e13254324baf222ce2cf99b06ad6ccdb8fecc92933c3d5b1fb893bcc012624958354ab790e", 0x50, 0x8080, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x100) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000900)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000080)=ANY=[@ANYBLOB="545e9a", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff11"]) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a0000000c000080"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 6.695102002s ago: executing program 3 (id=742): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6.381343089s ago: executing program 0 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x8084}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000380)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x4e23, 0x1000, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}], @key_params=[@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c1d78fea39d0409c8891479539"}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) 6.270531956s ago: executing program 2 (id=744): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x3c, 0x26, 0x503c3f738bec1082, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff3, 0xe}, {0x9, 0x9}, {0xffff, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r2}) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/252, 0xfc}], 0x1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000010000000240000002400000002000000000000008b01000d000000000800000004000000000000000300000005000000030000000000"], 0x0, 0x3e, 0x0, 0x1, 0x5ed1, 0x0, @void, @value}, 0x28) r5 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12122, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101842, 0x23) write(r6, &(0x7f0000000140)="1e1508a8", 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 6.218658462s ago: executing program 4 (id=745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x20, 0x800) inotify_init1(0x0) setresgid(0xee00, 0xee01, 0x0) r3 = socket$inet6(0xa, 0x5, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x6929, 0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x3, 0x1c, 0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) setgroups(0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8006, 0x145}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) socket$alg(0x26, 0x5, 0x0) r7 = syz_io_uring_setup(0x6de3, &(0x7f00000000c0)={0x0, 0xac91, 0x200, 0x2, 0x81, 0x0, r4}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r7, 0xa7, 0xfe13, 0x44, 0x0, 0x0) 5.411287385s ago: executing program 0 (id=746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7a6e, 0x4, 0x20000000000, 0x0, 0x8, 0xc0, 0x0, 0x5], 0x8000000, 0x8340}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600000000000000000000000000000000000000708700f87400", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "8b1c551265406c00306003d8a0f4bd00"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r6 = shmget$private(0x0, 0x800000, 0x54000000, &(0x7f0000173000/0x800000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 5.278420958s ago: executing program 4 (id=747): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001d80)=""/152, 0x98}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x2002, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000004c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4800) syz_emit_ethernet(0x66, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaf99a26c70045100058000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES32=r6], 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}, @IFLA_GRE_LOCAL={0x8, 0x6, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4008810) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 3.907499824s ago: executing program 4 (id=748): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r3}, 0x38) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec01020301090224000100000000090423"], 0x0) 3.622058451s ago: executing program 0 (id=749): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000ee15f52e0fd599d9a80ff72962055119ae24764fc09d3648b438ad65450b2d07c65660a8a8b07d99e4881e2eb144c9a737f506b0bdaf178fd1432e8e3424999a168871ea8040527a9ca254f2578bec9bbd69aa173abfa354d50159e07177f1cf44774d20335c754895602953c2591cdb11df836bf8a3e8fa908dbeba4baf34b5841978a4da39972d84e4b8f95648fb4b1e8deb182ff7ea6baa4e0eb66ae6dae3d8e79301fd5a2aa03a4e81d11dcf467bc000b1fb19d2829448e4ec2ae9f2a493ca0be52f4f327e95338cbf50c8272696675c03caece67813377d23db2718bef578423f1ecb"], 0xf0}, 0x1, 0xe}, 0x810) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r5) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) sync() unshare(0x64000600) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x11d, 0xf, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x81be8f4d40b1ba3e) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:systemd_passwd_var_run_t:s0\x00', 0x2e, 0x2) 3.42450116s ago: executing program 3 (id=750): r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r0, &(0x7f00000082c0)={0x2020}, 0x2020) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x6, 0x8b}, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000040)={0x1, 0x200, 0xf9c0, 0x80000001, 0x7, 0x3}) listen(r1, 0x0) read$snddsp(r0, &(0x7f0000000800)=""/215, 0xd7) 3.315538547s ago: executing program 1 (id=751): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x0) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0xe, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x2, 0xa, 0x9], 0x4}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x1, "0600a7ce79"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x2, 0x1, [0x6]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 2.996175861s ago: executing program 2 (id=752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048804}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000fcff00"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setopts(0x4200, r1, 0x6, 0x2) sched_setscheduler(0x0, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f0000000040), 0x0) 2.547433614s ago: executing program 3 (id=753): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffff9}]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = dup(r0) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0xfff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000000000000953e45669e6100000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 2.546780681s ago: executing program 2 (id=754): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x5]}, 0x8) close(r0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000001340), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x5}, &(0x7f0000000040)=0x0, &(0x7f00000012c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfe4b) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406e05fd0000fc9400000109022400010000b00009040000050300000009210000000122450009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c6863773fd"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(r4, 0x289e0cb5, 0x0) setns(0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC, @ANYRES8], 0x60}}, 0x0) socket$key(0xf, 0x3, 0x2) 2.40060468s ago: executing program 0 (id=755): r0 = getpid() ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x1, 0x1}, &(0x7f0000000040)=[{}]) (async) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xc6ae, 0xc003) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000140)={{0x3, 0x2, 0xd3b3, 0x1, 'syz0\x00', 0x4}, 0x2, 0x200, 0x7fff, r0, 0x9, 0xffff, 'syz1\x00', &(0x7f0000000100)=['[]\x00', '}\x00', '\x00', '\x00', '@\'}.\x00', '*]\x00', '^@]\x00', '%\x00', '+-]\x00'], 0x19}) (async) r2 = accept(0xffffffffffffffff, &(0x7f0000000280)=@ieee802154={0x24, @long}, &(0x7f0000000300)=0x80) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000340)=r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "190060dcbc0f7e4426f39f446d"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, "0e97"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x11, 0x4, "4b73947e4a999c82c224f61303"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c090}, 0x1) (async) fsetxattr(r2, &(0x7f0000000500)=@known='com.apple.FinderInfo\x00', &(0x7f0000000540)='syz0\x00', 0x5, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) (async) rt_sigqueueinfo(r0, 0x28, &(0x7f00000005c0)={0x12, 0x54, 0xfffffff8}) (async) rt_tgsigqueueinfo(r0, r0, 0x11, &(0x7f0000000640)={0x17, 0xe, 0xb}) socket$nl_route(0x10, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000700), 0x9, 0x10002) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000780)={{0x8, 0x1, 0x7fffffff, 0x5, 'syz1\x00', 0x3}, 0x4, 0x30, 0x5, 0x0, 0x8, 0x5, 'syz1\x00', &(0x7f0000000740)=['+\'@/)\x00', '/dev/snd/controlC#\x00', '\x00', ':^,5\x00', '{(^#%\'\x00', 'syz0\x00', ':$\x00', '\xff\xff\xff\xff\xff\xff'], 0x34}) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x8, 0x716}, &(0x7f0000000980)=0x90) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000009c0)={r5, 0x5}, &(0x7f0000000a00)=0x8) (async) rt_tgsigqueueinfo(r0, r0, 0x34, &(0x7f0000000a40)={0x1, 0x0, 0x1}) (async) pwrite64(r4, &(0x7f0000000ac0)="ad6124dc8d8255b1e53b0e9d969eb4eb7e51981fdba683ab958793004314466b880e7e195f86d425c96862d6d93c17000a1aabeccfee3adef87f1d21b07abef6d781d3ec7deff3bb98de24e0eff8b0c00a918c29b6ed8b295cc0d653e067755a03ef31b184d3f47806c49facf132f9566d99bf6f578c08c127faf7e8332d8de2529e58cad98b47bcf52f8ee502", 0x8d, 0x8) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r8, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x700000000000}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x10}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xd4, 0x38, 0x200, 0x70bd2c, 0x25dfdbfc, {0x1c}, [@generic="81844ca1249db7b11925ee1ada3c268cffcfce0e4d10420f1532074a9b527d6a9cc718687428df3ce4cf53f7ff174bc2fec797466239503df9d83bb3259d592e651090e89adb1de25df74e6ccfef9f69e16a527075f912f2c1b47ca50c8fa7ad52c4f75220be0e3aaec5469e62b1b046db33afb79092ed41c74ce3fa7048590738c37dc90c552f9c9370dcac69d838e3ad808987593973d6397fb964f1c544cd98cf493a5581893791960c728e6c6f618ad6a065d96b22e6bf8b4a6741ef3a9c"]}, 0xd4}, 0x1, 0x0, 0x0, 0x48000}, 0x10044800) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, 0x140e, 0x400, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x24004011) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000f80)={0x0, r6}, 0x8) 2.352153669s ago: executing program 0 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) ptrace(0x10, r2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000001800)=0x8000, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x5}, 0x3ee1, 0x1, 0xffff, 0x400, 0x0, 0x41c0204}) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x4a, &(0x7f0000002900)=0x659c, 0x4) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xc8, 0x9, 0x800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0xccd2}}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x449d1}, 0x0) 1.850951689s ago: executing program 4 (id=757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x8084}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000380)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x4e23, 0x1000, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}], @key_params=[@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c1d78fea39d0409c8891479539"}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) 1.498838561s ago: executing program 3 (id=758): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x2, @pix_mp={0x7, 0x7, 0x584e4f53, 0x3, 0xb, [{0x5, 0x7fff}, {0xfffffffb, 0x4}, {0x72}, {0xa, 0x9}, {0x100, 0x3}, {0x80000001, 0x72f8}, {0x1, 0xf}, {0x3, 0xa109}], 0x0, 0x33, 0x0, 0x2, 0x5}}) r1 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffff40, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_get$pid(0x2, r1) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000100007000000000000000000fe880000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d08, &(0x7f0000000040)=0x10045) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002300)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000001840)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0000090002000100aaaaaaaaaaaa000008000f0001000000"], 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r7, 0x0, 0x0, 0x4}, 0x20) socket(0x10, 0x3, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x24b1c8e587c59b17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r8, 0x40bc5311, &(0x7f0000000540)={0x100004, 0x1, 'client0\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000, 0xfffffffc}) 957.30096ms ago: executing program 0 (id=759): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffff9}]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x3}, 0x1c) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = dup(r0) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0xfff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000000000000953e45669e6100000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 320.605671ms ago: executing program 3 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048804}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) (fail_nth: 4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setopts(0x4200, r1, 0x6, 0x2) sched_setscheduler(0x0, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f0000000040), 0x0) 239.336313ms ago: executing program 4 (id=761): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000000300000ab0000000060a0b04000000000000000002001b5a35fffd63000740a72e521405fe5741eca79f07c9630374ecc0219ade7daee71e2d95e23f1dad41715fa8e816af95363ee7ac32d850f2d56b7659406f8e79db48de0d730caa71c318749008f9b1de5e42838cd16df6a02f427e35f2a64e657af669dd63a06a1a000900020073797a31000000000900020073797a32000000000900010073797a310000000009000200730500000200000000000940000000031400000011000100"/205], 0xd8}, 0x1, 0x0, 0x0, 0x200080c1}, 0x40080) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000080)=0xffffe, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbb0b28e1b69447bbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000680000000100007f0000017f000001008f6371ae9b1c03"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) (async) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x3) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, 0x0, 0x0, 0x2020, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x2020, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x10d381) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x10d381) ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, &(0x7f0000000140)={0x0, "fc51620330dfc4536d7ae0257e5d07b15b112f495e1eb3291759e4e4ade8d52cb7d906f4da6e117989740a458a317c56f10755875efe7939ad7a23a8fd263c0885ebeae5910fc386bf61e776b00c983ed01bf9542b28ce546ebc56a05564b5705bbc884d64fbad597225093ce604ffa41783a9bc50e2c366938794f0fdd8da658784ecfac1ab9e7c2f6b8caaa11f3a1b799c9f227c57e07f4673f3119e1925b350b6e76ae1b001263a91e5f9b06ab664c976fbb11157382406f3793c2484c16989530b8becd66799e0376ca198a954ad29742c38af6af66da6da49ce52b07bb16508dabcdd5caa352d8dca7d6767a468ac1768dcc6cf4b91ba5f372bc32bce85"}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r8, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r10, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYRES64=r8], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r10, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYRES64=r8], 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003780), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x1, 0x0, {0x2, 0x14}, [@RTA_SRC={0x8, 0x2, @local}]}, 0x24}}, 0x2400c044) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000002680)={0x180, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "28e3a2d9e9beb3f4ecfa93face782d0b058de817931a02057cf8"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "3e101b01921f95c99aa256e1815f267e77eb2ccbbc38"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff9a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffc71a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf03}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000600)={"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"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000240)=@multiplanar_fd={0xd2a, 0x2, 0x4, 0x77000, 0xc5f, {}, {0x1, 0xee4c1dd90b68cf8, 0x8, 0xfd, 0xda, 0x8, "f96c2bf1"}, 0x3, 0x4, {0x0}, 0x3}) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.075160][ T24] usb usb1-port1: attempt power cycle [ 186.182711][ T5887] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 186.196531][ T30] audit: type=1400 audit(1750620407.801:542): avc: denied { getattr } for pid=7255 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.228768][ T30] audit: type=1400 audit(1750620407.851:543): avc: denied { read } for pid=7257 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.352720][ T7263] syz.1.366: attempt to access beyond end of device [ 186.352720][ T7263] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 186.366581][ T7263] vxfs: unable to read disk superblock at 1 [ 186.373261][ T7263] syz.1.366: attempt to access beyond end of device [ 186.373261][ T7263] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 186.386294][ T7263] vxfs: unable to read disk superblock at 8 [ 186.392218][ T7263] vxfs: can't find superblock. [ 186.535909][ T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 186.699209][ T5887] usb 3-1: USB disconnect, device number 19 [ 186.704660][ T30] audit: type=1400 audit(1750620407.851:544): avc: denied { open } for pid=7257 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.736840][ T24] usb 1-1: device descriptor read/8, error -71 [ 186.744411][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.767228][ T5873] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 186.793448][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.827580][ T5873] usb 5-1: config 0 descriptor?? [ 186.890354][ T30] audit: type=1400 audit(1750620408.951:545): avc: denied { add_name } for pid=7254 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.043053][ T24] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 187.069510][ T24] usb 1-1: device descriptor read/8, error -71 [ 187.186817][ T24] usb usb1-port1: unable to enumerate USB device [ 187.228490][ T5819] IPVS: starting estimator thread 0... [ 187.337081][ T7278] IPVS: using max 48 ests per chain, 115200 per kthread [ 188.090075][ T7305] netlink: 'syz.0.374': attribute type 39 has an invalid length. [ 188.116109][ T7305] veth0_macvtap: left promiscuous mode [ 188.934192][ T7326] syz.0.377: attempt to access beyond end of device [ 188.934192][ T7326] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 188.947209][ T7326] vxfs: unable to read disk superblock at 1 [ 188.954503][ T7326] syz.0.377: attempt to access beyond end of device [ 188.954503][ T7326] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 188.967612][ T7326] vxfs: unable to read disk superblock at 8 [ 188.973579][ T7326] vxfs: can't find superblock. [ 189.352557][ T5873] usb 5-1: USB disconnect, device number 16 [ 189.397997][ T5819] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 189.471327][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.379'. [ 189.599210][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 189.632345][ T5819] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 189.664096][ T5819] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.696017][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.704045][ T5819] usb 3-1: Product: ᶱ뷛 촴甁ዥᶕ⫕叆槥陝௙䶐罏糞¹ᩗ绎␷太ݺ庯⨫锑ឯ盢Ӥ窴 [ 189.741846][ T5819] usb 3-1: Manufacturer: 些㤲虣噤ŋฏᘃ딯䶘ꛖ初퓔愈퀦猶꾣꥖봌ಾ쯉￬篗띣᪻췏ꭳ [ 189.754206][ T5819] usb 3-1: SerialNumber: 勰䑴盂앁杸ٰ啕㵿⿃웋ẋ㔛乲鞌삚첃鍨璅ቋ竁슾㦖✳揗㑰ऩꏾ麀ʄ갾℄嬹僌볢懏ೇ딘地짖簵肉➣쐼ॸ菰঍뽔梣⮸䶦詴◬࿔꟪ལꧮ긳좧ﻺ漹㡒律㢡ꍄ⛍쯌 [ 190.284739][ T48] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 190.628712][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.749447][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 190.756622][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 190.762721][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.768822][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 190.774894][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 191.035198][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.125924][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 191.140886][ T48] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 191.152544][ T48] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 191.167801][ T5819] cdc_ncm 3-1:1.0: bind() failure [ 191.203351][ T48] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 191.212511][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.366103][ T5873] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.427744][ T7344] tmpfs: Bad value for 'mpol' [ 191.438622][ T48] usb 4-1: string descriptor 0 read error: -71 [ 191.476770][ T48] hub 4-1:32.0: USB hub found [ 191.520505][ T48] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 191.567508][ T48] usb 4-1: USB disconnect, device number 11 [ 191.679694][ T5819] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 191.695953][ T5819] cdc_ncm 3-1:1.1: bind() failure [ 191.706732][ T5819] usb 3-1: USB disconnect, device number 20 [ 192.469979][ T5819] hid-generic 0006:0000:0005.000C: item fetching failed at offset 2/3 [ 192.488894][ T5819] hid-generic 0006:0000:0005.000C: probe with driver hid-generic failed with error -22 [ 193.801904][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.969153][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.876959][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 194.876975][ T30] audit: type=1400 audit(1750620416.941:554): avc: denied { write } for pid=7398 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 195.111671][ T7406] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 195.118218][ T7406] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 195.185442][ T7406] vhci_hcd vhci_hcd.0: Device attached [ 195.192837][ T7409] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 195.199374][ T7409] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.212834][ T7409] vhci_hcd vhci_hcd.0: Device attached [ 195.241259][ T7407] vhci_hcd: cannot find the pending unlink 7 [ 195.365960][ T24] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 195.467994][ T5819] vhci_hcd: vhci_device speed not set [ 195.527302][ T5819] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 196.039667][ T30] audit: type=1400 audit(1750620417.641:555): avc: denied { create } for pid=7412 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.124718][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.196700][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.207069][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 196.216741][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.226990][ T24] usb 1-1: config 0 descriptor?? [ 196.245149][ T7407] vhci_hcd: connection closed [ 196.256264][ T6010] vhci_hcd: stop threads [ 196.275422][ T7410] vhci_hcd: connection reset by peer [ 196.300527][ T6010] vhci_hcd: release socket [ 196.312700][ T6010] vhci_hcd: disconnect device [ 196.364547][ T6010] vhci_hcd: stop threads [ 196.412204][ T6010] vhci_hcd: release socket [ 196.460557][ T30] audit: type=1400 audit(1750620418.511:556): avc: denied { map } for pid=7422 comm="syz.4.400" path="socket:[14972]" dev="sockfs" ino=14972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 196.587837][ T30] audit: type=1400 audit(1750620418.521:557): avc: denied { accept } for pid=7422 comm="syz.4.400" path="socket:[14972]" dev="sockfs" ino=14972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 196.701993][ T6010] vhci_hcd: disconnect device [ 196.789861][ T24] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 196.866221][ T5955] hid-generic 0006:0000:0005.000E: item fetching failed at offset 2/3 [ 196.874864][ T5955] hid-generic 0006:0000:0005.000E: probe with driver hid-generic failed with error -22 [ 196.966907][ T30] audit: type=1400 audit(1750620419.031:558): avc: denied { ioctl } for pid=7402 comm="syz.0.395" path="socket:[15518]" dev="sockfs" ino=15518 ioctlcmd=0x3b82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.491499][ T30] audit: type=1400 audit(1750620420.511:559): avc: denied { write } for pid=7432 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 198.913865][ T5874] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.950678][ T5955] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 198.995859][ T92] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 199.105040][ T7443] overlayfs: missing 'lowerdir' [ 199.575875][ T5955] usb 5-1: device descriptor read/64, error -71 [ 199.659518][ T10] usb 1-1: USB disconnect, device number 16 [ 199.669010][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 199.700506][ T92] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.818755][ T92] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 199.839182][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.866108][ T92] usb 3-1: Product: syz [ 199.871126][ T92] usb 3-1: Manufacturer: syz [ 199.877373][ T5955] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 199.885062][ T92] usb 3-1: SerialNumber: syz [ 199.945849][ T92] usb 3-1: config 0 descriptor?? [ 200.205866][ T5955] usb 5-1: device descriptor read/64, error -71 [ 200.253213][ T7450] team0: Device gtp0 is of different type [ 200.258950][ T92] usb 3-1: can't set config #0, error -71 [ 200.281314][ T92] usb 3-1: USB disconnect, device number 21 [ 200.326032][ T5955] usb usb5-port1: attempt power cycle [ 200.446450][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 200.991975][ T92] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 201.014080][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 201.215907][ T5819] vhci_hcd: vhci_device speed not set [ 201.664483][ T7461] overlay: ./file0 is not a directory [ 202.001734][ T30] audit: type=1400 audit(1750620423.721:560): avc: denied { ioctl } for pid=7460 comm="syz.4.411" path="socket:[15053]" dev="sockfs" ino=15053 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 203.070662][ T5873] usb usb38-port1: attempt power cycle [ 203.708777][ T5873] usb usb38-port1: unable to enumerate USB device [ 203.819423][ T7492] CIFS: Unable to determine destination address [ 204.832646][ T7503] CIFS: Unable to determine destination address [ 205.245455][ T30] audit: type=1400 audit(1750620427.301:561): avc: denied { mount } for pid=7498 comm="syz.1.422" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 205.343228][ T7516] ======================================================= [ 205.343228][ T7516] WARNING: The mand mount option has been deprecated and [ 205.343228][ T7516] and is ignored by this kernel. Remove the mand [ 205.343228][ T7516] option from the mount to silence this warning. [ 205.343228][ T7516] ======================================================= [ 205.378089][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.695949][ T1049] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.823728][ T30] audit: type=1400 audit(1750620427.401:562): avc: denied { remount } for pid=7507 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 205.851608][ T30] audit: type=1400 audit(1750620427.821:563): avc: denied { write } for pid=7519 comm="syz.2.426" path="socket:[15856]" dev="sockfs" ino=15856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 206.001291][ T5955] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 206.091628][ T1049] usb 4-1: Using ep0 maxpacket: 8 [ 206.183124][ T1049] usb 4-1: config 0 has no interfaces? [ 206.211825][ T1049] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 206.215487][ T7526] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 206.223550][ T1049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.227569][ T7526] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.274806][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.302951][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.362294][ T7526] vhci_hcd vhci_hcd.0: Device attached [ 206.374339][ T1049] usb 4-1: config 0 descriptor?? [ 206.401543][ T5955] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 206.858413][ T7515] veth0_vlan: entered allmulticast mode [ 206.876440][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.893633][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.903458][ T5955] usb 1-1: config 0 descriptor?? [ 206.925899][ T5873] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 207.127079][ T7540] netlink: 68 bytes leftover after parsing attributes in process `syz.4.430'. [ 207.267231][ T7541] veth0_vlan: entered allmulticast mode [ 207.328247][ T5955] usbhid 1-1:0.0: can't add hid device: -71 [ 207.362752][ T5955] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 207.507558][ T5955] usb 1-1: USB disconnect, device number 17 [ 208.104855][ T1049] usb 4-1: USB disconnect, device number 12 [ 208.538828][ T5819] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.786480][ T7558] CIFS: Unable to determine destination address [ 209.176296][ T7531] vhci_hcd: connection reset by peer [ 209.208852][ T2128] vhci_hcd: stop threads [ 209.218313][ T2128] vhci_hcd: release socket [ 209.236260][ T2128] vhci_hcd: disconnect device [ 210.380342][ T30] audit: type=1400 audit(1750620432.441:564): avc: denied { bind } for pid=7582 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.465908][ T1049] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 210.469886][ T30] audit: type=1400 audit(1750620432.471:565): avc: denied { ioctl } for pid=7582 comm="syz.2.438" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 210.625829][ T1049] usb 1-1: Using ep0 maxpacket: 8 [ 210.627619][ T1049] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 210.627647][ T1049] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 210.627670][ T1049] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.627692][ T1049] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.627726][ T1049] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.627745][ T1049] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.695276][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.753624][ T30] audit: type=1400 audit(1750620432.731:566): avc: denied { read } for pid=7582 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.013780][ T7593] 9pnet_fd: Insufficient options for proto=fd [ 211.756136][ T7575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.756274][ T7575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.762738][ T1049] usb 1-1: GET_CAPABILITIES returned 0 [ 211.762780][ T1049] usbtmc 1-1:16.0: can't read capabilities [ 212.243028][ T5873] vhci_hcd: vhci_device speed not set [ 212.438900][ T2128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.082118][ T7619] FAULT_INJECTION: forcing a failure. [ 213.082118][ T7619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.257510][ T7619] CPU: 1 UID: 0 PID: 7619 Comm: syz.2.444 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 213.257538][ T7619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.257547][ T7619] Call Trace: [ 213.257554][ T7619] [ 213.257560][ T7619] dump_stack_lvl+0x16c/0x1f0 [ 213.257597][ T7619] should_fail_ex+0x512/0x640 [ 213.257624][ T7619] _copy_to_user+0x32/0xd0 [ 213.257650][ T7619] sctp_getsockopt+0x3777/0x6b90 [ 213.257670][ T7619] ? avc_has_perm_noaudit+0x117/0x3b0 [ 213.257705][ T7619] ? __pfx_sctp_getsockopt+0x10/0x10 [ 213.257728][ T7619] ? avc_has_perm+0x11a/0x1c0 [ 213.257755][ T7619] ? __pfx_avc_has_perm+0x10/0x10 [ 213.257786][ T7619] ? __lock_acquire+0xb8a/0x1c90 [ 213.257817][ T7619] ? sock_has_perm+0x259/0x2f0 [ 213.257845][ T7619] ? find_held_lock+0x2b/0x80 [ 213.257863][ T7619] ? __might_fault+0xe3/0x190 [ 213.257883][ T7619] ? __might_fault+0xe3/0x190 [ 213.257900][ T7619] ? __might_fault+0x13b/0x190 [ 213.257928][ T7619] ? sock_common_getsockopt+0x21/0xb0 [ 213.257955][ T7619] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 213.257986][ T7619] do_sock_getsockopt+0x3fc/0x800 [ 213.258006][ T7619] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 213.258022][ T7619] ? __fget_files+0x204/0x3c0 [ 213.258061][ T7619] __sys_getsockopt+0x12f/0x260 [ 213.258091][ T7619] __x64_sys_getsockopt+0xbd/0x160 [ 213.258112][ T7619] ? do_syscall_64+0x91/0x4c0 [ 213.258136][ T7619] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.258160][ T7619] do_syscall_64+0xcd/0x4c0 [ 213.258186][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.258203][ T7619] RIP: 0033:0x7f6f4098e929 [ 213.258217][ T7619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.258233][ T7619] RSP: 002b:00007f6f3e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 213.258249][ T7619] RAX: ffffffffffffffda RBX: 00007f6f40bb5fa0 RCX: 00007f6f4098e929 [ 213.258260][ T7619] RDX: 0000000000000007 RSI: 0000000000000084 RDI: 0000000000000003 [ 213.258269][ T7619] RBP: 00007f6f3e7f6090 R08: 0000200000001300 R09: 0000000000000000 [ 213.258280][ T7619] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 213.258290][ T7619] R13: 0000000000000000 R14: 00007f6f40bb5fa0 R15: 00007ffc2ea623a8 [ 213.258316][ T7619] [ 213.852681][ T7625] tmpfs: Unknown parameter 'usrquota' [ 214.005719][ T48] usb 1-1: USB disconnect, device number 18 [ 214.074834][ T30] audit: type=1400 audit(1750620436.131:567): avc: denied { read write } for pid=7624 comm="syz.4.447" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.095785][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.310930][ T5873] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.323717][ T2128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.351417][ T7634] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.445'. [ 214.457915][ T7634] netlink: zone id is out of range [ 214.483221][ T30] audit: type=1400 audit(1750620436.181:568): avc: denied { open } for pid=7624 comm="syz.4.447" path="/99/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.627345][ T7634] netlink: zone id is out of range [ 214.632651][ T7634] netlink: get zone limit has 8 unknown bytes [ 214.639785][ T7627] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 214.646402][ T7627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.654032][ T7627] vhci_hcd vhci_hcd.0: Device attached [ 214.892866][ T7645] overlayfs: missing 'lowerdir' [ 215.245850][ T5873] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 215.276837][ T1049] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 215.398443][ T5873] usb 3-1: device descriptor read/64, error -71 [ 215.894491][ T5873] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 216.471251][ T7656] program syz.3.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.501681][ T30] audit: type=1400 audit(1750620438.551:569): avc: denied { setopt } for pid=7652 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.645835][ T5873] usb 3-1: device descriptor read/64, error -71 [ 216.721034][ T30] audit: type=1400 audit(1750620438.741:570): avc: denied { map } for pid=7663 comm="syz.0.453" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 218.245935][ T30] audit: type=1400 audit(1750620438.741:571): avc: denied { execute } for pid=7663 comm="syz.0.453" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 218.247238][ T5873] usb usb3-port1: attempt power cycle [ 218.276065][ T7641] vhci_hcd: connection reset by peer [ 218.292221][ T3002] vhci_hcd: stop threads [ 218.297773][ T3002] vhci_hcd: release socket [ 218.302506][ T3002] vhci_hcd: disconnect device [ 218.449074][ T7669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.491147][ T7669] bond0: (slave bond1): Enslaving as an active interface with an up link [ 218.526385][ T7674] overlayfs: missing 'lowerdir' [ 218.749615][ T3002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 218.997903][ T7680] CIFS: Unable to determine destination address [ 219.522380][ T7688] CIFS: Unable to determine destination address [ 219.622298][ T30] audit: type=1400 audit(1750620441.671:572): avc: denied { getopt } for pid=7686 comm="syz.1.459" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.028821][ T3002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.224254][ T7707] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 220.230800][ T7707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 220.266145][ T7707] vhci_hcd vhci_hcd.0: Device attached [ 220.472137][ T7709] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 220.478784][ T7709] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 220.501219][ T1049] vhci_hcd: vhci_device speed not set [ 220.507645][ T24] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 220.528256][ T7709] vhci_hcd vhci_hcd.0: Device attached [ 220.658024][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 221.496969][ T5955] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 221.900824][ T48] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 221.925198][ T30] audit: type=1400 audit(1750620443.981:573): avc: denied { setopt } for pid=7731 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 221.991201][ T7733] overlayfs: overlapping lowerdir path [ 222.061276][ T7736] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.469'. [ 222.082583][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.097535][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.105116][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.106234][ T7736] netlink: zone id is out of range [ 222.113168][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.126701][ T7736] netlink: zone id is out of range [ 222.144504][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.152052][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 222.162388][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.165976][ T48] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 222.180174][ T7736] netlink: get zone limit has 8 unknown bytes [ 222.188176][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.201547][ T48] usb 4-1: Product: syz [ 222.207809][ T48] usb 4-1: Manufacturer: syz [ 222.212534][ T48] usb 4-1: SerialNumber: syz [ 222.246791][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.247617][ T30] audit: type=1400 audit(1750620444.311:574): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 222.288795][ T48] usb 4-1: config 0 descriptor?? [ 222.288911][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.304123][ T48] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 222.314306][ T48] usb 4-1: Detected FT232H [ 222.323888][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.331571][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.341286][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.348943][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.358514][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.366199][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.373815][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.383418][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.391242][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.400921][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.409359][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.420906][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.429219][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.438667][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.446301][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.453883][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.463581][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.471147][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.480661][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.488768][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.498828][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.506662][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.514517][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.525088][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.534480][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.542255][ T7715] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 222.545360][ T48] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 222.555845][ T5873] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 222.563917][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.573894][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.581438][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.589203][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.596767][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.604244][ T3532] vhci_hcd: stop threads [ 222.618536][ T3532] vhci_hcd: release socket [ 222.623073][ T3532] vhci_hcd: disconnect device [ 222.629899][ T48] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 222.631360][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.649193][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.649984][ T48] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 222.659210][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.672712][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.677542][ T48] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 222.680346][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.699893][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.702960][ T48] usb 4-1: USB disconnect, device number 13 [ 222.713243][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.715387][ T48] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 222.720967][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 222.736653][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.738140][ T48] ftdi_sio 4-1:0.0: device disconnected [ 222.746123][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.759221][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.771624][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.821370][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 222.834593][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.842271][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.849925][ T5873] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 222.859097][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.866900][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.875665][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.886280][ T5873] usb 1-1: config 0 descriptor?? [ 222.891304][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.899301][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.910300][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.917984][ T7711] vhci_hcd: connection reset by peer [ 222.923830][ T6010] vhci_hcd: stop threads [ 222.923896][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.928364][ T6010] vhci_hcd: release socket [ 222.935938][ T92] hid-generic 0006:0000:0005.000F: unknown main item tag 0x0 [ 222.951035][ T92] hid-generic 0006:0000:0005.000F: hidraw0: VIRTUAL HID v0.09 Device [syz0] on syz1 [ 222.960881][ T6010] vhci_hcd: disconnect device [ 223.165700][ T5873] logitech 0003:046D:C293.0010: unknown main item tag 0x0 [ 223.176924][ T5873] logitech 0003:046D:C293.0010: unknown main item tag 0x0 [ 223.190298][ T5873] logitech 0003:046D:C293.0010: unknown main item tag 0x0 [ 223.199679][ T30] audit: type=1400 audit(1750620445.261:575): avc: denied { accept } for pid=7748 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.228697][ T7747] overlayfs: missing 'lowerdir' [ 223.234693][ T5873] logitech 0003:046D:C293.0010: unknown main item tag 0x0 [ 223.246473][ T5873] logitech 0003:046D:C293.0010: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.0-1/input0 [ 223.258555][ T5873] logitech 0003:046D:C293.0010: no inputs found [ 223.342808][ T7757] binder: BINDER_SET_CONTEXT_MGR already set [ 223.350734][ T7757] binder: 7755:7757 ioctl 4018620d 2000000000c0 returned -16 [ 223.365343][ T5873] usb 1-1: USB disconnect, device number 19 [ 223.575925][ T1049] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 223.626845][ T92] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 223.747263][ T1049] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 223.755532][ T1049] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.765795][ T1049] usb 4-1: config 0 has no interface number 0 [ 223.773603][ T1049] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 223.782894][ T1049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.788833][ T92] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.790955][ T1049] usb 4-1: Product: syz [ 223.803283][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.806594][ T1049] usb 4-1: Manufacturer: syz [ 223.806612][ T1049] usb 4-1: SerialNumber: syz [ 223.808483][ T1049] usb 4-1: config 0 descriptor?? [ 223.820149][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 223.841736][ T92] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.855664][ T92] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.864768][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.879338][ T92] usb 5-1: config 0 descriptor?? [ 224.042424][ T1049] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 224.050859][ T1049] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 224.059907][ T1049] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 224.067996][ T1049] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 224.079989][ T1049] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 224.139935][ T1049] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 224.225721][ T7763] CIFS: Unable to determine destination address [ 224.468879][ T92] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 224.499008][ T92] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 224.515966][ T3002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.526016][ T1049] usb 4-1: USB disconnect, device number 14 [ 224.558964][ T1049] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 224.588774][ T1049] keyspan 4-1:0.133: device disconnected [ 224.684649][ T92] usb 5-1: USB disconnect, device number 20 [ 224.942221][ T5873] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 225.615832][ T24] vhci_hcd: vhci_device speed not set [ 225.824581][ T6010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.907920][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.986035][ T5873] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.079427][ T5873] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 235, setting to 64 [ 226.150847][ T5873] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.483997][ T5873] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.505670][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.521076][ T5873] usb 3-1: Product: syz [ 226.531525][ T5873] usb 3-1: Manufacturer: syz [ 226.539794][ T5873] usb 3-1: SerialNumber: syz [ 227.004519][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 227.090309][ T5955] vhci_hcd: vhci_device speed not set [ 227.695690][ T5873] cdc_ncm 3-1:1.0: bind() failure [ 227.712868][ T5873] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 227.733179][ T7793] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 227.739788][ T7793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.747384][ T7793] vhci_hcd vhci_hcd.0: Device attached [ 227.980494][ T5873] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 227.989265][ T5873] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 228.003769][ T5873] usb 3-1: USB disconnect, device number 25 [ 228.026102][ T24] usb 35-1: new low-speed USB device number 6 using vhci_hcd [ 228.263562][ T7802] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 228.270167][ T7802] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.278482][ T7802] vhci_hcd vhci_hcd.0: Device attached [ 228.345286][ T7819] FAULT_INJECTION: forcing a failure. [ 228.345286][ T7819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.361972][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.3.491 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 228.361997][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.362007][ T7819] Call Trace: [ 228.362013][ T7819] [ 228.362019][ T7819] dump_stack_lvl+0x16c/0x1f0 [ 228.362049][ T7819] should_fail_ex+0x512/0x640 [ 228.362073][ T7819] _copy_from_user+0x2e/0xd0 [ 228.362106][ T7819] copy_msghdr_from_user+0x98/0x160 [ 228.362128][ T7819] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 228.362164][ T7819] ___sys_sendmsg+0xfe/0x1d0 [ 228.362189][ T7819] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.362210][ T7819] ? __lock_acquire+0x622/0x1c90 [ 228.362275][ T7819] __sys_sendmsg+0x16d/0x220 [ 228.362300][ T7819] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.362342][ T7819] do_syscall_64+0xcd/0x4c0 [ 228.362367][ T7819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.362382][ T7819] RIP: 0033:0x7f2f8b78e929 [ 228.362395][ T7819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.362411][ T7819] RSP: 002b:00007f2f8c608038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.362426][ T7819] RAX: ffffffffffffffda RBX: 00007f2f8b9b5fa0 RCX: 00007f2f8b78e929 [ 228.362435][ T7819] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 228.362444][ T7819] RBP: 00007f2f8c608090 R08: 0000000000000000 R09: 0000000000000000 [ 228.362453][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.362462][ T7819] R13: 0000000000000000 R14: 00007f2f8b9b5fa0 R15: 00007fff602ce468 [ 228.362487][ T7819] [ 228.528468][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.598271][ T7822] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.492'. [ 228.608812][ T7822] netlink: zone id is out of range [ 228.614587][ T7822] netlink: zone id is out of range [ 228.620568][ T7822] netlink: get zone limit has 8 unknown bytes [ 228.666311][ T5887] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 228.679808][ T1049] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 228.690790][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.698180][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.731979][ T7824] bridge0: entered allmulticast mode [ 228.752049][ T7824] bridge_slave_1: left allmulticast mode [ 228.759615][ T7824] bridge_slave_1: left promiscuous mode [ 228.768595][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.783756][ T7824] bridge_slave_0: left allmulticast mode [ 228.783778][ T7824] bridge_slave_0: left promiscuous mode [ 228.783896][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.855963][ T1049] usb 5-1: Using ep0 maxpacket: 16 [ 228.872049][ T1049] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 228.890760][ T1049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.924287][ T1049] usb 5-1: Product: syz [ 228.931919][ T1049] usb 5-1: Manufacturer: syz [ 228.938029][ T1049] usb 5-1: SerialNumber: syz [ 228.954613][ T1049] usb 5-1: config 0 descriptor?? [ 228.989848][ T1049] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 229.104609][ T1049] usb 5-1: Detected FT232H [ 229.198954][ T7816] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 229.217150][ T1049] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 229.229365][ T1049] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 229.237035][ T1049] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 229.670866][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.671751][ T1049] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 229.705141][ T30] audit: type=1400 audit(1750620451.751:576): avc: denied { ioctl } for pid=7823 comm="syz.3.493" path="socket:[17226]" dev="sockfs" ino=17226 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 229.730862][ T3532] vhci_hcd: stop threads [ 229.735564][ T3532] vhci_hcd: release socket [ 229.769406][ T3532] vhci_hcd: disconnect device [ 229.798110][ T1049] usb 5-1: USB disconnect, device number 21 [ 229.813525][ T1049] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 229.827493][ T1049] ftdi_sio 5-1:0.0: device disconnected [ 229.899247][ T7806] vhci_hcd: connection reset by peer [ 229.965337][ T49] vhci_hcd: stop threads [ 230.058412][ T49] vhci_hcd: release socket [ 230.063048][ T49] vhci_hcd: disconnect device [ 230.727189][ T30] audit: type=1400 audit(1750620452.791:577): avc: denied { write } for pid=7847 comm="syz.1.498" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 230.751376][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.953607][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 231.185988][ T7874] netlink: 'syz.1.504': attribute type 9 has an invalid length. [ 231.218201][ T30] audit: type=1400 audit(1750620453.281:578): avc: denied { setopt } for pid=7875 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.290705][ T7879] CIFS: Unable to determine destination address [ 231.504816][ T5873] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 231.595168][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.130964][ T7888] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 232.137602][ T7888] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.145443][ T7888] vhci_hcd vhci_hcd.0: Device attached [ 232.200531][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 232.207567][ T5873] usb 5-1: config 70 has too many interfaces: 222, using maximum allowed: 32 [ 232.416476][ T5873] usb 5-1: config 70 has 0 interfaces, different from the descriptor's value: 222 [ 232.555980][ T92] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 233.317141][ T5955] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 233.344030][ T5873] usb 5-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 233.355965][ T24] vhci_hcd: vhci_device speed not set [ 233.361469][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.375904][ T5873] usb 5-1: Product: syz [ 233.380113][ T5873] usb 5-1: Manufacturer: syz [ 233.394961][ T5873] usb 5-1: SerialNumber: syz [ 233.487646][ T92] usb 3-1: Using ep0 maxpacket: 16 [ 233.556823][ T92] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 233.566165][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.574134][ T92] usb 3-1: Product: syz [ 233.578699][ T92] usb 3-1: Manufacturer: syz [ 233.583281][ T92] usb 3-1: SerialNumber: syz [ 233.590823][ T92] usb 3-1: config 0 descriptor?? [ 233.856068][ T5887] vhci_hcd: vhci_device speed not set [ 233.869975][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.115404][ T92] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 234.124108][ T92] usb 3-1: Detected FT232H [ 234.129139][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.141958][ T5815] usb 5-1: USB disconnect, device number 22 [ 234.175624][ T7910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.515'. [ 234.390243][ T7889] vhci_hcd: connection reset by peer [ 234.395996][ T92] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 234.402682][ T3002] vhci_hcd: stop threads [ 234.414971][ T3002] vhci_hcd: release socket [ 234.422592][ T92] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 234.425045][ T3002] vhci_hcd: disconnect device [ 234.439778][ T92] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 234.461979][ T92] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 234.481002][ T7915] CIFS: Unable to determine destination address [ 234.501009][ T92] usb 3-1: USB disconnect, device number 26 [ 234.523521][ T92] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 235.128618][ T92] ftdi_sio 3-1:0.0: device disconnected [ 235.138052][ T30] audit: type=1400 audit(1750620456.791:579): avc: denied { read } for pid=7917 comm="syz.2.518" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 235.171463][ T30] audit: type=1400 audit(1750620456.801:580): avc: denied { open } for pid=7917 comm="syz.2.518" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 235.196883][ T30] audit: type=1400 audit(1750620456.801:581): avc: denied { ioctl } for pid=7917 comm="syz.2.518" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x564e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 235.197582][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.222329][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.655052][ T24] hid-generic 0006:0000:0005.0012: item fetching failed at offset 2/4 [ 235.664320][ T24] hid-generic 0006:0000:0005.0012: probe with driver hid-generic failed with error -22 [ 237.306942][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.454619][ T30] audit: type=1326 audit(1750620459.501:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.2.522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f4098e929 code=0x7fef0000 [ 238.062003][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 238.435840][ T5955] vhci_hcd: vhci_device speed not set [ 239.336336][ T7933] delete_channel: no stack [ 240.173124][ T7966] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 240.179725][ T7966] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 240.187325][ T7966] vhci_hcd vhci_hcd.0: Device attached [ 240.335994][ T5873] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 240.571792][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 240.676256][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 240.717125][ T5873] usb 1-1: config 1 has an invalid interface number: 49 but max is 1 [ 240.726168][ T5955] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 240.745817][ T5873] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.759978][ T5873] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 240.769561][ T5873] usb 1-1: config 1 has no interface number 0 [ 240.775695][ T5873] usb 1-1: too many endpoints for config 1 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 240.788703][ T5873] usb 1-1: config 1 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 240.803575][ T5873] usb 1-1: config 1 interface 49 has no altsetting 0 [ 240.811242][ T5873] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 240.820531][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.825938][ T5887] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 240.895830][ T5815] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 240.906021][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 240.923838][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.941084][ T5955] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 240.951301][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 240.960682][ T5955] usb 4-1: Product: syz [ 240.970836][ T5955] usb 4-1: config 0 descriptor?? [ 241.005864][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 241.080300][ T7969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.091389][ T7969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.105254][ T30] audit: type=1400 audit(1750620463.161:583): avc: denied { setopt } for pid=7980 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 241.126486][ T5887] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 241.135589][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.162289][ T5887] usb 5-1: Product: syz [ 241.212534][ T5873] usb 1-1: string descriptor 0 read error: -71 [ 241.221460][ T5873] hub 1-1:1.49: bad descriptor, ignoring hub [ 241.228008][ T5873] hub 1-1:1.49: probe with driver hub failed with error -5 [ 241.545819][ T5887] usb 5-1: Manufacturer: syz [ 241.546848][ T5873] usb 1-1: USB disconnect, device number 20 [ 241.550444][ T5887] usb 5-1: SerialNumber: syz [ 241.575259][ T5887] usb 5-1: config 0 descriptor?? [ 241.589803][ T5887] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 241.616712][ T5887] usb 5-1: Detected FT232H [ 241.794129][ T5887] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 241.809478][ T7974] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 241.889708][ T5887] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 241.934121][ T5887] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 241.949542][ T5887] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 241.960930][ T5887] usb 5-1: USB disconnect, device number 23 [ 241.969185][ T5887] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 241.979484][ T5887] ftdi_sio 5-1:0.0: device disconnected [ 242.002747][ T30] audit: type=1400 audit(1750620464.061:584): avc: denied { append } for pid=7983 comm="syz.2.533" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 242.025416][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.076855][ T3532] vhci_hcd: stop threads [ 242.081780][ T3532] vhci_hcd: release socket [ 242.092708][ T5955] usbhid 4-1:0.0: can't add hid device: -71 [ 242.099761][ T3532] vhci_hcd: disconnect device [ 242.112557][ T5955] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 242.206779][ T30] audit: type=1400 audit(1750620464.261:585): avc: denied { rename } for pid=7988 comm="syz.1.534" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 242.223337][ T5955] usb 4-1: USB disconnect, device number 15 [ 242.286069][ T7995] delete_channel: no stack [ 242.291427][ T30] audit: type=1400 audit(1750620464.341:586): avc: denied { ioctl } for pid=7995 comm="syz.0.535" path="socket:[18728]" dev="sockfs" ino=18728 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 243.072794][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.582698][ T8017] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.064937][ T8019] netlink: 136 bytes leftover after parsing attributes in process `syz.4.541'. [ 244.964913][ T8032] FAULT_INJECTION: forcing a failure. [ 244.964913][ T8032] name failslab, interval 1, probability 0, space 0, times 1 [ 244.977724][ T8032] CPU: 0 UID: 0 PID: 8032 Comm: syz.3.544 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 244.977747][ T8032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.977756][ T8032] Call Trace: [ 244.977761][ T8032] [ 244.977767][ T8032] dump_stack_lvl+0x16c/0x1f0 [ 244.977796][ T8032] should_fail_ex+0x512/0x640 [ 244.977817][ T8032] ? fs_reclaim_acquire+0xae/0x150 [ 244.977833][ T8032] ? tomoyo_encode2+0x100/0x3e0 [ 244.977852][ T8032] should_failslab+0xc2/0x120 [ 244.977873][ T8032] __kmalloc_noprof+0xd2/0x510 [ 244.977891][ T8032] ? d_absolute_path+0x136/0x1a0 [ 244.977910][ T8032] tomoyo_encode2+0x100/0x3e0 [ 244.977934][ T8032] tomoyo_encode+0x29/0x50 [ 244.977954][ T8032] tomoyo_realpath_from_path+0x18f/0x6e0 [ 244.977984][ T8032] tomoyo_path_number_perm+0x245/0x580 [ 244.978002][ T8032] ? tomoyo_path_number_perm+0x237/0x580 [ 244.978024][ T8032] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 244.978052][ T8032] ? __pfx___schedule+0x10/0x10 [ 244.978086][ T8032] ? rcu_is_watching+0x12/0xc0 [ 244.978117][ T8032] ? irqentry_exit+0x3b/0x90 [ 244.978139][ T8032] ? lockdep_hardirqs_on+0x7c/0x110 [ 244.978172][ T8032] ? security_file_ioctl+0x21c/0x240 [ 244.978201][ T8032] security_file_ioctl+0x9b/0x240 [ 244.978221][ T8032] __x64_sys_ioctl+0xb7/0x210 [ 244.978240][ T8032] do_syscall_64+0xcd/0x4c0 [ 244.978264][ T8032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.978282][ T8032] RIP: 0033:0x7f2f8b78e929 [ 244.978297][ T8032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.978313][ T8032] RSP: 002b:00007f2f8c5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.978329][ T8032] RAX: ffffffffffffffda RBX: 00007f2f8b9b6080 RCX: 00007f2f8b78e929 [ 244.978340][ T8032] RDX: 0000200000000100 RSI: 00000000c0d05604 RDI: 0000000000000004 [ 244.978350][ T8032] RBP: 00007f2f8c5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.978360][ T8032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.978370][ T8032] R13: 0000000000000000 R14: 00007f2f8b9b6080 R15: 00007fff602ce468 [ 244.978393][ T8032] [ 244.978676][ T8032] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.651728][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 246.343895][ T5815] vhci_hcd: vhci_device speed not set [ 246.510039][ T3532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.724394][ T8040] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 246.731026][ T8040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.852834][ T8040] vhci_hcd vhci_hcd.0: Device attached [ 246.865179][ T8052] FAULT_INJECTION: forcing a failure. [ 246.865179][ T8052] name failslab, interval 1, probability 0, space 0, times 0 [ 246.878954][ T8052] CPU: 1 UID: 0 PID: 8052 Comm: syz.2.550 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 246.878977][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.878986][ T8052] Call Trace: [ 246.878992][ T8052] [ 246.878998][ T8052] dump_stack_lvl+0x16c/0x1f0 [ 246.879035][ T8052] should_fail_ex+0x512/0x640 [ 246.879062][ T8052] should_failslab+0xc2/0x120 [ 246.879086][ T8052] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 246.879109][ T8052] ? skb_clone+0x190/0x3f0 [ 246.879137][ T8052] skb_clone+0x190/0x3f0 [ 246.879163][ T8052] netlink_deliver_tap+0xabd/0xd30 [ 246.879198][ T8052] netlink_unicast+0x5df/0x7f0 [ 246.879221][ T8052] ? __pfx_netlink_unicast+0x10/0x10 [ 246.879248][ T8052] netlink_sendmsg+0x8d1/0xdd0 [ 246.879270][ T8052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.879299][ T8052] ____sys_sendmsg+0xa98/0xc70 [ 246.879318][ T8052] ? copy_msghdr_from_user+0x10a/0x160 [ 246.879341][ T8052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.879371][ T8052] ___sys_sendmsg+0x134/0x1d0 [ 246.879395][ T8052] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.879416][ T8052] ? __lock_acquire+0x622/0x1c90 [ 246.879472][ T8052] __sys_sendmsg+0x16d/0x220 [ 246.879496][ T8052] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.879530][ T8052] ? fput+0x70/0xf0 [ 246.879559][ T8052] do_syscall_64+0xcd/0x4c0 [ 246.879586][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.879602][ T8052] RIP: 0033:0x7f6f4098e929 [ 246.879616][ T8052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.879632][ T8052] RSP: 002b:00007f6f3e7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.879649][ T8052] RAX: ffffffffffffffda RBX: 00007f6f40bb5fa0 RCX: 00007f6f4098e929 [ 246.879661][ T8052] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 246.879671][ T8052] RBP: 00007f6f3e7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 246.879680][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.879690][ T8052] R13: 0000000000000000 R14: 00007f6f40bb5fa0 R15: 00007ffc2ea623a8 [ 246.879713][ T8052] [ 247.095836][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.272282][ T48] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 247.282359][ T30] audit: type=1400 audit(1750620469.231:587): avc: denied { mount } for pid=8046 comm="syz.4.549" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 247.324034][ T8050] : entered promiscuous mode [ 247.385933][ T5873] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 247.425937][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 247.432458][ T48] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 247.443816][ T5934] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 247.453558][ T48] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.463720][ T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.476091][ T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.486790][ T48] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.499874][ T48] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.509029][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.635908][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 247.653083][ T5934] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 247.662708][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.672703][ T5934] usb 4-1: Product: syz [ 247.677011][ T5934] usb 4-1: Manufacturer: syz [ 247.686041][ T5934] usb 4-1: SerialNumber: syz [ 247.693265][ T5934] usb 4-1: config 0 descriptor?? [ 247.706066][ T5955] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 247.709952][ T5934] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 247.729170][ T48] usb 1-1: GET_CAPABILITIES returned 0 [ 247.739707][ T48] usbtmc 1-1:16.0: can't read capabilities [ 247.753908][ T5934] usb 4-1: Detected FT232H [ 248.097978][ T5955] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 248.100973][ T48] usb 1-1: USB disconnect, device number 21 [ 248.112205][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.112265][ T5934] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 248.131146][ T8047] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 248.132137][ T5934] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 248.138179][ T5955] usb 3-1: config 0 has no interface number 0 [ 248.158195][ T5934] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 248.158406][ T5955] usb 3-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.168511][ T5934] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 248.189126][ T3002] vhci_hcd: stop threads [ 248.193327][ T5934] usb 4-1: USB disconnect, device number 16 [ 248.193403][ T3002] vhci_hcd: release socket [ 248.203306][ T5934] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 248.204042][ T3002] vhci_hcd: disconnect device [ 248.216580][ T5934] ftdi_sio 4-1:0.0: device disconnected [ 248.220058][ T5955] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 248.232902][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.240983][ T5955] usb 3-1: Product: syz [ 248.245822][ T5955] usb 3-1: Manufacturer: syz [ 248.250851][ T5955] usb 3-1: SerialNumber: syz [ 248.260278][ T5955] usb 3-1: config 0 descriptor?? [ 250.230402][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.252142][ T5955] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 251.111058][ T5955] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 82 [ 251.131041][ T5955] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 251.143443][ T5955] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 251.152655][ T5955] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 251.161811][ T5955] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 251.174547][ T5955] usb 3-1: USB disconnect, device number 27 [ 251.185815][ T5955] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 251.195582][ T5955] keyspan 3-1:0.133: device disconnected [ 251.380023][ T8079] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 251.776430][ T30] audit: type=1400 audit(1750620473.831:588): avc: denied { read } for pid=8083 comm="syz.1.556" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 252.412671][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.436618][ T30] audit: type=1400 audit(1750620473.831:589): avc: denied { open } for pid=8083 comm="syz.1.556" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 252.539518][ T5873] vhci_hcd: vhci_device speed not set [ 252.647936][ T8095] FAULT_INJECTION: forcing a failure. [ 252.647936][ T8095] name failslab, interval 1, probability 0, space 0, times 0 [ 252.660693][ T8095] CPU: 0 UID: 0 PID: 8095 Comm: syz.4.557 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 252.660715][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.660723][ T8095] Call Trace: [ 252.660729][ T8095] [ 252.660735][ T8095] dump_stack_lvl+0x16c/0x1f0 [ 252.660764][ T8095] should_fail_ex+0x512/0x640 [ 252.660784][ T8095] ? __kmalloc_noprof+0xbf/0x510 [ 252.660806][ T8095] ? video_usercopy+0x1a0/0x1720 [ 252.660827][ T8095] should_failslab+0xc2/0x120 [ 252.660851][ T8095] __kmalloc_noprof+0xd2/0x510 [ 252.660872][ T8095] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 252.660896][ T8095] video_usercopy+0x1a0/0x1720 [ 252.660916][ T8095] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 252.660941][ T8095] ? __pfx___video_do_ioctl+0x10/0x10 [ 252.660969][ T8095] ? __pfx_video_usercopy+0x10/0x10 [ 252.660988][ T8095] ? rcu_is_watching+0x12/0xc0 [ 252.661021][ T8095] ? __pfx___video_do_ioctl+0x10/0x10 [ 252.661046][ T8095] v4l2_ioctl+0x1ba/0x250 [ 252.661065][ T8095] ? __pfx_v4l2_ioctl+0x10/0x10 [ 252.661086][ T8095] __x64_sys_ioctl+0x18e/0x210 [ 252.661107][ T8095] do_syscall_64+0xcd/0x4c0 [ 252.661134][ T8095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.661151][ T8095] RIP: 0033:0x7f1bcdf8e929 [ 252.661165][ T8095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.661181][ T8095] RSP: 002b:00007f1bcedc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.661197][ T8095] RAX: ffffffffffffffda RBX: 00007f1bce1b6080 RCX: 00007f1bcdf8e929 [ 252.661207][ T8095] RDX: 0000200000000100 RSI: 00000000c0d05604 RDI: 0000000000000004 [ 252.661217][ T8095] RBP: 00007f1bcedc9090 R08: 0000000000000000 R09: 0000000000000000 [ 252.661227][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.661236][ T8095] R13: 0000000000000000 R14: 00007f1bce1b6080 R15: 00007fffacd61008 [ 252.661261][ T8095] [ 252.858370][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.119481][ T8091] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.125562][ T8091] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 253.218251][ T8091] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.236657][ T8099] binder_alloc: 8096: binder_alloc_buf, no vma [ 253.250602][ T8091] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 253.398500][ T8091] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.591032][ T8091] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 253.599915][ T8091] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 253.606431][ T8091] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 253.847238][ T5934] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 253.855843][ T5815] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 253.863480][ T48] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 253.996172][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 254.002812][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.013893][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.023753][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.036729][ T5934] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 254.052212][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.061223][ T5815] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 254.069453][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 254.077842][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.091267][ T5934] usb 1-1: config 0 descriptor?? [ 254.096565][ T48] usb 3-1: not running at top speed; connect to a high speed hub [ 254.104695][ T5815] usb 5-1: config 0 has no interface number 0 [ 254.116966][ T5815] usb 5-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.131336][ T48] usb 3-1: config 253 has an invalid interface number: 140 but max is 0 [ 254.142703][ T48] usb 3-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 254.153931][ T48] usb 3-1: config 253 has no interface number 0 [ 254.163771][ T48] usb 3-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.180307][ T5815] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 254.189794][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.199076][ T5815] usb 5-1: Product: syz [ 254.203365][ T5815] usb 5-1: Manufacturer: syz [ 254.208242][ T5815] usb 5-1: SerialNumber: syz [ 254.214920][ T48] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 254.227086][ T5815] usb 5-1: config 0 descriptor?? [ 254.232357][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.241163][ T48] usb 3-1: Product: syz [ 254.245384][ T48] usb 3-1: Manufacturer: syz [ 254.250124][ T48] usb 3-1: SerialNumber: syz [ 254.319098][ T8116] CIFS: Unable to determine destination address [ 254.493115][ T5815] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 254.507913][ T5815] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 82 [ 254.673946][ T5815] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 254.702780][ T5934] hid-multitouch 0003:0457:07DA.0013: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 254.725238][ T5815] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 254.744783][ T5815] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 254.753778][ T30] audit: type=1400 audit(1750620476.811:590): avc: denied { setopt } for pid=8102 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 254.761819][ T8118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=8118 comm=syz.3.566 [ 254.787681][ T8102] delete_channel: no stack [ 254.795960][ T5815] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 254.808417][ T5815] usb 5-1: USB disconnect, device number 24 [ 254.816443][ T48] usbtest 3-1:253.140: couldn't get endpoints, -22 [ 254.819477][ T8118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7138 sclass=netlink_route_socket pid=8118 comm=syz.3.566 [ 254.825845][ T48] usbtest 3-1:253.140: probe with driver usbtest failed with error -22 [ 254.850979][ T5815] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 254.861347][ T5815] keyspan 5-1:0.133: device disconnected [ 254.888498][ T48] usb 3-1: USB disconnect, device number 28 [ 254.955347][ T5934] usb 1-1: USB disconnect, device number 22 [ 255.145990][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 255.226067][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 255.465845][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 255.628367][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 256.237336][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.245054][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.254284][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.493744][ T8132] netlink: 'syz.4.570': attribute type 10 has an invalid length. [ 257.046033][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 257.056303][ T8132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.065474][ T8132] team0: Port device bond0 added [ 257.088238][ T8137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.571'. [ 257.249353][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 257.313467][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 257.314567][ T8141] FAULT_INJECTION: forcing a failure. [ 257.314567][ T8141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.334255][ T8141] CPU: 0 UID: 0 PID: 8141 Comm: syz.1.573 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 257.334278][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.334287][ T8141] Call Trace: [ 257.334293][ T8141] [ 257.334299][ T8141] dump_stack_lvl+0x16c/0x1f0 [ 257.334327][ T8141] should_fail_ex+0x512/0x640 [ 257.334352][ T8141] _copy_from_user+0x2e/0xd0 [ 257.334374][ T8141] video_usercopy+0xedd/0x1720 [ 257.334397][ T8141] ? __pfx___video_do_ioctl+0x10/0x10 [ 257.334416][ T8141] ? selinux_kernel_read_file+0x60/0x130 [ 257.334439][ T8141] ? __pfx_video_usercopy+0x10/0x10 [ 257.334473][ T8141] v4l2_ioctl+0x1ba/0x250 [ 257.334491][ T8141] ? __pfx_v4l2_ioctl+0x10/0x10 [ 257.334511][ T8141] __x64_sys_ioctl+0x18e/0x210 [ 257.334531][ T8141] do_syscall_64+0xcd/0x4c0 [ 257.334548][ T8141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.334559][ T8141] RIP: 0033:0x7fb07f98e929 [ 257.334568][ T8141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.334579][ T8141] RSP: 002b:00007fb080839038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.334589][ T8141] RAX: ffffffffffffffda RBX: 00007fb07fbb6080 RCX: 00007fb07f98e929 [ 257.334596][ T8141] RDX: 0000200000000100 RSI: 00000000c0d05604 RDI: 0000000000000004 [ 257.334601][ T8141] RBP: 00007fb080839090 R08: 0000000000000000 R09: 0000000000000000 [ 257.334608][ T8141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.334613][ T8141] R13: 0000000000000000 R14: 00007fb07fbb6080 R15: 00007ffedfe588e8 [ 257.334626][ T8141] [ 257.497877][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.555805][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 257.575804][ T48] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 257.603873][ T6010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.706345][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 258.205891][ T8151] CIFS mount error: No usable UNC path provided in device string! [ 258.205891][ T8151] [ 258.216186][ T8151] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 258.265683][ T8135] team0 (unregistering): Port device team_slave_0 removed [ 258.533059][ T8135] team0 (unregistering): Port device team_slave_1 removed [ 258.557964][ T48] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.559599][ T8135] team0 (unregistering): Port device bond0 removed [ 258.594076][ T48] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 258.604416][ T48] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.614153][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.062036][ T8143] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 260.849724][ T8138] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 260.892497][ T48] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.966532][ T30] audit: type=1400 audit(1750620483.021:591): avc: denied { unlink } for pid=8155 comm="syz.3.576" name="#1" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 261.045913][ T30] audit: type=1400 audit(1750620483.061:592): avc: denied { mount } for pid=8155 comm="syz.3.576" name="/" dev="overlay" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 261.100848][ T30] audit: type=1800 audit(1750620483.161:593): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.576" name="file1" dev="overlay" ino=687 res=0 errno=0 [ 261.124266][ T24] usb 3-1: USB disconnect, device number 29 [ 261.626028][ T7505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.792696][ T5934] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 261.946300][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 261.958880][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.056788][ T5934] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=a2.8c [ 262.056858][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.056933][ T5934] usb 1-1: Product: syz [ 262.056989][ T5934] usb 1-1: Manufacturer: syz [ 262.057045][ T5934] usb 1-1: SerialNumber: syz [ 262.114088][ T5934] usb 1-1: config 0 descriptor?? [ 262.269028][ T5934] peak_usb 1-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 262.299520][ T5934] peak_usb 1-1:0.0: unable to read PCAN-USB serial number (err -22) [ 262.518941][ T5934] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 262.618977][ T8181] netlink: 'syz.2.581': attribute type 21 has an invalid length. [ 262.628314][ T8181] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 262.665333][ T5934] usb 1-1: USB disconnect, device number 23 [ 262.681404][ T8181] netlink: 144 bytes leftover after parsing attributes in process `syz.2.581'. [ 262.819930][ T30] audit: type=1400 audit(1750620484.811:594): avc: denied { setopt } for pid=8183 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 263.073399][ T30] audit: type=1400 audit(1750620485.031:595): avc: denied { bind } for pid=8183 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 263.553422][ T3532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.602380][ T8200] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.793260][ T8213] syz.1.590: attempt to access beyond end of device [ 264.793260][ T8213] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 264.806195][ T8213] vxfs: unable to read disk superblock at 1 [ 264.812776][ T8213] syz.1.590: attempt to access beyond end of device [ 264.812776][ T8213] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 264.825755][ T8213] vxfs: unable to read disk superblock at 8 [ 264.831676][ T8213] vxfs: can't find superblock. [ 266.232003][ T8237] overlayfs: missing 'lowerdir' [ 266.249828][ T48] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 266.683618][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 266.725016][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 266.901886][ T8241] netlink: 'syz.0.598': attribute type 2 has an invalid length. [ 266.909699][ T8241] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.598'. [ 266.923325][ T6010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.121462][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 267.155088][ T48] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 267.197119][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.256131][ T48] usb 5-1: config 0 descriptor?? [ 267.295071][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 267.556006][ T5955] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 267.715914][ T5955] usb 1-1: device descriptor read/64, error -71 [ 267.815914][ T48] hid-picolcd 0003:04D8:C002.0014: No report with id 0x11 found [ 267.889089][ T30] audit: type=1400 audit(1750620489.951:596): avc: denied { write } for pid=8254 comm="syz.2.602" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 268.058706][ T5955] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 268.104672][ T30] audit: type=1400 audit(1750620489.981:597): avc: denied { ioctl } for pid=8254 comm="syz.2.602" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 268.206101][ T5955] usb 1-1: device descriptor read/64, error -71 [ 268.361210][ T5955] usb usb1-port1: attempt power cycle [ 268.404366][ T8267] CIFS: Unable to determine destination address [ 268.911031][ T5955] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 268.939675][ T5955] usb 1-1: device descriptor read/8, error -71 [ 269.319070][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.414737][ T8279] syz.1.606: attempt to access beyond end of device [ 269.414737][ T8279] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 269.428280][ T8279] vxfs: unable to read disk superblock at 1 [ 269.434385][ T8279] syz.1.606: attempt to access beyond end of device [ 269.434385][ T8279] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 269.447227][ T8279] vxfs: unable to read disk superblock at 8 [ 269.453199][ T8279] vxfs: can't find superblock. [ 269.463653][ T5955] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 269.948061][ T5955] usb 1-1: device descriptor read/8, error -71 [ 270.005265][ T92] usb 5-1: USB disconnect, device number 25 [ 270.106354][ T5955] usb usb1-port1: unable to enumerate USB device [ 270.179608][ T30] audit: type=1400 audit(270.134:598): avc: denied { bind } for pid=8284 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 270.408622][ T30] audit: type=1400 audit(270.134:599): avc: denied { write } for pid=8287 comm="syz.4.611" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 270.642648][ T5934] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 270.657669][ T8295] netlink: 80 bytes leftover after parsing attributes in process `syz.2.609'. [ 270.669005][ T8295] netlink: 80 bytes leftover after parsing attributes in process `syz.2.609'. [ 270.822969][ T8297] overlayfs: missing 'lowerdir' [ 270.857730][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.895775][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 271.407136][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 271.418230][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 271.478998][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.693000][ T5934] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 271.781471][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.953462][ T5934] usb 4-1: Product: syz [ 272.027301][ T5934] usb 4-1: Manufacturer: syz [ 272.066258][ T5934] usb 4-1: SerialNumber: syz [ 272.208230][ T5934] usb 4-1: config 0 descriptor?? [ 272.223700][ T5934] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 272.529979][ T6010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.858051][ T5934] usb 4-1: USB disconnect, device number 17 [ 274.044009][ T8332] syz.4.621: attempt to access beyond end of device [ 274.044009][ T8332] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 274.056876][ T8332] vxfs: unable to read disk superblock at 1 [ 274.063347][ T8332] syz.4.621: attempt to access beyond end of device [ 274.063347][ T8332] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 274.076352][ T8332] vxfs: unable to read disk superblock at 8 [ 274.082277][ T8332] vxfs: can't find superblock. [ 274.237047][ T1049] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 274.406172][ T1049] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 274.448666][ T1049] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 274.462905][ T1049] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 274.475997][ T1049] usb 3-1: config 220 has no interface number 2 [ 274.482298][ T1049] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 274.498326][ T1049] usb 3-1: config 220 interface 0 has no altsetting 0 [ 274.505122][ T1049] usb 3-1: config 220 interface 76 has no altsetting 0 [ 274.512590][ T1049] usb 3-1: config 220 interface 1 has no altsetting 0 [ 274.563900][ T1049] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 274.572952][ T30] audit: type=1400 audit(274.514:600): avc: denied { create } for pid=8333 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 274.572996][ T30] audit: type=1400 audit(274.514:601): avc: denied { ioctl } for pid=8333 comm="syz.0.622" path="socket:[20800]" dev="sockfs" ino=20800 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 274.616690][ T1049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.624759][ T1049] usb 3-1: Product: syz [ 274.629207][ T1049] usb 3-1: Manufacturer: syz [ 274.633874][ T1049] usb 3-1: SerialNumber: syz [ 274.915812][ T92] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 275.075871][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 275.092222][ T92] usb 5-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 275.103368][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.115983][ T92] usb 5-1: Product: syz [ 275.120213][ T92] usb 5-1: Manufacturer: syz [ 275.124883][ T92] usb 5-1: SerialNumber: syz [ 275.133796][ T92] usb 5-1: config 0 descriptor?? [ 275.144367][ T30] audit: type=1326 audit(275.094:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76338e929 code=0x7ffc0000 [ 275.184204][ T30] audit: type=1326 audit(275.124:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fe76338e929 code=0x7ffc0000 [ 275.210974][ T30] audit: type=1326 audit(275.124:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76338e929 code=0x7ffc0000 [ 275.275830][ T30] audit: type=1326 audit(275.124:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe76338e929 code=0x7ffc0000 [ 275.298736][ T30] audit: type=1326 audit(275.124:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76338e929 code=0x7ffc0000 [ 275.323872][ T30] audit: type=1326 audit(275.124:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76338e929 code=0x7ffc0000 [ 275.347133][ T30] audit: type=1326 audit(275.124:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe76338e929 code=0x7ffc0000 [ 275.370810][ T30] audit: type=1326 audit(275.124:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76338e929 code=0x7ffc0000 [ 275.711441][ T3532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.742996][ T5955] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 275.750790][ T92] mxuport 5-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 275.760970][ T92] mxuport 5-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 275.769885][ T92] mxuport 5-1:0.0: probe with driver mxuport failed with error -71 [ 275.781439][ T92] usb 5-1: USB disconnect, device number 26 [ 275.909415][ T5955] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 275.918624][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.928884][ T5955] usb 4-1: config 0 descriptor?? [ 275.936448][ T5955] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 276.036182][ T1049] usb 3-1: selecting invalid altsetting 0 [ 276.066100][ T1049] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 276.080103][ T1049] usb 3-1: No valid video chain found. [ 276.379933][ T1049] usb 3-1: selecting invalid altsetting 0 [ 276.385705][ T1049] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 276.389211][ T5934] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 276.395871][ T5955] gp8psk: usb in 128 operation failed. [ 276.433909][ T5934] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 276.443981][ T1049] usb 3-1: USB disconnect, device number 30 [ 276.618027][ T5955] gp8psk: usb in 146 operation failed. [ 276.623579][ T5955] gp8psk: failed to get FW version [ 276.630812][ T5955] gp8psk: usb in 149 operation failed. [ 276.638897][ T5955] gp8psk: failed to get FPGA version [ 277.386938][ T8341] @: renamed from vlan0 [ 277.816380][ T5955] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 277.840375][ T5955] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 278.020070][ T5955] usb 4-1: USB disconnect, device number 18 [ 278.394103][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.194854][ T1049] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 280.218147][ T1049] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 280.219114][ T8425] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 280.649336][ T8434] rdma_op ffff888037a559f0 conn xmit_rdma 0000000000000000 [ 281.275813][ T92] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 281.449526][ T92] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.485835][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.485892][ T92] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.678598][ T8450] CIFS: Unable to determine destination address [ 281.874069][ T92] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 282.172013][ T92] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 282.181167][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.193536][ T8437] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 282.865216][ T8448] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 282.871826][ T8448] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.879445][ T8448] vhci_hcd vhci_hcd.0: Device attached [ 282.894851][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 282.894865][ T30] audit: type=1400 audit(282.844:668): avc: denied { append } for pid=8466 comm="syz.1.654" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 283.125956][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 283.133532][ T1049] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 283.142474][ T8453] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 283.149067][ T8453] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 283.156625][ T8453] vhci_hcd vhci_hcd.0: Device attached [ 283.172919][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 283.195856][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 283.315951][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 283.370550][ T8473] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 283.377097][ T8473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 283.393214][ T24] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 283.405854][ T48] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 283.439404][ T5934] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 283.506228][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.565854][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 283.582802][ T48] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 283.592328][ T8473] vhci_hcd vhci_hcd.0: Device attached [ 283.609937][ T24] usb 5-1: Product: syz [ 283.638596][ T24] usb 5-1: Manufacturer: syz [ 283.670296][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.681201][ T24] usb 5-1: SerialNumber: syz [ 283.733863][ T48] usb 4-1: Product: syz [ 283.750966][ T24] usb 5-1: config 0 descriptor?? [ 283.779580][ T48] usb 4-1: Manufacturer: syz [ 283.797390][ T92] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 283.819991][ T24] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 283.835049][ T48] usb 4-1: SerialNumber: syz [ 283.911802][ T24] usb 5-1: Detected FT232H [ 283.924813][ T48] usb 4-1: config 0 descriptor?? [ 283.955934][ T5815] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 284.002763][ T48] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 284.069663][ T8464] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 284.080243][ T2128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.113766][ T92] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input16 [ 284.126149][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 284.179460][ T48] usb 4-1: Detected FT232H [ 284.232673][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 284.261174][ T8471] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 284.403764][ T65] vhci_hcd: stop threads [ 284.424759][ T24] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 284.436911][ T65] vhci_hcd: release socket [ 284.441459][ T65] vhci_hcd: disconnect device [ 284.456113][ T48] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 284.480973][ T65] vhci_hcd: stop threads [ 284.486528][ T65] vhci_hcd: release socket [ 284.486731][ T24] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 284.491166][ T65] vhci_hcd: disconnect device [ 284.504885][ T48] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 284.522875][ T48] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 284.575571][ T48] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 284.584055][ T24] usb 5-1: USB disconnect, device number 27 [ 284.596531][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 284.620088][ T8474] vhci_hcd: connection reset by peer [ 284.638307][ T3532] vhci_hcd: stop threads [ 284.686425][ T48] usb 4-1: USB disconnect, device number 19 [ 284.721197][ T3532] vhci_hcd: release socket [ 284.745412][ T3532] vhci_hcd: disconnect device [ 284.751782][ T48] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 284.764708][ T24] ftdi_sio 5-1:0.0: device disconnected [ 284.781953][ T48] ftdi_sio 4-1:0.0: device disconnected [ 285.093357][ T48] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 285.113675][ T48] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 285.286151][ T48] usb 3-1: USB disconnect, device number 31 [ 285.286149][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 285.579562][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 285.653434][ T30] audit: type=1400 audit(285.604:669): avc: denied { shutdown } for pid=8503 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.825863][ T24] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 285.901791][ T8511] netlink: 'syz.3.665': attribute type 6 has an invalid length. [ 286.045564][ T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 286.056830][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.075570][ T24] usb 1-1: Product: syz [ 286.083211][ T24] usb 1-1: Manufacturer: syz [ 286.092288][ T24] usb 1-1: SerialNumber: syz [ 286.099566][ T24] usb 1-1: config 0 descriptor?? [ 286.398273][ T8515] netlink: 32 bytes leftover after parsing attributes in process `syz.4.666'. [ 286.726738][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.887198][ T24] airspy 1-1:0.0: Board ID: 00 [ 286.887384][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.892482][ T24] airspy 1-1:0.0: Firmware version: [ 287.227189][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.363946][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'. [ 287.376915][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'. [ 287.406936][ T24] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 287.425424][ T24] airspy 1-1:0.0: Registered as swradio24 [ 287.436149][ T24] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 287.449477][ T24] usb 1-1: USB disconnect, device number 28 [ 287.476928][ T8537] gfs2: Unknown parameter 'qota' [ 287.484509][ T8539] gfs2: Unknown parameter 'qota' [ 287.551929][ T30] audit: type=1400 audit(287.494:670): avc: denied { mounton } for pid=8541 comm="syz.3.674" path="/141/bus" dev="tmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 287.574109][ T8542] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 288.819828][ T5934] vhci_hcd: vhci_device speed not set [ 288.836062][ T1049] vhci_hcd: vhci_device speed not set [ 289.018443][ T30] audit: type=1400 audit(288.964:671): avc: denied { connect } for pid=8559 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 289.250147][ T5815] vhci_hcd: vhci_device speed not set [ 289.297884][ T8563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'. [ 289.307234][ T8563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'. [ 289.776664][ T30] audit: type=1400 audit(289.684:672): avc: denied { create } for pid=8570 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 289.806797][ T3532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.974606][ T30] audit: type=1400 audit(289.684:673): avc: denied { mount } for pid=8570 comm="syz.0.683" name="/" dev="ramfs" ino=22544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 290.007759][ T30] audit: type=1800 audit(289.814:674): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.683" name="bus" dev="ramfs" ino=22545 res=0 errno=0 [ 290.071591][ T30] audit: type=1400 audit(289.914:675): avc: denied { append } for pid=8570 comm="syz.0.683" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 290.162303][ T30] audit: type=1400 audit(289.914:676): avc: denied { open } for pid=8570 comm="syz.0.683" path="/dev/sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 290.231933][ T30] audit: type=1400 audit(289.924:677): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.306512][ T30] audit: type=1400 audit(289.924:678): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.392602][ T30] audit: type=1400 audit(289.924:679): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.569336][ T30] audit: type=1400 audit(290.064:680): avc: denied { read } for pid=8586 comm="syz.4.685" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 290.823548][ T5815] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 291.985609][ T1049] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 292.045814][ T5815] usb 5-1: device descriptor read/64, error -71 [ 292.216183][ T1049] usb 4-1: Using ep0 maxpacket: 32 [ 292.310409][ T1049] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 292.318952][ T1049] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.329483][ T8607] can: request_module (can-proto-0) failed. [ 292.335565][ T1049] usb 4-1: config 0 has no interface number 0 [ 292.341938][ T1049] usb 4-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 292.852408][ T5815] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 292.867123][ T1049] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 292.876332][ T1049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.936452][ T1049] usb 4-1: Product: syz [ 292.940719][ T1049] usb 4-1: Manufacturer: syz [ 292.946052][ T1049] usb 4-1: SerialNumber: syz [ 292.959402][ T1049] usb 4-1: config 0 descriptor?? [ 292.995811][ T5815] usb 5-1: device descriptor read/64, error -71 [ 293.023031][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.054774][ T1049] ums-jumpshot 4-1:0.16: USB Mass Storage device detected [ 293.077647][ T1049] ums-jumpshot 4-1:0.16: Quirks match for vid 05dc pid 0001: 2 [ 293.089854][ T92] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 293.106110][ T5815] usb usb5-port1: attempt power cycle [ 293.111178][ T92] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 293.335290][ T8624] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 294.278285][ T8642] syz.2.697: attempt to access beyond end of device [ 294.278285][ T8642] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 294.291272][ T8642] vxfs: unable to read disk superblock at 1 [ 294.297988][ T8642] syz.2.697: attempt to access beyond end of device [ 294.297988][ T8642] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 294.310964][ T8642] vxfs: unable to read disk superblock at 8 [ 294.316945][ T8642] vxfs: can't find superblock. [ 294.331101][ T30] kauditd_printk_skb: 367 callbacks suppressed [ 294.331133][ T30] audit: type=1400 audit(294.234:1048): avc: denied { mounton } for pid=8637 comm="syz.2.697" path="/127" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 294.779974][ T92] usb 4-1: USB disconnect, device number 20 [ 294.815554][ T5955] hid-generic 0006:0000:0005.0019: item fetching failed at offset 2/4 [ 294.824068][ T5955] hid-generic 0006:0000:0005.0019: probe with driver hid-generic failed with error -22 [ 295.086299][ T30] audit: type=1400 audit(294.964:1049): avc: denied { create } for pid=8644 comm="syz.3.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 295.314024][ T30] audit: type=1400 audit(295.044:1050): avc: denied { name_bind } for pid=8644 comm="syz.3.699" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 295.431420][ T30] audit: type=1400 audit(295.314:1051): avc: denied { ioctl } for pid=8647 comm="syz.1.698" path="socket:[21862]" dev="sockfs" ino=21862 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.536910][ T30] audit: type=1400 audit(295.314:1052): avc: denied { ioctl } for pid=8647 comm="syz.1.698" path="socket:[21863]" dev="sockfs" ino=21863 ioctlcmd=0x8b1a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.548433][ T7505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.509320][ T1049] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 296.513830][ T30] audit: type=1400 audit(296.454:1053): avc: denied { write } for pid=8655 comm="syz.1.702" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 296.885887][ T48] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 299.196953][ T7505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.270631][ T1049] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 299.278001][ T30] audit: type=1400 audit(299.224:1054): avc: denied { create } for pid=8670 comm="syz.3.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 299.325867][ T30] audit: type=1400 audit(299.244:1055): avc: denied { write } for pid=8670 comm="syz.3.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 299.371016][ T8674] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 299.430116][ T48] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 299.464273][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.492282][ T48] usb 3-1: Product: syz [ 299.497989][ T8679] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 299.516507][ T48] usb 3-1: Manufacturer: syz [ 299.535338][ T48] usb 3-1: SerialNumber: syz [ 299.587277][ T48] usb 3-1: can't set config #1, error -71 [ 299.595479][ T48] usb 3-1: USB disconnect, device number 32 [ 299.646012][ T92] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 299.658681][ T30] audit: type=1400 audit(299.564:1056): avc: denied { setopt } for pid=8682 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 300.440502][ T8690] syz.2.711: attempt to access beyond end of device [ 300.440502][ T8690] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 300.453405][ T8690] vxfs: unable to read disk superblock at 1 [ 300.459507][ T8690] syz.2.711: attempt to access beyond end of device [ 300.459507][ T8690] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 300.472496][ T8690] vxfs: unable to read disk superblock at 8 [ 300.478461][ T8690] vxfs: can't find superblock. [ 300.483815][ T92] usb 4-1: device descriptor read/64, error -71 [ 300.866214][ T92] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 301.095981][ T30] audit: type=1400 audit(301.034:1057): avc: denied { create } for pid=8682 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 301.164559][ T30] audit: type=1400 audit(301.114:1058): avc: denied { create } for pid=8682 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.339245][ T30] audit: type=1400 audit(301.294:1059): avc: denied { create } for pid=8682 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 301.345874][ T92] usb 4-1: device descriptor read/64, error -71 [ 301.471092][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.563782][ T30] audit: type=1400 audit(301.474:1060): avc: denied { setopt } for pid=8697 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 301.587324][ T92] usb usb4-port1: attempt power cycle [ 301.610956][ T30] audit: type=1400 audit(301.564:1061): avc: denied { create } for pid=8697 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 302.124854][ T30] audit: type=1400 audit(302.074:1062): avc: denied { write } for pid=8682 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 302.144136][ T92] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 302.226010][ T8701] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.714'. [ 302.227240][ T30] audit: type=1400 audit(302.074:1063): avc: denied { connect } for pid=8682 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 302.256337][ T8683] netlink: 'syz.4.710': attribute type 9 has an invalid length. [ 302.270216][ T8683] netlink: 'syz.4.710': attribute type 9 has an invalid length. [ 302.295990][ T30] audit: type=1400 audit(302.074:1064): avc: denied { name_connect } for pid=8682 comm="syz.4.710" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 302.334599][ T8701] netlink: zone id is out of range [ 302.340388][ T8701] netlink: zone id is out of range [ 302.346611][ T92] usb 4-1: device descriptor read/8, error -71 [ 302.353397][ T8701] netlink: get zone limit has 8 unknown bytes [ 302.446099][ T30] audit: type=1400 audit(302.214:1065): avc: denied { write } for pid=8682 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 302.510318][ T5819] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 303.714195][ T92] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 303.775848][ T5819] usb 3-1: device descriptor read/64, error -71 [ 304.067232][ T92] usb 4-1: device not accepting address 24, error -71 [ 304.129484][ T5819] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 304.882921][ T92] usb usb4-port1: unable to enumerate USB device [ 305.744954][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.820651][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 305.820668][ T30] audit: type=1400 audit(305.744:1068): avc: denied { read write } for pid=8716 comm="syz.3.718" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 305.871227][ T30] audit: type=1400 audit(305.744:1069): avc: denied { open } for pid=8716 comm="syz.3.718" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 306.016343][ T30] audit: type=1400 audit(305.744:1070): avc: denied { map } for pid=8716 comm="syz.3.718" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 306.041698][ T30] audit: type=1400 audit(305.744:1071): avc: denied { bind } for pid=8716 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 306.062586][ T30] audit: type=1400 audit(305.804:1072): avc: denied { read write } for pid=8730 comm="syz.3.722" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 306.222044][ T30] audit: type=1400 audit(305.804:1073): avc: denied { open } for pid=8730 comm="syz.3.722" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 306.268321][ T30] audit: type=1400 audit(305.804:1074): avc: denied { read write } for pid=8717 comm="syz.1.720" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 306.291091][ T92] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 306.295768][ T48] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 306.302086][ T30] audit: type=1400 audit(305.804:1075): avc: denied { open } for pid=8717 comm="syz.1.720" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 306.471569][ T30] audit: type=1400 audit(305.814:1076): avc: denied { read } for pid=8727 comm="syz.4.721" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 306.666682][ T30] audit: type=1400 audit(305.814:1077): avc: denied { open } for pid=8727 comm="syz.4.721" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 307.176543][ T7505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.057699][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 309.583751][ T48] usb 5-1: no configurations [ 309.602169][ T48] usb 5-1: can't read configurations, error -22 [ 309.675902][ T5819] usb 3-1: device descriptor read/64, error -110 [ 309.786597][ T5819] usb usb3-port1: attempt power cycle [ 309.795770][ T8749] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 309.840300][ T8749] netlink: 'syz.0.726': attribute type 46 has an invalid length. [ 310.035863][ T48] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 310.174988][ T92] hid-generic 0006:0000:0005.001B: item fetching failed at offset 2/4 [ 310.186619][ T92] hid-generic 0006:0000:0005.001B: probe with driver hid-generic failed with error -22 [ 310.215921][ T5819] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 310.698743][ T5819] usb 3-1: device descriptor read/8, error -32 [ 310.739517][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 310.774051][ T48] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 310.882167][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.965585][ T48] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 310.982890][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.991649][ T3532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.993440][ T48] usb 5-1: Product: syz [ 311.008427][ T48] usb 5-1: Manufacturer: syz [ 311.013104][ T48] usb 5-1: SerialNumber: syz [ 311.030841][ T48] usb 5-1: config 0 descriptor?? [ 311.040182][ T48] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 311.052431][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 311.052446][ T30] audit: type=1400 audit(311.004:1085): avc: denied { append } for pid=8763 comm="syz.2.731" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.084835][ T48] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 311.236358][ T30] audit: type=1400 audit(311.164:1086): avc: denied { ioctl } for pid=8765 comm="syz.0.732" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 311.445002][ T30] audit: type=1400 audit(311.174:1087): avc: denied { create } for pid=8765 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 311.486198][ T30] audit: type=1400 audit(311.174:1088): avc: denied { write } for pid=8765 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 311.643151][ T30] audit: type=1400 audit(311.594:1089): avc: denied { mount } for pid=8763 comm="syz.2.731" name="/" dev="hugetlbfs" ino=23091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 311.668113][ T8764] hugetlbfs: Bad value 'lm-control' for mount option 'size' [ 311.668113][ T8764] [ 311.675635][ T30] audit: type=1400 audit(311.624:1090): avc: denied { remount } for pid=8763 comm="syz.2.731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 311.701326][ T30] audit: type=1400 audit(311.654:1091): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 312.448337][ T48] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 312.475432][ T30] audit: type=1400 audit(312.134:1092): avc: denied { setopt } for pid=8746 comm="syz.4.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 313.127310][ T3532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.150848][ T48] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 313.323525][ T30] audit: type=1400 audit(313.264:1093): avc: denied { read write } for pid=8774 comm="syz.2.734" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.362082][ T30] audit: type=1400 audit(313.264:1094): avc: denied { open } for pid=8774 comm="syz.2.734" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.438820][ T8778] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 313.520245][ T8778] netlink: 224 bytes leftover after parsing attributes in process `syz.0.735'. [ 313.634515][ T48] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 313.641845][ T48] em28xx 5-1:0.0: No AC97 audio processor [ 313.656730][ T48] usb 5-1: USB disconnect, device number 32 [ 313.664608][ T48] em28xx 5-1:0.0: Disconnecting em28xx [ 313.726744][ T48] em28xx 5-1:0.0: Freeing device [ 314.231440][ T8786] CIFS: Unable to determine destination address [ 314.340247][ T8793] CIFS: Unable to determine destination address [ 315.023739][ T8806] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.741'. [ 315.034755][ T8806] netlink: zone id is out of range [ 315.041634][ T8806] netlink: zone id is out of range [ 315.046904][ T8806] netlink: get zone limit has 8 unknown bytes [ 315.166166][ T8809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.316103][ T48] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 315.663278][ T48] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 315.816134][ T48] usb 4-1: config 0 has no interface number 0 [ 315.836232][ T48] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 315.851769][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.860734][ T48] usb 4-1: Product: syz [ 315.874366][ T48] usb 4-1: Manufacturer: syz [ 315.883820][ T48] usb 4-1: SerialNumber: syz [ 315.954431][ T48] usb 4-1: config 0 descriptor?? [ 316.065704][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 316.072139][ T30] audit: type=1400 audit(316.014:1115): avc: denied { create } for pid=8808 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 316.090884][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.127999][ T30] audit: type=1400 audit(316.064:1116): avc: denied { write } for pid=8808 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 316.275665][ T30] audit: type=1400 audit(316.064:1117): avc: denied { write } for pid=8808 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 316.738588][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.745314][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.760120][ T48] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 316.768805][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.804792][ T48] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 316.940289][ T48] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 317.366040][ T30] audit: type=1800 audit(317.224:1118): pid=8829 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.746" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 317.736319][ T48] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 317.756004][ T48] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 317.796688][ T48] usb 4-1: USB disconnect, device number 26 [ 317.877273][ T48] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 317.923996][ T48] keyspan 4-1:0.133: device disconnected [ 318.105905][ T92] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 318.257273][ T30] audit: type=1400 audit(318.214:1119): avc: denied { ioctl } for pid=8834 comm="syz.0.749" path="socket:[23334]" dev="sockfs" ino=23334 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 318.281282][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.305903][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 318.312339][ T92] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 318.325773][ T92] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.340073][ T92] usb 5-1: config 0 has no interface number 0 [ 318.348362][ T92] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 318.360177][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.368544][ T92] usb 5-1: Product: syz [ 318.372722][ T92] usb 5-1: Manufacturer: syz [ 318.380054][ T92] usb 5-1: SerialNumber: syz [ 318.387843][ T92] usb 5-1: config 0 descriptor?? [ 318.447018][ T8854] CIFS: Unable to determine destination address [ 318.476887][ T92] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 318.503011][ T92] nokiaca42v2 ttyUSB0: required endpoint is missing [ 318.731513][ T7505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.745049][ T92] usb 5-1: USB disconnect, device number 33 [ 318.753359][ T92] cypress_m8 5-1:0.35: device disconnected [ 319.135918][ T48] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 319.324768][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.421068][ T30] audit: type=1400 audit(319.364:1120): avc: denied { bind } for pid=8865 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 319.440356][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.472221][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 319.521388][ T30] audit: type=1400 audit(319.364:1121): avc: denied { name_bind } for pid=8865 comm="syz.0.756" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 319.541654][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.597923][ T8869] netlink: 'syz.0.756': attribute type 6 has an invalid length. [ 319.603661][ T48] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice=fc.00 [ 319.606813][ T30] audit: type=1400 audit(319.364:1122): avc: denied { node_bind } for pid=8865 comm="syz.0.756" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 319.638710][ T48] usb 3-1: New USB device strings: Mfr=148, Product=0, SerialNumber=0 [ 319.656249][ T30] audit: type=1400 audit(319.504:1123): avc: denied { name_connect } for pid=8865 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 319.663106][ T48] usb 3-1: Manufacturer: syz [ 319.675758][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.819568][ T48] usb 3-1: config 0 descriptor?? [ 320.322531][ T48] elecom 0003:056E:00FD.001C: unknown main item tag 0x6 [ 320.329577][ T48] elecom 0003:056E:00FD.001C: report_id 29495 is invalid [ 320.337133][ T48] elecom 0003:056E:00FD.001C: item 0 2 1 8 parsing failed [ 320.345133][ T48] elecom 0003:056E:00FD.001C: probe with driver elecom failed with error -22 [ 320.580295][ T8877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.758'. [ 321.481371][ T8884] FAULT_INJECTION: forcing a failure. [ 321.481371][ T8884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.482416][ T8884] [ 321.482421][ T8884] ====================================================== [ 321.482425][ T8884] WARNING: possible circular locking dependency detected [ 321.482429][ T8884] 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 Not tainted [ 321.482435][ T8884] ------------------------------------------------------ [ 321.482438][ T8884] syz.3.760/8884 is trying to acquire lock: [ 321.482443][ T8884] ffffffff8e4d1e00 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 321.482470][ T8884] [ 321.482470][ T8884] but task is already holding lock: [ 321.482473][ T8884] ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 321.482495][ T8884] [ 321.482495][ T8884] which lock already depends on the new lock. [ 321.482495][ T8884] [ 321.482498][ T8884] [ 321.482498][ T8884] the existing dependency chain (in reverse order) is: [ 321.482501][ T8884] [ 321.482501][ T8884] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 321.482513][ T8884] _raw_spin_lock_nested+0x31/0x40 [ 321.482526][ T8884] raw_spin_rq_lock_nested+0x29/0x130 [ 321.482536][ T8884] task_rq_lock+0xcf/0x490 [ 321.482547][ T8884] cgroup_move_task+0x81/0x2a0 [ 321.482560][ T8884] css_set_move_task+0x288/0x5f0 [ 321.482568][ T8884] cgroup_post_fork+0x201/0x9e0 [ 321.482579][ T8884] copy_process+0x5cfc/0x76a0 [ 321.482591][ T8884] kernel_clone+0xfc/0x960 [ 321.482602][ T8884] user_mode_thread+0xc7/0x110 [ 321.482613][ T8884] rest_init+0x23/0x2b0 [ 321.482621][ T8884] start_kernel+0x3ee/0x4d0 [ 321.482633][ T8884] x86_64_start_reservations+0x18/0x30 [ 321.482652][ T8884] x86_64_start_kernel+0x130/0x190 [ 321.482663][ T8884] common_startup_64+0x13e/0x148 [ 321.482673][ T8884] [ 321.482673][ T8884] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 321.482685][ T8884] _raw_spin_lock_irqsave+0x3a/0x60 [ 321.482696][ T8884] try_to_wake_up+0xb2/0x1680 [ 321.482706][ T8884] __wake_up_common+0x135/0x1f0 [ 321.482720][ T8884] __wake_up+0x31/0x60 [ 321.482736][ T8884] tty_port_default_wakeup+0x2a/0x40 [ 321.482750][ T8884] serial8250_tx_chars+0x68e/0x860 [ 321.482765][ T8884] serial8250_handle_irq+0x761/0xcb0 [ 321.482779][ T8884] serial8250_default_handle_irq+0x9a/0x210 [ 321.482794][ T8884] serial8250_interrupt+0x103/0x210 [ 321.482803][ T8884] __handle_irq_event_percpu+0x229/0x7d0 [ 321.482814][ T8884] handle_irq_event+0xab/0x1e0 [ 321.482824][ T8884] handle_edge_irq+0x28e/0xab0 [ 321.482834][ T8884] __common_interrupt+0xdf/0x250 [ 321.482845][ T8884] common_interrupt+0x61/0xe0 [ 321.482854][ T8884] asm_common_interrupt+0x26/0x40 [ 321.482864][ T8884] handle_softirqs+0x1dd/0x8e0 [ 321.482874][ T8884] __irq_exit_rcu+0x109/0x170 [ 321.482884][ T8884] irq_exit_rcu+0x9/0x30 [ 321.482894][ T8884] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 321.482907][ T8884] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.482917][ T8884] console_flush_all+0x9a2/0xc60 [ 321.482927][ T8884] console_unlock+0xd8/0x210 [ 321.482936][ T8884] vprintk_emit+0x418/0x6d0 [ 321.482947][ T8884] _printk+0xc7/0x100 [ 321.482954][ T8884] kauditd_hold_skb+0x205/0x250 [ 321.482968][ T8884] kauditd_send_queue+0x236/0x290 [ 321.482981][ T8884] kauditd_thread+0x623/0xa70 [ 321.482994][ T8884] kthread+0x3c2/0x780 [ 321.483001][ T8884] ret_from_fork+0x5d4/0x6f0 [ 321.483014][ T8884] ret_from_fork_asm+0x1a/0x30 [ 321.483023][ T8884] [ 321.483023][ T8884] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 321.483036][ T8884] _raw_spin_lock_irqsave+0x3a/0x60 [ 321.483047][ T8884] __wake_up+0x1c/0x60 [ 321.483058][ T8884] tty_port_default_wakeup+0x2a/0x40 [ 321.483071][ T8884] serial8250_tx_chars+0x68e/0x860 [ 321.483084][ T8884] serial8250_handle_irq+0x761/0xcb0 [ 321.483098][ T8884] serial8250_default_handle_irq+0x9a/0x210 [ 321.483113][ T8884] serial8250_interrupt+0x103/0x210 [ 321.483122][ T8884] __handle_irq_event_percpu+0x229/0x7d0 [ 321.483132][ T8884] handle_irq_event+0xab/0x1e0 [ 321.483142][ T8884] handle_edge_irq+0x28e/0xab0 [ 321.483152][ T8884] __common_interrupt+0xdf/0x250 [ 321.483162][ T8884] common_interrupt+0xba/0xe0 [ 321.483170][ T8884] asm_common_interrupt+0x26/0x40 [ 321.483179][ T8884] _raw_spin_unlock_irqrestore+0x31/0x80 [ 321.483191][ T8884] uart_write+0x2a4/0xb30 [ 321.483203][ T8884] n_tty_write+0x40f/0x1160 [ 321.483211][ T8884] file_tty_write.constprop.0+0x504/0x9b0 [ 321.483223][ T8884] redirected_tty_write+0xd4/0x150 [ 321.483236][ T8884] vfs_write+0x6c7/0x1150 [ 321.483247][ T8884] ksys_write+0x12a/0x250 [ 321.483257][ T8884] do_syscall_64+0xcd/0x4c0 [ 321.483270][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.483279][ T8884] [ 321.483279][ T8884] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 321.483291][ T8884] _raw_spin_lock_irqsave+0x3a/0x60 [ 321.483302][ T8884] serial8250_console_write+0x181/0x1890 [ 321.483311][ T8884] console_flush_all+0x801/0xc60 [ 321.483320][ T8884] console_unlock+0xd8/0x210 [ 321.483330][ T8884] vprintk_emit+0x418/0x6d0 [ 321.483340][ T8884] _printk+0xc7/0x100 [ 321.483346][ T8884] register_console+0xc2d/0x11b0 [ 321.483357][ T8884] univ8250_console_init+0x5f/0x90 [ 321.483369][ T8884] console_init+0x14f/0x680 [ 321.483381][ T8884] start_kernel+0x29f/0x4d0 [ 321.483391][ T8884] x86_64_start_reservations+0x18/0x30 [ 321.483403][ T8884] x86_64_start_kernel+0x130/0x190 [ 321.483414][ T8884] common_startup_64+0x13e/0x148 [ 321.483422][ T8884] [ 321.483422][ T8884] -> #0 (console_owner){-.-.}-{0:0}: [ 321.483433][ T8884] __lock_acquire+0x126f/0x1c90 [ 321.483446][ T8884] lock_acquire+0x179/0x350 [ 321.483459][ T8884] console_lock_spinning_enable+0xb0/0xd0 [ 321.483469][ T8884] console_flush_all+0x7aa/0xc60 [ 321.483479][ T8884] console_unlock+0xd8/0x210 [ 321.483489][ T8884] vprintk_emit+0x418/0x6d0 [ 321.483499][ T8884] _printk+0xc7/0x100 [ 321.483505][ T8884] should_fail_ex+0x4e7/0x640 [ 321.483517][ T8884] strncpy_from_user+0x3b/0x2e0 [ 321.483527][ T8884] strncpy_from_user_nofault+0x7f/0x180 [ 321.483541][ T8884] bpf_probe_read_compat_str+0xe8/0x180 [ 321.483550][ T8884] bpf_prog_b0c6ebf0b810dd9c+0x5a/0x60 [ 321.483559][ T8884] bpf_trace_run2+0x230/0x590 [ 321.483571][ T8884] __bpf_trace_tlb_flush+0xd1/0x110 [ 321.483581][ T8884] trace_tlb_flush+0xe4/0x160 [ 321.483591][ T8884] switch_mm_irqs_off+0x2b1/0x7f0 [ 321.483601][ T8884] __schedule+0xf4a/0x5de0 [ 321.483612][ T8884] preempt_schedule_irq+0x51/0x90 [ 321.483624][ T8884] irqentry_exit+0x36/0x90 [ 321.483636][ T8884] asm_sysvec_call_function_single+0x1a/0x20 [ 321.483650][ T8884] do_syscall_64+0x9a/0x4c0 [ 321.483663][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.483672][ T8884] [ 321.483672][ T8884] other info that might help us debug this: [ 321.483672][ T8884] [ 321.483674][ T8884] Chain exists of: [ 321.483674][ T8884] console_owner --> &p->pi_lock --> &rq->__lock [ 321.483674][ T8884] [ 321.483687][ T8884] Possible unsafe locking scenario: [ 321.483687][ T8884] [ 321.483690][ T8884] CPU0 CPU1 [ 321.483693][ T8884] ---- ---- [ 321.483695][ T8884] lock(&rq->__lock); [ 321.483700][ T8884] lock(&p->pi_lock); [ 321.483707][ T8884] lock(&rq->__lock); [ 321.483713][ T8884] lock(console_owner); [ 321.483718][ T8884] [ 321.483718][ T8884] *** DEADLOCK *** [ 321.483718][ T8884] [ 321.483720][ T8884] 4 locks held by syz.3.760/8884: [ 321.483726][ T8884] #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 321.483749][ T8884] #1: ffffffff8e5c4880 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1b6/0x590 [ 321.483770][ T8884] #2: ffffffff8e5b2240 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 321.483788][ T8884] #3: ffffffff8e5b22b0 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 321.483811][ T8884] [ 321.483811][ T8884] stack backtrace: [ 321.483815][ T8884] CPU: 0 UID: 0 PID: 8884 Comm: syz.3.760 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 321.483828][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.483834][ T8884] Call Trace: [ 321.483838][ T8884] [ 321.483842][ T8884] dump_stack_lvl+0x116/0x1f0 [ 321.483856][ T8884] print_circular_bug+0x275/0x350 [ 321.483871][ T8884] check_noncircular+0x14c/0x170 [ 321.483886][ T8884] __lock_acquire+0x126f/0x1c90 [ 321.483904][ T8884] lock_acquire+0x179/0x350 [ 321.483918][ T8884] ? console_lock_spinning_enable+0x9f/0xd0 [ 321.483929][ T8884] ? console_lock_spinning_enable+0x88/0xd0 [ 321.483941][ T8884] console_lock_spinning_enable+0xb0/0xd0 [ 321.483952][ T8884] ? console_lock_spinning_enable+0x9f/0xd0 [ 321.483962][ T8884] console_flush_all+0x7aa/0xc60 [ 321.483974][ T8884] ? __pfx_console_flush_all+0x10/0x10 [ 321.483987][ T8884] ? is_printk_cpu_sync_owner+0x32/0x40 [ 321.484000][ T8884] console_unlock+0xd8/0x210 [ 321.484011][ T8884] ? __pfx_console_unlock+0x10/0x10 [ 321.484021][ T8884] ? do_raw_spin_unlock+0x120/0x230 [ 321.484032][ T8884] ? _printk+0xc7/0x100 [ 321.484040][ T8884] ? __down_trylock_console_sem+0xb0/0x140 [ 321.484049][ T8884] vprintk_emit+0x418/0x6d0 [ 321.484061][ T8884] ? __pfx_vprintk_emit+0x10/0x10 [ 321.484074][ T8884] _printk+0xc7/0x100 [ 321.484081][ T8884] ? __pfx__printk+0x10/0x10 [ 321.484090][ T8884] ? __pfx____ratelimit+0x10/0x10 [ 321.484104][ T8884] should_fail_ex+0x4e7/0x640 [ 321.484115][ T8884] ? strncpy_from_user+0x1d2/0x2e0 [ 321.484126][ T8884] strncpy_from_user+0x3b/0x2e0 [ 321.484138][ T8884] strncpy_from_user_nofault+0x7f/0x180 [ 321.484152][ T8884] bpf_probe_read_compat_str+0xe8/0x180 [ 321.484163][ T8884] bpf_prog_b0c6ebf0b810dd9c+0x5a/0x60 [ 321.484171][ T8884] bpf_trace_run2+0x230/0x590 [ 321.484180][ T8884] ? __pfx_bpf_trace_run2+0x10/0x10 [ 321.484189][ T8884] ? kvm_sched_clock_read+0x11/0x20 [ 321.484202][ T8884] ? sched_clock_cpu+0x6c/0x530 [ 321.484215][ T8884] ? lock_acquire+0x179/0x350 [ 321.484230][ T8884] __bpf_trace_tlb_flush+0xd1/0x110 [ 321.484239][ T8884] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 321.484251][ T8884] trace_tlb_flush+0xe4/0x160 [ 321.484262][ T8884] switch_mm_irqs_off+0x2b1/0x7f0 [ 321.484274][ T8884] __schedule+0xf4a/0x5de0 [ 321.484286][ T8884] ? find_held_lock+0x2b/0x80 [ 321.484300][ T8884] ? __pfx___schedule+0x10/0x10 [ 321.484311][ T8884] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.484327][ T8884] preempt_schedule_irq+0x51/0x90 [ 321.484340][ T8884] irqentry_exit+0x36/0x90 [ 321.484352][ T8884] asm_sysvec_call_function_single+0x1a/0x20 [ 321.484363][ T8884] RIP: 0010:do_syscall_64+0x9a/0x4c0 [ 321.484378][ T8884] Code: 00 48 8b 7d 08 e8 66 5c 00 00 0f 1f 44 00 00 0f 1f 44 00 00 90 e8 a6 4e 44 f6 90 90 e8 8f 4c 44 f6 fb 65 48 8b 05 9e 2f 4d 08 <48> 8b 50 08 f6 c2 3f 0f 85 95 02 00 00 90 90 41 81 fc d3 01 00 00 [ 321.484387][ T8884] RSP: 0018:ffffc9000fee7f28 EFLAGS: 00000202 [ 321.484395][ T8884] RAX: ffff88805c0c2440 RBX: ffffc9000fee7f58 RCX: ffffffff81c3ebff [ 321.484401][ T8884] RDX: 0000000000000000 RSI: ffffffff8de19d08 RDI: ffffffff8c1578a0 [ 321.484407][ T8884] RBP: ffffc9000fee7f48 R08: 0000000000000001 R09: 0000000000000001 [ 321.484413][ T8884] R10: ffffffff90a80f57 R11: 0000000000000000 R12: 00000000000001af [ 321.484418][ T8884] R13: 00000000000001af R14: 0000000000000000 R15: 0000000000000000 [ 321.484426][ T8884] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 321.484438][ T8884] ? do_syscall_64+0x91/0x4c0 [ 321.484452][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.484462][ T8884] RIP: 0033:0x7f2f8b78e929 [ 321.484469][ T8884] Code: Unable to access opcode bytes at 0x7f2f8b78e8ff. [ 321.484473][ T8884] RSP: 002b:00007f2f8c5e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 321.484481][ T8884] RAX: ffffffffffffffda RBX: 00007f2f8b9b6080 RCX: 00007f2f8b78e929 [ 321.484487][ T8884] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 0000000000000005 [ 321.484493][ T8884] RBP: 00007f2f8c5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 321.484499][ T8884] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.484504][ T8884] R13: 0000000000000000 R14: 00007f2f8b9b6080 R15: 00007fff602ce468 [ 321.484513][ T8884] [ 322.678793][ T8884] CPU: 0 UID: 0 PID: 8884 Comm: syz.3.760 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 322.678809][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.678816][ T8884] Call Trace: [ 322.678821][ T8884] [ 322.678827][ T8884] dump_stack_lvl+0x116/0x1f0 [ 322.678845][ T8884] should_fail_ex+0x512/0x640 [ 322.678859][ T8884] ? strncpy_from_user+0x1d2/0x2e0 [ 322.678871][ T8884] strncpy_from_user+0x3b/0x2e0 [ 322.678883][ T8884] strncpy_from_user_nofault+0x7f/0x180 [ 322.678898][ T8884] bpf_probe_read_compat_str+0xe8/0x180 [ 322.678909][ T8884] bpf_prog_b0c6ebf0b810dd9c+0x5a/0x60 [ 322.678917][ T8884] bpf_trace_run2+0x230/0x590 [ 322.678927][ T8884] ? __pfx_bpf_trace_run2+0x10/0x10 [ 322.678937][ T8884] ? kvm_sched_clock_read+0x11/0x20 [ 322.678950][ T8884] ? sched_clock_cpu+0x6c/0x530 [ 322.678965][ T8884] ? lock_acquire+0x179/0x350 [ 322.678981][ T8884] __bpf_trace_tlb_flush+0xd1/0x110 [ 322.678991][ T8884] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 322.679003][ T8884] trace_tlb_flush+0xe4/0x160 [ 322.679015][ T8884] switch_mm_irqs_off+0x2b1/0x7f0 [ 322.679028][ T8884] __schedule+0xf4a/0x5de0 [ 322.679040][ T8884] ? find_held_lock+0x2b/0x80 [ 322.679054][ T8884] ? __pfx___schedule+0x10/0x10 [ 322.679066][ T8884] ? lockdep_hardirqs_on+0x7c/0x110 [ 322.679081][ T8884] preempt_schedule_irq+0x51/0x90 [ 322.679095][ T8884] irqentry_exit+0x36/0x90 [ 322.679107][ T8884] asm_sysvec_call_function_single+0x1a/0x20 [ 322.679119][ T8884] RIP: 0010:do_syscall_64+0x9a/0x4c0 [ 322.679134][ T8884] Code: 00 48 8b 7d 08 e8 66 5c 00 00 0f 1f 44 00 00 0f 1f 44 00 00 90 e8 a6 4e 44 f6 90 90 e8 8f 4c 44 f6 fb 65 48 8b 05 9e 2f 4d 08 <48> 8b 50 08 f6 c2 3f 0f 85 95 02 00 00 90 90 41 81 fc d3 01 00 00 [ 322.679144][ T8884] RSP: 0018:ffffc9000fee7f28 EFLAGS: 00000202 [ 322.679153][ T8884] RAX: ffff88805c0c2440 RBX: ffffc9000fee7f58 RCX: ffffffff81c3ebff [ 322.679159][ T8884] RDX: 0000000000000000 RSI: ffffffff8de19d08 RDI: ffffffff8c1578a0 [ 322.679165][ T8884] RBP: ffffc9000fee7f48 R08: 0000000000000001 R09: 0000000000000001 [ 322.679170][ T8884] R10: ffffffff90a80f57 R11: 0000000000000000 R12: 00000000000001af [ 322.679176][ T8884] R13: 00000000000001af R14: 0000000000000000 R15: 0000000000000000 [ 322.679183][ T8884] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 322.679197][ T8884] ? do_syscall_64+0x91/0x4c0 [ 322.679211][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.679220][ T8884] RIP: 0033:0x7f2f8b78e929 [ 322.679227][ T8884] Code: Unable to access opcode bytes at 0x7f2f8b78e8ff. [ 322.679231][ T8884] RSP: 002b:00007f2f8c5e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 322.679240][ T8884] RAX: ffffffffffffffda RBX: 00007f2f8b9b6080 RCX: 00007f2f8b78e929 [ 322.679246][ T8884] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 0000000000000005 [ 322.679252][ T8884] RBP: 00007f2f8c5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 322.679257][ T8884] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.679263][ T8884] R13: 0000000000000000 R14: 00007f2f8b9b6080 R15: 00007fff602ce468 [ 322.679272][ T8884] [ 322.971870][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 323.123022][ T8884] CIFS: Unable to determine destination address [ 323.149660][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.187181][ T30] audit: type=1400 audit(323.104:1124): avc: denied { write } for pid=5797 comm="syz-executor" path="pipe:[3969]" dev="pipefs" ino=3969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 323.320849][ T30] audit: type=1400 audit(323.254:1125): avc: denied { write } for pid=8888 comm="syz.1.762" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.320901][ T5815] usb 3-1: USB disconnect, device number 37 [ 323.342908][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.860736][ T7505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.949409][ T7505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.018306][ T7505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.068819][ T7505] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.127960][ T7505] bridge_slave_1: left allmulticast mode [ 324.133599][ T7505] bridge_slave_1: left promiscuous mode [ 324.139409][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.147324][ T7505] bridge_slave_0: left allmulticast mode [ 324.152944][ T7505] bridge_slave_0: left promiscuous mode [ 324.158871][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.259353][ T7505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.269319][ T7505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.278431][ T7505] bond0 (unregistering): Released all slaves [ 324.346128][ T6010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.473568][ T7505] hsr_slave_0: left promiscuous mode [ 324.479236][ T7505] hsr_slave_1: left promiscuous mode [ 324.484759][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.492434][ T7505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.500274][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.507908][ T7505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.517715][ T7505] veth1_macvtap: left promiscuous mode [ 324.523194][ T7505] veth0_macvtap: left promiscuous mode [ 324.529516][ T7505] veth1_vlan: left promiscuous mode [ 324.534748][ T7505] veth0_vlan: left promiscuous mode [ 324.620709][ T7505] team0 (unregistering): Port device team_slave_1 removed [ 324.639649][ T7505] team0 (unregistering): Port device team_slave_0 removed [ 324.961148][ T7505] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.999393][ T7505] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.058287][ T7505] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.108934][ T7505] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.158969][ T7505] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.208091][ T7505] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.248339][ T7505] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.308431][ T7505] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.368615][ T7505] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.398487][ T7505] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.458575][ T7505] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.499719][ T7505] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.548065][ T7505] bridge_slave_1: left allmulticast mode [ 325.553703][ T7505] bridge_slave_1: left promiscuous mode [ 325.559467][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.567223][ T7505] bridge_slave_0: left allmulticast mode [ 325.572930][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.581179][ T7505] bridge_slave_1: left allmulticast mode [ 325.587070][ T7505] bridge_slave_1: left promiscuous mode [ 325.592644][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.600676][ T7505] bridge_slave_0: left allmulticast mode [ 325.606404][ T7505] bridge_slave_0: left promiscuous mode [ 325.611977][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.620314][ T7505] bridge_slave_1: left allmulticast mode [ 325.626153][ T7505] bridge_slave_1: left promiscuous mode [ 325.631737][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.640015][ T7505] bridge_slave_0: left allmulticast mode [ 325.645631][ T7505] bridge_slave_0: left promiscuous mode [ 325.651704][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.729967][ T7505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.739652][ T7505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.748788][ T7505] bond0 (unregistering): Released all slaves [ 325.803240][ T7505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.814208][ T7505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.824139][ T7505] bond0 (unregistering): Released all slaves [ 325.880918][ T7505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.890362][ T7505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.900548][ T7505] bond0 (unregistering): Released all slaves [ 325.969122][ T7505] : left promiscuous mode [ 326.323544][ T7505] hsr_slave_0: left promiscuous mode [ 326.329117][ T7505] hsr_slave_1: left promiscuous mode [ 326.334648][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.342094][ T7505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.349675][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.357137][ T7505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.367515][ T7505] hsr_slave_0: left promiscuous mode [ 326.373048][ T7505] hsr_slave_1: left promiscuous mode [ 326.378665][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.386057][ T7505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.393421][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.401081][ T7505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.409557][ T7505] hsr_slave_0: left promiscuous mode [ 326.415044][ T7505] hsr_slave_1: left promiscuous mode [ 326.420865][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.428363][ T7505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.436097][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.443461][ T7505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.454081][ T7505] veth1_macvtap: left promiscuous mode [ 326.459664][ T7505] veth1_vlan: left promiscuous mode [ 326.464894][ T7505] veth0_vlan: left promiscuous mode [ 326.470641][ T7505] veth1_macvtap: left promiscuous mode [ 326.476189][ T7505] veth0_macvtap: left promiscuous mode [ 326.481669][ T7505] veth1_vlan: left promiscuous mode [ 326.486918][ T7505] veth0_vlan: left promiscuous mode [ 326.492774][ T7505] veth1_vlan: left promiscuous mode [ 326.498210][ T7505] veth0_vlan: left promiscuous mode [ 326.619477][ T7505] team0 (unregistering): Port device team_slave_1 removed [ 326.635082][ T7505] team0 (unregistering): Port device team_slave_0 removed [ 326.690660][ T7505] pimreg3 (unregistering): left allmulticast mode [ 326.854062][ T7505] team0 (unregistering): Port device team_slave_1 removed [ 326.877805][ T7505] team0 (unregistering): Port device team_slave_0 removed [ 326.925029][ T1049] infiniband syz1: ib_query_port failed (-19) [ 327.664110][ T7505] IPVS: stop unused estimator thread 0...