last executing test programs: 1m1.28593126s ago: executing program 0 (id=2109): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sync() syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x30, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {0x4}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000540)={0xa, &(0x7f00000004c0)=[{0x2, 0x5, 0xab, 0x4}, {0x4, 0xe, 0x1f, 0x1}, {0x1, 0x2, 0x8, 0x3}, {0x80, 0x96, 0x10, 0x80}, {0x979, 0x6, 0x5}, {0x8, 0x7, 0xec, 0x6}, {0x0, 0x3, 0x7, 0xffff}, {0x7, 0xd, 0x0, 0x4cf}, {0x3, 0xa, 0x5, 0x3}, {0x5, 0x65, 0x9, 0x1}]}) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 1m1.130773643s ago: executing program 0 (id=2110): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m1.061044849s ago: executing program 0 (id=2111): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00"/14], 0x48) unshare(0x28000600) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', r0}, 0x18) 1m1.040398046s ago: executing program 0 (id=2112): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x6a800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x1, 0xdddd1000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x4056000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfe}, {0x3000, 0x5000, 0xc, 0xfe, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0xdddd1000, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x1, 0xb, 0x6, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5, 0x0, 0x3}, {0x80a0000, 0xfffc}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xd801, 0x0, [0x6, 0x0, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 1m1.036233753s ago: executing program 1 (id=2113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}, 0x1, 0x0, 0x0, 0x20044c14}, 0x40800) 1m0.977619442s ago: executing program 1 (id=2114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x2c}}, 0x20044000) 1m0.935071665s ago: executing program 1 (id=2115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) 59.182614582s ago: executing program 1 (id=2119): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 58.244955106s ago: executing program 1 (id=2123): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2400, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x81, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB='@\"g'], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x683e3057}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x143000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='net/fib_triestat\x00') read$FUSE(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getsockname$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000001340)="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", 0x2d8, 0x20000000, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x0, 0x0, 0xa, 0x77, 0x1000000000000, 0x0, 0x8000000000000001, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x4}) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x544c0, 0x0) r5 = socket(0x2, 0x2, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) ioctl$NBD_DO_IT(r6, 0xab03) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 0x7ff}, 0xe) 58.175997827s ago: executing program 3 (id=2125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x2c}}, 0x20044000) 58.104185852s ago: executing program 3 (id=2127): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x201c4) r1 = gettid() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4fed0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 58.055732633s ago: executing program 4 (id=2128): socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) symlinkat(&(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000180000000000000000000000000030001030500030084000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x81) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a001000ff04ff08"], 0x3c}}, 0x0) 57.984840518s ago: executing program 0 (id=2129): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) r0 = eventfd2(0x0, 0x801) read$eventfd(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)) shutdown(r4, 0x1) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000050000000500b1a748cce4afe5f31636d04a91c14dfdb2d5c28a0678d021fb77bf84db0cfc7f01e2eaccc52347547f74d5fba431d5708ef87f7e024706d67e6bcb25953fdb2e24754e920b6d751882f4bff7e787e821158318f2c5fc0b805f9b4fee30f30734a61fd3d86437500907f2ab273e853f28952cebc55e3486fe734838aa1005a13946db9175db9a9d909a1b29b1e92c25017354e4bc471ab8c8829a6014f0f10ae9f984aa4b1434cf2a2525022ac69240770f4ff559806b336f50a1a8374c607befd759a8"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x1200) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x1000)=nil) 56.892752248s ago: executing program 2 (id=2130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$CEC_S_MODE(r2, 0x40046109, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) userfaultfd(0x80001) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x4, 0xfe}) syz_emit_ethernet(0x46, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) syz_open_dev$video(&(0x7f0000000000), 0x4, 0x1340) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) 56.722465404s ago: executing program 3 (id=2131): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0xf5c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x3d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2e, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x10, &(0x7f00000004c0), 0x1}], 0x492492492492625, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0xb8}}, 0x20048050) r4 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) io_uring_enter(r4, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000380)=[@in={0x2, 0x1, @local}, @in={0x2, 0x4ea3, @multicast1}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="619ae54470d2b648ec092ee07a0553a543174391a834f3f9ad6af800bd654d30bcf26ec76600", 0x26}], 0x1, &(0x7f0000000780)=ANY=[], 0x30}, {&(0x7f00000003c0)=@in6={0xa, 0x4e22, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000b40)="4b642c84bafca08fd0a75db950b08e63b80a6d192b21bfaec55f71d632d753b5ab6cd3d78d7a5b21e664a16285fc63307ba8ecb54ce4dfbc9a672bbf939711f42017db3373492654493cbd43d2420c0e096c17107021922f0b29a8da8ac3244ccc724219bcc2b833b8b26a22594d5a1cc5584474982e59ef05c6f702a35006c116a5ca71d20b324c5a317da2092541f44be6ecec4a04817670d7e24591c2bd41f412455889a8e2262bd92cc8ace3b5684ace99159e44e37eb2870c2ae7e98353215fe8a7e02791624d33015802db61a8b520f58771032abdf173e05176b8b1bf112acf881d3a581af3b62f29", 0xec}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="aae91f38dba1a73e465452ebae8338f87f4cae60ae", 0x15}, {&(0x7f00000005c0)="0ffc755faff579cfab93e5db80cdc5bf369329a1e78dbfb7c7aec5c4f6fcacd44a595b2f9a14580930e7ad54f0e11a654ef755121d27d16bec31e3f8d0feb56123434585e7658f5331eaa9439ef7bc74", 0x50}, {&(0x7f0000000c40)="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", 0x119}], 0x5}, {&(0x7f0000000700)=@in6={0xa, 0x4e24, 0xa181, @empty, 0x7}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000000880)="fca66aa12e54c7f3d0f6512976adb64b3a762f31f2cbf723b48cd9ee5d2345edb7fd6f16790f024b8a2ae93f31ad0d2eae282f0ba951ab431f3d7ba41ada81d557f1a472975a4371b7daf218d5345ca15b430e87e124f685940b43c250c16a51bf1c26454933a81a4860ad3483c225277d1346b00a41b2d37c41c59d1225d90bad2e9db84f47d30dfde1b38d07098bea28aedf83ca057672215078ac66cbc43f39bdd1f3af06f353ccce17bbc8a28df8dbb60375cdf73cf0c50bc2175e756a230b86b21c38d0db5ff032ed2ece7ce2367348c2bebe14a53859064834050bc157bc859d", 0xe3}, {&(0x7f0000000980)="479c571925b5bc7cee8a305656e6f4c8beb8d82d40b135b099bf8a200702b525b17d2db91ff6daabc0088e8f8b4622fc19872a6320f311036c6d13e83cf327ee77cc6d0ee70888727b4f1d9eabc4075b2a689a827ffb5d587e781ae00c27dba7070c666382008b806ad507419be7108f", 0x70}, {&(0x7f0000000a00)="3dbd07ada560aec50961ff29265769024e5898b5d1a1fbf6a32bc2f4391f53bb318ba84f8beab5afdb68ec5c01b0d70248ba1bf7e7b7fa28f6f23615e3396a902820871b42721603d940787d194da37de313eeb28a052669de7835f46c94035072ee37d68206751dcc127fc9309d4cdd0f683b84964b0b2669b4128ca46c38161a097a10cdf0433117562dcd05766218f378f3e169110bde8ae0", 0x9a}, {&(0x7f0000000ac0)="f9437205d3bed59e46356b14f441f93bb43fb7cb3fe8a93662d3168a937f99a0dfb5116b81d4e10f7bb9c48b36fa21e883159d120efa36c6b6974303d394aca83ba7dbe3fb0159fdf8e786cbb8d2db80ed03566009ac5c246453d1bce75eed08c5c3b6", 0x63}, {0x0}, {0x0}, {&(0x7f0000000300)="b45d9ddf0d024f10392785cd36", 0xd}, {&(0x7f0000001dc0)="e27523153206564e0e9860e6f49020e708d64270f275c28b6f7386ff3a09346b25fa4797fc26bebfc3581e1be983f5b3e4a49510f5dcaccaa6fd09d2ace278f7504f1ff2abce033703796a48ed5ebf0001c47cc13932383cd0016b613a145a1a5345a99d85ae99d39ff2afa04dd882011cd9c0d27be8f80816ce20a28035e8c47d42ea466be871ea4877067fc3d4536b56009a45eb752b59660ebe1e6a5f3f3b", 0xa0}], 0x8, &(0x7f0000000780), 0x0, 0x4000084}, {&(0x7f0000002200)=@in6={0xa, 0x4e20, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000002500)=[{0x0}, {0x0}, {&(0x7f0000002300)="fe24997d81e2de0dd0bdbca28575fc96efe6d0b43c9acc65926eced28890f2110b48746b097a6c228536251a17c4d909b6670b0b2d87b7f2fdce45a184f6a5c5b3f546b46ba34318214575cc62d7f455c731d1765b9667df47519bd3092ab3729f061e23fc182d8108b4c0ae32c4a502feb24090f14349f439d1b6d42adbdeae07d03fc6886e38c3d7ffe8abfadd86509dbf8841cdf2075850410e5a0f922ca8610aa4f3c6fb68d41c6a9e3da300cc99c6b98ff1f9638ab4364d44961eccd8af46adaf244f9f7f63e15d", 0xca}, {&(0x7f0000002400)="4386485448d7e1ce2d1b041f0b465d77b9b1b7b6960ce84c0bac4d392a5ebaf2570e56f517aa8c023b920374d449943a2783de789d7e63be4c98fb07dd66e8165da5c0f1346489cd44215474e67950980b525c63199516e7431d2f53137e7e5b6cad839f8522fb25f2a8c6d8d966b5dcb91d54528817b54d109a13eeefa0b4975c7fc09ff6b288815a1baf91de2b2f4e000000004474f4146743990b72a667ecf5aca1f0cbb009a50217a006531b8beee936ac175c1fb8635c5ef92f41988bb5ffcc24a9a0f93d7a94ae525c5995284cb6e83ba09efa8c01444920faea00"/236, 0xec}], 0x4, 0x0, 0x0, 0x2000000}], 0x4, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x743201, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x50) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000340)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r6, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) 55.465981108s ago: executing program 2 (id=2132): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x201c4) r1 = gettid() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 55.420740562s ago: executing program 3 (id=2133): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)=ANY=[@ANYBLOB="71756f74612c3252f59aaa2d57ba5f696e6f64655f686172646c696d69743d372c00"]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000340)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001100)={'filter\x00', 0x7, 0x4, 0x3e8, 0xe8, 0xe8, 0xe8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @private, 0xff000000, 0x0, 0x0, 0x4, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 'veth1_to_team\x00', 'veth0_to_team\x00'}, 0xc0, 0x16c}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac, @dev={0xac, 0x14, 0x14, 0x40}, @local, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x452) syz_io_uring_setup(0x3dfc, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 55.412851191s ago: executing program 4 (id=2134): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x28000600) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 55.386558746s ago: executing program 0 (id=2135): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 55.317084666s ago: executing program 4 (id=2136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x40, 0x4, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044c14}, 0x40800) 55.307502956s ago: executing program 4 (id=2137): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x6a800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x1, 0xdddd1000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x4056000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfe}, {0x3000, 0x5000, 0xc, 0xfe, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0xdddd1000, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x1, 0xb, 0x6, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5, 0x0, 0x3}, {0x80a0000, 0xfffc}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xd801, 0x0, [0x6, 0x0, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) 54.211437817s ago: executing program 2 (id=2138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x2c}}, 0x20044000) 54.209790668s ago: executing program 3 (id=2139): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000037c000018003780130003007174722834141faa532df09a"], 0x2c}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r2, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)=""/98, 0x62}, {&(0x7f00000009c0)=""/222, 0xde}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/263, 0x107}], 0x4}, 0x2}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) sendmsg$tipc(r5, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r5, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000300)) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0x9fef}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="077150b665ecb991bf5134c7ac208ba7691c97425c6aa3329056faaed969a87a7e26c3bdd1", 0x25, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000680)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000340), &(0x7f0000000500), &(0x7f0000000240), 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000580)={&(0x7f00000002c0)=[0x0], 0x1, 0x0, 0x0}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(r10, 0xc03064b7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0xc, 0x8, 0x100, 0x80000001, 0x5, 0x5, 0xfffffff9, 0x80000000}) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r10, 0xc01c64a3, &(0x7f0000000280)={0x3, r12, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[r8, 0x0, r9, r12], 0x4, 0x80000}) 54.195224113s ago: executing program 4 (id=2140): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x408, 0x7) 54.088001976s ago: executing program 2 (id=2141): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x201c4) r1 = gettid() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4fed0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 53.18900716s ago: executing program 3 (id=2142): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 53.128065371s ago: executing program 1 (id=2143): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1801000000002000000002000000000018190000", @ANYRESHEX=r0, @ANYBLOB="000000000000050000000000bfa200000000000007020000f8ffffffb703000008000000b7040000e5ffffff850000002400000095000000000000000000000000db446c23a7153604def82cd7d136f364cb2b2accdedd298a473096fdd8b3c71a5b25dbbbe49d61e2594a046820b0b6c95b689a657a70d2811f58238e1e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x8fbb6d8fab1f655d, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102374, 0xfffffe9a) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="d510c490f913672b5ae413000500", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = msgget$private(0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000880)={0xfffffffa, 0x400, 0x1, 0x80000000000000c, 0xfffffffffffffff7, 0x4, 0x6, 0x7, 0xcbe, 0x4, 0x80, 0x3}) msgsnd(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgrcv(r5, 0x0, 0x0, 0xffffff7f00000000, 0x800) msgsnd(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000000000008afb85dee3dde543e23a739f084380e7d39596f6704707b85198e0e4529cf8c5bfe0ca975978b87556b0901e8b0696a579ae4b895bf4f825f08431df4d3aa2620ae890b013f45e147c36694c8edc8ca9a5d9d9f919216a8bb081a8f12eb471e4896f67a1dd99c0c5499b99f97ebb4ced540f8e9b0908649a4273524be151c7ec0cfdbdb92887fc8a1a5a1bf450f55f22dfe1ffe361500edb54d06aceb1f4da070d77707e01a3226db6675d9dfe3a01c583b45671ba3e8224bdf9cb13eee371be92f549ea0e7ddab8cb72249fea6dc8025c33950f821b6048600"/238], 0xee, 0x800) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8000009, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 53.082827211s ago: executing program 2 (id=2144): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) (fail_nth: 3) 52.560939755s ago: executing program 2 (id=2145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = getpgid(0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e23, 0x20002, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYBLOB="92a44b45b56d8bd16f595e2d0fb91517f73884601aed2948445bf69d518f4ed5d62b9376c12b5b76646dace65d6cd562825da4e6b3faf3d59ba91a89", @ANYRES16=r4], 0x36) bind$bt_hci(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r5], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, 0x0) 50.539976186s ago: executing program 4 (id=2146): socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) symlinkat(&(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000180000000000000000000000000030001030500030084000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x81) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a001000ff04ff08"], 0x3c}}, 0x0) 16.93210871s ago: executing program 32 (id=2135): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 15.337084361s ago: executing program 33 (id=2143): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1801000000002000000002000000000018190000", @ANYRESHEX=r0, @ANYBLOB="000000000000050000000000bfa200000000000007020000f8ffffffb703000008000000b7040000e5ffffff850000002400000095000000000000000000000000db446c23a7153604def82cd7d136f364cb2b2accdedd298a473096fdd8b3c71a5b25dbbbe49d61e2594a046820b0b6c95b689a657a70d2811f58238e1e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x8fbb6d8fab1f655d, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102374, 0xfffffe9a) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="d510c490f913672b5ae413000500", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = msgget$private(0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000880)={0xfffffffa, 0x400, 0x1, 0x80000000000000c, 0xfffffffffffffff7, 0x4, 0x6, 0x7, 0xcbe, 0x4, 0x80, 0x3}) msgsnd(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgrcv(r5, 0x0, 0x0, 0xffffff7f00000000, 0x800) msgsnd(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000000000008afb85dee3dde543e23a739f084380e7d39596f6704707b85198e0e4529cf8c5bfe0ca975978b87556b0901e8b0696a579ae4b895bf4f825f08431df4d3aa2620ae890b013f45e147c36694c8edc8ca9a5d9d9f919216a8bb081a8f12eb471e4896f67a1dd99c0c5499b99f97ebb4ced540f8e9b0908649a4273524be151c7ec0cfdbdb92887fc8a1a5a1bf450f55f22dfe1ffe361500edb54d06aceb1f4da070d77707e01a3226db6675d9dfe3a01c583b45671ba3e8224bdf9cb13eee371be92f549ea0e7ddab8cb72249fea6dc8025c33950f821b6048600"/238], 0xee, 0x800) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8000009, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 14.442981473s ago: executing program 34 (id=2145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = getpgid(0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e23, 0x20002, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYBLOB="92a44b45b56d8bd16f595e2d0fb91517f73884601aed2948445bf69d518f4ed5d62b9376c12b5b76646dace65d6cd562825da4e6b3faf3d59ba91a89", @ANYRES16=r4], 0x36) bind$bt_hci(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r5], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, 0x0) 14.331432959s ago: executing program 35 (id=2142): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d670a8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a9b2f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d073b090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813491ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c513a9177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227dfdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 14.242875531s ago: executing program 36 (id=2146): socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) symlinkat(&(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000180000000000000000000000000030001030500030084000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x81) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a001000ff04ff08"], 0x3c}}, 0x0) 2.316659441s ago: executing program 5 (id=2147): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, 0x22820, 0x55007}, [@IFLA_CARRIER={0x5, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x24040840) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x34]}}]}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r6) creat(&(0x7f00000001c0)='./file0\x00', 0x42) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f00000017c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x66, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x4e, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df4"}}}}, 0xfdef) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000080)={0x1, 0x91cc, 0x2000000, 0x10000, 0x4, 0x0, 0x80, 0x0, 0xfffffffffffffffe}) 2.205942862s ago: executing program 8 (id=2150): mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x42203, 0x13d) 2.116978513s ago: executing program 8 (id=2152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) 1.63556719s ago: executing program 8 (id=2153): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xd}}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x4}}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x44810}, 0x44000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x42, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000001c0)}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/89, 0x59}], 0x5, &(0x7f0000000480)=""/204, 0xcc}, 0xff}, {{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/108, 0x6c}], 0x1, &(0x7f0000001800)=""/4096, 0x1000}, 0xb}], 0x2, 0x10021, &(0x7f0000002800)={r3, r4+10000000}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)) r6 = syz_open_pts(r5, 0x101000) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) 1.241769419s ago: executing program 6 (id=2148): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x2a940, 0x100) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[], 0x78) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0xac, 0x30, 0x100, 0x0, 0x0, {}, [{0x98, 0x1, [@m_tunnel_key={0x94, 0x3, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x7, 0x4, 0xffff34e1, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x36, 0x6, "ad973552f000f25f1ef24423730bf91d0324b949d98d9bb8e7c447ef09656a8dfcf245c3fd24a279009a829e7f9e64931439"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xac}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x82, 0x2) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x3, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x7d4a}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004890) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x1c0, 0xb, 0x108, 0x108, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r7, 0xffffc000) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000b80)) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000040)) 1.193906818s ago: executing program 5 (id=2154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r1, &(0x7f0000004a80), 0x0, 0x20, 0x0) 993.003506ms ago: executing program 5 (id=2155): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x35315842, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x7fffffff}, {0xd, 0x8}, {0x5, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 809.226728ms ago: executing program 5 (id=2156): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000006c0)="27050200590414000604622f1eafbcf706e10500000086ddffff1104ee1611d4b8bf4a82f6184b8a34f90186cee84400000000000000001900", 0x39}, {&(0x7f0000000b80)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b1ff06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c2f2922cd5f0149642851bb8112827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be632508c09316f4588f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7662bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7cd8591ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74", 0x3ed}], 0x2}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x35315842, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x7fffffff}, {0xd, 0x8}, {0x5, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 802.966289ms ago: executing program 9 (id=2151): r0 = socket$inet(0x2, 0x1, 0x100) listen(r0, 0x10000) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @empty}, 0x10) (fail_nth: 3) 773.549562ms ago: executing program 7 (id=2149): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8, 0x12100) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000040)=0x3) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000080)=0x10) madvise(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1) socketpair(0x21, 0xd, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:anacron_exec_t:s0\x00', 0x24, 0x2) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) r7 = geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x100, 0x4, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x7}, [{0x2, 0x4, r3}, {0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x1, r5}, {0x2, 0x4, r6}, {0x2, 0x3, r7}, {0x2, 0x0, 0xffffffffffffffff}], {0x4, 0x6}, [{0x8, 0x0, r8}, {0x8, 0x6, r9}, {0x8, 0x2e3fa6a8fb3be9fb, 0xee00}, {0x8, 0x2, r11}, {0x8, 0x0, r12}, {0x8, 0x5, r13}, {0x8, 0x1, r14}], {}, {0x20, 0x6e726964fc736934}}, 0x94, 0x7) r15 = openat$null(0xffffffffffffff9c, &(0x7f0000000a00), 0x1a002, 0x0) mkdirat(r15, &(0x7f0000000a40)='./file0\x00', 0x1) fadvise64(r1, 0x6ab, 0x3, 0x1) setsockopt$packet_fanout(r15, 0x107, 0x12, &(0x7f0000000a80)={0x1, 0x3}, 0x4) read$FUSE(r15, &(0x7f0000000ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f0000002dc0)={0x80, &(0x7f0000002b00), &(0x7f0000002b40), &(0x7f0000002b80), {0x1b}, &(0x7f0000002bc0)=""/164, 0xa4, &(0x7f0000002c80)=""/226, &(0x7f0000002d80)=[r16, r16], 0x2, {r15}}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$BLKGETDISKSEQ(r15, 0x80081280, &(0x7f0000002e40)) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000002e80)=@rnullb, r10, &(0x7f0000002ec0)='./file0\x00') move_mount(r15, &(0x7f0000002f00)='./file0\x00', r15, &(0x7f0000002f40)='./file0\x00', 0x334) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000002f80)=0x5, 0x4) 641.788274ms ago: executing program 8 (id=2157): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffe, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}}, {{@in6=@mcast1}, 0x0, @in=@remote, 0x3507, 0x2, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2e, &(0x7f00000006c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r4) 0s ago: executing program 7 (id=2158): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r3, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x2d, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cf, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000680)='./file0\x00', 0x9) kernel console output (not intermixed with test programs): 4][ T5861] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 618.740004][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 618.747186][ T5861] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 618.758413][ T5861] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 618.759935][ T57] usb 2-1: Using ep0 maxpacket: 8 [ 618.769431][ T5861] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 618.784781][ T5861] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.788538][ T57] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 618.798124][ T5861] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 618.798149][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.829026][ T57] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 618.839044][ T57] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 618.849171][ T57] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.862252][ T57] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 618.871379][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.010074][ T5861] usb 5-1: GET_CAPABILITIES returned 0 [ 619.015580][ T5861] usbtmc 5-1:16.0: can't read capabilities [ 619.405421][ T57] usb 2-1: GET_CAPABILITIES returned 0 [ 619.435996][ T57] usbtmc 2-1:16.0: can't read capabilities [ 620.179967][ T5861] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 620.315633][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'. [ 620.343265][ T5861] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 620.361925][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.381970][ T5861] usb 4-1: config 0 descriptor?? [ 620.501362][T11876] io-wq is not configured for unbound workers [ 620.603124][T11866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.618311][T11866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.633014][T11864] delete_channel: no stack [ 620.638442][ T5861] usb 4-1: string descriptor 0 read error: -71 [ 620.655860][ T5861] usb 4-1: USB disconnect, device number 32 [ 620.900402][T11885] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 620.909089][T11885] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 620.919612][T11885] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 620.933461][ T30] audit: type=1400 audit(2000000019.850:400): avc: denied { firmware_load } for pid=11882 comm="syz.0.1761" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 621.423278][ T5863] usb 5-1: USB disconnect, device number 29 [ 621.433668][ T5908] usb 2-1: USB disconnect, device number 26 [ 621.639941][ T1204] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 621.736477][T11897] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 621.820628][ T1204] usb 3-1: Using ep0 maxpacket: 8 [ 621.828254][ T1204] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 621.838069][ T1204] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 621.847869][ T1204] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 621.857870][ T1204] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.871065][ T1204] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 621.880162][ T1204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.949921][ T5863] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 622.100287][ T1204] usb 3-1: GET_CAPABILITIES returned 0 [ 622.105897][ T1204] usbtmc 3-1:16.0: can't read capabilities [ 622.116518][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 622.134407][ T5863] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 622.143990][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.154323][ T5863] usb 1-1: config 0 descriptor?? [ 622.159998][T11899] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 622.274010][T11901] netlink: 'syz.3.1768': attribute type 1 has an invalid length. [ 623.290506][ T5863] elan 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 623.609978][ T5133] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 623.730458][T11920] Can't find a SQUASHFS superblock on nullb0 [ 623.745406][ T30] audit: type=1800 audit(2000000022.640:401): pid=11920 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1771" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 623.854161][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.129734][ T5133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 624.140773][ T5133] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 624.175135][ T5133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.279840][T11924] kvm: user requested TSC rate below hardware speed [ 624.621075][ T5133] usb 5-1: config 0 descriptor?? [ 624.650396][T11905] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 624.678868][ T5863] usb 3-1: USB disconnect, device number 37 [ 624.803416][ T5908] usb 1-1: reset full-speed USB device number 36 using dummy_hcd [ 625.681855][T11931] kvm: user requested TSC rate below hardware speed [ 625.748443][ T5133] elan 0003:04F3:0755.0018: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 625.822189][ T5863] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 626.264771][T11943] lo speed is unknown, defaulting to 1000 [ 626.662665][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 626.726717][ T30] audit: type=1400 audit(2000000025.660:402): avc: denied { append } for pid=11939 comm="syz.3.1779" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 626.751526][ T1204] usb 5-1: USB disconnect, device number 30 [ 626.836672][ T5863] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 626.921662][ T5863] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 626.984163][ T5863] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 627.015102][ T5863] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.106632][ T57] usb 1-1: USB disconnect, device number 36 [ 627.126281][ T5863] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 627.135439][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.176379][T11955] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 627.696586][ T5863] usb 3-1: GET_CAPABILITIES returned 0 [ 627.729918][ T5863] usbtmc 3-1:16.0: can't read capabilities [ 627.731150][ T30] audit: type=1400 audit(2000000026.670:403): avc: denied { getopt } for pid=11957 comm="syz.3.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 628.806651][ T5861] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 629.028219][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 629.047832][ T5861] usb 4-1: New USB device found, idVendor=9660, idProduct=0932, bcdDevice=80.ea [ 629.231676][ T30] audit: type=1400 audit(2000000028.080:404): avc: denied { setopt } for pid=11971 comm="syz.0.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 629.324442][T11977] netlink: 'syz.0.1788': attribute type 14 has an invalid length. [ 629.556255][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.564727][ T5861] usb 4-1: Product: syz [ 629.568935][ T5861] usb 4-1: Manufacturer: syz [ 629.573592][ T5861] usb 4-1: SerialNumber: syz [ 629.586499][ T5861] usb 4-1: config 0 descriptor?? [ 630.045082][ T1204] usb 3-1: USB disconnect, device number 38 [ 630.704023][ T5861] usb 4-1: USB disconnect, device number 33 [ 630.879562][T11999] FAULT_INJECTION: forcing a failure. [ 630.879562][T11999] name failslab, interval 1, probability 0, space 0, times 0 [ 630.892403][T11999] CPU: 0 UID: 0 PID: 11999 Comm: syz.2.1792 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 630.892427][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.892438][T11999] Call Trace: [ 630.892444][T11999] [ 630.892451][T11999] dump_stack_lvl+0x16c/0x1f0 [ 630.892477][T11999] should_fail_ex+0x512/0x640 [ 630.892501][T11999] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 630.892524][T11999] should_failslab+0xc2/0x120 [ 630.892545][T11999] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 630.892564][T11999] ? __alloc_skb+0x2b2/0x380 [ 630.892590][T11999] __alloc_skb+0x2b2/0x380 [ 630.892609][T11999] ? __pfx___alloc_skb+0x10/0x10 [ 630.892638][T11999] netlink_alloc_large_skb+0x69/0x130 [ 630.892666][T11999] netlink_sendmsg+0x6a1/0xdd0 [ 630.892695][T11999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.892730][T11999] ____sys_sendmsg+0xa98/0xc70 [ 630.892758][T11999] ? copy_msghdr_from_user+0x10a/0x160 [ 630.892779][T11999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.892817][T11999] ___sys_sendmsg+0x134/0x1d0 [ 630.892840][T11999] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.892859][T11999] ? __lock_acquire+0x622/0x1c90 [ 630.892912][T11999] __sys_sendmsg+0x16d/0x220 [ 630.892934][T11999] ? __pfx___sys_sendmsg+0x10/0x10 [ 630.892972][T11999] do_syscall_64+0xcd/0x4c0 [ 630.892996][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.893014][T11999] RIP: 0033:0x7f7a7d58e969 [ 630.893029][T11999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.893046][T11999] RSP: 002b:00007f7a7e321038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.893063][T11999] RAX: ffffffffffffffda RBX: 00007f7a7d7b6160 RCX: 00007f7a7d58e969 [ 630.893075][T11999] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 630.893086][T11999] RBP: 00007f7a7e321090 R08: 0000000000000000 R09: 0000000000000000 [ 630.893096][T11999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.893106][T11999] R13: 0000000000000000 R14: 00007f7a7d7b6160 R15: 00007ffdab441838 [ 630.893130][T11999] [ 631.210627][ T5864] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 631.362073][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 631.371638][ T5864] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.386310][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 631.396249][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 631.406620][ T5864] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.421877][ T5864] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 631.488178][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.501049][T12002] fuse: Bad value for 'fd' [ 631.510445][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'. [ 631.844806][T11997] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 631.861995][ T30] audit: type=1400 audit(2000000030.540:405): avc: denied { map } for pid=12000 comm="syz.0.1796" path="/348/file0" dev="tmpfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 632.332297][T11997] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 632.338275][ T5864] usb 5-1: GET_CAPABILITIES returned 0 [ 632.343829][ T5864] usbtmc 5-1:16.0: can't read capabilities [ 632.843175][T11997] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 632.862285][T11997] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 632.869451][T11997] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 632.959593][T12016] IPVS: Unknown mcast interface: pim6reg [ 633.119968][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 633.836496][ T30] audit: type=1400 audit(2000000032.770:406): avc: denied { connect } for pid=12022 comm="syz.0.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 633.960138][ T5863] usb 5-1: USB disconnect, device number 31 [ 634.116846][ T30] audit: type=1400 audit(2000000033.050:407): avc: denied { ioctl } for pid=12027 comm="syz.3.1804" path="socket:[36340]" dev="sockfs" ino=36340 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 634.265575][T12034] netlink: 'syz.2.1803': attribute type 1 has an invalid length. [ 634.276909][T12034] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1803'. [ 634.286677][T12032] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 634.340823][T12034] netlink: 'syz.2.1803': attribute type 1 has an invalid length. [ 634.373007][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'. [ 634.390348][ T57] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 634.400787][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 634.637909][ T57] usb 4-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 634.647559][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.800184][T12051] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1808'. [ 635.120849][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 635.127041][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 635.142905][ T57] usb 4-1: Product: syz [ 635.156255][ T57] usb 4-1: Manufacturer: syz [ 635.161280][ T57] usb 4-1: SerialNumber: syz [ 635.192205][ T57] usb 4-1: config 0 descriptor?? [ 635.193492][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 635.239307][ T57] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 635.359564][T12050] ceph: No mds server is up or the cluster is laggy [ 635.400276][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 635.433148][ T57] gspca_sn9c20x: Write register 1000 failed -71 [ 635.439417][ T57] gspca_sn9c20x: Device initialization failed [ 635.445768][ T57] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 635.461976][ T57] usb 4-1: USB disconnect, device number 34 [ 635.565410][ T30] audit: type=1400 audit(2000000000.920:408): avc: denied { read } for pid=12055 comm="syz.1.1812" path="socket:[36431]" dev="sockfs" ino=36431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 635.707814][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 636.997978][T12068] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 637.161552][T12073] IPVS: Unknown mcast interface: pim6reg [ 637.215055][ T30] audit: type=1400 audit(2000000002.570:409): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 637.235725][ T5135] Bluetooth: hci3: command 0x0c1a tx timeout [ 637.758915][ T30] audit: type=1400 audit(2000000003.110:410): avc: denied { map } for pid=12088 comm="syz.3.1824" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 637.814576][T12090] lo speed is unknown, defaulting to 1000 [ 637.832945][ T30] audit: type=1400 audit(2000000003.170:411): avc: denied { write } for pid=12074 comm="syz.1.1819" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 637.889921][ T30] audit: type=1400 audit(2000000003.170:412): avc: denied { open } for pid=12074 comm="syz.1.1819" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 637.975849][T12087] netlink: 'syz.1.1819': attribute type 1 has an invalid length. [ 638.089747][T12100] tmpfs: Unknown parameter 'usrquota_block' [ 638.190043][ T24] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 638.331665][ T24] usb 3-1: device descriptor read/64, error -71 [ 638.590051][ T24] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 638.600100][ T5861] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 638.720322][ T24] usb 3-1: device descriptor read/64, error -71 [ 638.750009][ T5861] usb 4-1: device descriptor read/64, error -71 [ 638.840144][ T24] usb usb3-port1: attempt power cycle [ 639.015902][T12112] 8021q: adding VLAN 0 to HW filter on device bond6 [ 639.049991][ T5861] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 639.190285][ T5861] usb 4-1: device descriptor read/64, error -71 [ 639.191870][ T24] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 639.222642][T12118] FAULT_INJECTION: forcing a failure. [ 639.222642][T12118] name failslab, interval 1, probability 0, space 0, times 0 [ 639.230546][ T24] usb 3-1: device descriptor read/8, error -71 [ 639.235620][T12118] CPU: 0 UID: 0 PID: 12118 Comm: syz.4.1832 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 639.235642][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 639.235650][T12118] Call Trace: [ 639.235656][T12118] [ 639.235662][T12118] dump_stack_lvl+0x16c/0x1f0 [ 639.235686][T12118] should_fail_ex+0x512/0x640 [ 639.235707][T12118] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 639.235727][T12118] should_failslab+0xc2/0x120 [ 639.235747][T12118] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 639.235764][T12118] ? __alloc_skb+0x2b2/0x380 [ 639.235786][T12118] __alloc_skb+0x2b2/0x380 [ 639.235803][T12118] ? __pfx___alloc_skb+0x10/0x10 [ 639.235823][T12118] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 639.235850][T12118] netlink_alloc_large_skb+0x69/0x130 [ 639.235874][T12118] netlink_sendmsg+0x6a1/0xdd0 [ 639.235900][T12118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.235930][T12118] ____sys_sendmsg+0xa98/0xc70 [ 639.235954][T12118] ? copy_msghdr_from_user+0x10a/0x160 [ 639.235973][T12118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.236007][T12118] ___sys_sendmsg+0x134/0x1d0 [ 639.236027][T12118] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.236044][T12118] ? __lock_acquire+0x622/0x1c90 [ 639.236089][T12118] __sys_sendmsg+0x16d/0x220 [ 639.236108][T12118] ? __pfx___sys_sendmsg+0x10/0x10 [ 639.236140][T12118] do_syscall_64+0xcd/0x4c0 [ 639.236161][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.236176][T12118] RIP: 0033:0x7fa27a58e969 [ 639.236193][T12118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.236207][T12118] RSP: 002b:00007fa27b408038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.236222][T12118] RAX: ffffffffffffffda RBX: 00007fa27a7b5fa0 RCX: 00007fa27a58e969 [ 639.236232][T12118] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 639.236241][T12118] RBP: 00007fa27b408090 R08: 0000000000000000 R09: 0000000000000000 [ 639.236250][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.236258][T12118] R13: 0000000000000000 R14: 00007fa27a7b5fa0 R15: 00007ffefaa84f48 [ 639.236282][T12118] [ 639.310777][ T5861] usb usb4-port1: attempt power cycle [ 639.550095][ T24] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 639.570634][ T24] usb 3-1: device descriptor read/8, error -71 [ 639.680333][ T24] usb usb3-port1: unable to enumerate USB device [ 639.789932][ T57] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 639.812163][ T5861] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 639.840446][ T5861] usb 4-1: device descriptor read/8, error -71 [ 639.953469][ T57] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 639.965283][ T57] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 639.976497][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.984686][ T57] usb 5-1: Product: syz [ 639.988925][ T57] usb 5-1: Manufacturer: syz [ 639.993680][ T57] usb 5-1: SerialNumber: syz [ 640.002613][ T57] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 640.080117][ T5861] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 640.100447][ T5861] usb 4-1: device descriptor read/8, error -71 [ 640.210331][ T5861] usb usb4-port1: unable to enumerate USB device [ 640.232373][ T57] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 640.247602][ T57] usb 5-1: USB disconnect, device number 32 [ 640.464726][T12128] IPVS: Unknown mcast interface: pim6reg [ 640.947609][T12094] delete_channel: no stack [ 641.141630][T12134] lo speed is unknown, defaulting to 1000 [ 642.863773][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1843'. [ 642.877967][ T30] audit: type=1400 audit(2000000008.230:413): avc: denied { audit_write } for pid=12151 comm="syz.3.1843" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 643.773363][T12165] tmpfs: Unknown parameter 'usrquota_block' [ 643.806394][T12157] overlayfs: missing 'lowerdir' [ 643.827536][T12157] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 644.710411][T12174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 645.558522][T12180] lo speed is unknown, defaulting to 1000 [ 645.882583][T12182] IPVS: Unknown mcast interface: pim6reg [ 648.302097][T12203] FAULT_INJECTION: forcing a failure. [ 648.302097][T12203] name failslab, interval 1, probability 0, space 0, times 0 [ 648.375796][T12203] CPU: 1 UID: 0 PID: 12203 Comm: syz.3.1856 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 648.375820][T12203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.375831][T12203] Call Trace: [ 648.375837][T12203] [ 648.375843][T12203] dump_stack_lvl+0x16c/0x1f0 [ 648.375870][T12203] should_fail_ex+0x512/0x640 [ 648.375894][T12203] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 648.375913][T12203] should_failslab+0xc2/0x120 [ 648.375928][T12203] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 648.375941][T12203] ? mas_alloc_nodes+0x18b/0x8b0 [ 648.375956][T12203] mas_alloc_nodes+0x18b/0x8b0 [ 648.375971][T12203] mas_node_count_gfp+0x105/0x130 [ 648.375985][T12203] mas_preallocate+0x77b/0xda0 [ 648.376000][T12203] ? __memcg_slab_post_alloc_hook+0x3d2/0x960 [ 648.376018][T12203] ? __pfx_mas_preallocate+0x10/0x10 [ 648.376039][T12203] ? anon_vma_name+0x75/0x100 [ 648.376062][T12203] __split_vma+0x33b/0x1030 [ 648.376077][T12203] ? __pfx___split_vma+0x10/0x10 [ 648.376087][T12203] ? __kernel_text_address+0xd/0x40 [ 648.376111][T12203] vma_modify+0xee1/0x20a0 [ 648.376126][T12203] ? __pfx_vma_modify+0x10/0x10 [ 648.376141][T12203] vma_modify_flags+0x212/0x2d0 [ 648.376154][T12203] ? __pfx_vma_modify_flags+0x10/0x10 [ 648.376175][T12203] mlock_fixup+0x27c/0xe50 [ 648.376190][T12203] apply_vma_lock_flags+0x261/0x390 [ 648.376204][T12203] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 648.376216][T12203] ? __pfx___might_resched+0x10/0x10 [ 648.376231][T12203] ? __pfx_down_write_killable+0x10/0x10 [ 648.376249][T12203] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 648.376266][T12203] do_mlock+0x2ac/0x810 [ 648.376278][T12203] ? __fget_files+0x20e/0x3c0 [ 648.376291][T12203] ? __pfx_do_mlock+0x10/0x10 [ 648.376303][T12203] ? fput+0x70/0xf0 [ 648.376318][T12203] ? ksys_write+0x1ac/0x250 [ 648.376330][T12203] ? __pfx_ksys_write+0x10/0x10 [ 648.376345][T12203] __x64_sys_mlock+0x59/0x80 [ 648.376357][T12203] do_syscall_64+0xcd/0x4c0 [ 648.376372][T12203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.376384][T12203] RIP: 0033:0x7f6cd6f8e969 [ 648.376393][T12203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.376404][T12203] RSP: 002b:00007f6cd7e4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 648.376414][T12203] RAX: ffffffffffffffda RBX: 00007f6cd71b6080 RCX: 00007f6cd6f8e969 [ 648.376421][T12203] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 648.376428][T12203] RBP: 00007f6cd7e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 648.376434][T12203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.376440][T12203] R13: 0000000000000000 R14: 00007f6cd71b6080 R15: 00007ffcfc854f68 [ 648.376454][T12203] [ 649.160497][ T30] audit: type=1400 audit(2000000004.420:414): avc: denied { read } for pid=12211 comm="syz.3.1861" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 651.456176][T12228] tmpfs: Unknown parameter 'usrquota_block' [ 652.259947][ T57] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 652.277405][ T5863] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 652.474930][ T57] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 652.493966][ T57] usb 2-1: config 0 has no interface number 0 [ 652.511578][ T57] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 652.535151][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 652.549274][ T57] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 652.564843][ T57] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 652.576340][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.584894][ T5863] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 652.595305][ T5863] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 652.605481][ T57] usb 2-1: config 0 descriptor?? [ 652.610642][ T5863] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 652.620921][T12230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 652.628129][ T5863] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.643376][ T5863] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 652.652719][ T57] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 652.663019][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.780009][ T5861] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 652.799960][ T5864] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 652.891841][ T5863] usb 3-1: GET_CAPABILITIES returned 0 [ 652.897354][ T5863] usbtmc 3-1:16.0: can't read capabilities [ 652.930039][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 652.936572][ T5861] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 652.946472][ T5861] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 652.956251][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 652.961387][ T5861] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 652.971402][ T5861] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.985602][ T5861] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 652.997526][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.008508][T10284] usb 2-1: USB disconnect, device number 27 [ 653.014574][ T5864] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 653.027361][ T5864] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 653.038375][ T5864] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 653.048324][ T5864] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.062793][ T5864] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 653.072052][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.265673][ T5861] usb 4-1: GET_CAPABILITIES returned 0 [ 653.271446][ T5861] usbtmc 4-1:16.0: can't read capabilities [ 653.710126][ T5864] usb 1-1: GET_CAPABILITIES returned 0 [ 653.715743][ T5864] usbtmc 1-1:16.0: can't read capabilities [ 655.256817][ T5863] usb 3-1: USB disconnect, device number 43 [ 655.901888][T12267] FAULT_INJECTION: forcing a failure. [ 655.901888][T12267] name failslab, interval 1, probability 0, space 0, times 0 [ 655.944301][T12267] CPU: 0 UID: 0 PID: 12267 Comm: syz.4.1876 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 655.944328][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 655.944339][T12267] Call Trace: [ 655.944345][T12267] [ 655.944352][T12267] dump_stack_lvl+0x16c/0x1f0 [ 655.944379][T12267] should_fail_ex+0x512/0x640 [ 655.944403][T12267] ? __kmalloc_noprof+0xbf/0x510 [ 655.944424][T12267] ? bpf_test_init.isra.0+0x9e/0x140 [ 655.944445][T12267] should_failslab+0xc2/0x120 [ 655.944467][T12267] __kmalloc_noprof+0xd2/0x510 [ 655.944486][T12267] ? __lock_acquire+0x622/0x1c90 [ 655.944513][T12267] bpf_test_init.isra.0+0x9e/0x140 [ 655.944538][T12267] bpf_prog_test_run_xdp+0x4f0/0x1590 [ 655.944573][T12267] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 655.944598][T12267] ? __might_fault+0x90/0x190 [ 655.944621][T12267] ? fput+0x70/0xf0 [ 655.944643][T12267] ? __bpf_prog_get+0x97/0x2a0 [ 655.944672][T12267] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 655.944697][T12267] __sys_bpf+0x1488/0x4d80 [ 655.944720][T12267] ? __pfx___sys_bpf+0x10/0x10 [ 655.944742][T12267] ? ksys_write+0x190/0x250 [ 655.944765][T12267] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 655.944803][T12267] ? fput+0x70/0xf0 [ 655.944825][T12267] ? ksys_write+0x1ac/0x250 [ 655.944842][T12267] ? __pfx_ksys_write+0x10/0x10 [ 655.944865][T12267] __x64_sys_bpf+0x78/0xc0 [ 655.944885][T12267] ? lockdep_hardirqs_on+0x7c/0x110 [ 655.944906][T12267] do_syscall_64+0xcd/0x4c0 [ 655.944930][T12267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.944948][T12267] RIP: 0033:0x7fa27a58e969 [ 655.944968][T12267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.944984][T12267] RSP: 002b:00007fa27b408038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 655.945002][T12267] RAX: ffffffffffffffda RBX: 00007fa27a7b5fa0 RCX: 00007fa27a58e969 [ 655.945013][T12267] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 655.945024][T12267] RBP: 00007fa27b408090 R08: 0000000000000000 R09: 0000000000000000 [ 655.945034][T12267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.945044][T12267] R13: 0000000000000000 R14: 00007fa27a7b5fa0 R15: 00007ffefaa84f48 [ 655.945068][T12267] [ 655.979936][ T5863] usb 1-1: USB disconnect, device number 37 [ 655.990785][T12268] lo speed is unknown, defaulting to 1000 [ 656.436945][T12277] FAULT_INJECTION: forcing a failure. [ 656.436945][T12277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.548172][T12277] CPU: 1 UID: 0 PID: 12277 Comm: syz.4.1878 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 656.548198][T12277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 656.548207][T12277] Call Trace: [ 656.548213][T12277] [ 656.548221][T12277] dump_stack_lvl+0x16c/0x1f0 [ 656.548250][T12277] should_fail_ex+0x512/0x640 [ 656.548284][T12277] _copy_from_iter+0x29f/0x16f0 [ 656.548318][T12277] ? __pfx__copy_from_iter+0x10/0x10 [ 656.548344][T12277] ? rcu_is_watching+0x12/0xc0 [ 656.548363][T12277] ? trace_kmalloc+0x2b/0xd0 [ 656.548385][T12277] ? __kvmalloc_node_noprof+0x296/0x620 [ 656.548402][T12277] ? preempt_schedule_thunk+0x16/0x30 [ 656.548425][T12277] ? proc_sys_call_handler+0x2a6/0x5c0 [ 656.548456][T12277] proc_sys_call_handler+0x317/0x5c0 [ 656.548484][T12277] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 656.548514][T12277] ? __lock_acquire+0xb8a/0x1c90 [ 656.548540][T12277] do_iter_readv_writev+0x556/0x820 [ 656.548561][T12277] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 656.548591][T12277] vfs_writev+0x35f/0xde0 [ 656.548607][T12277] ? __pfx___mutex_trylock_common+0x10/0x10 [ 656.548638][T12277] ? __pfx_vfs_writev+0x10/0x10 [ 656.548655][T12277] ? __mutex_lock+0x1ca/0xb90 [ 656.548684][T12277] ? __pfx___mutex_lock+0x10/0x10 [ 656.548723][T12277] ? __fget_files+0x20e/0x3c0 [ 656.548742][T12277] ? __fget_files+0x170/0x3c0 [ 656.548769][T12277] ? do_writev+0x132/0x340 [ 656.548784][T12277] do_writev+0x132/0x340 [ 656.548801][T12277] ? __pfx_do_writev+0x10/0x10 [ 656.548827][T12277] do_syscall_64+0xcd/0x4c0 [ 656.548853][T12277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.548871][T12277] RIP: 0033:0x7fa27a58e969 [ 656.548887][T12277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.548904][T12277] RSP: 002b:00007fa27b3c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 656.548921][T12277] RAX: ffffffffffffffda RBX: 00007fa27a7b6160 RCX: 00007fa27a58e969 [ 656.548933][T12277] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 656.548948][T12277] RBP: 00007fa27b3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 656.548959][T12277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.548969][T12277] R13: 0000000000000000 R14: 00007fa27a7b6160 R15: 00007ffefaa84f48 [ 656.548996][T12277] [ 656.782161][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.299160][ T30] audit: type=1400 audit(2000000004.170:415): avc: denied { create } for pid=12280 comm="syz.1.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 657.325495][ T24] usb 4-1: USB disconnect, device number 39 [ 658.548623][T12296] tmpfs: Unknown parameter 'usrquota_block' [ 658.919205][ T5864] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 659.062629][T12302] overlayfs: missing 'lowerdir' [ 659.091443][ T5864] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 659.108650][ T5864] usb 1-1: config 0 has no interface number 0 [ 659.130629][ T5864] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 659.289045][ T5864] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 659.300325][ T5864] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 659.309507][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.319957][ T5864] usb 1-1: config 0 descriptor?? [ 659.325592][T12295] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 659.336795][ T5864] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 659.700993][ T5863] usb 1-1: USB disconnect, device number 38 [ 660.160110][ T5863] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 660.339080][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 660.407414][ T5863] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 660.450104][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.580458][ T5863] usb 2-1: config 0 descriptor?? [ 660.617331][T12312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 661.059927][ T5864] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 661.278274][ T5863] elan 0003:04F3:0755.0019: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 661.365588][ T5864] usb 5-1: device descriptor read/64, error -71 [ 661.680431][ T5864] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 662.017595][ T5864] usb 5-1: device descriptor read/64, error -71 [ 663.252524][ T5864] usb usb5-port1: attempt power cycle [ 664.299912][ T24] usb 2-1: reset full-speed USB device number 28 using dummy_hcd [ 665.068600][T12330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1895'. [ 665.077859][T12330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.085137][T12330] IPv6: NLM_F_CREATE should be set when creating new route [ 665.092358][T12330] IPv6: NLM_F_CREATE should be set when creating new route [ 665.330903][T12353] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 665.593734][T12330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1895'. [ 665.602831][T12330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.620845][ T5863] usb 2-1: USB disconnect, device number 28 [ 665.773508][ T5863] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 665.899938][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 666.098585][ T5863] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 666.111694][ T24] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.130317][T12366] tmpfs: Unknown parameter 'usrquota_block' [ 666.131856][ T5863] usb 2-1: config 0 has no interface number 0 [ 666.156165][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 666.163160][ T5863] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 666.174301][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 666.187806][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.196626][ T5863] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 666.211179][ T24] usb 1-1: config 0 descriptor?? [ 666.216204][ T5863] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 666.225742][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.240325][ T5863] usb 2-1: config 0 descriptor?? [ 666.246062][T12351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 666.256872][ T5863] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 666.560289][ T5864] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 666.750508][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 666.872663][ T5864] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 667.016841][ T5864] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 667.034667][ T5864] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 667.039483][ T24] apple 0003:05AC:027A.001A: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 667.046918][ T5864] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.058419][ T24] usb 1-1: USB disconnect, device number 39 [ 667.076905][ T5864] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 667.082042][ T5863] usb 2-1: USB disconnect, device number 29 [ 667.159553][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.494923][ T5864] usb 4-1: GET_CAPABILITIES returned 0 [ 667.506862][ T5864] usbtmc 4-1:16.0: can't read capabilities [ 668.065320][T12382] fuse: Bad value for 'fd' [ 668.665013][T12393] netlink: 'syz.0.1912': attribute type 1 has an invalid length. [ 668.673944][T12393] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1912'. [ 668.684446][T12393] netlink: 'syz.0.1912': attribute type 1 has an invalid length. [ 668.693992][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'. [ 669.515260][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 669.535464][ T5863] usb 4-1: USB disconnect, device number 40 [ 669.710000][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 669.721261][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 669.731001][ T30] audit: type=1400 audit(2000000001.990:416): avc: denied { write } for pid=12402 comm="syz.4.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 669.780966][T12405] FAULT_INJECTION: forcing a failure. [ 669.780966][T12405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.811214][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 669.819953][T12405] CPU: 0 UID: 0 PID: 12405 Comm: syz.3.1916 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 669.819976][T12405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 669.819986][T12405] Call Trace: [ 669.819992][T12405] [ 669.819998][T12405] dump_stack_lvl+0x16c/0x1f0 [ 669.820023][T12405] should_fail_ex+0x512/0x640 [ 669.820048][T12405] _copy_to_iter+0x463/0x16f0 [ 669.820078][T12405] ? __pfx__copy_to_iter+0x10/0x10 [ 669.820100][T12405] ? do_raw_spin_unlock+0x172/0x230 [ 669.820124][T12405] ? _raw_spin_unlock+0x28/0x50 [ 669.820140][T12405] ? traverse.part.0.constprop.0+0x2c5/0x640 [ 669.820165][T12405] seq_read_iter+0x719/0x12c0 [ 669.820183][T12405] ? _kstrtoull+0x145/0x200 [ 669.820206][T12405] seq_read+0x39e/0x4e0 [ 669.820222][T12405] ? __pfx_seq_read+0x10/0x10 [ 669.820238][T12405] ? copy_iovec_from_user+0x131/0x170 [ 669.820263][T12405] ? iovec_from_user+0xbb/0x140 [ 669.820279][T12405] ? avc_policy_seqno+0x9/0x20 [ 669.820299][T12405] ? __pfx_seq_read+0x10/0x10 [ 669.820315][T12405] proc_reg_read+0x240/0x330 [ 669.820338][T12405] ? __pfx_proc_reg_read+0x10/0x10 [ 669.820357][T12405] vfs_readv+0x5c1/0x8b0 [ 669.820378][T12405] ? __pfx_vfs_readv+0x10/0x10 [ 669.820394][T12405] ? find_held_lock+0x2b/0x80 [ 669.820422][T12405] ? __fget_files+0x20e/0x3c0 [ 669.820446][T12405] ? do_preadv+0x1a6/0x270 [ 669.820459][T12405] do_preadv+0x1a6/0x270 [ 669.820475][T12405] ? __pfx_do_preadv+0x10/0x10 [ 669.820505][T12405] do_syscall_64+0xcd/0x4c0 [ 669.820527][T12405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.820542][T12405] RIP: 0033:0x7f6cd6f8e969 [ 669.820556][T12405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.820570][T12405] RSP: 002b:00007f6cd7e6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 669.820585][T12405] RAX: ffffffffffffffda RBX: 00007f6cd71b5fa0 RCX: 00007f6cd6f8e969 [ 669.820595][T12405] RDX: 0000000000000003 RSI: 00002000000005c0 RDI: 0000000000000004 [ 669.820609][T12405] RBP: 00007f6cd7e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 669.820618][T12405] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 669.820627][T12405] R13: 0000000000000000 R14: 00007f6cd71b5fa0 R15: 00007ffcfc854f68 [ 669.820648][T12405] [ 670.052532][ T5861] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 670.052662][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 670.070169][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.083496][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 670.092593][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.200665][ T5864] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 670.220148][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 670.226488][ T5861] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 670.239898][ T5861] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 670.252981][ T5861] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 670.262978][ T5861] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.297006][ T5861] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 670.322970][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.349968][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 670.356569][ T5864] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 670.398725][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 670.402802][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 670.432676][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 670.473773][T12416] kvm: user requested TSC rate below hardware speed [ 670.883663][ T24] usbtmc 1-1:16.0: can't read capabilities [ 671.419747][ T5864] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.437027][ T5864] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 671.446110][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.607820][ T5861] usb 3-1: GET_CAPABILITIES returned 0 [ 671.949441][ T5861] usbtmc 3-1:16.0: can't read capabilities [ 672.647808][ T5864] usb 5-1: GET_CAPABILITIES returned 0 [ 672.675938][ T5864] usbtmc 5-1:16.0: can't read capabilities [ 673.063258][ T24] usb 1-1: USB disconnect, device number 40 [ 673.145543][T12437] netlink: 'syz.3.1923': attribute type 1 has an invalid length. [ 673.154450][T12437] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1923'. [ 673.177124][T12438] tmpfs: Unknown parameter 'usrquota_block' [ 673.180115][T12437] netlink: 'syz.3.1923': attribute type 1 has an invalid length. [ 673.196785][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 673.926600][ T24] usb 3-1: USB disconnect, device number 44 [ 674.170160][ T5863] usb 5-1: USB disconnect, device number 36 [ 675.416135][T12471] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 675.424112][T12471] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1936'. [ 675.433373][T12471] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 675.442362][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 675.486738][T12473] netlink: 'syz.3.1937': attribute type 1 has an invalid length. [ 675.495490][T12473] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1937'. [ 675.504611][ T5864] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 675.513287][T12473] netlink: 'syz.3.1937': attribute type 1 has an invalid length. [ 675.524842][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1937'. [ 675.539940][ T5866] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 675.670755][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 675.678918][ T5864] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 675.688853][ T5864] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 675.703544][ T5864] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 675.715701][ T5864] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.743869][ T5866] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 675.754339][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.762703][ T5864] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 675.793362][ T5866] usb 5-1: Product: syz [ 675.811601][ T5866] usb 5-1: Manufacturer: syz [ 675.818297][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.844952][ T5866] usb 5-1: SerialNumber: syz [ 675.942539][ T5866] usb 5-1: config 0 descriptor?? [ 676.156232][ T5864] usb 2-1: GET_CAPABILITIES returned 0 [ 676.165166][ T5864] usbtmc 2-1:16.0: can't read capabilities [ 676.349921][ T5861] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 676.537240][ T5866] usb 5-1: Firmware: major: 0, minor: 97, hardware type: ATUSB (0) [ 676.560022][ T5908] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 677.128945][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 677.144394][ T5861] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 677.197081][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 677.210108][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 677.241710][ T5908] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 677.282895][ T5908] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 677.283893][ T5866] usb 5-1: failed to fetch extended address, random address set [ 677.302836][ T5908] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 677.313296][ T5908] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.313416][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 677.337163][ T5908] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 677.349149][ T5861] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.353902][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.548067][ T5861] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 677.557206][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.567314][ T5866] usb 5-1: USB disconnect, device number 37 [ 677.789746][ T5908] usb 3-1: GET_CAPABILITIES returned 0 [ 677.793373][ T5861] usb 1-1: GET_CAPABILITIES returned 0 [ 677.795820][ T5908] usbtmc 3-1:16.0: can't read capabilities [ 677.811441][ T5861] usbtmc 1-1:16.0: can't read capabilities [ 678.487101][ T5908] usb 2-1: USB disconnect, device number 30 [ 678.627569][ T24] usb 1-1: USB disconnect, device number 41 [ 679.763325][ T5866] usb 3-1: USB disconnect, device number 45 [ 680.257981][T12527] lo speed is unknown, defaulting to 1000 [ 680.685298][T12517] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 680.716196][T12517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 680.727228][T12517] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 680.803213][T12517] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 681.024722][T12545] FAULT_INJECTION: forcing a failure. [ 681.024722][T12545] name failslab, interval 1, probability 0, space 0, times 0 [ 681.038375][T12545] CPU: 0 UID: 0 PID: 12545 Comm: syz.1.1958 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 681.038399][T12545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.038410][T12545] Call Trace: [ 681.038416][T12545] [ 681.038423][T12545] dump_stack_lvl+0x16c/0x1f0 [ 681.038451][T12545] should_fail_ex+0x512/0x640 [ 681.038481][T12545] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 681.038505][T12545] should_failslab+0xc2/0x120 [ 681.038527][T12545] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 681.038547][T12545] ? io_submit_one+0x122/0x1df0 [ 681.038572][T12545] io_submit_one+0x122/0x1df0 [ 681.038595][T12545] ? __lock_acquire+0xb8a/0x1c90 [ 681.038622][T12545] ? __pfx_io_submit_one+0x10/0x10 [ 681.038651][T12545] ? __might_fault+0xe3/0x190 [ 681.038669][T12545] ? __might_fault+0x13b/0x190 [ 681.038694][T12545] ? __x64_sys_io_submit+0x1a9/0x350 [ 681.038714][T12545] __x64_sys_io_submit+0x1a9/0x350 [ 681.038738][T12545] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 681.038758][T12545] ? fput+0x70/0xf0 [ 681.038793][T12545] do_syscall_64+0xcd/0x4c0 [ 681.038818][T12545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.038835][T12545] RIP: 0033:0x7fd282f8e969 [ 681.038850][T12545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.038866][T12545] RSP: 002b:00007fd280dd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 681.038883][T12545] RAX: ffffffffffffffda RBX: 00007fd2831b6080 RCX: 00007fd282f8e969 [ 681.038895][T12545] RDX: 0000200000000500 RSI: 0000000000000001 RDI: 00007fd283cee000 [ 681.038905][T12545] RBP: 00007fd280dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 681.038916][T12545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.038926][T12545] R13: 0000000000000000 R14: 00007fd2831b6080 R15: 00007ffd834f1738 [ 681.038950][T12545] [ 681.258299][T12549] 9pnet_fd: Insufficient options for proto=fd [ 681.274739][ T30] audit: type=1400 audit(2000000002.590:417): avc: denied { ioctl } for pid=12548 comm="syz.3.1961" path="socket:[37797]" dev="sockfs" ino=37797 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 681.354416][T12550] FAULT_INJECTION: forcing a failure. [ 681.354416][T12550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.368075][T12550] CPU: 1 UID: 0 PID: 12550 Comm: syz.0.1957 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 681.368099][T12550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.368109][T12550] Call Trace: [ 681.368116][T12550] [ 681.368123][T12550] dump_stack_lvl+0x16c/0x1f0 [ 681.368151][T12550] should_fail_ex+0x512/0x640 [ 681.368180][T12550] _copy_from_user+0x2e/0xd0 [ 681.368209][T12550] copy_from_sockptr_offset+0x15c/0x1b0 [ 681.368236][T12550] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 681.368264][T12550] ? __local_bh_enable_ip+0xa4/0x120 [ 681.368286][T12550] tls_setsockopt+0xc6d/0x19d0 [ 681.368315][T12550] ? __pfx_tls_setsockopt+0x10/0x10 [ 681.368344][T12550] ? __lock_acquire+0x622/0x1c90 [ 681.368373][T12550] ? selinux_socket_setsockopt+0x6a/0x80 [ 681.368395][T12550] ? sock_common_setsockopt+0x2e/0xf0 [ 681.368423][T12550] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 681.368450][T12550] do_sock_setsockopt+0x224/0x470 [ 681.368475][T12550] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 681.368517][T12550] __sys_setsockopt+0x1a0/0x230 [ 681.368543][T12550] __x64_sys_setsockopt+0xbd/0x160 [ 681.368562][T12550] ? do_syscall_64+0x91/0x4c0 [ 681.368584][T12550] ? lockdep_hardirqs_on+0x7c/0x110 [ 681.368605][T12550] do_syscall_64+0xcd/0x4c0 [ 681.368629][T12550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.368648][T12550] RIP: 0033:0x7f3c4738e969 [ 681.368663][T12550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.368680][T12550] RSP: 002b:00007f3c48291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 681.368697][T12550] RAX: ffffffffffffffda RBX: 00007f3c475b6160 RCX: 00007f3c4738e969 [ 681.368714][T12550] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000008 [ 681.368724][T12550] RBP: 00007f3c48291090 R08: 0000000000000028 R09: 0000000000000000 [ 681.368735][T12550] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 681.368746][T12550] R13: 0000000000000000 R14: 00007f3c475b6160 R15: 00007fffbf89e4d8 [ 681.368770][T12550] [ 681.579904][ T30] audit: type=1326 audit(2000000002.890:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.1957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c4738e969 code=0x0 [ 681.649374][ T30] audit: type=1400 audit(2000000002.960:419): avc: denied { accept } for pid=12548 comm="syz.3.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 681.920053][ T5135] Bluetooth: hci1: command 0x0c1a tx timeout [ 682.219457][T12565] netlink: 'syz.2.1966': attribute type 1 has an invalid length. [ 682.291335][T12565] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1966'. [ 682.341558][T12565] netlink: 'syz.2.1966': attribute type 1 has an invalid length. [ 682.517711][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 682.624769][T12573] FAULT_INJECTION: forcing a failure. [ 682.624769][T12573] name failslab, interval 1, probability 0, space 0, times 0 [ 682.637476][T12573] CPU: 1 UID: 0 PID: 12573 Comm: syz.4.1969 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 682.637501][T12573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 682.637512][T12573] Call Trace: [ 682.637519][T12573] [ 682.637527][T12573] dump_stack_lvl+0x16c/0x1f0 [ 682.637555][T12573] should_fail_ex+0x512/0x640 [ 682.637580][T12573] ? fs_reclaim_acquire+0xae/0x150 [ 682.637608][T12573] ? tomoyo_encode2+0x100/0x3e0 [ 682.637633][T12573] should_failslab+0xc2/0x120 [ 682.637656][T12573] __kmalloc_noprof+0xd2/0x510 [ 682.637682][T12573] tomoyo_encode2+0x100/0x3e0 [ 682.637713][T12573] tomoyo_encode+0x29/0x50 [ 682.637737][T12573] tomoyo_realpath_from_path+0x18f/0x6e0 [ 682.637767][T12573] ? tomoyo_profile+0x47/0x60 [ 682.637788][T12573] tomoyo_path_number_perm+0x245/0x580 [ 682.637810][T12573] ? tomoyo_path_number_perm+0x237/0x580 [ 682.637836][T12573] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 682.637859][T12573] ? find_held_lock+0x2b/0x80 [ 682.637901][T12573] ? find_held_lock+0x2b/0x80 [ 682.637918][T12573] ? hook_file_ioctl_common+0x145/0x410 [ 682.637943][T12573] ? __fget_files+0x20e/0x3c0 [ 682.637970][T12573] security_file_ioctl+0x9b/0x240 [ 682.637998][T12573] __x64_sys_ioctl+0xb7/0x210 [ 682.638029][T12573] do_syscall_64+0xcd/0x4c0 [ 682.638054][T12573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.638073][T12573] RIP: 0033:0x7fa27a58e969 [ 682.638088][T12573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.638105][T12573] RSP: 002b:00007fa27b3e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.638124][T12573] RAX: ffffffffffffffda RBX: 00007fa27a7b6080 RCX: 00007fa27a58e969 [ 682.638136][T12573] RDX: 0000200000000000 RSI: 00000000c020aa04 RDI: 0000000000000003 [ 682.638148][T12573] RBP: 00007fa27b3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 682.638159][T12573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.638171][T12573] R13: 0000000000000000 R14: 00007fa27a7b6080 R15: 00007ffefaa84f48 [ 682.638195][T12573] [ 682.638276][T12573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 683.431432][ T5135] Bluetooth: hci2: command 0x0c1a tx timeout [ 683.439576][ T5135] Bluetooth: hci3: command 0x0c1a tx timeout [ 683.446031][ T5135] Bluetooth: hci4: command 0x0c1a tx timeout [ 683.782019][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1980'. [ 683.793421][T12596] tipc: Started in network mode [ 683.798509][T12596] tipc: Node identity 7, cluster identity 5 [ 683.809272][T12596] tipc: Node number set to 7 [ 683.930093][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 684.080092][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 684.088405][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 684.098236][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 684.108123][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 684.118200][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.131632][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 684.140744][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.249952][ T5866] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 684.357206][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 684.362949][ T24] usbtmc 4-1:16.0: can't read capabilities [ 684.421391][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 684.437900][ T5866] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 684.447596][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.459683][ T5866] usb 2-1: config 0 descriptor?? [ 684.465244][T12602] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 685.264099][ T5866] elan 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 685.282745][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.394781][T12618] Invalid ELF header type: 0 != 1 [ 686.448235][T12638] lo speed is unknown, defaulting to 1000 [ 686.933057][ T24] usb 4-1: USB disconnect, device number 41 [ 687.028230][ T5864] usb 2-1: reset full-speed USB device number 31 using dummy_hcd [ 687.036136][ T5866] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 687.198219][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 687.871130][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 687.883040][ T5866] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 687.892144][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.914527][ T5866] usb 3-1: config 0 descriptor?? [ 687.961844][T12635] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 688.091283][ T5861] usb 2-1: USB disconnect, device number 31 [ 688.490126][ T5866] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 688.553451][ T5864] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 689.478747][T12683] kvm: user requested TSC rate below hardware speed [ 689.603946][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 689.611007][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.743190][ T5864] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 689.756871][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.772542][ T5133] usb 3-1: reset full-speed USB device number 46 using dummy_hcd [ 689.785637][ T5864] usb 1-1: Product: syz [ 689.793993][ T5864] usb 1-1: Manufacturer: syz [ 689.804822][ T5864] usb 1-1: SerialNumber: syz [ 689.817471][ T5864] usb 1-1: config 0 descriptor?? [ 689.841849][ T5864] usb 1-1: bad CDC descriptors [ 689.857807][ T5864] usb 1-1: unsupported MDLM descriptors [ 689.959594][ T30] audit: type=1400 audit(2000000011.270:420): avc: denied { map } for pid=12686 comm="syz.4.2008" path="socket:[39275]" dev="sockfs" ino=39275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 690.046558][ T5864] usb 1-1: USB disconnect, device number 42 [ 690.317323][T12687] tipc: Started in network mode [ 690.322403][T12687] tipc: Node identity ac14140f, cluster identity 4711 [ 690.329686][T12687] tipc: New replicast peer: 172.30.1.5 [ 690.335409][T12687] tipc: Enabled bearer , priority 10 [ 690.547166][ T5866] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 690.972911][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 691.000636][ T5866] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 691.027938][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.047214][ T5866] usb 2-1: config 0 descriptor?? [ 691.057467][T12691] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 691.256949][T12711] tmpfs: Unknown parameter 'usrquota_block' [ 691.432610][T12713] FAULT_INJECTION: forcing a failure. [ 691.432610][T12713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.445776][T12713] CPU: 1 UID: 0 PID: 12713 Comm: syz.4.2016 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 691.445799][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 691.445810][T12713] Call Trace: [ 691.445817][T12713] [ 691.445824][T12713] dump_stack_lvl+0x16c/0x1f0 [ 691.445852][T12713] should_fail_ex+0x512/0x640 [ 691.445882][T12713] _copy_from_user+0x2e/0xd0 [ 691.445911][T12713] copy_msghdr_from_user+0x98/0x160 [ 691.445934][T12713] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 691.445968][T12713] ___sys_sendmsg+0xfe/0x1d0 [ 691.445991][T12713] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.446012][T12713] ? __lock_acquire+0x622/0x1c90 [ 691.446066][T12713] __sys_sendmsg+0x16d/0x220 [ 691.446088][T12713] ? __pfx___sys_sendmsg+0x10/0x10 [ 691.446127][T12713] do_syscall_64+0xcd/0x4c0 [ 691.446152][T12713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.446171][T12713] RIP: 0033:0x7fa27a58e969 [ 691.446185][T12713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.446207][T12713] RSP: 002b:00007fa27b3c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.446224][T12713] RAX: ffffffffffffffda RBX: 00007fa27a7b6160 RCX: 00007fa27a58e969 [ 691.446236][T12713] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 691.446247][T12713] RBP: 00007fa27b3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 691.446258][T12713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.446269][T12713] R13: 0000000000000000 R14: 00007fa27a7b6160 R15: 00007ffefaa84f48 [ 691.446296][T12713] [ 691.612133][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.802988][ T5866] elan 0003:04F3:0755.001D: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 691.983070][ T1204] tipc: Node number set to 2886997007 [ 691.988892][ T5866] usb 2-1: USB disconnect, device number 32 [ 691.989405][ T5863] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 692.199917][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 692.212356][ T5863] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 692.406026][T12717] kvm: user requested TSC rate below hardware speed [ 692.610145][ T5861] usb 3-1: USB disconnect, device number 46 [ 692.675727][ T5863] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 692.685724][ T5863] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 692.702553][ T5863] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.719556][ T5863] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 692.728841][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.950819][ T5863] usb 1-1: GET_CAPABILITIES returned 0 [ 692.956339][ T5863] usbtmc 1-1:16.0: can't read capabilities [ 693.966271][T12729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.200287][ T5866] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 694.389921][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 694.470177][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 694.485025][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 694.503174][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 694.516464][ T5866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.534154][ T5866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 694.544450][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.777387][ T30] audit: type=1400 audit(2000000016.090:421): avc: denied { getopt } for pid=12749 comm="syz.3.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 694.952079][T12752] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 694.975494][ T5866] usb 3-1: GET_CAPABILITIES returned 0 [ 695.958320][ T5866] usbtmc 3-1:16.0: can't read capabilities [ 696.132537][ T5866] usb 1-1: USB disconnect, device number 43 [ 696.350969][T12731] fuse: Bad value for 'fd' [ 696.365709][ T30] audit: type=1400 audit(2000000017.540:422): avc: denied { connect } for pid=12764 comm="syz.4.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 697.206083][ T30] audit: type=1400 audit(2000000018.490:423): avc: denied { setopt } for pid=12767 comm="syz.0.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 697.353753][T12776] FAULT_INJECTION: forcing a failure. [ 697.353753][T12776] name failslab, interval 1, probability 0, space 0, times 0 [ 697.435147][T12776] CPU: 1 UID: 0 PID: 12776 Comm: syz.4.2034 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 697.435173][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 697.435184][T12776] Call Trace: [ 697.435190][T12776] [ 697.435197][T12776] dump_stack_lvl+0x16c/0x1f0 [ 697.435226][T12776] should_fail_ex+0x512/0x640 [ 697.435249][T12776] ? fs_reclaim_acquire+0xae/0x150 [ 697.435275][T12776] ? tomoyo_encode2+0x100/0x3e0 [ 697.435299][T12776] should_failslab+0xc2/0x120 [ 697.435322][T12776] __kmalloc_noprof+0xd2/0x510 [ 697.435341][T12776] ? d_absolute_path+0x136/0x1a0 [ 697.435370][T12776] tomoyo_encode2+0x100/0x3e0 [ 697.435396][T12776] tomoyo_encode+0x29/0x50 [ 697.435418][T12776] tomoyo_realpath_from_path+0x18f/0x6e0 [ 697.435452][T12776] tomoyo_path_number_perm+0x245/0x580 [ 697.435474][T12776] ? tomoyo_path_number_perm+0x237/0x580 [ 697.435498][T12776] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 697.435522][T12776] ? find_held_lock+0x2b/0x80 [ 697.435564][T12776] ? find_held_lock+0x2b/0x80 [ 697.435581][T12776] ? hook_file_ioctl_common+0x145/0x410 [ 697.435607][T12776] ? __fget_files+0x20e/0x3c0 [ 697.435633][T12776] security_file_ioctl+0x9b/0x240 [ 697.435660][T12776] __x64_sys_ioctl+0xb7/0x210 [ 697.435690][T12776] do_syscall_64+0xcd/0x4c0 [ 697.435715][T12776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.435733][T12776] RIP: 0033:0x7fa27a58e969 [ 697.435748][T12776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.435765][T12776] RSP: 002b:00007fa27b408038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.435783][T12776] RAX: ffffffffffffffda RBX: 00007fa27a7b5fa0 RCX: 00007fa27a58e969 [ 697.435795][T12776] RDX: 00002000000003c0 RSI: 000000004008af30 RDI: 0000000000000005 [ 697.435806][T12776] RBP: 00007fa27b408090 R08: 0000000000000000 R09: 0000000000000000 [ 697.435816][T12776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.435827][T12776] R13: 0000000000000000 R14: 00007fa27a7b5fa0 R15: 00007ffefaa84f48 [ 697.435853][T12776] [ 697.435869][T12776] ERROR: Out of memory at tomoyo_realpath_from_path. [ 697.459515][T10284] usb 3-1: USB disconnect, device number 47 [ 699.005206][T12802] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 699.546901][ T5908] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 699.757355][T12810] lo speed is unknown, defaulting to 1000 [ 700.343478][ T5908] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.559645][ T5908] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 700.641426][ T5908] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.654744][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.678257][ T5908] usb 2-1: Product: syz [ 700.684208][ T5908] usb 2-1: Manufacturer: syz [ 700.719098][ T5908] usb 2-1: SerialNumber: syz [ 700.768341][ T5908] cdc_mbim 2-1:1.0: skipping garbage [ 700.796767][T12827] random: crng reseeded on system resumption [ 700.836595][ T30] audit: type=1400 audit(2000000022.150:424): avc: denied { ioctl } for pid=12821 comm="syz.0.2048" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 700.866252][T12822] xt_CT: No such helper "pptp" [ 700.871848][ T5866] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 700.917119][T12822] lo speed is unknown, defaulting to 1000 [ 701.011101][T12794] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 701.035535][ T5133] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 701.072548][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.111072][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.143330][ T5866] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 701.588542][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.603904][ T5133] usb 5-1: Using ep0 maxpacket: 8 [ 701.609771][ T5866] usb 4-1: config 0 descriptor?? [ 701.617131][ T5133] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 701.630166][ T5133] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 701.640216][ T5133] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 701.650178][ T5133] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.663271][ T5133] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 701.680500][ T5133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.765556][ T5908] cdc_mbim 2-1:1.0: bind() failure [ 701.774738][ T5908] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 701.783478][ T5908] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 701.792579][ T5908] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 701.805578][ T5908] usb 2-1: USB disconnect, device number 33 [ 701.904501][ T5133] usb 5-1: GET_CAPABILITIES returned 0 [ 701.910374][ T5133] usbtmc 5-1:16.0: can't read capabilities [ 702.021688][ T5866] isku 0003:1E7D:319C.001E: item fetching failed at offset 5/7 [ 702.032195][ T5866] isku 0003:1E7D:319C.001E: parse failed [ 702.037836][ T5866] isku 0003:1E7D:319C.001E: probe with driver isku failed with error -22 [ 702.235945][T12816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.245176][T12816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.260247][ T5908] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 702.280368][T12816] loop8: detected capacity change from 0 to 1 [ 702.338418][T12816] Dev loop8: unable to read RDB block 1 [ 702.351800][T12816] loop8: unable to read partition table [ 702.372248][T12816] loop8: partition table beyond EOD, truncated [ 702.380664][T12816] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 702.465559][ T5908] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 702.496187][ T5908] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 702.587303][ T1204] usb 4-1: USB disconnect, device number 42 [ 702.605050][ T5908] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 702.716087][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.738922][ T5908] usb 2-1: Product: syz [ 702.748525][ T5908] usb 2-1: Manufacturer: syz [ 702.758848][ T5908] usb 2-1: SerialNumber: syz [ 702.855299][T12837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 703.140657][T12837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.153994][T12837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.860773][ T5863] usb 5-1: USB disconnect, device number 38 [ 704.324548][ T5908] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 704.345112][ T5908] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 704.382157][ T5908] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 704.493023][ T5863] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 704.539809][ T5908] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 704.650534][ T5863] usb 4-1: device descriptor read/64, error -71 [ 704.776440][ T5908] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 704.809331][ T5908] usb 2-1: USB disconnect, device number 34 [ 704.826168][ T5908] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 704.954942][T12872] x_tables: duplicate underflow at hook 3 [ 705.030098][ T5863] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 705.249947][ T5863] usb 4-1: device descriptor read/64, error -71 [ 705.372034][ T5863] usb usb4-port1: attempt power cycle [ 705.604801][T12888] vivid-000: ================= START STATUS ================= [ 705.612908][T12888] vivid-000: Interlaced VBI Format: false [ 705.618788][T12888] vivid-000: ================== END STATUS ================== [ 705.630088][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 705.719962][ T5863] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 705.740571][ T5863] usb 4-1: device descriptor read/8, error -71 [ 705.749899][ T5866] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 705.779901][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 705.786223][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 705.796204][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 705.805971][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 705.815935][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.829208][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 705.838629][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.980063][ T5863] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 706.004710][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 706.015979][ T5866] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 706.019967][ T5863] usb 4-1: device descriptor read/8, error -71 [ 706.026142][ T5866] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 706.042769][ T5866] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 706.052698][ T5866] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.065697][ T5866] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 706.068985][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 706.074826][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.450317][ T5866] usb 1-1: GET_CAPABILITIES returned 0 [ 706.610427][ T5866] usbtmc 1-1:16.0: can't read capabilities [ 706.875299][ T5863] usb usb4-port1: unable to enumerate USB device [ 706.883002][ T24] usbtmc 2-1:16.0: can't read capabilities [ 707.356690][T12910] lo speed is unknown, defaulting to 1000 [ 708.151153][T12918] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 708.624290][ T24] usb 2-1: USB disconnect, device number 35 [ 709.390904][ T30] audit: type=1400 audit(2000000030.460:425): avc: denied { mount } for pid=12924 comm="syz.2.2075" name="/" dev="autofs" ino=39732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 709.742317][ T30] audit: type=1400 audit(2000000031.030:426): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 709.871597][ T5863] usb 1-1: USB disconnect, device number 44 [ 709.985408][ T30] audit: type=1400 audit(2000000031.290:427): avc: denied { bind } for pid=12944 comm="syz.4.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 710.231491][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2080'. [ 710.452263][T12959] lo speed is unknown, defaulting to 1000 [ 710.916435][ T5133] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 711.068384][T12965] FAULT_INJECTION: forcing a failure. [ 711.068384][T12965] name failslab, interval 1, probability 0, space 0, times 0 [ 711.079908][ T5133] usb 3-1: Using ep0 maxpacket: 8 [ 711.086199][T12965] CPU: 0 UID: 0 PID: 12965 Comm: syz.3.2089 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 711.086224][T12965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 711.086235][T12965] Call Trace: [ 711.086241][T12965] [ 711.086248][T12965] dump_stack_lvl+0x16c/0x1f0 [ 711.086280][T12965] should_fail_ex+0x512/0x640 [ 711.086305][T12965] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 711.086328][T12965] should_failslab+0xc2/0x120 [ 711.086351][T12965] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 711.086371][T12965] ? alloc_empty_file+0x55/0x1e0 [ 711.086400][T12965] alloc_empty_file+0x55/0x1e0 [ 711.086425][T12965] path_openat+0xda/0x2cb0 [ 711.086445][T12965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.086473][T12965] ? __pfx_path_openat+0x10/0x10 [ 711.086496][T12965] ? __lock_acquire+0xb8a/0x1c90 [ 711.086522][T12965] do_filp_open+0x20b/0x470 [ 711.086543][T12965] ? __pfx_do_filp_open+0x10/0x10 [ 711.086582][T12965] ? alloc_fd+0x471/0x7d0 [ 711.086608][T12965] do_sys_openat2+0x11b/0x1d0 [ 711.086632][T12965] ? __pfx_do_sys_openat2+0x10/0x10 [ 711.086659][T12965] ? __fget_files+0x20e/0x3c0 [ 711.086683][T12965] __x64_sys_openat+0x174/0x210 [ 711.086708][T12965] ? __pfx___x64_sys_openat+0x10/0x10 [ 711.086732][T12965] ? ksys_write+0x1ac/0x250 [ 711.086760][T12965] do_syscall_64+0xcd/0x4c0 [ 711.086785][T12965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.086803][T12965] RIP: 0033:0x7f6cd6f8d2d0 [ 711.086818][T12965] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 711.086835][T12965] RSP: 002b:00007f6cd7e6df70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 711.086853][T12965] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6cd6f8d2d0 [ 711.086866][T12965] RDX: 0000000000000000 RSI: 00007f6cd7010bc9 RDI: 00000000ffffff9c [ 711.086878][T12965] RBP: 00007f6cd7010bc9 R08: 0000000000000000 R09: 0000000000000000 [ 711.086889][T12965] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 711.086900][T12965] R13: 0000000000000001 R14: 00007f6cd71b5fa0 R15: 00007ffcfc854f68 [ 711.086930][T12965] [ 711.088241][ T5133] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 711.320245][ T5133] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 711.330221][ T5133] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 711.352952][ T5133] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.366518][ T5133] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 711.390026][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.521143][ T30] audit: type=1400 audit(2000000032.810:428): avc: denied { accept } for pid=12975 comm="syz.0.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 711.542003][T12979] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2093'. [ 711.647788][ T30] audit: type=1400 audit(2000000032.960:429): avc: denied { connect } for pid=12977 comm="syz.3.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 711.714162][ T30] audit: type=1400 audit(2000000032.980:430): avc: denied { read } for pid=12977 comm="syz.3.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 711.793528][ T5133] usb 3-1: GET_CAPABILITIES returned 0 [ 711.799050][ T5133] usbtmc 3-1:16.0: can't read capabilities [ 711.829942][T10284] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 711.992076][T10284] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 712.003628][T10284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.013958][T10284] usb 5-1: config 0 descriptor?? [ 712.022225][T10284] cp210x 5-1:0.0: cp210x converter detected [ 712.144838][ T1204] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 712.299930][ T1204] usb 1-1: Using ep0 maxpacket: 16 [ 712.306795][ T1204] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.317078][ T1204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 712.328646][ T1204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 712.338326][ T1204] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 712.348034][ T1204] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 712.422603][ T1204] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 712.432436][ T1204] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 712.432644][T10284] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 712.440793][ T1204] usb 1-1: Manufacturer: syz [ 712.458628][ T1204] usb 1-1: config 0 descriptor?? [ 712.461328][T10284] usb 5-1: cp210x converter now attached to ttyUSB0 [ 712.687108][T12992] netlink: 'syz.0.2097': attribute type 28 has an invalid length. [ 712.695218][T12992] netlink: 'syz.0.2097': attribute type 3 has an invalid length. [ 712.703157][T12992] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2097'. [ 712.870191][ T5863] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 713.058931][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 713.117532][ T5863] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 713.140033][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.169984][ T5863] usb 4-1: config 0 descriptor?? [ 713.178025][T13008] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 713.360496][ T1204] rc_core: IR keymap rc-hauppauge not found [ 713.366426][ T1204] Registered IR keymap rc-empty [ 713.371777][ T1204] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.389945][ T1204] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.421439][ T1204] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 713.434336][ T1204] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 713.449932][ T1204] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.495806][ T24] usb 3-1: USB disconnect, device number 48 [ 713.501761][ T1204] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.530763][ T1204] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.559957][ T1204] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.590216][ T1204] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.607245][ T5863] elan 0003:04F3:0755.001F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 713.619708][ T1204] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.660201][ T1204] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.689935][ T1204] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.710162][ T1204] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.731429][ T1204] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.751512][ T1204] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 713.760165][ T1204] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 713.774044][ T1204] usb 1-1: USB disconnect, device number 45 [ 713.977536][T13027] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2109'. [ 713.988601][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'. [ 714.120130][T13028] xt_CT: No such helper "netbios-ns" [ 714.342485][ T5133] usb 5-1: USB disconnect, device number 39 [ 714.351958][ T5133] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 714.371335][ T5133] cp210x 5-1:0.0: device disconnected [ 714.798651][T13048] lo speed is unknown, defaulting to 1000 [ 715.301925][T13053] overlayfs: missing 'lowerdir' [ 715.316243][ T24] usb 4-1: reset full-speed USB device number 47 using dummy_hcd [ 715.340709][T13053] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 716.817736][ T5863] usb 4-1: USB disconnect, device number 47 [ 717.179940][ T5133] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 717.461822][T13087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2128'. [ 717.471419][T13087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 717.478688][T13087] IPv6: NLM_F_CREATE should be set when creating new route [ 717.486093][T13087] IPv6: NLM_F_CREATE should be set when creating new route [ 717.612222][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.619978][ T5863] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 717.787046][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.800521][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.823670][ T5863] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 717.855986][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.903368][ T5863] usb 1-1: config 0 descriptor?? [ 718.646869][ T5863] hid-steam 0003:28DE:1142.0020: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 718.790012][ T5863] hid-steam 0003:28DE:1142.0020: Steam wireless receiver connected [ 719.085056][ T5863] hid-steam 0003:28DE:1142.0021: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 719.281520][ T5863] usb 1-1: USB disconnect, device number 46 [ 719.589533][ T5133] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 719.603221][ T5133] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 719.621776][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.637615][ T5133] usb 2-1: config 0 descriptor?? [ 719.676828][ T5863] hid-steam 0003:28DE:1142.0020: Steam wireless receiver disconnected [ 719.822890][T13101] tmpfs: Unknown parameter 'quota,2Rõšª-Wº_inode_hardlimit' [ 720.048974][ T5133] logitech 0003:046D:C298.0022: unknown main item tag 0x0 [ 720.056202][ T5133] logitech 0003:046D:C298.0022: unknown main item tag 0x0 [ 720.063356][ T5133] logitech 0003:046D:C298.0022: unknown main item tag 0x0 [ 720.070671][ T5133] logitech 0003:046D:C298.0022: unknown main item tag 0x0 [ 720.077919][ T5133] logitech 0003:046D:C298.0022: unknown main item tag 0x0 [ 720.097391][ T5133] logitech 0003:046D:C298.0022: hidraw0: USB HID v24.00 Device [HID 046d:c298] on usb-dummy_hcd.1-1/input0 [ 720.109493][ T5133] logitech 0003:046D:C298.0022: no inputs found [ 720.294845][T13111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 721.022765][ T30] audit: type=1400 audit(2000000001.996:431): avc: denied { write } for pid=13115 comm="syz.3.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 721.048273][ T30] audit: type=1400 audit(2000000002.024:432): avc: denied { connect } for pid=13115 comm="syz.3.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 722.036257][ T5863] usb 2-1: USB disconnect, device number 36 [ 748.533473][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.592638][ T6171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.602167][ T6171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.697204][T13140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.307338][ T5135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 761.328348][ T5135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 761.353553][ T5135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 761.367644][ T5135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 761.392795][ T5135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 761.408183][ T30] audit: type=1400 audit(2000000039.767:433): avc: denied { mounton } for pid=13151 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 761.836266][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 761.850760][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 761.860051][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 761.871043][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 761.883559][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 761.912089][ T9915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 761.930835][ T9915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 761.939196][ T9915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 761.955803][ T9915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 761.967584][ T9915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 761.984744][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 761.993919][ T9915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.003185][ T9915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.013681][ T9915] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 762.020879][ T9915] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 762.021868][ T5135] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 762.028359][ T9915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 762.039056][ T5135] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 762.063272][ T9915] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 762.073356][ T9915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 762.116630][T13151] lo speed is unknown, defaulting to 1000 [ 762.251905][T13156] lo speed is unknown, defaulting to 1000 [ 762.426179][T13160] lo speed is unknown, defaulting to 1000 [ 762.498929][T13151] chnl_net:caif_netlink_parms(): no params data found [ 762.651896][T13155] lo speed is unknown, defaulting to 1000 [ 762.674286][T13151] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.685864][T13151] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.693586][T13151] bridge_slave_0: entered allmulticast mode [ 762.705489][T13151] bridge_slave_0: entered promiscuous mode [ 762.716357][T13151] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.729943][T13151] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.737063][T13151] bridge_slave_1: entered allmulticast mode [ 762.751289][T13151] bridge_slave_1: entered promiscuous mode [ 762.815175][T13151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.830793][T13151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.857050][T13153] lo speed is unknown, defaulting to 1000 [ 762.860751][ T12] bridge_slave_1: left promiscuous mode [ 762.873644][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.888165][ T12] bridge_slave_0: left promiscuous mode [ 762.893919][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.161044][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.170741][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.180507][ T12] bond0 (unregistering): Released all slaves [ 763.249249][ T12] bond1 (unregistering): Released all slaves [ 763.315443][ T12] bond2 (unregistering): Released all slaves [ 763.379314][ T12] bond3 (unregistering): Released all slaves [ 763.446140][ T12] bond4 (unregistering): Released all slaves [ 763.511574][ T12] bond5 (unregistering): Released all slaves [ 763.573672][ T9915] Bluetooth: hci2: command tx timeout [ 763.588931][ T12] bond6 (unregistering): Released all slaves [ 763.627353][T13151] team0: Port device team_slave_0 added [ 763.636874][T13151] team0: Port device team_slave_1 added [ 763.688422][T13156] chnl_net:caif_netlink_parms(): no params data found [ 763.752710][T13151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.763930][T13151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.789980][T13151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.837510][T13151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.844667][T13151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.870719][T13151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.967301][T13151] hsr_slave_0: entered promiscuous mode [ 763.974214][T13151] hsr_slave_1: entered promiscuous mode [ 763.980317][T13151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 763.987851][T13151] Cannot create hsr debugfs directory [ 764.018103][T13156] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.026959][T13156] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.035410][T13156] bridge_slave_0: entered allmulticast mode [ 764.042314][T13156] bridge_slave_0: entered promiscuous mode [ 764.053499][T13156] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.060765][T13156] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.067933][T13156] bridge_slave_1: entered allmulticast mode [ 764.075243][T13156] bridge_slave_1: entered promiscuous mode [ 764.086635][ T9915] Bluetooth: hci4: command tx timeout [ 764.155167][T13156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.175023][ T9915] Bluetooth: hci0: command tx timeout [ 764.251713][T13156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.269018][T13157] Bluetooth: hci3: command tx timeout [ 764.275197][ T9915] Bluetooth: hci1: command tx timeout [ 764.298677][T13156] team0: Port device team_slave_0 added [ 764.337505][ T12] hsr_slave_0: left promiscuous mode [ 764.343613][ T12] hsr_slave_1: left promiscuous mode [ 764.349233][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.358844][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.523666][ T12] team0 (unregistering): Port device team_slave_1 removed [ 764.553698][ T12] team0 (unregistering): Port device team_slave_0 removed [ 764.798650][T13156] team0: Port device team_slave_1 added [ 764.858425][T13156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.865378][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.892149][T13156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.937859][T13156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.945431][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.971874][T13156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.019396][T13155] chnl_net:caif_netlink_parms(): no params data found [ 765.157558][T13156] hsr_slave_0: entered promiscuous mode [ 765.163595][T13156] hsr_slave_1: entered promiscuous mode [ 765.169530][T13156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 765.177143][T13156] Cannot create hsr debugfs directory [ 765.207670][T13160] chnl_net:caif_netlink_parms(): no params data found [ 765.235471][T13153] chnl_net:caif_netlink_parms(): no params data found [ 765.313059][T13155] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.320822][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.330247][T13155] bridge_slave_0: entered allmulticast mode [ 765.336922][T13155] bridge_slave_0: entered promiscuous mode [ 765.370733][T13155] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.377820][T13155] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.384915][T13155] bridge_slave_1: entered allmulticast mode [ 765.392154][T13155] bridge_slave_1: entered promiscuous mode [ 765.448665][ T12] IPVS: stop unused estimator thread 0... [ 765.513295][T13155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.546808][T13160] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.554075][T13160] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.561148][T13160] bridge_slave_0: entered allmulticast mode [ 765.568795][T13160] bridge_slave_0: entered promiscuous mode [ 765.577567][T13155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.613097][T13160] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.620566][T13160] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.627926][T13160] bridge_slave_1: entered allmulticast mode [ 765.634548][T13160] bridge_slave_1: entered promiscuous mode [ 765.660583][T13155] team0: Port device team_slave_0 added [ 765.666535][T13153] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.674607][T13153] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.681826][T13153] bridge_slave_0: entered allmulticast mode [ 765.688451][T13153] bridge_slave_0: entered promiscuous mode [ 765.720784][T13155] team0: Port device team_slave_1 added [ 765.726688][T13153] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.736544][T13153] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.743723][T13153] bridge_slave_1: entered allmulticast mode [ 765.750343][T13153] bridge_slave_1: entered promiscuous mode [ 765.804516][T13151] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 765.811489][ T9915] Bluetooth: hci2: command tx timeout [ 765.822496][T13153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.849506][T13160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.859350][T13155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.866369][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.892474][T13155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.903651][T13151] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 765.918195][T13153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.951418][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.968184][T13160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.988626][T13155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.995693][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.026453][T13155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.041334][T13151] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 766.092085][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.105790][T13151] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 766.116812][T13153] team0: Port device team_slave_0 added [ 766.136228][T13160] team0: Port device team_slave_0 added [ 766.159018][T13153] team0: Port device team_slave_1 added [ 766.186504][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.205601][T13160] team0: Port device team_slave_1 added [ 766.258428][T13155] hsr_slave_0: entered promiscuous mode [ 766.264596][T13155] hsr_slave_1: entered promiscuous mode [ 766.270902][T13155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 766.279137][T13155] Cannot create hsr debugfs directory [ 766.285243][T13153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.292302][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.318453][ T9915] Bluetooth: hci4: command tx timeout [ 766.324093][T13153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.335738][T13153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.342711][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.368681][T13153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.399989][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.407357][ T9915] Bluetooth: hci0: command tx timeout [ 766.442909][T13160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.450282][T13160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.476384][T13160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.491752][T13156] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 766.491913][ T9915] Bluetooth: hci1: command tx timeout [ 766.501375][T13157] Bluetooth: hci3: command tx timeout [ 766.526846][T13160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.533777][T13160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.560778][T13160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.572183][T13156] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 766.581732][T13156] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 766.618139][T13156] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 766.672146][T13153] hsr_slave_0: entered promiscuous mode [ 766.682315][T13153] hsr_slave_1: entered promiscuous mode [ 766.688353][T13153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 766.696244][T13153] Cannot create hsr debugfs directory [ 766.730580][T13160] hsr_slave_0: entered promiscuous mode [ 766.736586][T13160] hsr_slave_1: entered promiscuous mode [ 766.743178][T13160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 766.750785][T13160] Cannot create hsr debugfs directory [ 766.963946][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.032563][T13155] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 767.044596][T13155] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 767.071290][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.104340][T13155] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 767.114226][T13155] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 767.161289][T13151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.180629][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.241969][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.266203][T13151] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.288527][T13153] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 767.304228][T13156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.317193][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.324283][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.338690][T13153] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 767.356351][T13153] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 767.383933][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.391042][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.399544][T13153] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 767.452035][T13156] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.504750][T13160] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 767.516936][T13160] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 767.531069][T13160] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 767.540449][T13160] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 767.569830][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.576902][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.589796][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.596933][ T7092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.652360][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.705270][T13155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.772718][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.814670][T13155] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.836502][T13153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.876997][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.907298][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.914457][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.951398][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.967765][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.974858][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.992266][T13153] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.021168][T13157] Bluetooth: hci2: command tx timeout [ 768.052383][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.059574][ T5941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.078867][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.085950][ T5941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.148188][T13155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 768.161392][T13155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 768.186028][T13151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.342087][T13160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.358635][T13156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.414167][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.546909][T13157] Bluetooth: hci4: command tx timeout [ 768.558477][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.610642][T13160] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.621067][T13157] Bluetooth: hci0: command tx timeout [ 768.672121][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.705374][T13157] Bluetooth: hci3: command tx timeout [ 768.715318][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.722442][ T6171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.729947][T13157] Bluetooth: hci1: command tx timeout [ 768.749271][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.756363][ T6171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.784923][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.808335][T13155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.918505][T13153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.024297][T13151] veth0_vlan: entered promiscuous mode [ 769.105736][T13151] veth1_vlan: entered promiscuous mode [ 769.125387][T13156] veth0_vlan: entered promiscuous mode [ 769.172663][T13156] veth1_vlan: entered promiscuous mode [ 769.209188][ T12] bridge_slave_1: left allmulticast mode [ 769.214859][ T12] bridge_slave_1: left promiscuous mode [ 769.242438][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.253346][ T12] bridge_slave_0: left allmulticast mode [ 769.259002][ T12] bridge_slave_0: left promiscuous mode [ 769.267937][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.277518][ T12] bridge_slave_1: left allmulticast mode [ 769.285972][ T12] bridge_slave_1: left promiscuous mode [ 769.291825][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.301390][ T12] bridge_slave_0: left allmulticast mode [ 769.307484][ T12] bridge_slave_0: left promiscuous mode [ 769.313096][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.321969][ T12] gretap0: left allmulticast mode [ 769.327260][ T12] gretap0: left promiscuous mode [ 769.332260][ T12] bridge0: port 3(gretap0) entered disabled state [ 769.340696][ T12] bridge_slave_1: left allmulticast mode [ 769.346976][ T12] bridge_slave_1: left promiscuous mode [ 769.352584][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.363493][ T12] bridge_slave_0: left allmulticast mode [ 769.369451][ T12] bridge_slave_0: left promiscuous mode [ 769.375559][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.692167][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.702258][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.712447][ T12] bond0 (unregistering): Released all slaves [ 769.787609][ T12] bond1 (unregistering): Released all slaves [ 769.864563][ T12] bond2 (unregistering): Released all slaves [ 769.940779][ T12] bond3 (unregistering): Released all slaves [ 770.012328][ T12] bond4 (unregistering): Released all slaves [ 770.085378][ T12] bond5 (unregistering): Released all slaves [ 770.156082][ T12] bond6 (unregistering): Released all slaves [ 770.256636][T13157] Bluetooth: hci2: command tx timeout [ 770.418245][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.432035][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.441670][ T12] bond0 (unregistering): Released all slaves [ 770.515680][ T12] bond1 (unregistering): Released all slaves [ 770.585961][ T12] bond2 (unregistering): Released all slaves [ 770.657269][ T12] bond3 (unregistering): Released all slaves [ 770.726685][ T12] bond4 (unregistering): Released all slaves [ 770.757646][T13157] Bluetooth: hci4: command tx timeout [ 770.853990][T13157] Bluetooth: hci0: command tx timeout [ 770.930308][T13157] Bluetooth: hci1: command tx timeout [ 770.930314][ T9915] Bluetooth: hci3: command tx timeout [ 770.961915][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.972058][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.981379][ T12] bond0 (unregistering): Released all slaves [ 771.056922][ T12] bond1 (unregistering): Released all slaves [ 771.125400][ T12] bond2 (unregistering): Released all slaves [ 771.195670][ T12] bond3 (unregistering): Released all slaves [ 771.264987][ T12] bond4 (unregistering): Released all slaves [ 771.335971][ T12] bond5 (unregistering): Released all slaves [ 771.404702][ T12] bond6 (unregistering): Released all slaves [ 771.478861][ T12] bond7 (unregistering): Released all slaves [ 771.659783][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.669583][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.679677][ T12] bond0 (unregistering): Released all slaves [ 771.751314][ T12] bond1 (unregistering): Released all slaves [ 771.763490][T13151] veth0_macvtap: entered promiscuous mode [ 771.784588][T13160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.818027][T13151] veth1_macvtap: entered promiscuous mode [ 771.909192][T13151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.946971][T13156] veth0_macvtap: entered promiscuous mode [ 772.017332][T13156] veth1_macvtap: entered promiscuous mode [ 772.052230][T13151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.103829][ T12] tipc: Disabling bearer [ 772.112282][ T12] tipc: Left network mode [ 772.114076][T13151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.128198][T13151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.137353][T13151] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.146037][T13151] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.172032][ T12] tipc: Left network mode [ 772.215399][T13156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.237358][T13156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.261092][ T12] tipc: Left network mode [ 772.294102][T13156] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.304433][T13156] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.314343][T13156] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.323044][T13156] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.335371][T13155] veth0_vlan: entered promiscuous mode [ 772.345630][T13153] veth0_vlan: entered promiscuous mode [ 772.389183][T13155] veth1_vlan: entered promiscuous mode [ 772.432469][T13153] veth1_vlan: entered promiscuous mode [ 772.485596][T13160] veth0_vlan: entered promiscuous mode [ 772.499116][T13153] veth0_macvtap: entered promiscuous mode [ 772.527072][ T5941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.539768][T13160] veth1_vlan: entered promiscuous mode [ 772.541039][ T5941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.602786][T13153] veth1_macvtap: entered promiscuous mode [ 772.631983][ T5941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.635698][T13155] veth0_macvtap: entered promiscuous mode [ 772.647854][ T5941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.667585][T13153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.686038][T13155] veth1_macvtap: entered promiscuous mode [ 772.692911][ T6171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.700724][ T6171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.751331][ T6171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.759521][ T30] audit: type=1400 audit(2000000050.384:434): avc: denied { mounton } for pid=13151 comm="syz-executor" path="/root/syzkaller.7ulRXx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 772.769283][T13153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.803093][ T6171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.807214][T13160] veth0_macvtap: entered promiscuous mode [ 772.844847][T13155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.857416][T13160] veth1_macvtap: entered promiscuous mode [ 772.903653][T13153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.913528][T13153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.922383][T13153] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.931102][T13153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.955889][T13155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.959782][ T30] audit: type=1400 audit(2000000050.571:435): avc: denied { remount } for pid=13247 comm="syz.5.2147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 773.029125][T13155] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.041525][T13155] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.051829][T13155] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.056818][ T30] audit: type=1400 audit(2000000050.665:436): avc: denied { unmount } for pid=13156 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 773.061667][T13155] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.106459][T13160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.296702][T13160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.505321][T13253] syzkaller1: entered promiscuous mode [ 773.510814][T13253] syzkaller1: entered allmulticast mode [ 773.552088][T13160] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.566368][T13160] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.575224][T13160] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.591133][T13160] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.659813][T10603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.675851][T10603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.747830][ T5941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.765170][ T5941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.883544][T10603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.911997][T10603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.035427][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.050457][ T5941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.069429][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.090871][ T5941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.215205][ T6171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.230820][ T6171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.264138][ T5864] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 774.438036][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 774.472609][ T5864] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 774.495175][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.532119][ T30] audit: type=1400 audit(2000000052.049:437): avc: denied { ioctl } for pid=13270 comm="syz.7.2149" path="socket:[45585]" dev="sockfs" ino=45585 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 774.594060][ T5864] usb 7-1: config 0 descriptor?? [ 774.605255][T13262] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 SYZFAIL: ShmemBuilder: too large output offset size=262144 consumed=343032 (errno 9: Bad file descriptor) [ 775.385569][ T5864] elan 0003:04F3:0755.0023: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 775.903135][ T12] hsr_slave_0: left promiscuous mode [ 775.942393][ T12] hsr_slave_1: left promiscuous mode [ 775.964317][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.971800][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.996081][ T5908] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 776.064803][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.104141][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.365280][ T12] hsr_slave_0: left promiscuous mode [ 776.389326][ T12] hsr_slave_1: left promiscuous mode [ 776.395461][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.412470][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.432740][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.440510][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.470957][ T12] hsr_slave_0: left promiscuous mode [ 776.476586][ T12] hsr_slave_1: left promiscuous mode [ 776.483742][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.491894][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.500582][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.507989][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.517691][ T12] hsr_slave_0: left promiscuous mode [ 776.524087][ T12] hsr_slave_1: left promiscuous mode [ 776.529704][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.537163][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.545088][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.552506][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.595348][ T12] veth1_macvtap: left promiscuous mode [ 776.601020][ T12] veth0_macvtap: left promiscuous mode [ 776.605542][ T5861] usb 7-1: reset full-speed USB device number 2 using dummy_hcd [ 776.607222][ T12] veth1_vlan: left promiscuous mode [ 776.623087][ T12] veth0_vlan: left promiscuous mode [ 776.629956][ T12] veth1_macvtap: left promiscuous mode [ 776.635454][ T12] veth0_macvtap: left promiscuous mode [ 776.641267][ T12] veth1_vlan: left promiscuous mode [ 776.646546][ T12] veth0_vlan: left promiscuous mode [ 776.653311][ T12] veth1_macvtap: left promiscuous mode [ 776.659921][ T12] veth0_macvtap: left promiscuous mode [ 776.665500][ T12] veth1_vlan: left promiscuous mode [ 776.671581][ T12] veth0_vlan: left promiscuous mode [ 776.678954][ T12] veth1_macvtap: left promiscuous mode [ 776.684557][ T12] veth0_macvtap: left promiscuous mode [ 776.690125][ T12] veth1_vlan: left promiscuous mode [ 776.695760][ T12] veth0_vlan: left promiscuous mode [ 777.286691][ T12] team0 (unregistering): Port device team_slave_1 removed [ 777.324357][ T12] team0 (unregistering): Port device team_slave_0 removed [ 777.661926][ T2987] smc: removing ib device syz2 [ 778.283800][ T12] team0 (unregistering): Port device team_slave_1 removed [ 778.408258][ T12] team0 (unregistering): Port device team_slave_0 removed [ 779.201960][ T12] team0 (unregistering): Port device team_slave_1 removed [ 779.241562][ T12] team0 (unregistering): Port device team_slave_0 removed [ 779.847063][ T12] team0 (unregistering): Port device team_slave_1 removed [ 779.884776][ T12] team0 (unregistering): Port device team_slave_0 removed [ 780.277539][T13196] lo speed is unknown, defaulting to 1000 [ 780.289597][T13196] syz2: Port: 1 Link DOWN [ 781.185576][ T12] IPVS: stop unused estimator thread 0... [ 781.195894][ T12] IPVS: stop unused estimator thread 0... [ 781.203647][ T12] IPVS: stop unused estimator thread 0... [ 781.213990][ T9] usb 7-1: USB disconnect, device number 2 [ 781.318239][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.409084][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.480552][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.554277][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.699560][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.780786][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.842233][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.905559][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.005939][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.090763][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.157050][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.237469][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.340922][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.400888][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.441009][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.489142][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.582985][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.656403][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.707787][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.772830][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.845108][ T12] bridge_slave_1: left allmulticast mode [ 782.850894][ T12] bridge_slave_1: left promiscuous mode [ 782.856500][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.866470][ T12] bridge_slave_0: left allmulticast mode [ 782.872765][ T12] bridge_slave_0: left promiscuous mode [ 782.878374][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.887783][ T12] bridge_slave_1: left allmulticast mode [ 782.893602][ T12] bridge_slave_1: left promiscuous mode [ 782.899196][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.908593][ T12] bridge_slave_0: left allmulticast mode [ 782.914597][ T12] bridge_slave_0: left promiscuous mode [ 782.920767][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.929771][ T12] bridge_slave_1: left allmulticast mode [ 782.935631][ T12] bridge_slave_1: left promiscuous mode [ 782.941237][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.950389][ T12] bridge_slave_0: left allmulticast mode [ 782.956294][ T12] bridge_slave_0: left promiscuous mode [ 782.961901][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.970827][ T12] bridge_slave_1: left allmulticast mode [ 782.976442][ T12] bridge_slave_1: left promiscuous mode [ 782.982165][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.991048][ T12] bridge_slave_0: left allmulticast mode [ 782.996659][ T12] bridge_slave_0: left promiscuous mode [ 783.002457][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.012441][ T12] bridge_slave_1: left allmulticast mode [ 783.018056][ T12] bridge_slave_1: left promiscuous mode [ 783.023771][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.035562][ T12] bridge_slave_0: left allmulticast mode [ 783.041405][ T12] bridge_slave_0: left promiscuous mode [ 783.047030][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.363409][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.374321][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.383900][ T12] bond0 (unregistering): Released all slaves [ 783.583586][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.593416][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.602861][ T12] bond0 (unregistering): Released all slaves [ 783.798402][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.808257][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.817648][ T12] bond0 (unregistering): Released all slaves [ 784.013242][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.023180][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.032610][ T12] bond0 (unregistering): Released all slaves [ 784.240144][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.251455][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.260862][ T12] bond0 (unregistering): Released all slaves [ 784.974552][ T12] hsr_slave_0: left promiscuous mode [ 784.980309][ T12] hsr_slave_1: left promiscuous mode [ 784.985862][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.994114][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.001678][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.009064][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.018561][ T12] hsr_slave_0: left promiscuous mode [ 785.025937][ T12] hsr_slave_1: left promiscuous mode [ 785.031890][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.039245][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.046790][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.054208][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.065043][ T12] hsr_slave_0: left promiscuous mode [ 785.070676][ T12] hsr_slave_1: left promiscuous mode [ 785.076494][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.084017][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.091510][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.098972][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.110195][ T12] hsr_slave_0: left promiscuous mode [ 785.115833][ T12] hsr_slave_1: left promiscuous mode [ 785.121380][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.129118][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.136744][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.144098][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.153605][ T12] hsr_slave_0: left promiscuous mode [ 785.160103][ T12] hsr_slave_1: left promiscuous mode [ 785.165661][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.173120][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.180938][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.188294][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.229630][ T12] veth1_macvtap: left promiscuous mode [ 785.235150][ T12] veth0_macvtap: left promiscuous mode [ 785.240654][ T12] veth1_vlan: left promiscuous mode [ 785.245930][ T12] veth0_vlan: left promiscuous mode [ 785.251793][ T12] veth1_macvtap: left promiscuous mode [ 785.257332][ T12] veth0_macvtap: left promiscuous mode [ 785.262836][ T12] veth1_vlan: left promiscuous mode [ 785.268553][ T12] veth0_vlan: left promiscuous mode [ 785.274594][ T12] veth1_macvtap: left promiscuous mode [ 785.280124][ T12] veth0_macvtap: left promiscuous mode [ 785.285643][ T12] veth1_vlan: left promiscuous mode [ 785.291003][ T12] veth0_vlan: left promiscuous mode [ 785.298240][ T12] veth1_macvtap: left promiscuous mode [ 785.303715][ T12] veth0_macvtap: left promiscuous mode [ 785.309439][ T12] veth1_vlan: left promiscuous mode [ 785.314676][ T12] veth0_vlan: left promiscuous mode [ 785.322083][ T12] veth1_macvtap: left promiscuous mode