last executing test programs: 18.973346428s ago: executing program 3 (id=945): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x44cd, &(0x7f0000000380)={0x0, 0x5331, 0x400, 0x4, 0xfffefffe}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x26, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000040)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 17.82004036s ago: executing program 3 (id=950): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10ffff) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4040, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 16.479735435s ago: executing program 3 (id=952): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x40) sendfile(0xffffffffffffffff, r1, 0x0, 0x10ffff) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f00000000c0)={0xd9}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x4040, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 15.061880788s ago: executing program 3 (id=956): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000280)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e912162f8db0049d90491ceaebfd26d4eef2", 0x27}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000000000203d83d3", 0x17}], 0x2) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x11b) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) 13.119211615s ago: executing program 3 (id=961): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r3, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) (fail_nth: 4) 11.804241732s ago: executing program 3 (id=964): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000100c4000007008209", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) 9.382751936s ago: executing program 4 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) close(r1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fremovexattr(r2, &(0x7f0000000080)=@random={'trusted.', '\x00'}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 8.561118632s ago: executing program 4 (id=978): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x80002, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000560001fe0f0000f70000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x0) 8.356235332s ago: executing program 4 (id=979): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x6f2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x9, 0x8, 0x17, 0x1}, {0x100, 0x26, 0xde, 0x3}, {0x4, 0x6, 0x0, 0x2}]}) 8.282567933s ago: executing program 4 (id=980): syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0xfffd, 0x0, 0xfe}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b000000000000002143ce554b6df654cb0173677c4e2eaa2eb5035d135958831197684b763f499a2fafc724413afe7af5b53e61532895bae8d3f0f02cc4e729883f078a2552275a1486218834476323059f91a91c500e035c5c70afee9d16b5acd7cd4b94e3600c9c69aeb79e259488e089b1c59bc6fca826d38a7b3229ccd5b1bde01e63f1edd3c0f933e5c02936de55f2a4ee254bbe8aed1d2260c97783b615850d488b7f0c4a80715bed3cf1adb2dafbb7672328e2300fa2623704da7b9889a57e231be318f5eb6d294a302e753e75b741b63e898748f228e6752d15bf99e02c3d366fa091326029d899c493df701ad6c37c55598f3a19e748f58475398fda5f6153cb11a4ffde399dc21f96bed56d31fd6bfa0a75d0df449393", 0x15f}, {&(0x7f0000001280)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292034a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8e35c0245b618452612d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46789df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c61fae925f3147ee3e72c8aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce2925a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacacc78cb5c8b4f26222883707b61fa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4b97b219628be8cdba7e54d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353dc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce", 0x6f6}], 0x2}, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6}) mount$fuse(0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESOCT=r3, @ANYRESDEC=r4, @ANYRESHEX=r4]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) msgget$private(0x0, 0x40) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0), 0x2) syz_open_dev$ptys(0xc, 0x3, 0x1) 5.172275229s ago: executing program 4 (id=989): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x44cd, &(0x7f0000000380)={0x0, 0x5331, 0x400, 0x4, 0xfffefffe}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x26, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000040)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x8000, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) io_setup(0x3ff, &(0x7f0000000500)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) 5.008042514s ago: executing program 0 (id=990): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x6c6748e6fc66c8e0, 0x10, 0x0, 0x80000001, 0x6e, 0x6, 0x6, 0xfffffffe, 0x4000}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="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", 0x80b}], 0x1}}], 0x1, 0xc8040) sendmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000080)=@phonet={0x23, 0x8, 0xf}, 0x80, &(0x7f0000000140)=[{&(0x7f00000003c0)="f2fb2afaf4e402619d07c387dd13bd674cb5c774d5ea37cca70ecacacf61b7e0c05dd1cbb83d4130437c827a1212ae5cf028992519997988fa5fbbf3b8521b9bcaa6ba361a5aec0568696b691ca8cdcfb6d72ab8aeeddb9e1514b034136addba27b87b01302c7a2472b920b2a879d5bcb2c5f202affc5711f974abbbb9f7d034c358d9d1a327e62c0f91f8f09d2624d8d343cb780d1feeb0b85033b0cbe4ceb215e9bfeaa788733a133925d1b04bf10e58bd0555d66da2385ac74a22f3e8368d1af865688a37081f00781816e6435c1bc252f0530dac353fabb7d68805", 0xdd}, {&(0x7f0000000240)="1fae1a93ba1b021969a1e4a15e9f4f97f0618da6e214e48afd618350a5a32a90460173", 0x23}], 0x2}}], 0x1, 0x0) getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="05c40b163f06cf811ef20f856ee87ea1c3b11ef017dcf212a61110ec86adff5b17d320ffcf4630873545fe1597168d252addbc0dcae3e23944cd464fe31e2e7a87f99fd33a9034df6725ee2b0788d3c54ae7a3450c02fb4902d6dda6e97d9dc7fb9d345e90b8b4a7f2b9b9a9e1186a173ad6a296b316e0f9ab2ba159ee38aea03566646c58071cdff0fae2744a71add321379a4b66bfe378886eaa6f9b21f16b92c60c6bdcbe05f6731954effbbaedbc38fcd68cc52f0f73e7b38e439929a01f2aa54eded70c6555d347e7ea641250c6d0dcc0b9"}, {&(0x7f0000000340)}, {&(0x7f0000000e40)="7ec4f44a2d32e1e431f47825b3b980611d98f0906919eac47cd1a02375b2ca16b54e227978bb42910ef6cd42f8e8c508dddb9b8aaa130b1f1ef81ca8703bea3a9bdc5425c0a859719ffa8f2df0a246b97beda6ae667b5d48009b2441ff5039ddbed4d14adc7f27d9da131fc3578df4fdc41683a777074b2b2085ff4a222ccf044b1204dacc9e3d570691f6d5532efacdbaab58ff675cb2a326a898a3f2da79a304aab839d5706c104445ce0edd2b1c9f13d8e7090973acb79e6d8b598034f6d73d3e8f0dc39d272ee3d08b11"}], 0x0, &(0x7f0000000f40)=[@rights={{0x0, 0x1, 0x1, [r1]}}, @rights={{0x0, 0x1, 0x1, [r4]}}, @rights={{0x0, 0x1, 0x1, [r5, r1, r0, r7, r0, r1]}}], 0x0, 0x40000}}], 0x51, 0x4008010) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x400000000000041, 0x0) 4.2300464s ago: executing program 2 (id=993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000b80)="7d2ad9be5ef132133c875a35a0e0c6741abedcf2abe550a15483d673c4aca6b3095f555ec18b4e7c3af4fc5445336b8496aef024756fbad187e17e3c4a1e46f14983a023af3e99cb5fa156e7b50a5f0fcc52084e4e42b9647b8b89315d90542e17286897ab95c18c3ff82957dbd96720c20f027a3d829578f03ecea23d593bdd3d21cf7b24eb42f0dbc41d2573083a1d7cf629f198ec4d5d8a8c078c90971129405d66995a2d6fee3803d1d20089214997901da6244ab022c37225c601bfbbf165568068a21d911b453dc48a6c15fbd94de731c44f697faa0092947d5ee1052fac26a21499796a60eeadc6d3f47b4ed40da1e547945954502e5ba2b2f9e1906827d9b638ef2cda3a18094058edbb8cf19bad32f6c0ea50d523bf27c29717669e2a804166106fe7d3e6fe6bdbfb68404617b68c8fbcc76f5171f1e4b28e198b8ed5721e7b5c5618d62dc204a10279fb913763e9136cea655a145b3a627854674f6721709ee038d0fef45a3f72f0e407070f96cab42a579d098038f9f5394e4ef9bbfe600dc17c92790f0d183bc06611bed111fccb9edfa47326d6ee3496fc0470f3474c4da49fb9d70165ff43445ffee6924b7aeacee07a108d9fb105ad241b4bb45a086e4656ff8e28830682a0bbed2a60e62eda6f6d0024c24c70026ba26fcdb45480a1184a3124445e82bef96e470c804052575542f9e7734374994c2da41a9c59c0d3525fe90773e81d0cf87ede128e63b541a446abfb8b2d7bfdc5fd1c8314792a8a139ae9210bf6ab0f38ab70e2e55ec2597e281e5379ff5e3f9a5c64440529a0fcf4914809ba1b23b3bea33055cfc0023f04c22452ff2c888ac3b0f679bc102148049efea2e16e90da433ec9810e43141c8331da2581cbce031f9697106764f48b3f78d4d8fd7d8c3f29a4d2e5a7ab23d67d7c4e1a5a8e4a635a07585a417235ab0937ab04147cbea43ff50bd1c2fb959a905e0434638a965cd3998e160ffbe326808f6cb908b6f78cde1544dd5ab6d445f1dcceefccf72544dcdb992a4b2f6153c5b15edbe9df72e40aa6c0ecc3dd46198d65a7bbb14ceb13560a978869e6d9ad84c53032ea441675236d773cabb900e51d0382ac7a99ae1fcbb36f43680fcc585e3662f13850b7e712c0d66a6b463e7af39244e9b3a0730af13ddb1c0888725bd2e9880d003fd253bbe83172e6eb71355549e276655dcd1c954f0b572e86f8f26cdffc3c5b4085764550a29226ee07e13255742161093128f2a9ddf30150aa248b6b04c023eda6c96c5fddafc6f3f4b153afca45cae2301a59b533a857c526802c95527cdc5f2f4cdc55998fbd2b85a1966f91bf5f4fdf36f9a64572f2339a76d3615cf98fa2fd8640dba09dacd9af0e7d1e98edf202ac30db2d0effdbbbc495c28455defde532e6abed9a6a3c48fb0032692584b1d81408e00e16b3330f2aeab9473ca820b090307354f129d4e4d0a88dffd5bdd29b49c4993eb92b96b427463b1d92aa30811b4fdab8ded02a97e93bc65e5a243ea9522389828d8abfece756c425b78948365f6c78394a5b5c5bdfc89dccd0fc5175d91e806003cdcca6bec4943e51555e8269c69a746299bbe4c79d3918da886ad63d4a7362d3b60c51791b7c1c777f180d1869d3628cc252c3a9294caabe7ebf822d4026d1a4e2d867f0e9439bb98561ed96efbe890a02685a052b4251e752a864e9f3fcd3cf55a0df738a409411732eef2a2275c22753b6074f1da7ad87dec45da61c1dd8eb0702a165ef8652f7966a7e41d6d5ae12b5aaff914111119eaf6c47488cee0348dcdc71f40437dd6d39016f7c53feebdfd8afc9a9bb49bd7ca033b60c64c9016a0125b70a5137fab8dd74c92828d9dd1b13e26afa18220a0c5fa155c6f72a74e32a008ceaaeed243a4304b08e5cc94a6f5167050575bb6ce069d5344ab5760fc1b4413608638dcefeba4068eafd8cf89caf87cc8bdcc717ebcbef0da235790ab7caa9873d26d39c0913d921be500b49cc3ffd4acc6daec0052b208b170aa7af7e954bc41f7c12d5b7bfbd92d5e82958438acd4a9c453225111ee22f0a2c3fc9e13989614d710b3f8e43922dda2e439e66f644a8c1a6dfb4b6727c5f171ccc52b629a3612bdb88ac6dabcb6a27137bfa87b2fbf652b89f5197c1799b999a8b08566a7bd17fbed7648d7b0e9c9425e28793060762138a73c99dcc89e1a676f9435ed20c493f7d1da5b60c42303d4d3f6a9f16dad5c5886fcfe7abdf21f90355e8ddf7cea700bc9c77e80a44d43c71e5c5de1f72fb8c1d1812a9ec1b18b96e6be0fda26092f0bebdf815011a6664bd096739969912de9662628cd0568a2c833b45243263af12c7fa5ac11b4c0b5c7ced58dbe26292c204852ec047bd2c4548d298d38c2be4a19192664a4e617ff78f44f20adbf02a8cbc49e2d1093597b156482c250f318c0e3184837b70a14cf5a5a0a1639d1e50fe878ae5c8f81ad0784e9117557247bec33dc25634ce7f95c9eb7f591508ed4d8a7885472a2d2df8ab4ee420dd6019ebe0965458d6f9af0f8a5724950abec580fdc10fbfb735e0f88f90f9b1dd33e57aec531f843ccbbbb3041b39209715d95b66e72aa4847a6ae94d5b252a71a1b740c44cda6666522920f7ceb1679d88f660e912ce3b2754518d602a742ea1bb9166ffc4fa864cab5c986bb75a4ab9ac6b0a4e397c3a9848b827ca2ebf73695e4da36316901b3f019a7fb206615759069d5dc835d106b96371130387f0d082db6e4d41af28bf71c4f84b890f9241ea3b9130595cfd73cf2082ab346e9e06a64c12f98e198b479d117120943e4fe5dbaddcbc69d648704e6a7d43816faf576c0c255b77d22393f9a11ad82083975d5652bd142b71fec781545a97a0719afeee60cd0cca9d4d3d06e8c003e0d4a628aaaaaab53112bb6577b828b93bc92106cf931f12f208019e024a63bb27d32f5fa722dca620cc08d5f7b82bd2cfd16eef493a760436ee94984f4fe591fcc956addd6d980af9639d7228dfedc3bb83d708d21859751fc0775bb636f0e5b343b20834a81da5f1728d9852d58d020e64fab81dc5f5ab876bdf3346da79f57409985e894433132cd3e678c61f22948307ee3e4f27ae9d1a65adb910fd38ad84e94dcff0f5d6fb6a59c2d2ac8ddcb1b9f4ef8fe44ace82ef17541374ea86e6693ed6d79c3f5ff190f17b1718f39c9ea3d08373173f5cee8463300a8b9b76dac06fc78b39ce9fe85ffc00e4dbb6cd5f21f21c6be981375ea5bed74816e3d45226e463a5dadf8b59c813801e463c80715a2901cc38db37b8e7b69536d518051d5edc6a84a3ede41e9a7ceec9961c1adb09b8ea85d2efe09fe4e2223ca4774ef5be4f2a84f83688017cbc35bfc67c4890e0e0e9330df65878a04dbc736bd7ef781adf18e1c6979957372f802e91962e8076acf4903c19220af910f7c9640e88911e478592cdf6215b93b20f63aeb0c4c7519a3409004184f85f07394ccaf0401a63346f8cc6468897b0e8a0d40e628b99d8f917ee8a815cd6bf65e00e7d08264868143fa83c50551cbc6c51ed5c2c11501528b13f36e9e3c207200dbb19b3734ea50528dd7ab59c2424566ae96efdae7a62b13f4966a81be09888bc72a8d302566eb33406a67bb290bba331a769988e09c0c5ea0af1ecd91973545b1d30b85c14afa90edc791498a08f2f26e4a1535c878c0e34d691c9495bf0bd10e76ab0f53a5fa01541d890030c11e2aaa491fe0eee66584d18e4c542529ecaf93ca886802964860893deb7ac8a8b5cb3332c94902a413be6e875e6aa8c5f39cd8278f4515554a60b9cb318c043d601e6ef828fe158638d37cecd44fa574a284b5fb39342c090a7471177994b7e5cfd79612bb8b3fb9d3a3d42a520bca7582744570bff483edc8b014b96a8274d494cfd32e30b0b35ac63cd5c6d31fbdc889c9f97c7d5228659ad873b8369fc1096ed99d3da3c47f656934478052853b78ad10f7ae7a6ab3363af81303e3da3853a5a5a68008585bc4b5d43185175fea2a70fb6a591ef7ff747979d864a51dd690aef6c7411cc5600e5331c261cd6031d03c03ab280182e1df653996da530b1a958f0a1eb9e380f162d7b0bffc20fefa9cae92bc187665035d2cafd27f8701f0b651fe8407828f7da526552406f157093402192894c32b1ee07acc08ad65a0444084e02639f92d05a0e3f2bde8b94b8a526f83e8b66d0859fa78d112f05554577137fe712dbfb2422a179db5407cf12eccc1871e5391a30cedbb61b03d93e77f3d6d855d5ee397fbeebd11c3d65b9b2205e401561416b9c2a7c31f59b528e8d8f8f97004d488c9d73208eb7877c08615c17cf3a63c41a56aa2bc5200bbe8dc003a02aa61edd733f832c7a9d0cb29a1362ea1a69d87126cdedd08a057f68a691bb0ef9fc12d2a2409420f8d7d3702e14e48a17aa8527841bfc050d1096dbb9fb27736daaa8af2f9290ce369d0016c011493215634abfa08e7ec96182b27b75a0aa4cfb909459166f11fabdd4ef14d189935fc03c19f8d43ca7836042cc5508b5ffc3670534dca8b93efc3b8351531fb6f40218356d1394cd2ffb2480046e8fa0ca87d19dcf8a75bfebf8f5a6f6f548a7e4410dbc8f985c2588a9aa0db90cb4599d48804b9d79c945720ac19e91ea84cad72ca35bceca3f8fd465f66dcf5526fc8821442f98f123c400b7b400c2df4de6d7b7dbf6b3e18b4c2d1a679f2e20c887bd599131661c7816f3e46807c52b7a35182ae482b11d25b21b0f2dc634b4d9e85caee84d4ce47d5b7a519de773b064831957ae90c4e8f4289941a7335a3d6d3eaad223eb85c16e7b71904a8515bf2e7085f883e8914e5a62f53f4f66dc3db9464ba48d7e63d0445cd9db0c79d3277a1748ba03a12284d80eb7a898441f40f13b9482cc344ee54fd522daa0875fa35825b9bffd19864c0ac5af9296a9288204c90ee5a304d4a523aafaaa072443135d396ab3b3922435daaa91b5f51d9f6615540d032a4d34b7903777eefceb7cce7c479abedb0998d02bb84c1fca4b74ebeec9d3262f07fa609a9a9e1391d5f9630ecb23815fd0966876c26b8ec9e4061825c5fa579fedd2af05aeeea6f5bca7fe33b453d5cb776a814c47f1a9006ce103a36e0bf180ba70eb9de49dec2b6b2bed67f9469dc4498fb881a8d8ab473839023df413b157fbd95185674927f92eb0639eca557a0c87b0a01718a637b05544a37f3211b09ea1c5058dde8e70dd5c1977501c31660d66ef8a9d322d64e18ce279b9352541b71573c5c46c2eaf7f6cb44d54d5c5ac2d515cd3014cdb2feb3762189e7f982769a5c8b5df9b94e52f96bfe9934efb2348eec37434a1735b2cb99fb8b30885664448eb3aa5eca54f8ae53170f0a8b4cd40434609f438bad831c84084847c0a01c410e5408969b488a21c9f94a1e3cbec5b9c1a8e2ec996c29495438903d853f41e2f5a0b2762ba6034bfd94ebf090607132e862fd48e5798b4afc85b57d0fdd32168f034c7bf51b348925666ce7b9aaf4d4e84b07b7149945afac151eaef1b8bcc5c3bb27c815f8cac0a1887e815abeea80bdd649eb282b1c7274f78ea5c24e7ab73a328b60bfd0e3f7581bed8985cf5324fbeebb7a9edbc361110f25fadcb1ab4594a6de51884ca4b553c47fcd38cd3d27cfd68ee5eaed5e3daa9228bffa8e998b213ca4e72dc25b500f7918924771b0ffbf32317d4dae44c0cd37930dff288a1acbe08d10e7d80d5ffe019cffcc2890866ccc4495c953d93a92622ab842a80028e2996df17135b5f906b", 0xffe}], 0x2}, 0x4048081) close(r1) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fremovexattr(r2, &(0x7f0000000080)=@random={'trusted.', '\x00'}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.798975393s ago: executing program 0 (id=994): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.727426175s ago: executing program 0 (id=995): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tgkill(0x0, 0x0, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000240)) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x9c, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "d84d1ce0a1956e72f2a8ea59bc15a79f6629889c1c9e797445951af9a910e978", "7b2b57f84cdc5231b2f7e7b201da4c4f7c7f6df569801d62e278e0bbc133150935f2510b90ec950f1863167f2772a901", "f25a9bc1f9ca9359fc7a0a43354b61422891f1ab82234e88636f094f", {"320c85a847ba33f4828170b512a7edc5", "a352e18d36bd51bce88ef76e7c905c6c"}}}}}}}}}, 0xd6) 3.276575834s ago: executing program 0 (id=996): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xaa, 0xb5, 0x75, 0x40, 0x5ac, 0x8281, 0x2555, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x4, 0x10, 0x10, [{{0x9, 0x4, 0xc7, 0x32, 0x2, 0x11, 0xb6, 0xb7, 0x9, [], [{{0x9, 0x5, 0xb, 0x2, 0x200, 0x52, 0x4, 0x64}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x1, 0x10, 0xb3}}]}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) stat(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000021c0)={{0x0, 0xffffffffffffffff, 0x2, 0x7, 0x8, 0x3, 0x4, 0x40, 0x7, 0x7, 0xffffffff, 0x6, 0x9e, 0x1, 0x9}}) syz_emit_vhci(&(0x7f0000005980)=ANY=[@ANYBLOB="040e070008140fc9005a"], 0xa) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x22e, 0x7d, 0x0, {{0x500, 0xed, 0x0, 0x5000000, {0x1}, 0x0, 0x309, 0xfffffffc, 0x0, 0x1b, '\x04node9{\x00\x00fox$\xff\xff\xff\x81\x02\x001\xff\xce\xd6\x92\b\x00\x00', 0x38, 'pJ\x86\xce\xc6\"\x00}\xfag>\xff\xeb\t\xb51\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00/\xa9Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x01\x00\x00\x00', 0x12, '\xcf\xb6\x00'/18, 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\xf6\xa9cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, r5}}, 0x22e) 3.244868261s ago: executing program 2 (id=997): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00009dd000/0x400000)=nil) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x4000) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1d}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000005c0)=@newtaction={0x80, 0x32, 0x9, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xdf, 0x1, 0x10000000, 0x1, 0x2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80, 0xc3f, 0x2, 0x7, 0x33b}}]}, {0xffffffffffffff45}, {0xc, 0xa}, {0xc, 0x9, {0x0, 0x3}}}}]}]}, 0x80}}, 0x20048084) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x82}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000700)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRESDEC, @ANYRESOCT=r6, @ANYRES16, @ANYRESOCT=r3], 0x20) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffb0}}], 0x1, 0x20044000) 2.952743101s ago: executing program 1 (id=999): socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000180) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x23, &(0x7f00000001c0)={0x300, 0xff, 0x46, 0x3, 0x40, 0x10002, 0x80000000000103, 0x2}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x5, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') writev(r4, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x7, 0x0, &(0x7f0000001b40)=0x0) timer_settime(r5, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r6, &(0x7f0000000640)=[{&(0x7f0000000180)=""/169, 0xfffffd51}], 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) timer_settime(r5, 0x1, &(0x7f0000000140), 0x0) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) 2.834907572s ago: executing program 4 (id=1000): syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x93, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, '\x00', 0xfffc, 0x11, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, [@dstopts={0x3c, 0x0, '\x00', [@pad1, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x0, {0x2, 0x0, 0x43, 0x80, [0x2df8, 0xf7, 0x6, 0x800000010000000]}}, @jumbo={0xc2, 0x4, 0x10}, @ra={0x5, 0x2, 0x7a6}]}], "17c1ff07000000000000e55800000000"}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfff, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) socket$inet6(0xa, 0x4, 0x40004) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f00000005c0)={0x77359400}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000240), 0x2, 0x10802) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000280)) syz_io_uring_setup(0x57d6, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0x84) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18104100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0xc881) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4fa}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x27, 0x5, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) 2.692098935s ago: executing program 1 (id=1001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x44cd, &(0x7f0000000380)={0x0, 0x5331, 0x400, 0x4, 0xfffefffe}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x26, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000040)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x8000, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) io_setup(0x3ff, &(0x7f0000000500)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) 2.539246868s ago: executing program 2 (id=1002): r0 = syz_open_dev$loop(0x0, 0x100047ffffa, 0x122c43) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) getpgrp(0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x800) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) r2 = socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, 0x11, 0xa, 0x3, 0x70bd2d, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 1.988789879s ago: executing program 2 (id=1003): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd30, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x2, 0x6}, {0xfff1, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x2}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f, 0x15020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) 1.508231204s ago: executing program 1 (id=1004): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/150, 0x96, 0x12143, &(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @empty}, 0x2, 0x2, 0x1, 0x3}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) syz_open_dev$usbmon(&(0x7f0000000480), 0xba, 0x280802) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) fcntl$setownex(r0, 0xf, 0x0) 1.203609588s ago: executing program 0 (id=1005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.157614192s ago: executing program 0 (id=1006): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tgkill(0x0, 0x0, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000240)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000003c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x9c, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "d84d1ce0a1956e72f2a8ea59bc15a79f6629889c1c9e797445951af9a910e978", "7b2b57f84cdc5231b2f7e7b201da4c4f7c7f6df569801d62e278e0bbc133150935f2510b90ec950f1863167f2772a901", "f25a9bc1f9ca9359fc7a0a43354b61422891f1ab82234e88636f094f", {"320c85a847ba33f4828170b512a7edc5", "a352e18d36bd51bce88ef76e7c905c6c"}}}}}}}}}, 0xd6) 1.099294216s ago: executing program 1 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000b80)="7d2ad9be5ef132133c875a35a0e0c6741abedcf2abe550a15483d673c4aca6b3095f555ec18b4e7c3af4fc5445336b8496aef024756fbad187e17e3c4a1e46f14983a023af3e99cb5fa156e7b50a5f0fcc52084e4e42b9647b8b89315d90542e17286897ab95c18c3ff82957dbd96720c20f027a3d829578f03ecea23d593bdd3d21cf7b24eb42f0dbc41d2573083a1d7cf629f198ec4d5d8a8c078c90971129405d66995a2d6fee3803d1d20089214997901da6244ab022c37225c601bfbbf165568068a21d911b453dc48a6c15fbd94de731c44f697faa0092947d5ee1052fac26a21499796a60eeadc6d3f47b4ed40da1e547945954502e5ba2b2f9e1906827d9b638ef2cda3a18094058edbb8cf19bad32f6c0ea50d523bf27c29717669e2a804166106fe7d3e6fe6bdbfb68404617b68c8fbcc76f5171f1e4b28e198b8ed5721e7b5c5618d62dc204a10279fb913763e9136cea655a145b3a627854674f6721709ee038d0fef45a3f72f0e407070f96cab42a579d098038f9f5394e4ef9bbfe600dc17c92790f0d183bc06611bed111fccb9edfa47326d6ee3496fc0470f3474c4da49fb9d70165ff43445ffee6924b7aeacee07a108d9fb105ad241b4bb45a086e4656ff8e28830682a0bbed2a60e62eda6f6d0024c24c70026ba26fcdb45480a1184a3124445e82bef96e470c804052575542f9e7734374994c2da41a9c59c0d3525fe90773e81d0cf87ede128e63b541a446abfb8b2d7bfdc5fd1c8314792a8a139ae9210bf6ab0f38ab70e2e55ec2597e281e5379ff5e3f9a5c64440529a0fcf4914809ba1b23b3bea33055cfc0023f04c22452ff2c888ac3b0f679bc102148049efea2e16e90da433ec9810e43141c8331da2581cbce031f9697106764f48b3f78d4d8fd7d8c3f29a4d2e5a7ab23d67d7c4e1a5a8e4a635a07585a417235ab0937ab04147cbea43ff50bd1c2fb959a905e0434638a965cd3998e160ffbe326808f6cb908b6f78cde1544dd5ab6d445f1dcceefccf72544dcdb992a4b2f6153c5b15edbe9df72e40aa6c0ecc3dd46198d65a7bbb14ceb13560a978869e6d9ad84c53032ea441675236d773cabb900e51d0382ac7a99ae1fcbb36f43680fcc585e3662f13850b7e712c0d66a6b463e7af39244e9b3a0730af13ddb1c0888725bd2e9880d003fd253bbe83172e6eb71355549e276655dcd1c954f0b572e86f8f26cdffc3c5b4085764550a29226ee07e13255742161093128f2a9ddf30150aa248b6b04c023eda6c96c5fddafc6f3f4b153afca45cae2301a59b533a857c526802c95527cdc5f2f4cdc55998fbd2b85a1966f91bf5f4fdf36f9a64572f2339a76d3615cf98fa2fd8640dba09dacd9af0e7d1e98edf202ac30db2d0effdbbbc495c28455defde532e6abed9a6a3c48fb0032692584b1d81408e00e16b3330f2aeab9473ca820b090307354f129d4e4d0a88dffd5bdd29b49c4993eb92b96b427463b1d92aa30811b4fdab8ded02a97e93bc65e5a243ea9522389828d8abfece756c425b78948365f6c78394a5b5c5bdfc89dccd0fc5175d91e806003cdcca6bec4943e51555e8269c69a746299bbe4c79d3918da886ad63d4a7362d3b60c51791b7c1c777f180d1869d3628cc252c3a9294caabe7ebf822d4026d1a4e2d867f0e9439bb98561ed96efbe890a02685a052b4251e752a864e9f3fcd3cf55a0df738a409411732eef2a2275c22753b6074f1da7ad87dec45da61c1dd8eb0702a165ef8652f7966a7e41d6d5ae12b5aaff914111119eaf6c47488cee0348dcdc71f40437dd6d39016f7c53feebdfd8afc9a9bb49bd7ca033b60c64c9016a0125b70a5137fab8dd74c92828d9dd1b13e26afa18220a0c5fa155c6f72a74e32a008ceaaeed243a4304b08e5cc94a6f5167050575bb6ce069d5344ab5760fc1b4413608638dcefeba4068eafd8cf89caf87cc8bdcc717ebcbef0da235790ab7caa9873d26d39c0913d921be500b49cc3ffd4acc6daec0052b208b170aa7af7e954bc41f7c12d5b7bfbd92d5e82958438acd4a9c453225111ee22f0a2c3fc9e13989614d710b3f8e43922dda2e439e66f644a8c1a6dfb4b6727c5f171ccc52b629a3612bdb88ac6dabcb6a27137bfa87b2fbf652b89f5197c1799b999a8b08566a7bd17fbed7648d7b0e9c9425e28793060762138a73c99dcc89e1a676f9435ed20c493f7d1da5b60c42303d4d3f6a9f16dad5c5886fcfe7abdf21f90355e8ddf7cea700bc9c77e80a44d43c71e5c5de1f72fb8c1d1812a9ec1b18b96e6be0fda26092f0bebdf815011a6664bd096739969912de9662628cd0568a2c833b45243263af12c7fa5ac11b4c0b5c7ced58dbe26292c204852ec047bd2c4548d298d38c2be4a19192664a4e617ff78f44f20adbf02a8cbc49e2d1093597b156482c250f318c0e3184837b70a14cf5a5a0a1639d1e50fe878ae5c8f81ad0784e9117557247bec33dc25634ce7f95c9eb7f591508ed4d8a7885472a2d2df8ab4ee420dd6019ebe0965458d6f9af0f8a5724950abec580fdc10fbfb735e0f88f90f9b1dd33e57aec531f843ccbbbb3041b39209715d95b66e72aa4847a6ae94d5b252a71a1b740c44cda6666522920f7ceb1679d88f660e912ce3b2754518d602a742ea1bb9166ffc4fa864cab5c986bb75a4ab9ac6b0a4e397c3a9848b827ca2ebf73695e4da36316901b3f019a7fb206615759069d5dc835d106b96371130387f0d082db6e4d41af28bf71c4f84b890f9241ea3b9130595cfd73cf2082ab346e9e06a64c12f98e198b479d117120943e4fe5dbaddcbc69d648704e6a7d43816faf576c0c255b77d22393f9a11ad82083975d5652bd142b71fec781545a97a0719afeee60cd0cca9d4d3d06e8c003e0d4a628aaaaaab53112bb6577b828b93bc92106cf931f12f208019e024a63bb27d32f5fa722dca620cc08d5f7b82bd2cfd16eef493a760436ee94984f4fe591fcc956addd6d980af9639d7228dfedc3bb83d708d21859751fc0775bb636f0e5b343b20834a81da5f1728d9852d58d020e64fab81dc5f5ab876bdf3346da79f57409985e894433132cd3e678c61f22948307ee3e4f27ae9d1a65adb910fd38ad84e94dcff0f5d6fb6a59c2d2ac8ddcb1b9f4ef8fe44ace82ef17541374ea86e6693ed6d79c3f5ff190f17b1718f39c9ea3d08373173f5cee8463300a8b9b76dac06fc78b39ce9fe85ffc00e4dbb6cd5f21f21c6be981375ea5bed74816e3d45226e463a5dadf8b59c813801e463c80715a2901cc38db37b8e7b69536d518051d5edc6a84a3ede41e9a7ceec9961c1adb09b8ea85d2efe09fe4e2223ca4774ef5be4f2a84f83688017cbc35bfc67c4890e0e0e9330df65878a04dbc736bd7ef781adf18e1c6979957372f802e91962e8076acf4903c19220af910f7c9640e88911e478592cdf6215b93b20f63aeb0c4c7519a3409004184f85f07394ccaf0401a63346f8cc6468897b0e8a0d40e628b99d8f917ee8a815cd6bf65e00e7d08264868143fa83c50551cbc6c51ed5c2c11501528b13f36e9e3c207200dbb19b3734ea50528dd7ab59c2424566ae96efdae7a62b13f4966a81be09888bc72a8d302566eb33406a67bb290bba331a769988e09c0c5ea0af1ecd91973545b1d30b85c14afa90edc791498a08f2f26e4a1535c878c0e34d691c9495bf0bd10e76ab0f53a5fa01541d890030c11e2aaa491fe0eee66584d18e4c542529ecaf93ca886802964860893deb7ac8a8b5cb3332c94902a413be6e875e6aa8c5f39cd8278f4515554a60b9cb318c043d601e6ef828fe158638d37cecd44fa574a284b5fb39342c090a7471177994b7e5cfd79612bb8b3fb9d3a3d42a520bca7582744570bff483edc8b014b96a8274d494cfd32e30b0b35ac63cd5c6d31fbdc889c9f97c7d5228659ad873b8369fc1096ed99d3da3c47f656934478052853b78ad10f7ae7a6ab3363af81303e3da3853a5a5a68008585bc4b5d43185175fea2a70fb6a591ef7ff747979d864a51dd690aef6c7411cc5600e5331c261cd6031d03c03ab280182e1df653996da530b1a958f0a1eb9e380f162d7b0bffc20fefa9cae92bc187665035d2cafd27f8701f0b651fe8407828f7da526552406f157093402192894c32b1ee07acc08ad65a0444084e02639f92d05a0e3f2bde8b94b8a526f83e8b66d0859fa78d112f05554577137fe712dbfb2422a179db5407cf12eccc1871e5391a30cedbb61b03d93e77f3d6d855d5ee397fbeebd11c3d65b9b2205e401561416b9c2a7c31f59b528e8d8f8f97004d488c9d73208eb7877c08615c17cf3a63c41a56aa2bc5200bbe8dc003a02aa61edd733f832c7a9d0cb29a1362ea1a69d87126cdedd08a057f68a691bb0ef9fc12d2a2409420f8d7d3702e14e48a17aa8527841bfc050d1096dbb9fb27736daaa8af2f9290ce369d0016c011493215634abfa08e7ec96182b27b75a0aa4cfb909459166f11fabdd4ef14d189935fc03c19f8d43ca7836042cc5508b5ffc3670534dca8b93efc3b8351531fb6f40218356d1394cd2ffb2480046e8fa0ca87d19dcf8a75bfebf8f5a6f6f548a7e4410dbc8f985c2588a9aa0db90cb4599d48804b9d79c945720ac19e91ea84cad72ca35bceca3f8fd465f66dcf5526fc8821442f98f123c400b7b400c2df4de6d7b7dbf6b3e18b4c2d1a679f2e20c887bd599131661c7816f3e46807c52b7a35182ae482b11d25b21b0f2dc634b4d9e85caee84d4ce47d5b7a519de773b064831957ae90c4e8f4289941a7335a3d6d3eaad223eb85c16e7b71904a8515bf2e7085f883e8914e5a62f53f4f66dc3db9464ba48d7e63d0445cd9db0c79d3277a1748ba03a12284d80eb7a898441f40f13b9482cc344ee54fd522daa0875fa35825b9bffd19864c0ac5af9296a9288204c90ee5a304d4a523aafaaa072443135d396ab3b3922435daaa91b5f51d9f6615540d032a4d34b7903777eefceb7cce7c479abedb0998d02bb84c1fca4b74ebeec9d3262f07fa609a9a9e1391d5f9630ecb23815fd0966876c26b8ec9e4061825c5fa579fedd2af05aeeea6f5bca7fe33b453d5cb776a814c47f1a9006ce103a36e0bf180ba70eb9de49dec2b6b2bed67f9469dc4498fb881a8d8ab473839023df413b157fbd95185674927f92eb0639eca557a0c87b0a01718a637b05544a37f3211b09ea1c5058dde8e70dd5c1977501c31660d66ef8a9d322d64e18ce279b9352541b71573c5c46c2eaf7f6cb44d54d5c5ac2d515cd3014cdb2feb3762189e7f982769a5c8b5df9b94e52f96bfe9934efb2348eec37434a1735b2cb99fb8b30885664448eb3aa5eca54f8ae53170f0a8b4cd40434609f438bad831c84084847c0a01c410e5408969b488a21c9f94a1e3cbec5b9c1a8e2ec996c29495438903d853f41e2f5a0b2762ba6034bfd94ebf090607132e862fd48e5798b4afc85b57d0fdd32168f034c7bf51b348925666ce7b9aaf4d4e84b07b7149945afac151eaef1b8bcc5c3bb27c815f8cac0a1887e815abeea80bdd649eb282b1c7274f78ea5c24e7ab73a328b60bfd0e3f7581bed8985cf5324fbeebb7a9edbc361110f25fadcb1ab4594a6de51884ca4b553c47fcd38cd3d27cfd68ee5eaed5e3daa9228bffa8e998b213ca4e72dc25b500f7918924771b0ffbf32317d4dae44c0cd37930dff288a1acbe08d10e7d80d5ffe019cffcc2890866ccc4495c953d93a92622ab842a80028e2996df17135b5f906b", 0xffe}], 0x2}, 0x4048081) close(r1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fremovexattr(r2, &(0x7f0000000080)=@random={'trusted.', '\x00'}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 344.17734ms ago: executing program 2 (id=1008): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x7, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x10}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) signalfd4(r2, &(0x7f00000002c0)={[0x8]}, 0x8, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffe, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 188.597313ms ago: executing program 1 (id=1009): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r1, 0x1, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 70.370718ms ago: executing program 1 (id=1010): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r1, &(0x7f0000000380)=ANY=[@ANYRES8=r1], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000002c0)=@multiplanar_fd={0xc3b4eab, 0xc, 0x4, 0x40, 0x7, {0x77359400}, {0x5, 0x2, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xac14, 0x4, {0x0}, 0xfffffffe}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$nci(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="500105010c0000000303000409056dac131b1126baa0c7c8a90c3a824b51746b39f2b0295b6999a3cee94bac3b6ad3a4472906319cbee76bb972143bf81dbf25e67a468298c2cd66ee042b490d38191a80eac4a0c3669195482e070fa2157afc927a66cf21fac07d1e662e320e134bd9cde6bc84789344"], 0x83) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x10, 0x24, 0x8003, 0x1000, 0x8000, 0x4, 0x10000, 0x8, r4}, 0x20) 0s ago: executing program 2 (id=1011): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x1f, "06c4ce00000000006eb5e52829e7cc839300000400"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x1000000000000, 0x0, 0x3, 0x4000, 0x0, {0x200000000000003, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, r4, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000001240)={0x50, 0x0, r3, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r5, 0x401070c9, &(0x7f0000000000)) chdir(&(0x7f0000000240)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b50000000000000611014000000000062010c000000000095000900"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x404, 0x2, 0x8000013, 0xa7, 0xffffffa7, 0x8000b, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) readlink(0x0, &(0x7f00000005c0)=""/81, 0x51) socket$netlink(0x10, 0x3, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r7, 0x40096100, &(0x7f0000000880)={{}, 0x6}) kernel console output (not intermixed with test programs): y. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.981076][ T5927] usb 4-1: USB disconnect, device number 16 [ 301.834637][ T5962] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 301.996233][ T5962] usb 4-1: Using ep0 maxpacket: 16 [ 302.177228][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 302.245028][ T5962] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 302.289633][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.312649][ T5962] usb 4-1: Product: syz [ 302.325407][ T5962] usb 4-1: Manufacturer: syz [ 302.332521][ T5962] usb 4-1: SerialNumber: syz [ 302.352750][ T5962] usb 4-1: config 0 descriptor?? [ 302.415106][ T5962] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 302.587217][ T8574] netlink: 'syz.3.612': attribute type 16 has an invalid length. [ 302.611113][ T8574] netlink: 'syz.3.612': attribute type 17 has an invalid length. [ 302.792860][ T8574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.858986][ T5962] usb 4-1: USB disconnect, device number 17 [ 302.865124][ T49] usb 4-1: Failed to submit usb control message: -71 [ 302.874658][ T49] usb 4-1: unable to send the bmi data to the device: -71 [ 302.893331][ T49] usb 4-1: unable to get target info from device [ 302.910365][ T49] usb 4-1: could not get target info (-71) [ 302.983521][ T49] usb 4-1: could not probe fw (-71) [ 304.758310][ T43] libceph: connect (1)[b::]:6789 error -101 [ 304.775887][ T5962] libceph: connect (1)[c::]:6789 error -101 [ 304.777314][ T43] libceph: mon0 (1)[b::]:6789 connect error [ 304.782052][ T5962] libceph: mon0 (1)[c::]:6789 connect error [ 304.825799][ T8614] ceph: No mds server is up or the cluster is laggy [ 304.838361][ T8616] ceph: No mds server is up or the cluster is laggy [ 305.049624][ T43] libceph: connect (1)[b::]:6789 error -101 [ 305.074769][ T5962] libceph: connect (1)[c::]:6789 error -101 [ 305.629659][ T5962] libceph: mon0 (1)[c::]:6789 connect error [ 305.648066][ T43] libceph: mon0 (1)[b::]:6789 connect error [ 305.658189][ T8619] sd 0:0:1:0: PR command failed: 1026 [ 305.663582][ T8619] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 305.734246][ T8631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.759261][ T8619] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 305.905425][ T5912] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 306.097590][ T5912] usb 2-1: unable to get BOS descriptor or descriptor too short [ 306.111649][ T5912] usb 2-1: not running at top speed; connect to a high speed hub [ 306.140406][ T8635] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 306.140795][ T5912] usb 2-1: config 7 has an invalid interface number: 199 but max is 0 [ 306.214922][ T5912] usb 2-1: config 7 has no interface number 0 [ 306.222519][ T5912] usb 2-1: config 7 interface 199 altsetting 50 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 306.234505][ T5912] usb 2-1: config 7 interface 199 has no altsetting 0 [ 306.255902][ T5912] usb 2-1: New USB device found, idVendor=05ac, idProduct=8281, bcdDevice=25.55 [ 306.265096][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.273652][ T5912] usb 2-1: Product: syz [ 306.303414][ T5912] usb 2-1: Manufacturer: syz [ 306.314654][ T5912] usb 2-1: SerialNumber: syz [ 306.334253][ T8630] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.554858][ T43] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 306.594549][ T5912] usb 2-1: USB disconnect, device number 30 [ 306.724637][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 306.744690][ T5927] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 306.774622][ T8635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.623'. [ 306.813835][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 306.975341][ T43] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 306.983005][ T43] usb 1-1: can't read configurations, error -71 [ 307.058173][ T5927] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 307.074717][ T5927] usb 3-1: config 0 has no interface number 0 [ 307.092224][ T5927] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 307.102920][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.113232][ T5927] usb 3-1: Product: syz [ 307.121491][ T5927] usb 3-1: Manufacturer: syz [ 307.127610][ T5927] usb 3-1: SerialNumber: syz [ 307.169151][ T5927] usb 3-1: config 0 descriptor?? [ 309.354617][ T43] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 309.538262][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 309.559064][ T8672] netlink: ct family unspecified [ 309.564083][ T8672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.969123][ T8670] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 310.034545][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 310.043065][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 310.062767][ T43] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 310.072254][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.081258][ T43] usb 1-1: Product: syz [ 310.086455][ T43] usb 1-1: Manufacturer: syz [ 310.091409][ T43] usb 1-1: SerialNumber: syz [ 310.106324][ T43] usb 1-1: config 0 descriptor?? [ 310.244588][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 310.357995][ T8663] netlink: 'syz.0.629': attribute type 16 has an invalid length. [ 310.732914][ T43] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 310.924129][ T8663] netlink: 'syz.0.629': attribute type 17 has an invalid length. [ 311.025723][ T5927] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 311.074947][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 311.100563][ T5927] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 311.113628][ T5927] asix 3-1:0.251: probe with driver asix failed with error -71 [ 311.123354][ T24] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 311.173274][ T5927] usb 3-1: USB disconnect, device number 28 [ 311.294166][ T8663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.319871][ T4588] usb 1-1: Failed to submit usb control message: -71 [ 311.369132][ T24] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 311.428935][ T8688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.449920][ T4588] usb 1-1: unable to send the bmi data to the device: -71 [ 311.462500][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.473075][ T5964] usb 1-1: USB disconnect, device number 30 [ 311.479157][ T4588] usb 1-1: unable to get target info from device [ 311.487157][ T4588] usb 1-1: could not get target info (-71) [ 311.493887][ T24] usb 2-1: Product: syz [ 311.498146][ T4588] usb 1-1: could not probe fw (-71) [ 311.505841][ T24] usb 2-1: Manufacturer: syz [ 311.511388][ T24] usb 2-1: SerialNumber: syz [ 311.517698][ T24] usb 2-1: config 0 descriptor?? [ 311.658104][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 311.680536][ T24] usb 2-1: setting power ON [ 311.724681][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 311.753118][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 311.787345][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 311.828018][ T8670] dvb-usb: bulk message failed: -22 (3/0) [ 312.388914][ T24] usb 2-1: media controller created [ 312.455434][ T5912] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 312.486399][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.571147][ T24] usb 2-1: selecting invalid altsetting 6 [ 312.663962][ T8697] ceph: No mds server is up or the cluster is laggy [ 312.670880][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 312.678412][ T24] usb 2-1: digital interface selection failed (-22) [ 312.689528][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 312.696890][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 312.720676][ T5912] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 312.731640][ T5912] usb 3-1: config 0 has no interface number 0 [ 312.739423][ T6783] libceph: connect (1)[b::]:6789 error -101 [ 312.749386][ T6783] libceph: mon0 (1)[b::]:6789 connect error [ 312.762489][ T24] usb 2-1: setting power OFF [ 312.767313][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 312.775570][ T5962] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 312.796065][ T5912] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 312.815566][ T8698] ceph: No mds server is up or the cluster is laggy [ 312.832738][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.857437][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 312.886516][ T5912] usb 3-1: Product: syz [ 312.892327][ T24] (NULL device *): no alternate interface [ 312.908131][ T5912] usb 3-1: Manufacturer: syz [ 312.934656][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 312.942544][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.960064][ T5962] usb 1-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 313.003393][ T5912] usb 3-1: SerialNumber: syz [ 313.012212][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.042450][ T5912] usb 3-1: config 0 descriptor?? [ 313.056036][ T5962] usb 1-1: config 0 descriptor?? [ 313.229928][ T8710] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 313.472879][ T8701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.482591][ T8701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.504795][ T1913] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 313.512605][ T5962] usbhid 1-1:0.0: can't add hid device: -71 [ 313.523458][ T5962] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 313.539538][ T5962] usb 1-1: USB disconnect, device number 31 [ 313.664535][ T1913] usb 5-1: Using ep0 maxpacket: 32 [ 313.818234][ T8710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.640'. [ 313.918107][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 313.958767][ T8713] netlink: ct family unspecified [ 313.963850][ T8713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.236689][ T1913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 314.247229][ T1913] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 314.264773][ T1913] usb 5-1: can't read configurations, error -71 [ 315.321152][ T5912] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 315.331324][ T5912] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 315.345033][ T5912] asix 3-1:0.251: probe with driver asix failed with error -71 [ 315.366171][ T5912] usb 3-1: USB disconnect, device number 29 [ 316.482202][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 316.745500][ T8743] sd 0:0:1:0: PR command failed: 1026 [ 316.751101][ T8743] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 316.758000][ T8743] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 316.767414][ T24] usb 2-1: USB disconnect, device number 31 [ 316.831828][ T8738] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 316.931917][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.941593][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.989890][ T30] audit: type=1400 audit(1756953582.314:298): avc: denied { read write } for pid=8741 comm="syz.4.646" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 317.072767][ T30] audit: type=1400 audit(1756953582.324:299): avc: denied { open } for pid=8741 comm="syz.4.646" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 317.344575][ T6783] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 317.352829][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 317.574587][ T6783] usb 3-1: device descriptor read/64, error -32 [ 317.834687][ T6783] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 318.044531][ T6783] usb 3-1: Using ep0 maxpacket: 8 [ 318.071923][ T6783] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 318.245121][ T8759] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 318.337140][ T6783] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 318.903181][ T5912] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 319.094836][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 319.268124][ T5912] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 319.363244][ T5912] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 319.392694][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.408060][ T5912] usb 1-1: Product: syz [ 319.412246][ T5912] usb 1-1: Manufacturer: syz [ 319.417372][ T5912] usb 1-1: SerialNumber: syz [ 319.514206][ T5912] usb 1-1: config 0 descriptor?? [ 319.549416][ T5912] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 319.559729][ T5912] usb 1-1: setting power ON [ 319.564237][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 319.572631][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 319.584140][ T5912] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 319.605018][ T5912] usb 1-1: media controller created [ 319.631160][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.702945][ T5912] usb 1-1: selecting invalid altsetting 6 [ 319.721687][ T5912] usb 1-1: digital interface selection failed (-22) [ 319.740513][ T5912] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 319.765214][ T5927] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 319.838446][ T5912] usb 1-1: setting power OFF [ 319.844319][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 319.852109][ T5912] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 319.855140][ T6783] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 319.870570][ T5912] (NULL device *): no alternate interface [ 319.910441][ T5912] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 319.976843][ T8770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.007584][ T8771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.653'. [ 320.063545][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 320.075463][ T6783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.114050][ T5927] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 320.152477][ T6783] usb 3-1: config 0 descriptor?? [ 320.286420][ T5927] usb 4-1: config 1 has no interface number 0 [ 320.479084][ T6783] usb 3-1: can't set config #0, error -71 [ 320.487490][ T5927] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 320.510212][ T6783] usb 3-1: USB disconnect, device number 31 [ 320.533379][ T5927] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 320.553434][ T5927] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 320.754631][ T5927] usb 4-1: config 1 interface 105 has no altsetting 0 [ 320.769920][ T8775] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 320.798693][ T5927] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08 [ 320.808124][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.844905][ T5927] usb 4-1: Product: syz [ 320.856790][ T5927] usb 4-1: Manufacturer: syz [ 320.861595][ T5927] usb 4-1: SerialNumber: syz [ 320.872954][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 320.890088][ T8765] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 320.929601][ T8781] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 321.034636][ T5912] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 321.106799][ T5927] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 321.251165][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 321.423148][ T8775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.655'. [ 321.442111][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 321.450636][ T5912] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 321.458448][ T5912] usb 3-1: can't read configurations, error -71 [ 322.471198][ T1913] usb 1-1: USB disconnect, device number 32 [ 322.759723][ T30] audit: type=1400 audit(1756953588.164:300): avc: denied { listen } for pid=8799 comm="syz.2.662" lport=38810 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 322.884812][ T30] audit: type=1400 audit(1756953588.264:301): avc: denied { accept } for pid=8799 comm="syz.2.662" lport=38810 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 322.925188][ T5857] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 323.072489][ T5927] usb 4-1: USB disconnect, device number 18 [ 323.437606][ T8815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.514718][ T6783] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 324.094517][ T6783] usb 5-1: Using ep0 maxpacket: 16 [ 324.101488][ T6783] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 324.133801][ T6783] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 324.145447][ T6783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.153487][ T6783] usb 5-1: Product: syz [ 324.159296][ T6783] usb 5-1: Manufacturer: syz [ 324.163939][ T6783] usb 5-1: SerialNumber: syz [ 324.538981][ T8803] netlink: 344 bytes leftover after parsing attributes in process `syz.2.662'. [ 324.553080][ T6783] usb 5-1: config 0 descriptor?? [ 324.582433][ T6783] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 324.955947][ T8809] netlink: 'syz.4.663': attribute type 16 has an invalid length. [ 324.981596][ T8809] netlink: 'syz.4.663': attribute type 17 has an invalid length. [ 325.076014][ T8809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.191214][ T5927] usb 5-1: USB disconnect, device number 32 [ 325.199834][ T13] usb 5-1: Failed to submit usb control message: -71 [ 325.251393][ T8837] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 325.341632][ T13] usb 5-1: unable to send the bmi data to the device: -71 [ 325.349158][ T13] usb 5-1: unable to get target info from device [ 325.363130][ T13] usb 5-1: could not get target info (-71) [ 325.376026][ T13] usb 5-1: could not probe fw (-71) [ 325.515048][ T5919] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 325.695568][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 325.703517][ T8837] netlink: 32 bytes leftover after parsing attributes in process `syz.2.670'. [ 325.722906][ T5919] usb 3-1: unable to get BOS descriptor or descriptor too short [ 325.740138][ T5919] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 325.759202][ T5919] usb 3-1: can't read configurations, error -71 [ 326.153290][ T5927] libceph: connect (1)[b::]:6789 error -101 [ 326.275573][ T5927] libceph: mon0 (1)[b::]:6789 connect error [ 326.430850][ T8844] ceph: No mds server is up or the cluster is laggy [ 326.460061][ T5927] libceph: connect (1)[b::]:6789 error -101 [ 326.504751][ T5927] libceph: mon0 (1)[b::]:6789 connect error [ 327.188129][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 327.294864][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 327.307080][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 327.429619][ T5919] libceph: connect (1)[b::]:6789 error -101 [ 327.444875][ T5919] libceph: mon0 (1)[b::]:6789 connect error [ 327.664912][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 327.670925][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 327.751789][ T1913] libceph: connect (1)[b::]:6789 error -101 [ 327.775712][ T1913] libceph: mon0 (1)[b::]:6789 connect error [ 327.786141][ T8861] ceph: No mds server is up or the cluster is laggy [ 327.810639][ T8865] ceph: No mds server is up or the cluster is laggy [ 327.820653][ T8874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.479582][ T8882] befs: (nullb0): No write support. Marking filesystem read-only [ 328.499763][ T8882] befs: (nullb0): invalid magic header [ 328.950952][ T8893] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 329.214621][ T5919] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 329.244555][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 329.251394][ T5857] Bluetooth: hci5: command 0x1003 tx timeout [ 329.385843][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 329.399792][ T30] audit: type=1400 audit(1756953594.794:302): avc: denied { mount } for pid=8903 comm="syz.0.686" name="/" dev="overlay" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 329.441695][ T8893] netlink: 32 bytes leftover after parsing attributes in process `syz.1.683'. [ 329.482750][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 329.497445][ T30] audit: type=1400 audit(1756953594.804:303): avc: denied { link } for pid=8903 comm="syz.0.686" name="#3" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 329.498536][ T5919] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 329.529852][ T30] audit: type=1400 audit(1756953594.804:304): avc: denied { rename } for pid=8903 comm="syz.0.686" name="#4" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 329.647072][ T5919] usb 2-1: can't read configurations, error -71 [ 329.762691][ T8914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.562674][ T5927] libceph: connect (1)[b::]:6789 error -101 [ 330.569637][ T5927] libceph: mon0 (1)[b::]:6789 connect error [ 330.805042][ T8927] sd 0:0:1:0: PR command failed: 1026 [ 330.813906][ T8927] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 330.821008][ T8927] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 330.870467][ T5927] libceph: connect (1)[b::]:6789 error -101 [ 331.069602][ T8932] befs: (nullb0): No write support. Marking filesystem read-only [ 331.080251][ T8932] befs: (nullb0): invalid magic header [ 331.143224][ T8924] ceph: No mds server is up or the cluster is laggy [ 331.179995][ T5927] libceph: mon0 (1)[b::]:6789 connect error [ 331.828914][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 332.150063][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 332.168872][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 332.192988][ T24] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 332.205751][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.236164][ T24] usb 5-1: Product: syz [ 332.401297][ T24] usb 5-1: Manufacturer: syz [ 333.098243][ T24] usb 5-1: SerialNumber: syz [ 333.303462][ T24] usb 5-1: config 0 descriptor?? [ 333.381633][ T24] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 333.518075][ T8941] netlink: 'syz.4.696': attribute type 16 has an invalid length. [ 333.535868][ T8941] netlink: 'syz.4.696': attribute type 17 has an invalid length. [ 333.610614][ T8941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.662929][ T5919] usb 5-1: USB disconnect, device number 33 [ 333.664068][ T7430] usb 5-1: Failed to submit usb control message: -71 [ 333.756064][ T7430] usb 5-1: unable to send the bmi data to the device: -71 [ 333.784877][ T7430] usb 5-1: unable to get target info from device [ 333.793005][ T7430] usb 5-1: could not get target info (-71) [ 333.806233][ T7430] usb 5-1: could not probe fw (-71) [ 334.618923][ T8981] befs: (nullb0): No write support. Marking filesystem read-only [ 334.628549][ T8981] befs: (nullb0): invalid magic header [ 334.988599][ T8986] befs: (nullb0): No write support. Marking filesystem read-only [ 335.001268][ T8986] befs: (nullb0): invalid magic header [ 335.133047][ T8990] netlink: 44 bytes leftover after parsing attributes in process `syz.1.708'. [ 337.834700][ T5927] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 338.298899][ T9036] netlink: 32 bytes leftover after parsing attributes in process `syz.0.715'. [ 338.396307][ T5927] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 338.414301][ T5927] usb 2-1: config 0 has no interface number 0 [ 338.426288][ T5927] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 338.435739][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.443880][ T5927] usb 2-1: Product: syz [ 338.452069][ T5927] usb 2-1: Manufacturer: syz [ 338.468629][ T5927] usb 2-1: SerialNumber: syz [ 338.894791][ T5927] usb 2-1: config 0 descriptor?? [ 339.383442][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 339.389583][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 339.422002][ T24] libceph: connect (1)[b::]:6789 error -101 [ 339.464134][ T9046] ceph: No mds server is up or the cluster is laggy [ 339.684710][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 339.720835][ T9049] ceph: No mds server is up or the cluster is laggy [ 339.842145][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 339.896526][ T9056] netlink: ct family unspecified [ 339.901968][ T9056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.175209][ T24] libceph: connect (1)[c::]:6789 error -101 [ 340.240472][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 340.252722][ T5964] libceph: connect (1)[b::]:6789 error -101 [ 340.261144][ T5964] libceph: mon0 (1)[b::]:6789 connect error [ 340.318741][ T30] audit: type=1400 audit(1756953605.724:305): avc: denied { nlmsg_write } for pid=9057 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 340.535713][ T9060] nbd0: detected capacity change from 0 to 63 [ 340.586551][ T9061] block nbd0: NBD_DISCONNECT [ 340.626129][ T9061] block nbd0: Disconnected due to user request. [ 340.737792][ T9061] block nbd0: shutting down sockets [ 340.824636][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.833880][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 340.842797][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.851894][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 340.859721][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.868762][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 340.876563][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.885603][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 340.894353][ T7323] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.906246][ T7323] Buffer I/O error on dev nbd0, logical block 0, async page read [ 340.922655][ T7323] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.939386][ T7323] Buffer I/O error on dev nbd0, logical block 1, async page read [ 340.952265][ T9064] bond1: entered promiscuous mode [ 340.961318][ T30] audit: type=1400 audit(1756953606.364:306): avc: denied { read } for pid=9062 comm="syz.4.722" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 340.988389][ T7323] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.006293][ T9064] bond1: entered allmulticast mode [ 341.018768][ T7323] Buffer I/O error on dev nbd0, logical block 2, async page read [ 341.027123][ T9064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.053275][ T7323] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.069721][ T30] audit: type=1400 audit(1756953606.364:307): avc: denied { open } for pid=9062 comm="syz.4.722" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 341.107179][ T7323] Buffer I/O error on dev nbd0, logical block 3, async page read [ 341.132159][ T7323] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.173105][ T30] audit: type=1400 audit(1756953606.364:308): avc: denied { ioctl } for pid=9062 comm="syz.4.722" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 341.198637][ T7323] Buffer I/O error on dev nbd0, logical block 0, async page read [ 341.213472][ T7323] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.233072][ T7323] Buffer I/O error on dev nbd0, logical block 1, async page read [ 341.241030][ T30] audit: type=1400 audit(1756953606.394:309): avc: denied { set_context_mgr } for pid=9062 comm="syz.4.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 341.284701][ T5927] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 341.297687][ T5927] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 341.301440][ T7323] ldm_validate_partition_table(): Disk read failed. [ 341.312630][ T5927] asix 2-1:0.251: probe with driver asix failed with error -71 [ 341.354203][ T5927] usb 2-1: USB disconnect, device number 34 [ 341.387753][ T7323] Dev nbd0: unable to read RDB block 0 [ 341.434930][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 341.752014][ T7323] nbd0: unable to read partition table [ 342.319713][ T7323] ldm_validate_partition_table(): Disk read failed. [ 342.336277][ T7323] Dev nbd0: unable to read RDB block 0 [ 342.343905][ T7323] nbd0: unable to read partition table [ 342.404522][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 342.492239][ T24] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 342.607243][ T24] usb 4-1: config 1 has no interface number 0 [ 342.613381][ T24] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 343.241265][ T24] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 343.319895][ T24] usb 4-1: config 1 interface 105 has no altsetting 0 [ 343.334158][ T24] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08 [ 343.345996][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.354019][ T24] usb 4-1: Product: syz [ 343.471402][ T24] usb 4-1: Manufacturer: syz [ 343.492457][ T24] usb 4-1: SerialNumber: syz [ 343.553340][ T9070] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 343.560693][ T9070] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 343.649372][ T9105] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 344.060591][ T5927] libceph: connect (1)[b::]:6789 error -101 [ 344.068010][ T5927] libceph: mon0 (1)[b::]:6789 connect error [ 344.076831][ T9112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.731'. [ 344.087903][ T9109] ceph: No mds server is up or the cluster is laggy [ 344.158646][ T5927] libceph: connect (1)[b::]:6789 error -101 [ 344.164634][ T5962] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 344.234623][ T5927] libceph: mon0 (1)[b::]:6789 connect error [ 344.247639][ T9070] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 344.254973][ T9070] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 344.366423][ T5962] usb 3-1: Using ep0 maxpacket: 8 [ 344.375874][ T5962] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 344.390365][ T5962] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 344.403266][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.474369][ T24] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 344.498301][ T5962] usb 3-1: Product: syz [ 344.575226][ T24] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 344.597168][ T5962] usb 3-1: Manufacturer: syz [ 344.629658][ T24] usb 4-1: USB disconnect, device number 19 [ 344.672423][ T5962] usb 3-1: SerialNumber: syz [ 345.050111][ T5962] usb 3-1: config 0 descriptor?? [ 345.067993][ T5962] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 345.097276][ T5962] usb 3-1: setting power ON [ 345.101795][ T5962] dvb-usb: bulk message failed: -22 (2/0) [ 345.158280][ T5962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 345.181237][ T5962] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 345.207870][ T5962] usb 3-1: media controller created [ 345.242067][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.522544][ T5962] usb 3-1: selecting invalid altsetting 6 [ 345.540298][ T5962] usb 3-1: digital interface selection failed (-22) [ 345.551804][ T5962] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 345.562213][ T5962] usb 3-1: setting power OFF [ 345.606043][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 345.630877][ T5962] dvb-usb: bulk message failed: -22 (2/0) [ 345.642211][ T5962] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 345.709070][ T5962] (NULL device *): no alternate interface [ 346.006435][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 346.111247][ T9133] /dev/nullb0: Can't open blockdev [ 346.338015][ T30] audit: type=1400 audit(1756953611.744:310): avc: denied { ioctl } for pid=9135 comm="syz.0.738" path="socket:[24159]" dev="sockfs" ino=24159 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.384542][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 346.635623][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.681502][ T24] usb 5-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 346.721938][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.775801][ T24] usb 5-1: config 0 descriptor?? [ 347.083783][ T5962] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 347.153758][ T5962] usb 3-1: USB disconnect, device number 36 [ 347.194801][ T5912] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 347.208403][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.247722][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.340279][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 347.366042][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 347.375149][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 347.394924][ T24] usb 5-1: USB disconnect, device number 34 [ 347.414865][ T9140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.739'. [ 347.526909][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 347.804627][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 347.822968][ T5912] usb 1-1: can't read configurations, error -71 [ 348.109904][ T9165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.471102][ T9167] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 348.762984][ T6783] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 349.056999][ T9180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.751'. [ 349.323160][ T6783] usb 2-1: Using ep0 maxpacket: 8 [ 349.334727][ T6783] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 349.350653][ T6783] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 349.390465][ T6783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.444578][ T24] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 349.846230][ T6783] usb 2-1: Product: syz [ 349.996533][ T6783] usb 2-1: Manufacturer: syz [ 350.013473][ T6783] usb 2-1: SerialNumber: syz [ 350.039859][ T6783] usb 2-1: config 0 descriptor?? [ 350.076472][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 350.114668][ T5912] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 350.136359][ T6783] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 350.151738][ T6783] usb 2-1: setting power ON [ 350.156447][ T6783] dvb-usb: bulk message failed: -22 (2/0) [ 350.166893][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 350.206758][ T6783] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 350.224907][ T6783] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 350.287016][ T5912] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 350.295728][ T24] usb 1-1: config 7 has an invalid interface number: 199 but max is 0 [ 350.295743][ T5912] usb 4-1: config 0 has no interface number 0 [ 350.310662][ T5912] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 350.322046][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.344738][ T6783] usb 2-1: media controller created [ 350.350579][ T5912] usb 4-1: Product: syz [ 350.360669][ T24] usb 1-1: config 7 has no interface number 0 [ 350.364807][ T5912] usb 4-1: Manufacturer: syz [ 350.389303][ T24] usb 1-1: config 7 interface 199 altsetting 50 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 350.391775][ T5912] usb 4-1: SerialNumber: syz [ 350.406562][ T6783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.419100][ T24] usb 1-1: config 7 interface 199 has no altsetting 0 [ 350.437287][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8281, bcdDevice=25.55 [ 350.465096][ T9184] netlink: 'syz.2.753': attribute type 10 has an invalid length. [ 350.474533][ T9184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.753'. [ 350.484278][ T30] audit: type=1400 audit(1756953615.864:311): avc: denied { create } for pid=9183 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 350.507359][ T9184] dummy0: entered promiscuous mode [ 350.513121][ T9184] bridge0: port 3(dummy0) entered blocking state [ 350.524170][ T5912] usb 4-1: config 0 descriptor?? [ 350.524617][ T9184] bridge0: port 3(dummy0) entered disabled state [ 350.547083][ T30] audit: type=1400 audit(1756953615.864:312): avc: denied { ioctl } for pid=9183 comm="syz.2.753" path="socket:[24265]" dev="sockfs" ino=24265 ioctlcmd=0x8948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 350.572032][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.595695][ T9184] dummy0: entered allmulticast mode [ 350.600639][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.611365][ T6783] usb 2-1: selecting invalid altsetting 6 [ 350.611881][ T9184] bridge0: port 3(dummy0) entered blocking state [ 350.624762][ T9184] bridge0: port 3(dummy0) entered forwarding state [ 350.645055][ T24] usb 1-1: Product: syz [ 350.649477][ T6783] usb 2-1: digital interface selection failed (-22) [ 350.671565][ T30] audit: type=1400 audit(1756953615.864:313): avc: denied { read write } for pid=9183 comm="syz.2.753" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 350.699581][ T30] audit: type=1400 audit(1756953615.864:314): avc: denied { open } for pid=9183 comm="syz.2.753" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 350.747565][ T24] usb 1-1: Manufacturer: syz [ 350.752188][ T24] usb 1-1: SerialNumber: syz [ 350.758084][ T30] audit: type=1400 audit(1756953615.864:315): avc: denied { ioctl } for pid=9183 comm="syz.2.753" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 350.764694][ T6783] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 350.783008][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.875128][ T6783] usb 2-1: setting power OFF [ 350.879863][ T6783] dvb-usb: bulk message failed: -22 (2/0) [ 350.885896][ T6783] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 350.896010][ T6783] (NULL device *): no alternate interface [ 351.008194][ T9176] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 351.114758][ T5927] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 351.513330][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 351.530491][ T9196] netlink: ct family unspecified [ 351.535647][ T9196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.055072][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 352.138065][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 352.151883][ T24] usb 1-1: USB disconnect, device number 35 [ 352.238937][ T5927] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 352.254335][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.276852][ T5927] usb 5-1: Product: syz [ 352.281077][ T5927] usb 5-1: Manufacturer: syz [ 352.288983][ T5927] usb 5-1: SerialNumber: syz [ 352.299542][ T5927] usb 5-1: config 0 descriptor?? [ 352.325462][ T5927] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 352.445324][ T5919] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 352.547417][ T6783] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 352.589275][ T6783] usb 2-1: USB disconnect, device number 35 [ 352.604708][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 352.621160][ T9192] netlink: 'syz.4.755': attribute type 16 has an invalid length. [ 352.630706][ T9192] netlink: 'syz.4.755': attribute type 17 has an invalid length. [ 352.642852][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.678555][ T30] audit: type=1400 audit(1756953618.084:316): avc: denied { create } for pid=9209 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 352.698670][ T5919] usb 3-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 352.711707][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.733943][ T5919] usb 3-1: config 0 descriptor?? [ 352.745114][ T9192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.174383][ T5912] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 353.197741][ T5912] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 353.218693][ T5912] asix 4-1:0.251: probe with driver asix failed with error -71 [ 353.367137][ T5912] usb 4-1: USB disconnect, device number 20 [ 353.370065][ T30] audit: type=1400 audit(1756953618.714:317): avc: denied { mount } for pid=9209 comm="syz.1.760" name="/" dev="ramfs" ino=24310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 353.407222][ T154] usb 5-1: Failed to submit usb control message: -71 [ 353.416240][ T1913] usb 5-1: USB disconnect, device number 35 [ 353.425664][ T154] usb 5-1: unable to send the bmi data to the device: -71 [ 353.444486][ T154] usb 5-1: unable to get target info from device [ 353.460032][ T9203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.470931][ T154] usb 5-1: could not get target info (-71) [ 353.479526][ T9203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.491852][ T154] usb 5-1: could not probe fw (-71) [ 353.689472][ T9219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.790641][ T5919] usbhid 3-1:0.0: can't add hid device: -71 [ 353.799658][ T5919] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 353.813657][ T5919] usb 3-1: USB disconnect, device number 37 [ 354.927886][ T5912] libceph: connect (1)[b::]:6789 error -101 [ 354.934286][ T5912] libceph: mon0 (1)[b::]:6789 connect error [ 355.027773][ T9235] ceph: No mds server is up or the cluster is laggy [ 355.781404][ T9249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.305621][ T9279] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 358.315853][ T30] audit: type=1400 audit(1756953623.724:318): avc: denied { connect } for pid=9277 comm="syz.4.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 358.337706][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 358.476575][ T9282] FAULT_INJECTION: forcing a failure. [ 358.476575][ T9282] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 358.784214][ T9282] CPU: 1 UID: 0 PID: 9282 Comm: syz.1.777 Not tainted syzkaller #0 PREEMPT(full) [ 358.784238][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.784249][ T9282] Call Trace: [ 358.784254][ T9282] [ 358.784262][ T9282] dump_stack_lvl+0x16c/0x1f0 [ 358.784288][ T9282] should_fail_ex+0x512/0x640 [ 358.784309][ T9282] _copy_from_user+0x2e/0xd0 [ 358.784325][ T9282] __x64_sys_sendfile64+0x120/0x220 [ 358.784339][ T9282] ? ksys_write+0x1ac/0x250 [ 358.784351][ T9282] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 358.784369][ T9282] do_syscall_64+0xcd/0x4c0 [ 358.784383][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.784394][ T9282] RIP: 0033:0x7fd71e18ebe9 [ 358.784404][ T9282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.784420][ T9282] RSP: 002b:00007fd71c3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 358.784435][ T9282] RAX: ffffffffffffffda RBX: 00007fd71e3c6090 RCX: 00007fd71e18ebe9 [ 358.784445][ T9282] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 358.784454][ T9282] RBP: 00007fd71c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.784463][ T9282] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 358.784473][ T9282] R13: 00007fd71e3c6128 R14: 00007fd71e3c6090 R15: 00007ffcaacf1e28 [ 358.784494][ T9282] [ 358.992620][ T1913] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 359.155840][ T1913] usb 4-1: Using ep0 maxpacket: 8 [ 359.184643][ T1913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.263103][ T1913] usb 4-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 359.290347][ T1913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.324799][ T1913] usb 4-1: config 0 descriptor?? [ 359.452014][ T9297] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 359.628181][ T9296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.724812][ T5919] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 359.857473][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.868264][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.877415][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 359.900010][ T1913] usbhid 4-1:0.0: can't add hid device: -71 [ 359.914969][ T1913] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 359.953365][ T5919] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 359.981948][ T1913] usb 4-1: USB disconnect, device number 21 [ 360.017131][ T5919] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 360.027303][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.035807][ T5919] usb 3-1: Product: syz [ 360.040082][ T5919] usb 3-1: Manufacturer: syz [ 360.056928][ T5919] usb 3-1: SerialNumber: syz [ 360.062795][ T5919] usb 3-1: config 0 descriptor?? [ 360.079991][ T5919] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 360.091062][ T5919] usb 3-1: setting power ON [ 360.096351][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 360.106515][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 360.134988][ T5919] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 360.153755][ T5919] usb 3-1: media controller created [ 360.177324][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.222134][ T5919] usb 3-1: selecting invalid altsetting 6 [ 360.238402][ T5919] usb 3-1: digital interface selection failed (-22) [ 360.258608][ T5919] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 360.291530][ T5919] usb 3-1: setting power OFF [ 360.299352][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 360.337713][ T9297] dvb-usb: bulk message failed: -22 (3/0) [ 360.364519][ T5857] Bluetooth: hci5: command 0x1003 tx timeout [ 360.367031][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 360.445439][ T5919] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 360.539568][ T5919] (NULL device *): no alternate interface [ 360.924697][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 361.127021][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.316629][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 361.473162][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.634049][ T24] usb 5-1: config 0 descriptor?? [ 361.657754][ T9313] ceph: No mds server is up or the cluster is laggy [ 361.665978][ T10] libceph: connect (1)[b::]:6789 error -101 [ 361.674186][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 361.718516][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 362.264649][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 362.284575][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 362.337155][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 362.364804][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 362.376325][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 362.441456][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 362.453662][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 362.461411][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 362.470671][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 362.479879][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 362.500523][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 362.518352][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 362.533951][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 362.763286][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 362.782041][ T30] audit: type=1400 audit(1756953628.184:319): avc: denied { map } for pid=9329 comm="syz.3.790" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 362.809912][ T24] pwc: Registered as video103. [ 362.810047][ T9330] binder: 9329:9330 ioctl c0345641 200000000240 returned -22 [ 362.846389][ T30] audit: type=1400 audit(1756953628.244:320): avc: denied { call } for pid=9329 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 362.850247][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 362.918767][ T5919] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 363.004837][ T5919] usb 3-1: USB disconnect, device number 38 [ 363.085003][ T24] usb 5-1: USB disconnect, device number 36 [ 363.104780][ T1913] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 363.297353][ T1913] usb 4-1: Using ep0 maxpacket: 8 [ 363.317709][ T9339] netlink: 32 bytes leftover after parsing attributes in process `syz.0.793'. [ 363.330896][ T1913] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 363.346868][ T1913] usb 4-1: can't read configurations, error -61 [ 363.534755][ T1913] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 363.682614][ T9345] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 363.695799][ T5857] Bluetooth: hci5: sending frame failed (-49) [ 363.702856][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 363.724188][ T1913] usb 4-1: Using ep0 maxpacket: 8 [ 363.761730][ T1913] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 363.794502][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 363.835248][ T1913] usb 4-1: can't read configurations, error -61 [ 363.856372][ T1913] usb usb4-port1: attempt power cycle [ 363.945313][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 363.951857][ T24] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 363.961924][ T24] usb 2-1: config 0 has no interface number 0 [ 363.979668][ T24] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 364.009911][ T24] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 364.049531][ T24] usb 2-1: config 0 interface 126 has no altsetting 0 [ 364.079092][ T24] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 364.098169][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.117493][ T24] usb 2-1: Product: syz [ 364.129002][ T24] usb 2-1: Manufacturer: syz [ 364.140126][ T24] usb 2-1: SerialNumber: syz [ 364.165940][ T24] usb 2-1: config 0 descriptor?? [ 364.173514][ T9343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 364.191580][ T9343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 364.204516][ T1913] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 364.239829][ T9351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.256317][ T1913] usb 4-1: Using ep0 maxpacket: 8 [ 364.265203][ T1913] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 364.280185][ T1913] usb 4-1: can't read configurations, error -61 [ 364.414806][ T1913] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 364.449339][ T1913] usb 4-1: Using ep0 maxpacket: 8 [ 364.495114][ T1913] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 364.554643][ T1913] usb 4-1: can't read configurations, error -61 [ 364.634005][ T24] ir_usb 2-1:0.126: IR Dongle converter detected [ 364.647351][ T1913] usb usb4-port1: unable to enumerate USB device [ 364.774840][ T30] audit: type=1400 audit(1756953630.174:321): avc: denied { mount } for pid=9352 comm="syz.4.798" name="/" dev="configfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 364.804300][ T30] audit: type=1400 audit(1756953630.204:322): avc: denied { search } for pid=9352 comm="syz.4.798" name="/" dev="configfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 364.829819][ T30] audit: type=1400 audit(1756953630.204:323): avc: denied { search } for pid=9352 comm="syz.4.798" name="/" dev="configfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 364.852964][ T30] audit: type=1400 audit(1756953630.204:324): avc: denied { read open } for pid=9352 comm="syz.4.798" path="/" dev="configfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 364.876169][ T30] audit: type=1400 audit(1756953630.254:325): avc: denied { read write } for pid=9341 comm="syz.1.794" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 364.920075][ T30] audit: type=1400 audit(1756953630.254:326): avc: denied { open } for pid=9341 comm="syz.1.794" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 364.925404][ T24] usb 2-1: IRDA class descriptor not found, device not bound [ 364.976203][ T30] audit: type=1400 audit(1756953630.284:327): avc: denied { ioctl } for pid=9341 comm="syz.1.794" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 365.110449][ T10] usb 2-1: USB disconnect, device number 36 [ 365.158502][ T6783] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 365.314619][ T6783] usb 1-1: Using ep0 maxpacket: 16 [ 365.341708][ T6783] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 365.350141][ T6783] usb 1-1: config 1 has no interface number 0 [ 365.357563][ T6783] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 365.368546][ T6783] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 365.379253][ T6783] usb 1-1: config 1 interface 105 has no altsetting 0 [ 365.405696][ T6783] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08 [ 365.423317][ T6783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.438590][ T6783] usb 1-1: Product: syz [ 365.443265][ T6783] usb 1-1: Manufacturer: syz [ 365.448048][ T6783] usb 1-1: SerialNumber: syz [ 365.495399][ T9356] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 365.502749][ T9356] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 365.808796][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.803'. [ 365.935697][ T9356] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 365.943011][ T9356] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 367.088008][ T6783] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 367.128518][ T6783] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 367.167567][ T6783] usb 1-1: USB disconnect, device number 36 [ 367.398795][ T9399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.621710][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 368.634583][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 368.699544][ T5927] libceph: connect (1)[b::]:6789 error -101 [ 368.768770][ T9408] ceph: No mds server is up or the cluster is laggy [ 368.775704][ T9409] ceph: No mds server is up or the cluster is laggy [ 368.831330][ T5927] libceph: mon0 (1)[b::]:6789 connect error [ 368.948524][ T24] libceph: connect (1)[c::]:6789 error -101 [ 369.146710][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 369.543864][ T30] audit: type=1400 audit(1756953634.944:328): avc: denied { watch } for pid=9423 comm="syz.4.816" path="/164/net_prio.prioidx" dev="tmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 369.710607][ T30] audit: type=1400 audit(1756953634.944:329): avc: denied { watch_sb watch_reads } for pid=9423 comm="syz.4.816" path="/164/net_prio.prioidx" dev="tmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 369.736765][ T30] audit: type=1400 audit(1756953635.044:330): avc: denied { append } for pid=9423 comm="syz.4.816" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 369.947646][ T9438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.819'. [ 370.404197][ T24] libceph: connect (1)[c::]:6789 error -101 [ 370.411406][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 370.562508][ T9445] ceph: No mds server is up or the cluster is laggy [ 370.735019][ T24] libceph: connect (1)[c::]:6789 error -101 [ 371.075262][ T9457] ceph: No mds server is up or the cluster is laggy [ 371.088275][ T5919] libceph: connect (1)[b::]:6789 error -101 [ 371.104894][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 371.113886][ T5919] libceph: mon0 (1)[b::]:6789 connect error [ 371.159956][ T30] audit: type=1804 audit(1756953636.524:331): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.824" name="/newroot/174/file0" dev="tmpfs" ino=978 res=1 errno=0 [ 371.777701][ T10] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 371.986499][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 371.996203][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 372.005549][ T10] usb 3-1: config 7 has an invalid interface number: 199 but max is 0 [ 372.014969][ T10] usb 3-1: config 7 has no interface number 0 [ 372.024572][ T24] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 372.073979][ T10] usb 3-1: config 7 interface 199 altsetting 50 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 372.102411][ T10] usb 3-1: config 7 interface 199 has no altsetting 0 [ 372.114074][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8281, bcdDevice=25.55 [ 372.123301][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.143839][ T10] usb 3-1: Product: syz [ 372.231366][ T24] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 372.233083][ T10] usb 3-1: Manufacturer: syz [ 372.254189][ T10] usb 3-1: SerialNumber: syz [ 372.255803][ T24] usb 5-1: config 0 has no interface number 0 [ 372.268047][ T9465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 372.302511][ T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 372.327033][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.545378][ T10] usb 3-1: USB disconnect, device number 39 [ 372.558758][ T24] usb 5-1: Product: syz [ 372.579206][ T24] usb 5-1: Manufacturer: syz [ 372.583941][ T24] usb 5-1: SerialNumber: syz [ 372.620712][ T24] usb 5-1: config 0 descriptor?? [ 373.459215][ T9489] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.833'. [ 373.468356][ T9489] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.833'. [ 373.746503][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 373.765078][ T9494] netlink: ct family unspecified [ 373.770133][ T9494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.061507][ T9509] ceph: No mds server is up or the cluster is laggy [ 375.069076][ T5919] libceph: connect (1)[b::]:6789 error -101 [ 375.078103][ T5919] libceph: mon0 (1)[b::]:6789 connect error [ 375.115994][ T9499] ceph: No mds server is up or the cluster is laggy [ 375.123380][ T9500] ceph: No mds server is up or the cluster is laggy [ 375.175713][ T5919] libceph: connect (1)[b::]:6789 error -101 [ 375.181837][ T5919] libceph: mon0 (1)[b::]:6789 connect error [ 375.225545][ T24] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 375.265160][ T10] libceph: connect (1)[c::]:6789 error -101 [ 375.271170][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 375.904974][ T5919] libceph: connect (1)[b::]:6789 error -101 [ 375.911021][ T5919] libceph: mon0 (1)[b::]:6789 connect error [ 375.923916][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 375.933036][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 375.947539][ T10] libceph: connect (1)[b::]:6789 error -101 [ 375.980921][ T30] audit: type=1400 audit(1756953640.914:332): avc: denied { lock } for pid=9515 comm="syz.4.838" path="socket:[25991]" dev="sockfs" ino=25991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 376.009494][ T24] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 376.014300][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 376.045879][ T30] audit: type=1400 audit(1756953640.924:333): avc: denied { getopt } for pid=9515 comm="syz.4.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 376.120761][ T24] asix 5-1:0.251: probe with driver asix failed with error -71 [ 376.277678][ T24] usb 5-1: USB disconnect, device number 37 [ 376.758789][ T9539] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 376.961146][ T9543] FAULT_INJECTION: forcing a failure. [ 376.961146][ T9543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.067307][ T9543] CPU: 1 UID: 0 PID: 9543 Comm: syz.4.842 Not tainted syzkaller #0 PREEMPT(full) [ 377.067332][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.067341][ T9543] Call Trace: [ 377.067347][ T9543] [ 377.067353][ T9543] dump_stack_lvl+0x16c/0x1f0 [ 377.067376][ T9543] should_fail_ex+0x512/0x640 [ 377.067399][ T9543] _copy_from_user+0x2e/0xd0 [ 377.067421][ T9543] copy_msghdr_from_user+0x98/0x160 [ 377.067440][ T9543] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 377.067470][ T9543] ___sys_sendmsg+0xfe/0x1d0 [ 377.067489][ T9543] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.067535][ T9543] __sys_sendmsg+0x16d/0x220 [ 377.067555][ T9543] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.067595][ T9543] do_syscall_64+0xcd/0x4c0 [ 377.067618][ T9543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.067636][ T9543] RIP: 0033:0x7f52c0d8ebe9 [ 377.067651][ T9543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.067667][ T9543] RSP: 002b:00007f52c1c39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.067685][ T9543] RAX: ffffffffffffffda RBX: 00007f52c0fc5fa0 RCX: 00007f52c0d8ebe9 [ 377.067696][ T9543] RDX: 0000000020008800 RSI: 0000200000001100 RDI: 0000000000000005 [ 377.067706][ T9543] RBP: 00007f52c1c39090 R08: 0000000000000000 R09: 0000000000000000 [ 377.067716][ T9543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.067725][ T9543] R13: 00007f52c0fc6038 R14: 00007f52c0fc5fa0 R15: 00007ffd6cedd2c8 [ 377.067742][ T9543] [ 377.124531][ T5919] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 377.914494][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 377.921411][ T5919] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 377.932299][ T5919] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 377.942648][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.952504][ T5919] usb 1-1: Product: syz [ 377.954591][ T6783] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 377.974511][ T5919] usb 1-1: Manufacturer: syz [ 377.996273][ T5919] usb 1-1: SerialNumber: syz [ 378.023638][ T5919] usb 1-1: config 0 descriptor?? [ 378.067641][ T5919] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 378.099622][ T5919] usb 1-1: setting power ON [ 378.133246][ T6783] usb 5-1: unable to get BOS descriptor or descriptor too short [ 378.142315][ T6783] usb 5-1: not running at top speed; connect to a high speed hub [ 378.163274][ T6783] usb 5-1: config 23 has an invalid interface number: 71 but max is 0 [ 378.171977][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 378.175769][ T6783] usb 5-1: config 23 has no interface number 0 [ 378.205655][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 378.222953][ T6783] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice= 9.30 [ 378.234054][ T5919] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 378.249289][ T6783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.263681][ T6783] usb 5-1: Product: syz [ 378.371252][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.384647][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.393361][ T9536] dvb-usb: bulk message failed: -22 (3/0) [ 378.399274][ T5919] usb 1-1: media controller created [ 378.429301][ T6783] usb 5-1: Manufacturer: syz [ 378.433135][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.443538][ T6783] usb 5-1: SerialNumber: syz [ 378.473357][ T6783] usb_ehset_test 5-1:23.71: probe with driver usb_ehset_test failed with error -32 [ 378.531634][ T5919] usb 1-1: selecting invalid altsetting 6 [ 378.539671][ T5919] usb 1-1: digital interface selection failed (-22) [ 378.572923][ T5919] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 378.584011][ T5919] usb 1-1: setting power OFF [ 378.588816][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 378.612797][ T5919] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 378.638263][ T5919] (NULL device *): no alternate interface [ 378.704555][ T1913] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 379.028882][ T1913] usb 4-1: device descriptor read/64, error -71 [ 379.275493][ T1913] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 379.415208][ T1913] usb 4-1: device descriptor read/64, error -71 [ 379.524861][ T1913] usb usb4-port1: attempt power cycle [ 379.561114][ T9569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.609405][ T5964] usb 5-1: USB disconnect, device number 38 [ 379.743581][ T5919] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 379.784198][ T5919] usb 1-1: USB disconnect, device number 37 [ 380.145413][ T1913] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 380.192727][ T1913] usb 4-1: device descriptor read/8, error -71 [ 380.244375][ T9574] ceph: No mds server is up or the cluster is laggy [ 380.253116][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 380.294625][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 380.474702][ T1913] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 380.531244][ T9582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.623890][ T9583] kvm: pic: non byte write [ 380.632175][ T9583] FAULT_INJECTION: forcing a failure. [ 380.632175][ T9583] name failslab, interval 1, probability 0, space 0, times 0 [ 380.709857][ T1913] usb 4-1: device descriptor read/8, error -71 [ 380.726606][ T9583] CPU: 0 UID: 0 PID: 9583 Comm: syz.1.850 Not tainted syzkaller #0 PREEMPT(full) [ 380.726624][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.726631][ T9583] Call Trace: [ 380.726634][ T9583] [ 380.726638][ T9583] dump_stack_lvl+0x16c/0x1f0 [ 380.726656][ T9583] should_fail_ex+0x512/0x640 [ 380.726670][ T9583] ? fs_reclaim_acquire+0xae/0x150 [ 380.726686][ T9583] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 380.726703][ T9583] should_failslab+0xc2/0x120 [ 380.726716][ T9583] __kmalloc_noprof+0xd2/0x510 [ 380.726730][ T9583] tomoyo_realpath_from_path+0xc2/0x6e0 [ 380.726747][ T9583] ? tomoyo_profile+0x47/0x60 [ 380.726759][ T9583] tomoyo_path_number_perm+0x245/0x580 [ 380.726772][ T9583] ? tomoyo_path_number_perm+0x237/0x580 [ 380.726787][ T9583] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 380.726802][ T9583] ? find_held_lock+0x2b/0x80 [ 380.726828][ T9583] ? find_held_lock+0x2b/0x80 [ 380.726840][ T9583] ? hook_file_ioctl_common+0x145/0x410 [ 380.726855][ T9583] ? __fget_files+0x20e/0x3c0 [ 380.726869][ T9583] security_file_ioctl+0x9b/0x240 [ 380.726886][ T9583] __x64_sys_ioctl+0xb7/0x210 [ 380.726904][ T9583] do_syscall_64+0xcd/0x4c0 [ 380.726919][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.726930][ T9583] RIP: 0033:0x7fd71e18ebe9 [ 380.726938][ T9583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.726949][ T9583] RSP: 002b:00007fd71c3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.726960][ T9583] RAX: ffffffffffffffda RBX: 00007fd71e3c6090 RCX: 00007fd71e18ebe9 [ 380.726967][ T9583] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 380.726973][ T9583] RBP: 00007fd71c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 380.726979][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.726986][ T9583] R13: 00007fd71e3c6128 R14: 00007fd71e3c6090 R15: 00007ffcaacf1e28 [ 380.726999][ T9583] [ 380.727003][ T9583] ERROR: Out of memory at tomoyo_realpath_from_path. [ 380.933059][ T1913] usb usb4-port1: unable to enumerate USB device [ 381.074590][ T5919] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 381.260658][ T5919] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 381.273559][ T5919] usb 1-1: config 0 has no interface number 0 [ 381.310532][ T5919] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 381.344235][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.358302][ T5919] usb 1-1: Product: syz [ 381.362505][ T5919] usb 1-1: Manufacturer: syz [ 381.459356][ T9593] befs: (nullb0): No write support. Marking filesystem read-only [ 381.470345][ T9593] befs: (nullb0): invalid magic header [ 381.669349][ T5919] usb 1-1: SerialNumber: syz [ 381.683847][ T5919] usb 1-1: config 0 descriptor?? [ 381.994680][ T30] audit: type=1400 audit(1756953647.374:334): avc: denied { ioctl } for pid=9599 comm="syz.2.857" path="socket:[26183]" dev="sockfs" ino=26183 ioctlcmd=0x42d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 382.079642][ T9602] fuse: Bad value for 'fd' [ 382.184725][ T30] audit: type=1400 audit(1756953647.384:335): avc: denied { accept } for pid=9599 comm="syz.2.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 382.621486][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 382.649855][ T9610] netlink: ct family unspecified [ 382.654930][ T9610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.959237][ T1913] libceph: connect (1)[c::]:6789 error -101 [ 383.968213][ T1913] libceph: mon0 (1)[c::]:6789 connect error [ 383.992442][ T9625] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 384.111268][ T5919] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 384.125046][ T5919] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 384.139656][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 384.167005][ T9618] ceph: No mds server is up or the cluster is laggy [ 384.173956][ T5919] asix 1-1:0.251: probe with driver asix failed with error -71 [ 384.258192][ T5919] usb 1-1: USB disconnect, device number 38 [ 384.793035][ T7430] Bluetooth: hci6: Frame reassembly failed (-84) [ 384.844969][ T9633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.399264][ T9639] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 385.695916][ T5919] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 385.867153][ T9643] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 385.987891][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 385.998058][ T7430] Bluetooth: hci7: Frame reassembly failed (-84) [ 386.187202][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 386.281221][ T9649] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 386.423548][ T5919] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 386.466745][ T5919] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 386.484509][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.503856][ T5919] usb 5-1: Product: syz [ 386.508667][ T5919] usb 5-1: Manufacturer: syz [ 386.526878][ T5919] usb 5-1: SerialNumber: syz [ 386.542512][ T5919] usb 5-1: config 0 descriptor?? [ 386.556544][ T5919] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 386.565534][ T5919] usb 5-1: setting power ON [ 386.570095][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 386.590058][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.604646][ T1913] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 386.713053][ T5919] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 386.723088][ T5919] usb 5-1: media controller created [ 386.739411][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.758974][ T9639] dvb-usb: bulk message failed: -22 (3/0) [ 386.784752][ T1913] usb 4-1: Using ep0 maxpacket: 8 [ 386.853277][ T1913] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 386.878309][ T5859] Bluetooth: hci6: command 0x1003 tx timeout [ 386.885488][ T9626] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 386.907304][ T1913] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 386.933730][ T1913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.954786][ T5919] usb 5-1: selecting invalid altsetting 6 [ 386.960578][ T1913] usb 4-1: Product: syz [ 386.965163][ T5919] usb 5-1: digital interface selection failed (-22) [ 386.971767][ T5919] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 386.980504][ T1913] usb 4-1: Manufacturer: syz [ 386.985287][ T1913] usb 4-1: SerialNumber: syz [ 386.997078][ T1913] usb 4-1: config 0 descriptor?? [ 387.005780][ T5919] usb 5-1: setting power OFF [ 387.012097][ T1913] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 387.060450][ T1913] usb 4-1: setting power ON [ 387.167710][ T9653] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 387.205859][ T1913] dvb-usb: bulk message failed: -22 (2/0) [ 387.212468][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 387.226463][ T5919] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 387.318800][ T1913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.375717][ T5919] (NULL device *): no alternate interface [ 387.389150][ T1913] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 387.411139][ T1913] usb 4-1: media controller created [ 387.431323][ T1913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.504932][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 387.666792][ T9658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=9658 comm=syz.0.869 [ 387.964543][ T9626] Bluetooth: hci7: command 0x1003 tx timeout [ 387.973442][ T5858] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 388.098190][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 388.106381][ T24] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 388.116093][ T1913] usb 4-1: selecting invalid altsetting 6 [ 388.117896][ T24] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 388.131499][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.145320][ T24] usb 3-1: Product: syz [ 388.149469][ T1913] usb 4-1: digital interface selection failed (-22) [ 388.229895][ T1913] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 388.244621][ T1913] usb 4-1: setting power OFF [ 388.249805][ T1913] dvb-usb: bulk message failed: -22 (2/0) [ 388.261353][ T24] usb 3-1: Manufacturer: syz [ 388.282030][ T24] usb 3-1: SerialNumber: syz [ 388.358426][ T1913] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 388.370930][ T1913] (NULL device *): no alternate interface [ 388.430633][ T24] usb 3-1: config 0 descriptor?? [ 388.487101][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 388.496160][ T24] usb 3-1: setting power ON [ 388.504602][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 388.513538][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 388.525097][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 388.533571][ T24] usb 3-1: media controller created [ 388.563355][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.576711][ T1913] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 388.708991][ T24] usb 3-1: selecting invalid altsetting 6 [ 388.720068][ T9664] netlink: 44 bytes leftover after parsing attributes in process `syz.4.871'. [ 388.830593][ T24] usb 3-1: digital interface selection failed (-22) [ 388.852211][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 388.865225][ T24] usb 3-1: setting power OFF [ 388.870019][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 388.876023][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 388.885754][ T24] (NULL device *): no alternate interface [ 389.403813][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 389.860416][ T9671] ceph: No mds server is up or the cluster is laggy [ 389.869414][ T24] libceph: connect (1)[c::]:6789 error -101 [ 390.158325][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 390.363863][ T5919] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 390.384735][ T24] usb 4-1: USB disconnect, device number 30 [ 392.365966][ T5919] usb 5-1: USB disconnect, device number 39 [ 392.376898][ T9685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.703253][ T24] usb 3-1: USB disconnect, device number 40 [ 393.662569][ T9709] netlink: 'syz.1.883': attribute type 29 has an invalid length. [ 393.671918][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 393.933289][ T5919] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 394.993646][ T5919] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 395.003643][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.011709][ T5919] usb 3-1: Product: syz [ 395.016191][ T5919] usb 3-1: Manufacturer: syz [ 395.020773][ T5919] usb 3-1: SerialNumber: syz [ 395.028448][ T5919] usb 3-1: config 0 descriptor?? [ 395.128777][ T9715] ceph: No mds server is up or the cluster is laggy [ 395.135679][ T9713] ceph: No mds server is up or the cluster is laggy [ 395.400790][ T9724] ubi: mtd0 is already attached to ubi31 [ 395.674653][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 395.844623][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 395.860153][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 395.952977][ T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 396.031988][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.078077][ T24] usb 2-1: Product: syz [ 396.084772][ T24] usb 2-1: Manufacturer: syz [ 396.132523][ T24] usb 2-1: SerialNumber: syz [ 396.152424][ T24] usb 2-1: config 0 descriptor?? [ 396.180303][ T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 396.587233][ T5919] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 396.668252][ T5912] usb 3-1: USB disconnect, device number 41 [ 397.302312][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.485994][ T7430] usb 2-1: Failed to submit usb control message: -110 [ 397.512650][ T9723] netlink: 'syz.1.884': attribute type 16 has an invalid length. [ 397.575169][ T7430] usb 2-1: unable to send the bmi data to the device: -110 [ 397.595000][ T5919] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 397.604072][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.618049][ T5919] usb 5-1: config 0 descriptor?? [ 397.624703][ T9723] netlink: 'syz.1.884': attribute type 17 has an invalid length. [ 397.636031][ T5919] pwc: Askey VC010 type 2 USB webcam detected. [ 397.653208][ T7430] usb 2-1: unable to get target info from device [ 397.708995][ T30] audit: type=1400 audit(1756953663.114:336): avc: denied { connect } for pid=9748 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 397.748501][ T7430] usb 2-1: could not get target info (-110) [ 397.797378][ T7430] usb 2-1: could not probe fw (-110) [ 397.898470][ T9723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.926445][ T30] audit: type=1400 audit(1756953663.264:337): avc: denied { create } for pid=9748 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 398.299780][ T5919] pwc: recv_control_msg error -32 req 02 val 2b00 [ 398.372801][ T24] usb 2-1: USB disconnect, device number 37 [ 398.497251][ T5919] pwc: recv_control_msg error -32 req 02 val 2700 [ 398.652946][ T5919] pwc: recv_control_msg error -32 req 02 val 2c00 [ 398.695415][ T5919] pwc: recv_control_msg error -32 req 04 val 1000 [ 398.704554][ T9760] befs: (nullb0): No write support. Marking filesystem read-only [ 398.712545][ T9760] befs: (nullb0): invalid magic header [ 398.725518][ T5919] pwc: recv_control_msg error -32 req 04 val 1300 [ 398.741203][ T5919] pwc: recv_control_msg error -32 req 04 val 1400 [ 398.834264][ T5919] pwc: recv_control_msg error -32 req 02 val 2000 [ 399.054661][ T5927] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 399.055760][ T5919] pwc: recv_control_msg error -32 req 02 val 2100 [ 399.242315][ T5927] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 399.255451][ T5919] pwc: recv_control_msg error -32 req 04 val 1500 [ 399.271757][ T5919] pwc: recv_control_msg error -32 req 02 val 2500 [ 399.290085][ T5927] usb 1-1: config 0 has no interface number 0 [ 399.302190][ T5927] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 399.349262][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.355406][ T5919] pwc: recv_control_msg error -32 req 02 val 2400 [ 399.519348][ T5927] usb 1-1: Product: syz [ 399.559080][ T9768] befs: (nullb0): No write support. Marking filesystem read-only [ 399.569985][ T9768] befs: (nullb0): invalid magic header [ 399.645235][ T5927] usb 1-1: Manufacturer: syz [ 399.667942][ T5919] pwc: recv_control_msg error -32 req 02 val 2600 [ 399.670406][ T5927] usb 1-1: SerialNumber: syz [ 399.682593][ T5919] pwc: recv_control_msg error -32 req 02 val 2900 [ 399.748098][ T5927] usb 1-1: config 0 descriptor?? [ 399.891542][ T30] audit: type=1400 audit(1756953665.254:338): avc: denied { connect } for pid=9770 comm="syz.1.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 399.962687][ T30] audit: type=1400 audit(1756953665.284:339): avc: denied { accept } for pid=9770 comm="syz.1.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 400.070324][ T5919] pwc: recv_control_msg error -32 req 04 val 1100 [ 400.212950][ T5919] pwc: Registered as video103. [ 400.222921][ T5919] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 400.654070][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 400.679196][ T9789] netlink: ct family unspecified [ 400.684301][ T9789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.053467][ T5964] usb 5-1: USB disconnect, device number 40 [ 401.084596][ T5919] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 401.286123][ T5919] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 402.021729][ T5919] usb 3-1: config 0 has no interface number 0 [ 402.033805][ T5919] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 402.043145][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.051394][ T5919] usb 3-1: Product: syz [ 402.055586][ T5919] usb 3-1: Manufacturer: syz [ 402.060175][ T5919] usb 3-1: SerialNumber: syz [ 402.084008][ T5927] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 402.109950][ T5927] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 402.114109][ T5919] usb 3-1: config 0 descriptor?? [ 402.190318][ T9773] capability: warning: `syz.1.898' uses 32-bit capabilities (legacy support in use) [ 402.204750][ T5927] asix 1-1:0.251: probe with driver asix failed with error -71 [ 402.244676][ T5927] usb 1-1: USB disconnect, device number 39 [ 403.094031][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 403.122489][ T9819] netlink: ct family unspecified [ 403.127770][ T9819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.604755][ T5962] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 404.724559][ T5919] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 404.754963][ T5919] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 404.811007][ T5919] asix 3-1:0.251: probe with driver asix failed with error -71 [ 404.851741][ T5962] usb 2-1: unable to get BOS descriptor or descriptor too short [ 404.872238][ T5962] usb 2-1: not running at top speed; connect to a high speed hub [ 404.970128][ T5919] usb 3-1: USB disconnect, device number 42 [ 405.012286][ T5962] usb 2-1: config 7 has an invalid interface number: 199 but max is 0 [ 405.065678][ T5962] usb 2-1: config 7 has no interface number 0 [ 405.120219][ T30] audit: type=1326 audit(1756953670.524:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.3.908" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f341658ebe9 code=0x0 [ 405.157849][ T5962] usb 2-1: config 7 interface 199 altsetting 50 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 405.249628][ T5962] usb 2-1: config 7 interface 199 has no altsetting 0 [ 405.300334][ T5962] usb 2-1: New USB device found, idVendor=05ac, idProduct=8281, bcdDevice=25.55 [ 405.309851][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.335496][ T5962] usb 2-1: Product: syz [ 405.342728][ T5962] usb 2-1: Manufacturer: syz [ 405.364464][ T5962] usb 2-1: SerialNumber: syz [ 405.409568][ T9822] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 405.634334][ T5962] usb 2-1: USB disconnect, device number 38 [ 406.718180][ T9849] comedi comedi3: c6xdigio: I/O port conflict (0x3c4,3) [ 407.318733][ T9839] fuse: Bad value for 'fd' [ 407.414271][ T9857] ceph: No mds server is up or the cluster is laggy [ 407.421229][ T9855] ceph: No mds server is up or the cluster is laggy [ 407.604793][ T30] audit: type=1400 audit(1756953673.004:341): avc: denied { read } for pid=9836 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 408.374625][ T30] audit: type=1800 audit(1756953673.764:342): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.920" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 408.650651][ T9892] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 408.708555][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 408.784280][ T30] audit: type=1400 audit(1756953674.184:343): avc: denied { setopt } for pid=9881 comm="syz.2.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 409.074845][ T5927] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 409.112315][ T9900] Process accounting resumed [ 409.138653][ T30] audit: type=1400 audit(1756953674.504:344): avc: denied { create } for pid=9895 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 409.175627][ T30] audit: type=1400 audit(1756953674.504:345): avc: denied { write } for pid=9895 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 409.287699][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 409.297803][ T30] audit: type=1400 audit(1756953674.504:346): avc: denied { mount } for pid=9895 comm="syz.3.923" name="/" dev="hugetlbfs" ino=27943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 409.374523][ T5927] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 409.383793][ T5927] usb 1-1: config 179 has no interface number 0 [ 409.391830][ T5927] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 409.403300][ T30] audit: type=1400 audit(1756953674.524:347): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 409.433720][ T5927] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 409.462321][ T5927] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 409.488957][ T5927] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 409.504558][ T5964] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 409.513212][ T30] audit: type=1400 audit(1756953674.914:348): avc: denied { write } for pid=9906 comm="syz.4.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 409.556613][ T5927] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 409.572482][ T5927] usb 1-1: config 179 interface 65 has no altsetting 0 [ 409.580572][ T5927] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 409.596107][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.710138][ T5927] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input19 [ 409.727583][ T5964] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 409.736899][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.745296][ T5964] usb 4-1: Product: syz [ 409.759777][ T5964] usb 4-1: Manufacturer: syz [ 409.812423][ T5964] usb 4-1: SerialNumber: syz [ 409.849479][ T5203] input input19: unable to receive magic message: -110 [ 409.887661][ T9915] ceph: No mds server is up or the cluster is laggy [ 409.902839][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 409.913696][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 410.170074][ T5203] input input19: unable to receive magic message: -32 [ 410.193923][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 410.200180][ T5964] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 410.204577][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 410.271853][ T5964] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 410.541427][ T5203] input input19: unable to receive magic message: -32 [ 410.652288][ T5964] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 410.654501][ T9927] ceph: No mds server is up or the cluster is laggy [ 410.732462][ T9626] Bluetooth: hci5: command 0x1003 tx timeout [ 410.740024][ T5858] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 410.769543][ T5964] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 410.819199][ T5203] input input19: unable to receive magic message: -32 [ 410.859126][ T9926] ceph: No mds server is up or the cluster is laggy [ 410.869353][ T5964] usb 4-1: USB disconnect, device number 31 [ 411.060946][ T5203] input input19: unable to receive magic message: -32 [ 411.145157][ T5912] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 411.346981][ T5912] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 411.469604][ T5912] usb 5-1: config 0 has no interface number 0 [ 411.581106][ T9943] netlink: 260 bytes leftover after parsing attributes in process `syz.2.933'. [ 411.590275][ T9943] netlink: 260 bytes leftover after parsing attributes in process `syz.2.933'. [ 411.709156][ T30] audit: type=1804 audit(1756953677.104:349): pid=9944 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.933" name="/newroot/198/file0" dev="tmpfs" ino=1109 res=1 errno=0 [ 411.856639][ T5912] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 411.868139][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.898815][ T5912] usb 5-1: Product: syz [ 411.980689][ T5912] usb 5-1: Manufacturer: syz [ 412.183607][ T5912] usb 5-1: SerialNumber: syz [ 412.198826][ T5912] usb 5-1: config 0 descriptor?? [ 412.467621][ T9951] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 412.794553][ T5964] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 412.964485][ T5964] usb 4-1: Using ep0 maxpacket: 8 [ 413.173600][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 413.194068][ T9953] netlink: ct family unspecified [ 413.199192][ T9953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.592137][ T5964] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 413.622413][ T5964] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 413.631882][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.640945][ T5964] usb 4-1: Product: syz [ 413.648314][ T5964] usb 4-1: Manufacturer: syz [ 413.656257][ T5964] usb 4-1: SerialNumber: syz [ 413.666916][ T5964] usb 4-1: config 0 descriptor?? [ 413.713840][ T5964] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 413.722342][ T5964] usb 4-1: setting power ON [ 413.727078][ T5964] dvb-usb: bulk message failed: -22 (2/0) [ 413.758550][ T5964] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 413.810053][ T5964] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 413.830085][ T5964] usb 4-1: media controller created [ 413.863979][ T5964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.886813][ T5964] usb 4-1: selecting invalid altsetting 6 [ 413.892599][ T5964] usb 4-1: digital interface selection failed (-22) [ 413.903734][ T5964] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 413.918881][ T9951] dvb-usb: bulk message failed: -22 (3/0) [ 413.937155][ T5964] usb 4-1: setting power OFF [ 413.942016][ T5964] dvb-usb: bulk message failed: -22 (2/0) [ 414.042739][ T5964] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 414.088125][ T5964] (NULL device *): no alternate interface [ 415.009417][ T5912] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 415.026996][ T5912] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 415.039914][ T5912] asix 5-1:0.251: probe with driver asix failed with error -71 [ 415.056901][ T5912] usb 5-1: USB disconnect, device number 41 [ 415.369217][ T9968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.938'. [ 415.439585][ T9969] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 415.544640][ T5964] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 415.638792][ T5964] usb 4-1: USB disconnect, device number 32 [ 415.713446][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 415.949548][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 415.956990][ T24] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 415.971693][ T24] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 415.981586][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.001606][ T24] usb 5-1: Product: syz [ 416.007829][ T24] usb 5-1: Manufacturer: syz [ 416.012598][ T24] usb 5-1: SerialNumber: syz [ 416.053622][ T24] usb 5-1: config 0 descriptor?? [ 416.065766][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 416.077305][ T24] usb 5-1: setting power ON [ 416.082075][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 416.118537][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.131368][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 416.145547][ T24] usb 5-1: media controller created [ 416.190482][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.224564][ T24] usb 5-1: selecting invalid altsetting 6 [ 416.230864][ T24] usb 5-1: digital interface selection failed (-22) [ 416.240009][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 416.249469][ T24] usb 5-1: setting power OFF [ 416.254093][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 416.261550][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 416.310744][ T24] (NULL device *): no alternate interface [ 416.935075][ T5912] usb 1-1: USB disconnect, device number 40 [ 416.935221][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 417.101532][ T9980] FAULT_INJECTION: forcing a failure. [ 417.101532][ T9980] name failslab, interval 1, probability 0, space 0, times 0 [ 417.114353][ T9980] CPU: 0 UID: 0 PID: 9980 Comm: syz.1.942 Not tainted syzkaller #0 PREEMPT(full) [ 417.114381][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.114392][ T9980] Call Trace: [ 417.114397][ T9980] [ 417.114404][ T9980] dump_stack_lvl+0x16c/0x1f0 [ 417.114427][ T9980] should_fail_ex+0x512/0x640 [ 417.114449][ T9980] should_failslab+0xc2/0x120 [ 417.114468][ T9980] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 417.114481][ T9980] ? skb_clone+0x190/0x3f0 [ 417.114495][ T9980] skb_clone+0x190/0x3f0 [ 417.114507][ T9980] netlink_deliver_tap+0xabd/0xd30 [ 417.114523][ T9980] netlink_unicast+0x64c/0x870 [ 417.114537][ T9980] ? __pfx_netlink_unicast+0x10/0x10 [ 417.114550][ T9980] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 417.114567][ T9980] netlink_sendmsg+0x8d1/0xdd0 [ 417.114581][ T9980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.114599][ T9980] ____sys_sendmsg+0xa95/0xc70 [ 417.114615][ T9980] ? copy_msghdr_from_user+0x10a/0x160 [ 417.114626][ T9980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.114643][ T9980] ? lockdep_hardirqs_on+0x7c/0x110 [ 417.114658][ T9980] ___sys_sendmsg+0x134/0x1d0 [ 417.114671][ T9980] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.114699][ T9980] __sys_sendmsg+0x16d/0x220 [ 417.114711][ T9980] ? __pfx___sys_sendmsg+0x10/0x10 [ 417.114731][ T9980] do_syscall_64+0xcd/0x4c0 [ 417.114744][ T9980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.114756][ T9980] RIP: 0033:0x7fd71e18ebe9 [ 417.114765][ T9980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.114776][ T9980] RSP: 002b:00007fd71c3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.114786][ T9980] RAX: ffffffffffffffda RBX: 00007fd71e3c6090 RCX: 00007fd71e18ebe9 [ 417.114793][ T9980] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 417.114800][ T9980] RBP: 00007fd71c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 417.114806][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.114812][ T9980] R13: 00007fd71e3c6128 R14: 00007fd71e3c6090 R15: 00007ffcaacf1e28 [ 417.114825][ T9980] [ 417.678863][ T9978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.800331][ T30] audit: type=1400 audit(1756953683.204:350): avc: denied { write } for pid=9982 comm="syz.1.944" path="socket:[28065]" dev="sockfs" ino=28065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 417.887975][ T5912] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 418.095861][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.106596][ T5912] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 418.123644][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.169732][ T5912] usb 1-1: config 0 descriptor?? [ 418.232854][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 418.401467][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 418.447242][ T24] usb 5-1: USB disconnect, device number 42 [ 418.546376][ T9998] befs: (nullb0): No write support. Marking filesystem read-only [ 418.660157][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 418.664762][ T9998] befs: (nullb0): invalid magic header [ 418.673446][ T5912] pwc: recv_control_msg error -32 req 02 val 2700 [ 418.929027][T10002] fuse: Bad value for 'fd' [ 418.975193][ T5912] pwc: recv_control_msg error -32 req 02 val 2c00 [ 419.002556][ T5912] pwc: recv_control_msg error -32 req 04 val 1000 [ 419.031954][ T5912] pwc: recv_control_msg error -32 req 04 val 1300 [ 419.051705][ T5912] pwc: recv_control_msg error -32 req 04 val 1400 [ 419.060761][T10009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.950'. [ 419.143655][ T5912] pwc: recv_control_msg error -32 req 02 val 2000 [ 419.217166][ T5912] pwc: recv_control_msg error -32 req 02 val 2100 [ 419.242386][T10010] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 419.333599][ T5912] pwc: recv_control_msg error -32 req 04 val 1500 [ 419.376069][ T5912] pwc: recv_control_msg error -32 req 02 val 2500 [ 419.414068][ T5912] pwc: recv_control_msg error -32 req 02 val 2400 [ 419.443170][ T5912] pwc: recv_control_msg error -32 req 02 val 2600 [ 419.453425][ T5912] pwc: recv_control_msg error -32 req 02 val 2900 [ 419.576762][ T5919] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 419.662248][ T5912] pwc: recv_control_msg error -32 req 04 val 1100 [ 419.677616][ T5912] pwc: Registered as video103. [ 419.697553][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 419.834558][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 419.855774][ T5919] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 419.870580][ T5919] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 419.937575][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.959631][ T5912] usb 1-1: USB disconnect, device number 41 [ 419.987174][ T5919] usb 5-1: Product: syz [ 420.060944][ T5919] usb 5-1: Manufacturer: syz [ 420.073365][ T5919] usb 5-1: SerialNumber: syz [ 420.081229][ T5919] usb 5-1: config 0 descriptor?? [ 420.091790][ T5919] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 420.102000][ T5919] usb 5-1: setting power ON [ 420.110098][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 420.121129][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 420.131504][ T5919] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 420.141621][ T5919] usb 5-1: media controller created [ 420.164791][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.181914][ T5919] usb 5-1: selecting invalid altsetting 6 [ 420.273108][ T5919] usb 5-1: digital interface selection failed (-22) [ 420.300561][T10010] dvb-usb: bulk message failed: -22 (3/0) [ 420.361549][ T5919] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 420.378947][ T5919] usb 5-1: setting power OFF [ 420.388447][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 420.394231][ T5919] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 420.405891][ T5919] (NULL device *): no alternate interface [ 420.417444][T10019] netlink: 32 bytes leftover after parsing attributes in process `syz.3.952'. [ 421.937520][T10034] netlink: 260 bytes leftover after parsing attributes in process `syz.3.956'. [ 421.946818][T10034] netlink: 260 bytes leftover after parsing attributes in process `syz.3.956'. [ 422.306957][ T30] audit: type=1804 audit(1756953687.434:351): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.956" name="/newroot/195/file0" dev="tmpfs" ino=1092 res=1 errno=0 [ 423.648622][ T5919] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 423.736876][ T5919] usb 5-1: USB disconnect, device number 43 [ 423.775747][ T30] audit: type=1400 audit(1756953689.184:352): avc: denied { read write } for pid=10046 comm="syz.3.961" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 423.802634][T10047] FAULT_INJECTION: forcing a failure. [ 423.802634][T10047] name failslab, interval 1, probability 0, space 0, times 0 [ 423.854842][T10047] CPU: 1 UID: 0 PID: 10047 Comm: syz.3.961 Not tainted syzkaller #0 PREEMPT(full) [ 423.854868][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.854878][T10047] Call Trace: [ 423.854884][T10047] [ 423.854890][T10047] dump_stack_lvl+0x16c/0x1f0 [ 423.854910][T10047] should_fail_ex+0x512/0x640 [ 423.854923][T10047] ? __kvmalloc_node_noprof+0x124/0x620 [ 423.854935][T10047] should_failslab+0xc2/0x120 [ 423.854948][T10047] __kvmalloc_node_noprof+0x137/0x620 [ 423.854960][T10047] ? netfs_extract_user_iter+0x164/0x620 [ 423.854977][T10047] ? netfs_extract_user_iter+0x164/0x620 [ 423.854990][T10047] netfs_extract_user_iter+0x164/0x620 [ 423.855007][T10047] ? rcu_is_watching+0x12/0xc0 [ 423.855021][T10047] ? trace_netfs_folioq+0x188/0x210 [ 423.855037][T10047] ? __pfx_netfs_extract_user_iter+0x10/0x10 [ 423.855050][T10047] ? iov_iter_folio_queue+0x3e/0x1f0 [ 423.855065][T10047] ? rolling_buffer_init+0x8a/0xb0 [ 423.855086][T10047] ? netfs_create_write_req+0x527/0x890 [ 423.855099][T10047] netfs_unbuffered_write_iter_locked+0x4b9/0xa00 [ 423.855116][T10047] netfs_unbuffered_write_iter+0x414/0x6d0 [ 423.855133][T10047] v9fs_file_write_iter+0xbf/0x100 [ 423.855149][T10047] do_iter_readv_writev+0x662/0x9e0 [ 423.855168][T10047] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 423.855192][T10047] vfs_writev+0x35f/0xde0 [ 423.855207][T10047] ? __pfx_vfs_writev+0x10/0x10 [ 423.855216][T10047] ? __mutex_lock+0x1c5/0x1060 [ 423.855233][T10047] ? __pfx___mutex_lock+0x10/0x10 [ 423.855250][T10047] ? __fget_files+0x20e/0x3c0 [ 423.855261][T10047] ? __fget_files+0x200/0x3c0 [ 423.855276][T10047] ? do_writev+0x132/0x340 [ 423.855285][T10047] do_writev+0x132/0x340 [ 423.855295][T10047] ? __pfx_do_writev+0x10/0x10 [ 423.855309][T10047] do_syscall_64+0xcd/0x4c0 [ 423.855323][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.855334][T10047] RIP: 0033:0x7f341658ebe9 [ 423.855343][T10047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.855355][T10047] RSP: 002b:00007f34174b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 423.855366][T10047] RAX: ffffffffffffffda RBX: 00007f34167c5fa0 RCX: 00007f341658ebe9 [ 423.855373][T10047] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007 [ 423.855379][T10047] RBP: 00007f34174b0090 R08: 0000000000000000 R09: 0000000000000000 [ 423.855385][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.855391][T10047] R13: 00007f34167c6038 R14: 00007f34167c5fa0 R15: 00007ffd0cc6ce28 [ 423.855405][T10047] [ 424.594584][ T30] audit: type=1400 audit(1756953689.184:353): avc: denied { open } for pid=10046 comm="syz.3.961" path="/196/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 424.655639][T10054] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 424.657430][T10053] ceph: No mds server is up or the cluster is laggy [ 424.734710][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 424.750538][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 424.819201][ T30] audit: type=1400 audit(1756953689.914:354): avc: denied { connect } for pid=10049 comm="syz.4.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 424.897705][ T30] audit: type=1400 audit(1756953689.924:355): avc: denied { setopt } for pid=10049 comm="syz.4.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 425.061660][ T30] audit: type=1400 audit(1756953690.284:356): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 425.138677][T10069] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 425.984569][ T5927] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 426.144630][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 426.152411][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.169414][ T5927] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8 [ 426.178914][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.187152][ T5927] usb 1-1: Product: syz [ 426.207379][ T5927] usb 1-1: Manufacturer: syz [ 426.232190][ T5927] usb 1-1: SerialNumber: syz [ 426.242364][ T5927] usb 1-1: config 0 descriptor?? [ 426.257808][ T5927] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 426.530575][T10096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.530891][T10096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.706511][ T30] audit: type=1400 audit(1756953692.114:357): avc: denied { ioctl } for pid=10098 comm="syz.1.972" path="socket:[28437]" dev="sockfs" ino=28437 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 426.731137][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.104146][ T1913] usb 1-1: USB disconnect, device number 42 [ 427.698621][ T1913] libceph: connect (1)[c::]:6789 error -101 [ 427.704681][ T1913] libceph: mon0 (1)[c::]:6789 connect error [ 427.717645][ T5964] libceph: connect (1)[b::]:6789 error -101 [ 427.764571][ T5964] libceph: mon0 (1)[b::]:6789 connect error [ 427.773088][T10111] binder: 10106:10111 ioctl c0306201 200000000080 returned -14 [ 427.796483][T10112] ceph: No mds server is up or the cluster is laggy [ 427.892819][T10113] ceph: No mds server is up or the cluster is laggy [ 427.904060][ T30] audit: type=1400 audit(1756953693.304:358): avc: denied { read } for pid=10118 comm="syz.0.976" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 427.936720][T10122] program syz.0.976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.999706][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 428.006123][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 428.042947][ T30] audit: type=1400 audit(1756953693.334:359): avc: denied { open } for pid=10118 comm="syz.0.976" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 428.079428][ T5927] libceph: connect (1)[b::]:6789 error -101 [ 428.097055][ T5927] libceph: mon0 (1)[b::]:6789 connect error [ 428.174830][T10124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.977'. [ 428.244971][ T1913] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 428.559917][ T1913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 428.578235][ T1913] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 428.590852][ T1913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.599266][ T1913] usb 1-1: Product: syz [ 428.603521][ T1913] usb 1-1: Manufacturer: syz [ 428.609425][ T1913] usb 1-1: SerialNumber: syz [ 428.627477][ T1913] usb 1-1: config 0 descriptor?? [ 428.724472][ T5919] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 428.877515][ T5919] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 429.014569][ T5919] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 429.324517][ T5919] usb 5-1: config 220 interface 0 has no altsetting 0 [ 429.376668][ T5919] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 429.388104][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.412302][ T5919] usb 5-1: Product: syz [ 429.436953][ T5919] usb 5-1: Manufacturer: syz [ 429.451960][ T5919] usb 5-1: SerialNumber: syz [ 429.862078][T10141] tipc: Started in network mode [ 429.897415][T10141] tipc: Node identity 66fe648ebaca, cluster identity 4711 [ 429.918674][T10141] tipc: Enabled bearer , priority 0 [ 429.942227][T10145] syzkaller0: entered promiscuous mode [ 429.953913][T10145] syzkaller0: entered allmulticast mode [ 430.051924][ T30] audit: type=1400 audit(1756953695.424:360): avc: denied { write } for pid=10130 comm="syz.4.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 430.117805][T10141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 430.142814][T10141] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 430.160111][T10141] tipc: Resetting bearer [ 430.242785][T10140] tipc: Resetting bearer [ 430.272216][T10140] tipc: Disabling bearer [ 430.557633][ T5962] libceph: connect (1)[c::]:6789 error -101 [ 430.642496][ T5962] libceph: mon0 (1)[c::]:6789 connect error [ 430.724499][T10154] ceph: No mds server is up or the cluster is laggy [ 430.745417][T10157] ceph: No mds server is up or the cluster is laggy [ 430.752334][ T5927] libceph: connect (1)[b::]:6789 error -101 [ 430.758506][ T5927] libceph: mon0 (1)[b::]:6789 connect error [ 430.852045][T10162] FAULT_INJECTION: forcing a failure. [ 430.852045][T10162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.875548][ T5912] usb 1-1: USB disconnect, device number 43 [ 430.904094][T10162] CPU: 0 UID: 0 PID: 10162 Comm: syz.0.986 Not tainted syzkaller #0 PREEMPT(full) [ 430.904120][T10162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.904130][T10162] Call Trace: [ 430.904136][T10162] [ 430.904143][T10162] dump_stack_lvl+0x16c/0x1f0 [ 430.904166][T10162] should_fail_ex+0x512/0x640 [ 430.904191][T10162] _copy_to_user+0x32/0xd0 [ 430.904216][T10162] simple_read_from_buffer+0xcb/0x170 [ 430.904237][T10162] proc_fail_nth_read+0x197/0x240 [ 430.904258][T10162] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.904279][T10162] ? rw_verify_area+0xcf/0x6c0 [ 430.904305][T10162] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.904323][T10162] vfs_read+0x1e1/0xcf0 [ 430.904345][T10162] ? __pfx___mutex_lock+0x10/0x10 [ 430.904364][T10162] ? __pfx_vfs_read+0x10/0x10 [ 430.904386][T10162] ? __fget_files+0x20e/0x3c0 [ 430.904411][T10162] ksys_read+0x12a/0x250 [ 430.904428][T10162] ? __pfx_ksys_read+0x10/0x10 [ 430.904444][T10162] ? fput+0x9b/0xd0 [ 430.904468][T10162] do_syscall_64+0xcd/0x4c0 [ 430.904489][T10162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.904506][T10162] RIP: 0033:0x7f7f45f8d5fc [ 430.904518][T10162] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 430.904535][T10162] RSP: 002b:00007f7f46e2a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.904552][T10162] RAX: ffffffffffffffda RBX: 00007f7f461c5fa0 RCX: 00007f7f45f8d5fc [ 430.904563][T10162] RDX: 000000000000000f RSI: 00007f7f46e2a0a0 RDI: 0000000000000003 [ 430.904573][T10162] RBP: 00007f7f46e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 430.904583][T10162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.904592][T10162] R13: 00007f7f461c6038 R14: 00007f7f461c5fa0 R15: 00007ffe2a3e3358 [ 430.904616][T10162] [ 431.560745][ T5919] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 431.657513][ T5919] usb 5-1: No valid video chain found. [ 431.699074][ T5919] usb 5-1: USB disconnect, device number 44 [ 431.812920][ T5964] libceph: connect (1)[b::]:6789 error -101 [ 431.835347][ T5964] libceph: mon0 (1)[b::]:6789 connect error [ 431.845021][ T1913] libceph: connect (1)[c::]:6789 error -101 [ 431.853974][ T1913] libceph: mon0 (1)[c::]:6789 connect error [ 431.988793][T10165] ceph: No mds server is up or the cluster is laggy [ 432.012718][T10170] ceph: No mds server is up or the cluster is laggy [ 432.114923][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 432.121036][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 432.918916][ T5964] libceph: connect (1)[b::]:6789 error -101 [ 432.927152][ T5964] libceph: mon0 (1)[b::]:6789 connect error [ 433.199099][ T5964] libceph: connect (1)[b::]:6789 error -101 [ 433.207394][ T5964] libceph: mon0 (1)[b::]:6789 connect error [ 433.340984][T10194] ceph: No mds server is up or the cluster is laggy [ 433.547880][T10208] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 433.834478][ T5964] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 434.035048][ T5964] usb 1-1: unable to get BOS descriptor or descriptor too short [ 434.045249][ T5964] usb 1-1: not running at top speed; connect to a high speed hub [ 434.053894][ T5964] usb 1-1: config 7 has an invalid interface number: 199 but max is 0 [ 434.062440][ T5964] usb 1-1: config 7 has no interface number 0 [ 434.068680][ T5964] usb 1-1: config 7 interface 199 altsetting 50 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 434.080401][ T5964] usb 1-1: config 7 interface 199 has no altsetting 0 [ 434.089830][ T5964] usb 1-1: New USB device found, idVendor=05ac, idProduct=8281, bcdDevice=25.55 [ 434.100099][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.108317][ T5964] usb 1-1: Product: syz [ 434.112676][ T5964] usb 1-1: Manufacturer: syz [ 434.117456][ T5964] usb 1-1: SerialNumber: syz [ 434.141288][T10209] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.226565][ T5919] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 434.651853][ T5964] usb 1-1: USB disconnect, device number 44 [ 434.749210][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 434.760209][ T5919] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 434.823098][ T5919] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.864162][ T5919] usb 5-1: config 0 interface 0 has no altsetting 0 [ 434.886005][ T5919] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 434.944251][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.988700][ T5919] usb 5-1: config 0 descriptor?? [ 435.019989][T10231] netlink: 'syz.2.1003': attribute type 21 has an invalid length. [ 435.028042][T10231] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1003'. [ 435.037495][T10231] netlink: 'syz.2.1003': attribute type 4 has an invalid length. [ 435.048470][T10231] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1003'. [ 435.407366][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 435.941412][ T1913] libceph: connect (1)[b::]:6789 error -101 [ 435.954916][ T1913] libceph: mon0 (1)[b::]:6789 connect error [ 436.225657][ T5962] libceph: connect (1)[b::]:6789 error -101 [ 436.231851][ T5962] libceph: mon0 (1)[b::]:6789 connect error [ 436.487101][T10243] ceph: No mds server is up or the cluster is laggy [ 436.800419][T10257] comedi comedi3: c6xdigio: I/O port conflict (0x3c4,3) [ 436.840069][T10257] ================================================================== [ 436.848153][T10257] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 436.856134][T10257] Read of size 8 at addr ffff88807e1d1e30 by task syz.1.1010/10257 [ 436.864037][T10257] [ 436.866353][T10257] CPU: 0 UID: 0 PID: 10257 Comm: syz.1.1010 Not tainted syzkaller #0 PREEMPT(full) [ 436.866374][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.866384][T10257] Call Trace: [ 436.866389][T10257] [ 436.866396][T10257] dump_stack_lvl+0x116/0x1f0 [ 436.866419][T10257] print_report+0xcd/0x630 [ 436.866437][T10257] ? __virt_addr_valid+0x81/0x610 [ 436.866459][T10257] ? __phys_addr+0xe8/0x180 [ 436.866481][T10257] ? sysfs_remove_file_ns+0x63/0x70 [ 436.866500][T10257] kasan_report+0xe0/0x110 [ 436.866518][T10257] ? sysfs_remove_file_ns+0x63/0x70 [ 436.866538][T10257] sysfs_remove_file_ns+0x63/0x70 [ 436.866557][T10257] driver_remove_file+0x4a/0x60 [ 436.866577][T10257] bus_remove_driver+0x224/0x2c0 [ 436.866592][T10257] driver_unregister+0x76/0xb0 [ 436.866610][T10257] comedi_device_detach_locked+0x12f/0xa50 [ 436.866632][T10257] comedi_device_detach+0x67/0xb0 [ 436.866648][T10257] comedi_device_attach+0x43d/0x900 [ 436.866672][T10257] do_devconfig_ioctl+0x1b1/0x710 [ 436.866692][T10257] ? __mutex_lock+0x1c5/0x1060 [ 436.866711][T10257] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 436.866736][T10257] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.866756][T10257] comedi_unlocked_ioctl+0x165d/0x2f00 [ 436.866780][T10257] ? rcu_is_watching+0x12/0xc0 [ 436.866800][T10257] ? irqentry_exit+0x3b/0x90 [ 436.866818][T10257] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.866834][T10257] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 436.866859][T10257] ? do_vfs_ioctl+0xca/0x14f0 [ 436.866882][T10257] ? do_vfs_ioctl+0xdb7/0x14f0 [ 436.866904][T10257] ? do_vfs_ioctl+0x128/0x14f0 [ 436.866926][T10257] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 436.866948][T10257] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 436.866976][T10257] ? hook_file_ioctl_common+0x145/0x410 [ 436.866995][T10257] ? selinux_file_ioctl+0x180/0x270 [ 436.867016][T10257] ? selinux_file_ioctl+0xb4/0x270 [ 436.867037][T10257] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 436.867061][T10257] __x64_sys_ioctl+0x18b/0x210 [ 436.867084][T10257] do_syscall_64+0xcd/0x4c0 [ 436.867102][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.867119][T10257] RIP: 0033:0x7fd71e18ebe9 [ 436.867133][T10257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.867148][T10257] RSP: 002b:00007fd71c3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.867164][T10257] RAX: ffffffffffffffda RBX: 00007fd71e3c6090 RCX: 00007fd71e18ebe9 [ 436.867175][T10257] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000007 [ 436.867185][T10257] RBP: 00007fd71e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 436.867195][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.867204][T10257] R13: 00007fd71e3c6128 R14: 00007fd71e3c6090 R15: 00007ffcaacf1e28 [ 436.867219][T10257] [ 436.867225][T10257] [ 437.147634][T10257] Allocated by task 10040: [ 437.152036][T10257] kasan_save_stack+0x33/0x60 [ 437.156711][T10257] kasan_save_track+0x14/0x30 [ 437.161371][T10257] __kasan_kmalloc+0xaa/0xb0 [ 437.165940][T10257] __kvmalloc_node_noprof+0x27b/0x620 [ 437.171287][T10257] io_alloc_cache_init+0x33/0x170 [ 437.176306][T10257] io_uring_setup+0x5e1/0x2120 [ 437.181046][T10257] __x64_sys_io_uring_setup+0xc2/0x170 [ 437.186482][T10257] do_syscall_64+0xcd/0x4c0 [ 437.190968][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.196868][T10257] [ 437.199196][T10257] Freed by task 4588: [ 437.203181][T10257] kasan_save_stack+0x33/0x60 [ 437.207863][T10257] kasan_save_track+0x14/0x30 [ 437.212528][T10257] kasan_save_free_info+0x3b/0x60 [ 437.217537][T10257] __kasan_slab_free+0x60/0x70 [ 437.222279][T10257] kfree+0x2b4/0x4d0 [ 437.226156][T10257] io_alloc_cache_free+0x1eb/0x2e0 [ 437.231256][T10257] io_free_alloc_caches+0x1c/0x80 [ 437.236261][T10257] io_ring_exit_work+0x7d8/0x10a0 [ 437.241277][T10257] process_one_work+0x9cc/0x1b70 [ 437.246201][T10257] worker_thread+0x6c8/0xf10 [ 437.250775][T10257] kthread+0x3c2/0x780 [ 437.254830][T10257] ret_from_fork+0x5d4/0x6f0 [ 437.259397][T10257] ret_from_fork_asm+0x1a/0x30 [ 437.264143][T10257] [ 437.266442][T10257] The buggy address belongs to the object at ffff88807e1d1e00 [ 437.266442][T10257] which belongs to the cache kmalloc-256 of size 256 [ 437.280469][T10257] The buggy address is located 48 bytes inside of [ 437.280469][T10257] freed 256-byte region [ffff88807e1d1e00, ffff88807e1d1f00) [ 437.294179][T10257] [ 437.296485][T10257] The buggy address belongs to the physical page: [ 437.302877][T10257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e1d0 [ 437.311699][T10257] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 437.320174][T10257] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 437.327697][T10257] page_type: f5(slab) [ 437.331663][T10257] raw: 00fff00000000040 ffff88801b841b40 ffffea0001fea480 dead000000000006 [ 437.340231][T10257] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 437.348804][T10257] head: 00fff00000000040 ffff88801b841b40 ffffea0001fea480 dead000000000006 [ 437.357451][T10257] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 437.366184][T10257] head: 00fff00000000001 ffffea0001f87401 00000000ffffffff 00000000ffffffff [ 437.374835][T10257] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 437.383475][T10257] page dumped because: kasan: bad access detected [ 437.389862][T10257] page_owner tracks the page as allocated [ 437.395551][T10257] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6010, tgid 6010 (syz-executor), ts 78360511938, free_ts 78340032633 [ 437.416123][T10257] post_alloc_hook+0x1c0/0x230 [ 437.420886][T10257] get_page_from_freelist+0x132b/0x38e0 [ 437.426420][T10257] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 437.432376][T10257] alloc_pages_mpol+0x1fb/0x550 [ 437.437204][T10257] new_slab+0x247/0x330 [ 437.441342][T10257] ___slab_alloc+0xcf2/0x1740 [ 437.446011][T10257] __slab_alloc.constprop.0+0x56/0xb0 [ 437.451367][T10257] __kmalloc_noprof+0x2f2/0x510 [ 437.456204][T10257] security_inode_init_security+0x13f/0x390 [ 437.462090][T10257] shmem_symlink+0x135/0x9f0 [ 437.466658][T10257] vfs_symlink+0x400/0x680 [ 437.471065][T10257] do_symlinkat+0x261/0x310 [ 437.475548][T10257] __x64_sys_symlinkat+0x93/0xc0 [ 437.480565][T10257] do_syscall_64+0xcd/0x4c0 [ 437.485048][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.490919][T10257] page last free pid 6007 tgid 6007 stack trace: [ 437.497231][T10257] __free_frozen_pages+0x7d5/0x10f0 [ 437.502424][T10257] qlist_free_all+0x4d/0x120 [ 437.506992][T10257] kasan_quarantine_reduce+0x195/0x1e0 [ 437.512427][T10257] __kasan_slab_alloc+0x69/0x90 [ 437.517261][T10257] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 437.522715][T10257] getname_flags.part.0+0x4c/0x550 [ 437.527827][T10257] getname_flags+0x93/0xf0 [ 437.532225][T10257] do_sys_openat2+0xb8/0x1d0 [ 437.536798][T10257] __x64_sys_openat+0x174/0x210 [ 437.541630][T10257] do_syscall_64+0xcd/0x4c0 [ 437.546118][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.551992][T10257] [ 437.554289][T10257] Memory state around the buggy address: [ 437.559907][T10257] ffff88807e1d1d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 437.567952][T10257] ffff88807e1d1d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 437.575995][T10257] >ffff88807e1d1e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.584114][T10257] ^ [ 437.589812][T10257] ffff88807e1d1e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.597953][T10257] ffff88807e1d1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 437.606014][T10257] ================================================================== [ 437.634418][T10257] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 437.641643][T10257] CPU: 0 UID: 0 PID: 10257 Comm: syz.1.1010 Not tainted syzkaller #0 PREEMPT(full) [ 437.651014][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 437.661050][T10257] Call Trace: [ 437.664317][T10257] [ 437.667229][T10257] dump_stack_lvl+0x3d/0x1f0 [ 437.671818][T10257] vpanic+0x6e8/0x7a0 [ 437.675792][T10257] ? __pfx_vpanic+0x10/0x10 [ 437.680285][T10257] ? sysfs_remove_file_ns+0x63/0x70 [ 437.685472][T10257] panic+0xca/0xd0 [ 437.689180][T10257] ? __pfx_panic+0x10/0x10 [ 437.693594][T10257] ? sysfs_remove_file_ns+0x63/0x70 [ 437.698772][T10257] ? preempt_schedule_common+0x44/0xc0 [ 437.704212][T10257] ? preempt_schedule_thunk+0x16/0x30 [ 437.709589][T10257] check_panic_on_warn+0xab/0xb0 [ 437.714525][T10257] end_report+0x107/0x170 [ 437.718857][T10257] kasan_report+0xee/0x110 [ 437.723256][T10257] ? sysfs_remove_file_ns+0x63/0x70 [ 437.728436][T10257] sysfs_remove_file_ns+0x63/0x70 [ 437.733445][T10257] driver_remove_file+0x4a/0x60 [ 437.738281][T10257] bus_remove_driver+0x224/0x2c0 [ 437.743213][T10257] driver_unregister+0x76/0xb0 [ 437.748046][T10257] comedi_device_detach_locked+0x12f/0xa50 [ 437.753842][T10257] comedi_device_detach+0x67/0xb0 [ 437.758848][T10257] comedi_device_attach+0x43d/0x900 [ 437.764031][T10257] do_devconfig_ioctl+0x1b1/0x710 [ 437.769049][T10257] ? __mutex_lock+0x1c5/0x1060 [ 437.773797][T10257] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 437.779342][T10257] ? lockdep_hardirqs_on+0x7c/0x110 [ 437.784524][T10257] comedi_unlocked_ioctl+0x165d/0x2f00 [ 437.789986][T10257] ? rcu_is_watching+0x12/0xc0 [ 437.794738][T10257] ? irqentry_exit+0x3b/0x90 [ 437.799308][T10257] ? lockdep_hardirqs_on+0x7c/0x110 [ 437.804490][T10257] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 437.810293][T10257] ? do_vfs_ioctl+0xca/0x14f0 [ 437.815033][T10257] ? do_vfs_ioctl+0xdb7/0x14f0 [ 437.819786][T10257] ? do_vfs_ioctl+0x128/0x14f0 [ 437.824538][T10257] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 437.829548][T10257] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 437.836389][T10257] ? hook_file_ioctl_common+0x145/0x410 [ 437.841942][T10257] ? selinux_file_ioctl+0x180/0x270 [ 437.847125][T10257] ? selinux_file_ioctl+0xb4/0x270 [ 437.852233][T10257] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 437.858028][T10257] __x64_sys_ioctl+0x18b/0x210 [ 437.862779][T10257] do_syscall_64+0xcd/0x4c0 [ 437.867266][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.873138][T10257] RIP: 0033:0x7fd71e18ebe9 [ 437.877541][T10257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.897128][T10257] RSP: 002b:00007fd71c3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.905960][T10257] RAX: ffffffffffffffda RBX: 00007fd71e3c6090 RCX: 00007fd71e18ebe9 [ 437.913915][T10257] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000007 [ 437.921875][T10257] RBP: 00007fd71e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 437.929825][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.937776][T10257] R13: 00007fd71e3c6128 R14: 00007fd71e3c6090 R15: 00007ffcaacf1e28 [ 437.945735][T10257] [ 437.948953][T10257] Kernel Offset: disabled [ 437.953250][T10257] Rebooting in 86400 seconds..