last executing test programs: 3m29.275427026s ago: executing program 2 (id=1014): r0 = creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5800003a, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000c00)='W', 0x1, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x71) alarm(0x5) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) r2 = socket$rds(0x15, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x204002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_usb_connect$uac2(0x5, 0xa5, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000081e04003040000102030109029300030108100a080b0102010720090904000000010120000924010600031b001a06240b01016e0c2403060204290177977c7e09040100000102200009040101010102200010240107ff030200000002ff010000dd09050109ff0304037f082501800cf70a000904020000010120000904020101010220"], &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0}) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x6, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {0x0, 0xfff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x2, 0x1}, {0x0, 0x800000}, {}, {0xc}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) 3m26.848529685s ago: executing program 2 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) userfaultfd(0x80800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x0, 0x0, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x4, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x0, 0x5, 0x2, 0x9}, {0x953c, 0xff, 0x65, 0x7}, {0x1, 0x1, 0x0, 0xfff}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) acct(0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) rt_sigsuspend(0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x5e22, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x1]}, 0x8, 0x80000) 3m25.256446805s ago: executing program 2 (id=1032): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0xc000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 3m25.185741914s ago: executing program 2 (id=1034): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x1, 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) close_range(r5, 0xffffffffffffffff, 0x0) acct(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x9e, 0x8, 0x7, 0x2, @local, @local, 0x1, 0x40, 0x6, 0x10}}) pselect6(0x40, &(0x7f0000000080)={0x1000, 0xf, 0x8, 0x0, 0x2, 0x7, 0xffffffffffffffff}, &(0x7f0000000180)={0x3cce, 0x9, 0x3, 0x1, 0x24d, 0x200, 0x10000, 0x4}, &(0x7f00000001c0)={0x1, 0x0, 0xffffffff, 0x9d, 0x5696, 0xf6, 0x8, 0x6c}, &(0x7f0000000340)={0x77359400}, &(0x7f0000000440)={&(0x7f00000003c0)={[0x22]}, 0x8}) 3m23.59159269s ago: executing program 2 (id=1039): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000240)={0xffffffffffffffff, 0x8a, 0xfffffffffffffff5, 0x200000000000d, 0x80000000, 0x5, 0x52e6ac5c, 0x2000ffffffff, 0x4aa6, 0xfffffffffffffffe, 0x80000000008, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0x12e, 0x4, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x200000005, 0x0, 0xffffffffffffffff, 0xa}) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x0, 0x0, 0x22, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1}, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) 3m21.08911309s ago: executing program 2 (id=1042): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4}) 3m5.31198039s ago: executing program 32 (id=1042): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4}) 15.385698659s ago: executing program 1 (id=1644): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0xf) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0200000000fc0000000000000000010c00028005000100880000003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c0002800500010086000000"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) socket$kcm(0x29, 0x0, 0x0) listen(r1, 0x0) 14.549826473s ago: executing program 0 (id=1647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c251801000020646c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4) ioctl$XFS_IOC_SET_RESBLKS(r5, 0xc0105872, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f0000000040)=0x1) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 13.228669424s ago: executing program 0 (id=1650): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000180)={0x1fe, 0x9, 0x10000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r3, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a0000000705820200020007050302000200"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0) syz_usb_control_io(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000400e448b285", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x40041) 12.125785551s ago: executing program 1 (id=1656): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setreuid(0xee01, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x34, r4, 0x400, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}}, 0x4000054) ioprio_set$pid(0x2, r0, 0x2004) syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) rseq(0x0, 0x0, 0x50000000, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x58, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 10.172597235s ago: executing program 1 (id=1663): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) userfaultfd(0x80800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x0, 0x0, 0x2) r3 = syz_usb_connect(0x4, 0x55, &(0x7f0000000100)=ANY=[@ANYRES64], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x4, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x0, 0x5, 0x2, 0x9}, {0x953c, 0xff, 0x65, 0x7}, {0x1, 0x1, 0x0, 0xfff}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) acct(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) rt_sigsuspend(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x5e22, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) syz_usb_control_io(r3, 0x0, 0x0) signalfd4(r5, &(0x7f0000000140)={[0x1]}, 0x8, 0x80000) 7.666928381s ago: executing program 5 (id=1670): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.61359761s ago: executing program 3 (id=1671): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000000080)="785057464de20bc67694796ec8a69169c1879f2612a85c95f21b8d45a2d80e25ff9bb051adbdb2c6cfa1e5dd5e821b0f0ff522a062465cdd63c57c1eb2a5a4f9e3dd1a1f3b76f63edc5fe6234a479129fc008f511359cccbeb4993a772776c7fbd5e9f617c63544c06590a5522db88d790348a99e6231b0c0226718d45815acde77abbe49a4c28cf61c182b843ed9d59632eb0661f17863fc31b9152b408af2850aec3df6b96f5b185612d63fb28670d96d5bf5c2dab40ac51038c0d7e8689807c7b7c4da67e04bc289d7f9b193130b04091ab2380755be8ed1bf751224013fe03f6b97fa1f884f81a", 0xe9}, {&(0x7f0000000180)="d9aa0d2bf136ad76aefcc07417bc398c89b52b77e2e4fdc14bd5eaeed1ce9d7f8d298eface95c2ce0e7d8d5d2b22cc1d059e171fa9a01c", 0x37}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="525ea06a9fc7aaf7584d5787d0c6b3213bb2f7c4d371b56b88bb79d1155fb7ec81ded1a8b8116ed8bf57191ffe393f0034f88ce0c2573be5b9c7915ac7b025a7a2615d4bb16be0aab17a49a7cd05b92068118851023d06c6", 0x58}], 0x4, &(0x7f0000001dc0)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x0, 0x5, 0x1}}, @authinfo={0x18, 0x84, 0x6, {0x287f}}, @init={0x18, 0x84, 0x0, {0x8, 0x400, 0x7, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0xffff, 0x800e, 0x7, 0xfffffff9, 0x6, 0x5, 0x1}}], 0x80}, 0x24000040) 7.505118562s ago: executing program 3 (id=1672): inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x84000021) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5401000010000100ffffffff2e0b24cbce81254f26d900000000fe880000000000000000000000000101ac1e0001000000000000000000000000000400004e23", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000faffffff000000000000000028bd700000"], 0x154}}, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(essiv(ccm_base(ctr-camellia-aesni,poly1305-arm),blake2b'}, 0x19) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r2, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe11) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x200000000000004, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], 0xfffffeff) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="9a4b20370166b9e20b00000f3211ba030066b80b00000066ba000000000f3066b9800000c00fc7590066b885f686ca0f23c80f21f866350800d0000f23f80f300f01c366b8660000000f21f866350c0080000f23f8660f5ee666b9c20000000f322ee108f3f4", 0x66}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.613910852s ago: executing program 5 (id=1673): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x3, 0x0, &(0x7f0000000600)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) 6.508856862s ago: executing program 1 (id=1674): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xffffffc2, 0x0, 0xcf, 0x7, 0x5, "0c000000000000c4bebe2ebeae86f800", 0x1004, 0xffffffff}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xf) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0200000000fc0000000000000000010c00028005000100880000003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c0002800500010086000000"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 6.439825031s ago: executing program 5 (id=1675): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ftruncate(0xffffffffffffffff, 0x51a9497) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYRES8=r1, @ANYBLOB="ba1a075b98f1022a1bb3063b3f7998aec53d4af28f47211fab5dc7c06606caa5379de35d727488e533b962f3c79091aaff0247e8301d6b918d75eae850b013dc5b0b093919091fa42d537c7169f65cdf98ee440a5e300dfaace51e68c6de6f53942124735549c9e0be0aedcde03845d7f2a98abbdc34174fe32ef941c0cb945f94cc04356ead58efc00038e9fa99ad09f05d85b8805b759e7edf4831e8dc3c75b157dfe02f55db686666debef84c04b7fad8", @ANYRES32, @ANYBLOB="004989005b2898f81d2ebaa318260423162700000000000000000066000080000025000000d3a2330bda578910ef3d9e355a9b9f6edef5e08916a9743f72ecc9bdf51b14cf5cbf357a48d56259305ba9da6c29baf3f29528e39a3378443b3417b3626e95b595c37974ef0dbb98ceaa39a87cba5ea71e0707e5e4ebffb01af4d3c73d8aaedf496300"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000640)={'team0\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x4c, 0x4, 0xb8, 0x6, 0x2, 0x5, 0x3, 0x2, 0x8, 0x4, [0x2, 0xa, 0xb7, 0x6, 0xaa, 0x8001, 0x8, 0xbfa7]}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x40) bind(r5, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r2, @ANYRES8, @ANYRES32=r3, @ANYRESDEC], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.334472469s ago: executing program 0 (id=1676): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ftruncate(0xffffffffffffffff, 0x51a9497) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYRES8=r2, @ANYBLOB="ba1a075b98f1022a1bb3063b3f7998aec53d4af28f47211fab5dc7c06606caa5379de35d727488e533b962f3c79091aaff0247e8301d6b918d75eae850b013dc5b0b093919091fa42d537c7169f65cdf98ee440a5e300dfaace51e68c6de6f53942124735549c9e0be0aedcde03845d7f2a98abbdc34174fe32ef941c0cb945f94cc04356ead58efc00038e9fa99ad09f05d85b8805b759e7edf4831e8dc3c75b157dfe02f55db686666debef84c04b7fad8", @ANYRES32, @ANYBLOB="004989005b2898f81d2ebaa318260423162700000000000000000066000080000025000000d3a2330bda578910ef3d9e355a9b9f6edef5e08916a9743f72ecc9bdf51b14cf5cbf357a48d56259305ba9da6c29baf3f29528e39a3378443b3417b3626e95b595c37974ef0dbb98ceaa39a87cba5ea71e0707e5e4ebffb01af4d3c73d8aaedf496300"], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000640)={'team0\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x4c, 0x4, 0xb8, 0x6, 0x2, 0x5, 0x3, 0x2, 0x8, 0x4, [0x2, 0xa, 0xb7, 0x6, 0xaa, 0x8001, 0x8, 0xbfa7]}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r3, @ANYRES8, @ANYRES32=r4, @ANYRESDEC], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.905051758s ago: executing program 5 (id=1677): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) userfaultfd(0x80800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x0, 0x0, 0x2) r3 = syz_usb_connect(0x4, 0x55, &(0x7f0000000100)=ANY=[@ANYRES64], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x4, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x0, 0x5, 0x2, 0x9}, {0x953c, 0xff, 0x65, 0x7}, {0x1, 0x1, 0x0, 0xfff}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) acct(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) rt_sigsuspend(0x0, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x5e22, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x1]}, 0x8, 0x80000) 5.337839317s ago: executing program 3 (id=1678): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = memfd_create(0x0, 0x0) pwritev(r0, 0x0, 0x0, 0x4000003, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x26, 0x101, 0x70bd2d, 0xffffffff, {0x4}, [@typed={0x4, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400090000007000fcffffff0500000008"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 4.993011392s ago: executing program 3 (id=1680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x0, 0x900, 0x0, 0xfffffffe}}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x6, &(0x7f00000001c0)={0x0, 0xd, 0x4, @tid=r3}, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='isp1301 0x2c\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x44241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r5, &(0x7f0000000100)='isp1301 0x2c\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='isp1301 0x2c\x00', 0xd) read$FUSE(r2, &(0x7f0000004000)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x301, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040814) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) r9 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$RNDADDENTROPY(r9, 0x5207, 0x0) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000002680)=[{{&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000003c0)="1695", 0x2}], 0x1}}], 0x2, 0x48000) 3.437194455s ago: executing program 3 (id=1682): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.396009002s ago: executing program 1 (id=1683): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setreuid(0xee01, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x34, r5, 0x400, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}}, 0x4000054) ioprio_set$pid(0x2, r0, 0x2004) syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) rseq(0x0, 0x0, 0x50000000, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x58, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 3.347349304s ago: executing program 4 (id=1684): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) truncate(&(0x7f00000001c0)='./file0\x00', 0x7) socket$inet6(0xa, 0xa, 0x0) close(0x3) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000240)='*', 0x1}], 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xd) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000280)='*', 0x1}], 0x1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fstatfs(r3, &(0x7f0000000140)=""/47) r6 = getpid() shutdown(0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r8, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) 2.707248989s ago: executing program 5 (id=1685): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x40, 0x16, 0x4, "90b7a71b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000300)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x8, 0x1) fremovexattr(r4, &(0x7f0000000000)=@known='system.posix_acl_default\x00') close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fb0d3b250a0000000c0003"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20004004) ioctl$MON_IOCX_GETX(r1, 0x4018920a, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec022b9ff9682b3d1fb20300090454170dd05790e62f81b3419bd8331dfb4cfba6b8a485d440e9ee969b3d4b3c685b4d43a967c36736a9f49e293513b85a0f4e9b3c33d10176c617b2a1d04a42074436bcad3bf806eea8cd066e9027af4df02cc9a716f8bf0b72a89507271251000000204acf78687c6a20ee228c1f3ea2615d4e1e8f74cfce36a455840670b17cea65bf38ab1aef1cce985fc44e4dd571cc290bff99"], 0x0) 2.532738389s ago: executing program 4 (id=1686): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) epoll_create(0xd) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0xfffc, @remote}, {0x2, 0x4e23, @private=0xa010100}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6, 0xe0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.463364851s ago: executing program 1 (id=1687): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x40, 0x16, 0x4, "90b7a71b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000300)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x8, 0x1) fremovexattr(r4, &(0x7f0000000000)=@known='system.posix_acl_default\x00') close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000fb0d3b250a0000000c0003"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20004004) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec022b9ff9682b3d1fb20300090454170dd05790e62f81b3419bd8331dfb4cfba6b8a485d440e9ee969b3d4b3c685b4d43a967c36736a9f49e293513b85a0f4e9b3c33d10176c617b2a1d04a42074436bcad3bf806eea8cd066e9027af4df02cc9a716f8bf0b72a89507271251000000204acf78687c6a20ee228c1f3ea2615d4e1e8f74cfce36a455840670b17cea65bf38ab1aef1cce985fc44e4dd571cc290bff99"], 0x0) 2.292761397s ago: executing program 0 (id=1688): inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x84000021) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5401000010000100ffffffff2e0b24cbce81254f26d900000000fe880000000000000000000000000101ac1e0001000000000000000000000000000400004e23", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000faffffff000000000000000028bd700000"], 0x154}}, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(essiv(ccm_base(ctr-camellia-aesni,poly1305-arm),blake2b'}, 0x19) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r2, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe11) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x200000000000004, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], 0xfffffeff) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'\x00', {0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="9a4b20370166b9e20b00000f3211ba030066b80b00000066ba000000000f3066b9800000c00fc7590066b885f686ca0f23c80f21f866350800d0000f23f80f300f01c366b8660000000f21f866350c0080000f23f8660f5ee666b9c20000000f322ee108f3f4", 0x66}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.280303613s ago: executing program 4 (id=1689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_uring_setup(0x5f8b, &(0x7f0000000100)={0x0, 0x489f, 0x20000, 0x3, 0x1bb}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xe3900, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 2.25776688s ago: executing program 3 (id=1690): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ftruncate(0xffffffffffffffff, 0x51a9497) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYRES8=r2, @ANYBLOB="ba1a075b98f1022a1bb3063b3f7998aec53d4af28f47211fab5dc7c06606caa5379de35d727488e533b962f3c79091aaff0247e8301d6b918d75eae850b013dc5b0b093919091fa42d537c7169f65cdf98ee440a5e300dfaace51e68c6de6f53942124735549c9e0be0aedcde03845d7f2a98abbdc34174fe32ef941c0cb945f94cc04356ead58efc00038e9fa99ad09f05d85b8805b759e7edf4831e8dc3c75b157dfe02f55db686666debef84c04b7fad8", @ANYRES32, @ANYBLOB="004989005b2898f81d2ebaa318260423162700000000000000000066000080000025000000d3a2330bda578910ef3d9e355a9b9f6edef5e08916a9743f72ecc9bdf51b14cf5cbf357a48d56259305ba9da6c29baf3f29528e39a3378443b3417b3626e95b595c37974ef0dbb98ceaa39a87cba5ea71e0707e5e4ebffb01af4d3c73d8aaedf496300"], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000640)={'team0\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x4c, 0x4, 0xb8, 0x6, 0x2, 0x5, 0x3, 0x2, 0x8, 0x4, [0x2, 0xa, 0xb7, 0x6, 0xaa, 0x8001, 0x8, 0xbfa7]}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r3, @ANYRES8, @ANYRES32=r4, @ANYRESDEC], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.943137517s ago: executing program 4 (id=1691): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = memfd_create(0x0, 0x0) pwritev(r0, 0x0, 0x0, 0x4000003, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x26, 0x101, 0x70bd2d, 0xffffffff, {0x4}, [@typed={0x4, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400090000007000fcffffff0500000008"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 1.803966359s ago: executing program 4 (id=1692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x0, 0x900, 0x0, 0xfffffffe}}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x6, &(0x7f00000001c0)={0x0, 0xd, 0x4, @tid=r3}, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='isp1301 0x2c\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x44241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r5, &(0x7f0000000100)='isp1301 0x2c\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='isp1301 0x2c\x00', 0xd) read$FUSE(r2, &(0x7f0000004000)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x301, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040814) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) r9 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$RNDADDENTROPY(r9, 0x5207, 0x0) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000002680)=[{{&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000003c0)="1695", 0x2}], 0x1}}], 0x2, 0x48000) 1.085255158s ago: executing program 0 (id=1693): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0xc000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 287.800988ms ago: executing program 5 (id=1694): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x40, 0x16, 0x4, "90b7a71b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000300)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x8, 0x1) fremovexattr(r4, &(0x7f0000000000)=@known='system.posix_acl_default\x00') close(r3) socket$nl_generic(0x10, 0x3, 0x10) 12.518904ms ago: executing program 0 (id=1695): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000340)=[@iv={0x60, 0x117, 0x2, 0x48, "7c66b74a866184c3f2174e22d76c97f77645bc6980ed35b0359123e7299a67ddf6d5f40f24a995bc211879c47836d55e1a9035dcac01c353041ae4dce16a9f650fc3057b3727d706"}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x78, 0x4a1ab295fe1da1cb}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f0000000840)=""/85, 0x55}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000000740)=""/190, 0xbe}], 0x4}, 0x0) 0s ago: executing program 4 (id=1696): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xffffffc2, 0x0, 0xcf, 0x7, 0x5, "0c000000000000c4bebe2ebeae86f800", 0x1004, 0xffffffff}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xf) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0200000000fc0000000000000000010c00028005000100880000003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c0002800500010086000000"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) socket$kcm(0x29, 0x0, 0x0) listen(r2, 0x0) kernel console output (not intermixed with test programs): 395.776608][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.784105][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.791498][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.798887][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.806297][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.814752][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.822167][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.829536][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.836907][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.844263][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.851620][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.858974][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.866326][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.874316][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.881679][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.889062][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.896471][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.905753][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.913749][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.922270][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.929695][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.937510][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.945100][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.952492][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.959861][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.967213][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.974574][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.981962][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.989350][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 395.996768][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.004169][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.011551][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.018929][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.026519][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.035356][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.042734][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.050242][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.058039][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.065841][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.073693][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.081353][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.088745][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.096140][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.103537][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.111348][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.114382][ T9554] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 396.118737][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.135755][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.143146][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.150544][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.157937][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.165315][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.172705][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.180422][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.188112][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.195569][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.202969][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.210360][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.217784][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.225688][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.234437][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.241837][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.249226][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.256704][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.264094][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.271827][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.279177][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.286528][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.293956][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.294927][ T9554] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 396.301335][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.301526][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.324100][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.331722][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.339100][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.346601][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.354001][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.361421][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.368817][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.376202][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.383616][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.391068][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.398433][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.405768][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.413122][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.420460][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.427803][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.436475][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.444648][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.452043][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.459425][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.466931][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.474300][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.481694][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.489087][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.496492][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.503904][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.511314][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.518703][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.526199][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.533596][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.541328][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.548725][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.556146][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 396.563404][ C0] usb 5-1: ti_interrupt_callback - resubmit interrupt urb failed, -1 [ 396.640558][ T983] usb 5-1: USB disconnect, device number 17 [ 396.759461][ T983] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 397.356655][ T983] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 397.419590][ T983] ti_usb_3410_5052 5-1:2.0: device disconnected [ 397.590447][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.605304][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.617600][ T4916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.626953][ T4916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.637353][ T4916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.167578][ T1606] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 398.204297][ T1606] (NULL device *): queue 0 connect admin queue failed (-111). [ 398.222331][ T1606] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 398.240182][ T1606] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 398.316567][ T29] audit: type=1400 audit(1786223720.889:585): avc: denied { bind } for pid=9592 comm="syz.4.1059" lport=64 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.467689][ T769] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.661139][ T5607] Bluetooth: hci5: command tx timeout [ 400.147003][ T769] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.321296][ T7288] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 400.725557][ T7288] (NULL device *): queue 0 connect admin queue failed (-111). [ 400.725608][ T7288] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 400.725653][ T7288] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 400.766792][ T769] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.821537][ T9591] wlan0 speed is unknown, defaulting to 1000 [ 401.002805][ T9637] befs: (nbd1): unable to read superblock [ 401.366610][ T769] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.503961][ T9642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1070'. [ 401.741011][ T5607] Bluetooth: hci5: command tx timeout [ 402.162295][ T42] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 402.341393][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 402.349885][ T42] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 402.371241][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.440322][ T42] usb 5-1: config 0 descriptor?? [ 402.515075][ T42] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 402.755555][ T9648] x_tables: duplicate underflow at hook 2 [ 402.791349][ T60] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 402.924797][ T60] (NULL device *): queue 0 connect admin queue failed (-111). [ 403.000842][ T60] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 403.043851][ T60] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 403.072081][ T42] gspca_vc032x: reg_r err -110 [ 403.094058][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.118876][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.138939][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.156091][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.170043][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.185356][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.199175][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.209256][ T769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.218507][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.224153][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.229937][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.241275][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.247102][ T769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.256086][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.262024][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.268781][ T769] bond0 (unregistering): Released all slaves [ 403.276601][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.287882][ T769] bond1 (unregistering): Released all slaves [ 403.294587][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.301734][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.308017][ T29] audit: type=1400 audit(1786223725.879:586): avc: denied { write } for pid=9656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.335859][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.345237][ T769] bond2 (unregistering): Released all slaves [ 403.352212][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.363410][ T42] gspca_vc032x: Unknown sensor... [ 403.367322][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 403.379092][ T42] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 403.396719][ T769] bond3 (unregistering): (slave veth3): Releasing active interface [ 403.414184][ T769] bond3 (unregistering): Released all slaves [ 403.510650][ T29] audit: type=1400 audit(1786223726.079:587): avc: denied { write } for pid=9676 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.523295][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.569070][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 403.586423][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 403.597142][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.598266][ T10] usb 2-1: config 4 interface 0 has no altsetting 0 [ 403.611112][ T9591] bridge_slave_0: entered allmulticast mode [ 403.615317][ T9591] bridge_slave_0: entered promiscuous mode [ 403.637844][ T10] usb 2-1: string descriptor 0 read error: -22 [ 403.645746][ T10] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 403.665890][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 403.715639][ T10] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 403.736453][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 403.771045][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 403.779918][ T10] usb 2-1: media controller created [ 403.807506][ T9591] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.808925][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 403.823401][ T5607] Bluetooth: hci5: command tx timeout [ 403.841360][ T9591] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.850068][ T9591] bridge_slave_1: entered allmulticast mode [ 403.862659][ T9591] bridge_slave_1: entered promiscuous mode [ 403.901854][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 403.929925][ T29] audit: type=1400 audit(1786223726.499:588): avc: denied { create } for pid=9669 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 403.974249][ T29] audit: type=1400 audit(1786223726.499:589): avc: denied { getopt } for pid=9669 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 404.096125][ T60] smbdirect: ib_dev[syz0] removed [ 404.116380][ T9591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.133067][ T9591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.145544][ T42] wlan0 speed is unknown, defaulting to 1000 [ 404.152205][ T42] syz0: Port: 1 Link DOWN [ 404.203669][ T9591] team0: Port device team_slave_0 added [ 404.212022][ T9591] team0: Port device team_slave_1 added [ 404.245487][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 404.295612][ T9591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.324771][ T9591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.359807][ T10] usb 2-1: USB disconnect, device number 22 [ 404.374486][ T9591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.402637][ T9591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.419036][ T9591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.523655][ T9] usb 5-1: USB disconnect, device number 18 [ 404.553827][ T9591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.723075][ T769] hsr_slave_0: left promiscuous mode [ 404.756292][ T769] hsr_slave_1: left promiscuous mode [ 404.776288][ T769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.802836][ T769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.847065][ T769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.852536][ T29] audit: type=1400 audit(1786223727.419:590): avc: denied { write } for pid=9683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.867345][ T769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.101043][ T60] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 405.143889][ T60] (NULL device *): queue 0 connect admin queue failed (-111). [ 405.173006][ T60] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 405.184417][ T60] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 405.204776][ T769] veth1_macvtap: left promiscuous mode [ 405.227056][ T769] veth1_vlan: left promiscuous mode [ 405.247458][ T42] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 405.283573][ T769] veth0_vlan: left promiscuous mode [ 405.441265][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 405.470585][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.512304][ T42] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 405.554671][ T42] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 405.578936][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.605684][ T42] usb 5-1: Product: syz [ 405.674369][ T42] usb 5-1: Manufacturer: syz [ 405.691004][ T29] audit: type=1400 audit(1786223728.259:591): avc: denied { write } for pid=9707 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.769182][ T42] usb 5-1: SerialNumber: syz [ 405.901047][ T5607] Bluetooth: hci5: command tx timeout [ 406.989282][ T769] team0 (unregistering): Port device team_slave_1 removed [ 407.052680][ T769] team0 (unregistering): Port device team_slave_0 removed [ 407.261054][ T1010] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 407.281907][ T1010] (NULL device *): queue 0 connect admin queue failed (-111). [ 407.297102][ T1010] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 407.312788][ T1010] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 407.337479][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 407.369680][ T42] usb 5-1: 1:1 : bogus bTerminalLink 7 [ 407.396533][ T42] usb 5-1: unit 119 not found! [ 407.426813][ T42] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 407.434314][ T9727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1086'. [ 407.450340][ T42] usb 5-1: USB disconnect, device number 19 [ 407.515405][ T9591] hsr_slave_0: entered promiscuous mode [ 407.530966][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 407.546529][ T9591] hsr_slave_1: entered promiscuous mode [ 407.567604][ T9591] debugfs: 'hsr0' already exists in 'hsr' [ 407.577017][ T9591] Cannot create hsr debugfs directory [ 407.701783][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 407.732360][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.761193][ T10] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.786841][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 407.802703][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.817131][ T10] usb 2-1: Product: syz [ 407.829311][ T10] usb 2-1: Manufacturer: syz [ 407.834128][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 407.844319][ T10] usb 2-1: SerialNumber: syz [ 408.001012][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 408.013700][ T9] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 408.047013][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.080302][ T9] usb 1-1: config 0 descriptor?? [ 408.105443][ T29] audit: type=1400 audit(1786223730.679:592): avc: denied { write } for pid=9731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.113743][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 408.179287][ T10] usb 2-1: 1:1 : bogus bTerminalLink 7 [ 408.186692][ T10] usb 2-1: unit 119 not found! [ 408.219531][ T10] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 408.224929][ T9591] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 408.247913][ T10] usb 2-1: USB disconnect, device number 23 [ 408.264663][ T9591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.323293][ T9728] x_tables: duplicate underflow at hook 2 [ 408.328997][ T9591] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 408.531424][ T29] audit: type=1400 audit(1786223731.099:593): avc: denied { write } for pid=9747 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.670127][ T9591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.689262][ T9] gspca_vc032x: reg_r err -110 [ 408.706102][ T9591] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 408.706113][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.732836][ T9591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.753068][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.753498][ T9591] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 408.765238][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.789462][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.799291][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.806282][ T9591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.806638][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.824327][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.825736][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 408.829720][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.829733][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.850710][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.857284][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.864282][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.869900][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.877854][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.885887][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.893298][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.899096][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.905907][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.911577][ T9] gspca_vc032x: Unknown sensor... [ 408.917284][ T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 409.060820][ T9591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.232441][ T9591] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.337330][ T769] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.344512][ T769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.354061][ T1606] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 409.376662][ T1606] (NULL device *): queue 0 connect admin queue failed (-111). [ 409.398620][ T1606] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 409.425323][ T1606] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 409.439306][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.446429][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.970222][ T29] audit: type=1400 audit(1786223732.529:594): avc: denied { write } for pid=9758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.167790][ T29] audit: type=1400 audit(1786223732.739:595): avc: denied { write } for pid=9789 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.253288][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 410.446552][ T9] usb 1-1: USB disconnect, device number 21 [ 410.547009][ T29] audit: type=1400 audit(1786223733.119:596): avc: denied { setopt } for pid=9805 comm="syz.0.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.843884][ T9591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.621857][ T1606] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 411.713515][ T1606] (NULL device *): queue 0 connect admin queue failed (-111). [ 411.734742][ T1606] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 411.766453][ T1606] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 412.512142][ T9591] veth0_vlan: entered promiscuous mode [ 412.560330][ T9591] veth1_vlan: entered promiscuous mode [ 412.631206][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 412.646940][ T9833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1099'. [ 412.737448][ T9591] veth0_macvtap: entered promiscuous mode [ 413.028055][ T9591] veth1_macvtap: entered promiscuous mode [ 413.556628][ T9591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.606504][ T9591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.636869][ T9839] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 413.644921][ T9839] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 413.717928][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.789443][ T6144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.812616][ T29] audit: type=1400 audit(1786223736.379:597): avc: denied { write } for pid=9843 comm="syz.0.1102" name="functions" dev="configfs" ino=17205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 413.844237][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 413.863098][ T1010] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.893954][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 413.920994][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 413.931215][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.976252][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 413.987382][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.006692][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.764776][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.787918][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.229099][ T29] audit: type=1400 audit(1786223737.799:598): avc: denied { shutdown } for pid=9856 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 415.262155][ T29] audit: type=1400 audit(1786223737.829:599): avc: denied { connect } for pid=9856 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 415.288040][ T29] audit: type=1400 audit(1786223737.829:600): avc: denied { name_connect } for pid=9856 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 416.060984][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 416.065163][ T9862] 9p: Bad value for 'rfdno' [ 416.139126][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 416.170954][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 416.191294][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 417.481130][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 417.741992][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 417.748497][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 417.757762][ T9] usb 4-1: config 0 has no interface number 0 [ 417.765767][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 417.791048][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 417.821644][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 417.862020][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 417.889739][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 417.899755][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.949420][ T9] usb 4-1: config 0 descriptor?? [ 417.954671][ T187] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 418.004305][ T9] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 418.128806][ T187] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 418.302924][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 418.375831][ T187] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 418.390292][ T187] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 418.404361][ T187] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 418.468323][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.474990][ T13] (NULL device *): queue 0 connect admin queue failed (-111). [ 418.500496][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 418.500496][ T9] usb 4-1: USB disconnect, device number 14 [ 418.514634][ T9900] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 418.521569][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 418.531284][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 418.866126][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 418.879385][ T187] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 418.890298][ T187] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input13 [ 418.979841][ T187] usb 5-1: USB disconnect, device number 20 [ 418.985846][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 419.913689][ T9] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 420.624988][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 420.738106][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 420.749735][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 420.758152][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 420.769426][ T9935] FAULT_INJECTION: forcing a failure. [ 420.769426][ T9935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.791283][ T29] audit: type=1400 audit(1786223743.339:601): avc: denied { write } for pid=9934 comm="syz.4.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 420.819981][ T9935] CPU: 1 UID: 0 PID: 9935 Comm: syz.4.1128 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.820013][ T9935] Tainted: [L]=SOFTLOCKUP [ 420.820020][ T9935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 420.820030][ T9935] Call Trace: [ 420.820037][ T9935] [ 420.820050][ T9935] dump_stack_lvl+0x100/0x190 [ 420.820079][ T9935] should_fail_ex.cold+0x5/0xa [ 420.820102][ T9935] _copy_from_user+0x2e/0xd0 [ 420.820129][ T9935] sctp_getsockopt+0x1c0c/0x7110 [ 420.820154][ T9935] ? find_held_lock+0x2b/0x80 [ 420.820171][ T9935] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 420.820192][ T9935] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 420.820213][ T9935] ? __pfx_sctp_getsockopt+0x10/0x10 [ 420.820238][ T9935] ? avc_has_perm_noaudit+0x145/0x3b0 [ 420.820261][ T9935] ? __lock_acquire+0x49f/0x1a40 [ 420.820286][ T9935] ? __pfx_avc_has_perm+0x10/0x10 [ 420.820315][ T9935] ? find_held_lock+0x2b/0x80 [ 420.820332][ T9935] ? __might_fault+0xc5/0x140 [ 420.820350][ T9935] ? __might_fault+0xc5/0x140 [ 420.820377][ T9935] ? _copy_from_user+0x59/0xd0 [ 420.820402][ T9935] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 420.820435][ T9935] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 420.820468][ T9935] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 420.820498][ T9935] do_sock_getsockopt+0x50a/0x6e0 [ 420.820525][ T9935] ? __lock_acquire+0x49f/0x1a40 [ 420.820553][ T9935] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 420.820580][ T9935] ? rcu_read_lock_any_held+0x6a/0xa0 [ 420.820605][ T9935] ? find_held_lock+0x2b/0x80 [ 420.820629][ T9935] ? __fget_files+0x21f/0x3d0 [ 420.820656][ T9935] __sys_getsockopt+0x148/0x260 [ 420.820684][ T9935] ? __x64_sys_getsockopt+0xbd/0x160 [ 420.820706][ T9935] __x64_sys_getsockopt+0xbd/0x160 [ 420.820728][ T9935] ? do_syscall_64+0x90/0x870 [ 420.820751][ T9935] ? lockdep_hardirqs_on+0x78/0x100 [ 420.820775][ T9935] do_syscall_64+0x115/0x870 [ 420.820797][ T9935] ? clear_bhb_loop+0x70/0xc0 [ 420.820820][ T9935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.820839][ T9935] RIP: 0033:0x7f0de4f9e0d9 [ 420.820855][ T9935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.820872][ T9935] RSP: 002b:00007f0de5ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 420.820889][ T9935] RAX: ffffffffffffffda RBX: 00007f0de5225fa0 RCX: 00007f0de4f9e0d9 [ 420.820900][ T9935] RDX: 0000000000000001 RSI: 0000000000000084 RDI: 0000000000000003 [ 420.820910][ T9935] RBP: 00007f0de5ea6090 R08: 0000200000000340 R09: 0000000000000000 [ 420.820921][ T9935] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 420.820930][ T9935] R13: 00007f0de5226038 R14: 00007f0de5225fa0 R15: 00007ffc91519fa8 [ 420.820954][ T9935] [ 422.871105][ T1010] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 423.024809][ T1010] (NULL device *): queue 0 connect admin queue failed (-111). [ 423.036758][ T1010] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 423.076681][ T1010] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 423.106892][ T29] audit: type=1400 audit(1786223745.679:602): avc: denied { read } for pid=9965 comm="syz.1.1134" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 423.277954][ T29] audit: type=1400 audit(1786223745.679:603): avc: denied { open } for pid=9965 comm="syz.1.1134" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 423.895511][ T29] audit: type=1400 audit(1786223746.449:604): avc: denied { ioctl } for pid=9965 comm="syz.1.1134" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 424.122395][ T29] audit: type=1400 audit(1786223746.699:605): avc: denied { accept } for pid=9975 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 424.195647][ T9979] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 424.223384][ T29] audit: type=1400 audit(1786223746.799:606): avc: denied { write } for pid=9975 comm="syz.4.1137" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 424.311058][ T29] audit: type=1400 audit(1786223746.879:607): avc: denied { write } for pid=9944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.890748][ T29] audit: type=1400 audit(1786223747.459:608): avc: denied { create } for pid=9989 comm="syz.5.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 424.914911][ T9992] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1136'. [ 424.967503][ T29] audit: type=1400 audit(1786223747.509:609): avc: denied { write } for pid=9987 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.986470][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1136'. [ 425.102084][ T3272] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 425.144953][ T3272] (NULL device *): queue 0 connect admin queue failed (-111). [ 425.181792][ T3272] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 425.217879][ T3272] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 425.412923][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 426.182411][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 426.263122][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.347292][ T10] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.396810][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 426.414147][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.437438][ T10] usb 5-1: Product: syz [ 426.450658][ T10] usb 5-1: Manufacturer: syz [ 426.469195][ T10] usb 5-1: SerialNumber: syz [ 426.520232][ T29] audit: type=1400 audit(1786223749.089:610): avc: denied { write } for pid=10001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.748039][ T10] usb 5-1: 1:1 : bogus bTerminalLink 7 [ 426.772505][ T10] usb 5-1: unit 119 not found! [ 426.779736][ T29] audit: type=1400 audit(1786223749.329:611): avc: denied { write } for pid=10027 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.819942][ T10] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 426.870703][ T10] usb 5-1: USB disconnect, device number 21 [ 427.283120][ T60] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 427.477511][ T60] (NULL device *): queue 0 connect admin queue failed (-111). [ 427.485336][ T60] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 427.493337][ T60] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 427.681910][ T29] audit: type=1400 audit(1786223750.249:612): avc: denied { read } for pid=10045 comm="syz.0.1151" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 427.897769][ T29] audit: type=1400 audit(1786223750.279:613): avc: denied { open } for pid=10045 comm="syz.0.1151" path="/232/config" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 428.090962][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 428.386079][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 428.515607][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 428.665857][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 428.804100][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.884347][ T10] usb 6-1: config 0 descriptor?? [ 429.608724][ T29] audit: type=1400 audit(1786223752.099:614): avc: denied { bind } for pid=10042 comm="syz.5.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 429.683961][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 430.558233][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 430.646535][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 430.711501][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 430.736199][ T13] Bluetooth: (null): Invalid header checksum [ 430.826244][T10067] jffs2: notice: (10067) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 430.843455][ T13] Bluetooth: (null): Invalid header checksum [ 430.845709][ T29] audit: type=1400 audit(1786223753.399:615): avc: denied { mounton } for pid=10063 comm="syz.4.1154" path="/238/dev/mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.891013][ T10] ath6kl: Failed to submit usb control message: -110 [ 430.911781][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 430.935098][ T10] ath6kl: Unable to send get target info: -110 [ 430.951289][ T29] audit: type=1400 audit(1786223753.509:616): avc: denied { write } for pid=10039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.976859][ T769] Bluetooth: (null): Invalid header checksum [ 431.008954][ T10] ath6kl: Failed to init ath6kl core: -110 [ 431.009561][ T10] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 431.066478][ T13] Bluetooth: (null): Invalid header checksum [ 431.069137][ T29] audit: type=1400 audit(1786223753.619:617): avc: denied { create } for pid=10074 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 431.171430][ T35] Bluetooth: (null): Invalid header checksum [ 431.187437][ T29] audit: type=1400 audit(1786223753.759:618): avc: denied { write } for pid=10086 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.223498][ T10] usb 6-1: USB disconnect, device number 2 [ 432.781068][ T35] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 432.829056][ T35] (NULL device *): queue 0 connect admin queue failed (-111). [ 432.947988][ T35] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 433.536976][ T35] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 433.962843][ T29] audit: type=1400 audit(1786223756.539:619): avc: denied { write } for pid=10093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.375511][T10136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1166'. [ 434.463451][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.469816][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.762850][ T5783] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 434.818135][ T29] audit: type=1400 audit(1786223757.329:620): avc: denied { create } for pid=10130 comm="syz.5.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 434.997479][ T29] audit: type=1400 audit(1786223757.569:621): avc: denied { write } for pid=10139 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.023389][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.066984][ T5783] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.117491][ T5783] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 435.156299][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.205098][ T5783] usb 5-1: config 0 descriptor?? [ 435.237899][ T29] audit: type=1400 audit(1786223757.809:622): avc: denied { create } for pid=10105 comm="syz.3.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 435.267120][ T5783] smsusb:smsusb_probe: board id=8, interface number 0 [ 435.288427][ T5783] smsusb:smsusb_probe: Device initialized with return code -19 [ 435.296136][ T29] audit: type=1400 audit(1786223757.869:623): avc: denied { sys_admin } for pid=10105 comm="syz.3.1161" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 435.393933][ T29] audit: type=1400 audit(1786223757.959:624): avc: denied { bind } for pid=10154 comm="syz.0.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 435.583131][ T1010] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 435.616826][ T1010] (NULL device *): queue 0 connect admin queue failed (-111). [ 435.720254][ T1010] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 435.798180][ T1010] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 436.027032][ T29] audit: type=1400 audit(1786223758.599:625): avc: denied { ioctl } for pid=10172 comm="syz.0.1176" path="socket:[27243]" dev="sockfs" ino=27243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 436.200390][ T29] audit: type=1400 audit(1786223758.629:626): avc: denied { bind } for pid=10172 comm="syz.0.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 436.319413][ T29] audit: type=1400 audit(1786223758.629:627): avc: denied { write } for pid=10172 comm="syz.0.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 436.925132][ T9] usb 5-1: USB disconnect, device number 22 [ 437.479054][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1179'. [ 437.912885][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 438.082618][ T13] (NULL device *): queue 0 connect admin queue failed (-111). [ 438.549795][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 438.586059][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 439.882439][ T42] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 440.266398][T10229] FAULT_INJECTION: forcing a failure. [ 440.266398][T10229] name failslab, interval 1, probability 0, space 0, times 0 [ 440.330949][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 440.337624][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.349398][ T42] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.396035][T10229] CPU: 0 UID: 0 PID: 10229 Comm: syz.4.1192 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.396066][T10229] Tainted: [L]=SOFTLOCKUP [ 440.396073][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 440.396083][T10229] Call Trace: [ 440.396090][T10229] [ 440.396097][T10229] dump_stack_lvl+0x100/0x190 [ 440.396125][T10229] should_fail_ex.cold+0x5/0xa [ 440.396148][T10229] should_failslab+0xc2/0x120 [ 440.396171][T10229] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 440.396195][T10229] ? __alloc_skb+0x5b7/0x710 [ 440.396216][T10229] ? __alloc_skb+0x140/0x710 [ 440.396241][T10229] __alloc_skb+0x140/0x710 [ 440.396261][T10229] ? __alloc_skb+0x5b7/0x710 [ 440.396281][T10229] ? __pfx___alloc_skb+0x10/0x10 [ 440.396299][T10229] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 440.396325][T10229] ? sock_has_perm+0x25a/0x2f0 [ 440.396347][T10229] ? __pfx_sock_has_perm+0x10/0x10 [ 440.396371][T10229] netlink_alloc_large_skb+0x69/0x150 [ 440.396393][T10229] netlink_sendmsg+0x680/0xda0 [ 440.396416][T10229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.396438][T10229] ? selinux_socket_sendmsg+0x198/0x2f0 [ 440.396468][T10229] ____sys_sendmsg+0xa4d/0xbe0 [ 440.396495][T10229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.396516][T10229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.396556][T10229] ___sys_sendmsg+0x190/0x1e0 [ 440.396575][T10229] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.396594][T10229] ? __lock_acquire+0x49f/0x1a40 [ 440.396618][T10229] ? get_pid_task+0x106/0x250 [ 440.396662][T10229] __sys_sendmsg+0x160/0x210 [ 440.396687][T10229] ? __pfx___sys_sendmsg+0x10/0x10 [ 440.396724][T10229] do_syscall_64+0x115/0x870 [ 440.396749][T10229] ? clear_bhb_loop+0x70/0xc0 [ 440.396777][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.396796][T10229] RIP: 0033:0x7f0de4f9e0d9 [ 440.396812][T10229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.396828][T10229] RSP: 002b:00007f0de5e85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.396847][T10229] RAX: ffffffffffffffda RBX: 00007f0de5226090 RCX: 00007f0de4f9e0d9 [ 440.396859][T10229] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 440.396869][T10229] RBP: 00007f0de5e85090 R08: 0000000000000000 R09: 0000000000000000 [ 440.396880][T10229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.396891][T10229] R13: 00007f0de5226128 R14: 00007f0de5226090 R15: 00007ffc91519fa8 [ 440.396916][T10229] [ 440.408561][ T42] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 441.092315][ T1606] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 441.299016][ T1606] (NULL device *): queue 0 connect admin queue failed (-111). [ 441.320813][ T1606] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 441.340332][ T1606] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 441.437046][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.445180][ T42] usb 4-1: Product: syz [ 441.449699][ T42] usb 4-1: Manufacturer: syz [ 441.454334][ T42] usb 4-1: SerialNumber: syz [ 441.505799][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1195'. [ 442.250392][ T42] usb 4-1: 1:1 : bogus bTerminalLink 7 [ 442.257158][ T42] usb 4-1: unit 119 not found! [ 442.271175][ T42] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 442.296736][ T42] usb 4-1: USB disconnect, device number 15 [ 443.431631][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 443.757884][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 444.585131][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 444.743093][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'. [ 445.579176][T10271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1203'. [ 445.639080][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 447.219309][T10289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 447.983491][ T983] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 447.993608][ T57] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 448.081471][ T57] (NULL device *): queue 0 connect admin queue failed (-111). [ 448.201002][ T983] usb 6-1: Using ep0 maxpacket: 8 [ 448.256385][ T983] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.266698][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 448.283543][T10311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1215'. [ 448.334446][ T983] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.937336][ T57] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 448.945503][ T57] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 448.953191][ T983] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 449.039642][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.067246][ T983] usb 6-1: Product: syz [ 449.071487][ T983] usb 6-1: Manufacturer: syz [ 449.076140][ T983] usb 6-1: SerialNumber: syz [ 450.357028][ T983] usb 6-1: 1:1 : bogus bTerminalLink 7 [ 450.362971][ T983] usb 6-1: unit 119 not found! [ 450.402111][ T983] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 450.547137][ T983] usb 6-1: USB disconnect, device number 3 [ 451.099246][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 451.114804][ T48] (NULL device *): queue 0 connect admin queue failed (-111). [ 451.123839][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 451.191548][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 453.260981][ T57] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 453.275735][ T57] (NULL device *): queue 0 connect admin queue failed (-111). [ 453.285118][ T57] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 453.433978][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'. [ 453.460718][ T57] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 453.467564][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1229'. [ 454.722137][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 454.766114][ T29] audit: type=1400 audit(1786223777.339:628): avc: denied { setopt } for pid=10381 comm="syz.4.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 454.794641][ T29] audit: type=1400 audit(1786223777.359:629): avc: denied { connect } for pid=10381 comm="syz.4.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 454.851332][ T29] audit: type=1400 audit(1786223777.419:630): avc: denied { write } for pid=10381 comm="syz.4.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 454.891098][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 454.897821][ T10] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.912411][ T29] audit: type=1400 audit(1786223777.429:631): avc: denied { read } for pid=10381 comm="syz.4.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 454.917616][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 454.998443][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 455.023783][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.062992][ T10] usb 6-1: config 0 descriptor?? [ 455.523627][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 455.527592][ T10] mcp2221 0003:04D8:00DD.0004: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 455.867548][ T48] (NULL device *): queue 0 connect admin queue failed (-111). [ 456.179224][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 456.194530][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 457.665454][T10373] Driver unsupported XDP return value 0 on prog (id 187) dev N/A, expect packet loss! [ 457.722444][T10429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1253'. [ 457.776219][ T10] usb 6-1: USB disconnect, device number 4 [ 458.221362][ T1606] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 458.387217][ T1606] (NULL device *): queue 0 connect admin queue failed (-111). [ 458.410301][ T1606] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 458.440718][ T1606] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 460.699705][ T1606] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 460.719175][ T1606] (NULL device *): queue 0 connect admin queue failed (-111). [ 460.726737][ T1606] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 460.737815][ T1606] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 461.331442][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 461.350210][T10467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1264'. [ 461.945876][T10468] 9p: Bad value for 'rfdno' [ 462.544871][ T1606] Bluetooth: (null): Invalid header checksum [ 462.572211][T10488] jffs2: notice: (10488) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 462.591074][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 462.621342][ T5783] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 462.651182][ T769] Bluetooth: (null): Invalid header checksum [ 462.743482][ T10] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 462.761580][ T769] Bluetooth: (null): Invalid header checksum [ 462.767735][ T10] usb 1-1: config 0 has no interface number 0 [ 462.774321][ T10] usb 1-1: config 0 interface 185 altsetting 173 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 462.788552][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 462.790964][ T5783] usb 2-1: Using ep0 maxpacket: 8 [ 462.801556][ T10] usb 1-1: config 0 interface 185 has no altsetting 0 [ 462.813638][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 462.939094][ T35] Bluetooth: (null): Invalid header checksum [ 462.943725][ T5783] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.958387][ T5783] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.972440][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 462.981145][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 463.003340][ T1606] Bluetooth: (null): Invalid header checksum [ 463.003416][ T10] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 463.287586][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.289221][ T57] Bluetooth: (null): Invalid header checksum [ 463.296131][ T10] usb 1-1: Product: syz [ 463.302252][ T5783] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 463.306583][ T10] usb 1-1: Manufacturer: syz [ 463.317340][ T57] Bluetooth: (null): Invalid header checksum [ 463.329507][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.342465][ T5783] usb 2-1: Product: syz [ 463.349808][ T5783] usb 2-1: Manufacturer: syz [ 463.354773][ T5783] usb 2-1: SerialNumber: syz [ 463.359155][ T10] usb 1-1: SerialNumber: syz [ 463.385310][ T10] usb 1-1: config 0 descriptor?? [ 463.652520][T10484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.448757][ T5783] usb 2-1: 1:1 : bogus bTerminalLink 7 [ 464.689421][T10484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.707383][ T5783] usb 2-1: unit 119 not found! [ 464.726366][ T10] peak_usb 1-1:0.185: probe with driver peak_usb failed with error 185 [ 464.760506][ T5783] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 464.785255][ T10] usb 1-1: USB disconnect, device number 22 [ 464.822517][ T5783] usb 2-1: USB disconnect, device number 24 [ 465.247201][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 465.265389][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 465.312034][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 465.346046][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 465.474553][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'. [ 465.490056][T10518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1279'. [ 466.303596][ T29] audit: type=1400 audit(1786223788.869:632): avc: denied { load_policy } for pid=10519 comm="syz.5.1281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 466.349891][T10521] SELinux: policydb magic number 0x50 does not match expected magic number 0xf97cff8c [ 466.378640][T10524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1284'. [ 466.422120][T10521] SELinux: failed to load policy [ 467.422418][ T57] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 467.762190][ T57] (NULL device *): queue 0 connect admin queue failed (-111). [ 467.877064][ T57] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 468.467924][ T57] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 469.777348][ T5607] Bluetooth: hci5: link tx timeout [ 469.801270][ T5607] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.841253][ T5607] Bluetooth: hci5: link tx timeout [ 469.847451][ T5607] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.855451][ T29] audit: type=1400 audit(1786223792.329:633): avc: denied { connect } for pid=10567 comm="syz.5.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 469.932667][ T5607] Bluetooth: hci5: link tx timeout [ 469.954292][ T5607] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.979840][ T5607] Bluetooth: hci5: link tx timeout [ 469.986634][ T42] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 470.003549][ T5607] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 470.022565][T10578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1298'. [ 470.221116][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 470.538151][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.548848][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 470.550432][ T42] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.576867][ T42] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 470.617675][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 470.627457][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.643832][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 470.656312][ T42] usb 5-1: Product: syz [ 470.663985][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 470.674571][ T42] usb 5-1: Manufacturer: syz [ 470.697181][ T42] usb 5-1: SerialNumber: syz [ 471.507460][ T42] usb 5-1: 1:1 : bogus bTerminalLink 7 [ 471.513416][ T42] usb 5-1: unit 119 not found! [ 471.551301][ T42] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 471.633752][ T42] usb 5-1: USB disconnect, device number 23 [ 471.912115][ T5607] Bluetooth: hci5: command 0x0406 tx timeout [ 472.781037][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 472.816460][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 472.837560][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 473.031007][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 473.926588][ T57] Bluetooth: (null): Invalid header checksum [ 474.081739][ T57] Bluetooth: (null): Invalid header checksum [ 474.271270][ T57] Bluetooth: (null): Invalid header checksum [ 474.411060][ T57] Bluetooth: (null): Invalid header checksum [ 474.418117][ T57] Bluetooth: (null): Invalid header checksum [ 474.471984][T10616] jffs2: notice: (10616) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 474.522902][ T57] Bluetooth: (null): Invalid header checksum [ 474.581911][ T57] Bluetooth: (null): Invalid header checksum [ 474.691639][ T57] Bluetooth: (null): Invalid header checksum [ 474.723841][T10627] fuse: root generation should be zero [ 474.879961][T10630] xt_TPROXY: Can be used only with -p tcp or -p udp [ 475.278758][ T1010] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 475.759590][ T1010] (NULL device *): queue 0 connect admin queue failed (-111). [ 475.791743][ T1010] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 475.819137][ T1010] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 477.157733][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 477.611241][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 477.625759][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.650225][ T9] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.667220][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 477.681853][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.690557][ T9] usb 6-1: Product: syz [ 477.696669][ T9] usb 6-1: Manufacturer: syz [ 477.702157][ T9] usb 6-1: SerialNumber: syz [ 477.912439][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 478.190304][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 478.213491][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 478.253028][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 478.271649][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 478.660952][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 478.667690][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.679374][ T10] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 478.692891][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 478.702550][ T9] usb 6-1: 1:1 : bogus bTerminalLink 7 [ 478.708471][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 478.717767][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.726956][ T9] usb 6-1: unit 119 not found! [ 478.744179][ T9] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 478.760634][ T10] usb 2-1: config 0 descriptor?? [ 478.774753][ T9] usb 6-1: USB disconnect, device number 5 [ 478.789777][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 480.538466][ T1010] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 480.557567][ T1010] (NULL device *): queue 0 connect admin queue failed (-111). [ 480.576182][ T1010] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 480.964188][ T1010] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 481.019614][ T42] usb 2-1: USB disconnect, device number 25 [ 481.141170][ T57] Bluetooth: (null): Invalid header checksum [ 481.171937][T10704] jffs2: notice: (10704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 481.251169][ T6144] Bluetooth: (null): Invalid header checksum [ 481.442114][ T48] Bluetooth: (null): Invalid header checksum [ 482.732653][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'. [ 482.757190][T10734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1340'. [ 483.031059][ T1606] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 483.305825][ T1606] (NULL device *): queue 0 connect admin queue failed (-111). [ 483.515324][ T1606] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 483.597258][ T1606] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 485.065746][T10749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1345'. [ 485.081830][ T769] Bluetooth: (null): Invalid header checksum [ 485.185285][T10753] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1347'. [ 485.202717][ T6144] Bluetooth: (null): Invalid header checksum [ 485.227040][T10751] jffs2: notice: (10751) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 485.311148][ T769] Bluetooth: (null): Invalid header checksum [ 485.725027][ T1606] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 485.737587][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 485.764985][ T1606] (NULL device *): queue 0 connect admin queue failed (-111). [ 485.808958][ T1606] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 485.820316][ T1606] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 485.942649][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 485.950247][ T9] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 485.960282][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.975118][ T9] usb 5-1: config 0 descriptor?? [ 485.986111][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 486.131360][T10774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=10774 comm=syz.1.1352 [ 486.301054][ T29] audit: type=1400 audit(1786223808.709:634): avc: denied { lock } for pid=10772 comm="syz.1.1352" path="socket:[30330]" dev="sockfs" ino=30330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 486.332620][T10756] x_tables: duplicate underflow at hook 2 [ 486.571294][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1353'. [ 486.597703][T10779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1353'. [ 487.021690][ T9] gspca_vc032x: reg_r err -110 [ 487.225509][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.348822][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.406837][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.438805][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.513597][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.642427][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.821693][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.843092][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.870382][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.882385][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.892785][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.908811][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.929081][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.951005][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 487.981002][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 487.981282][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.009532][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.051600][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.502853][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 488.529217][ T29] audit: type=1400 audit(1786223811.099:635): avc: denied { connect } for pid=10783 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 488.554227][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 488.563276][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 488.570548][ T9] gspca_vc032x: Unknown sensor... [ 488.578088][ T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 488.591798][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 489.060501][ T9] usb 5-1: USB disconnect, device number 24 [ 489.635467][T10802] FAULT_INJECTION: forcing a failure. [ 489.635467][T10802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.671745][T10802] CPU: 1 UID: 0 PID: 10802 Comm: syz.1.1359 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.671776][T10802] Tainted: [L]=SOFTLOCKUP [ 489.671782][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 489.671792][T10802] Call Trace: [ 489.671800][T10802] [ 489.671807][T10802] dump_stack_lvl+0x100/0x190 [ 489.671825][T10802] should_fail_ex.cold+0x5/0xa [ 489.671840][T10802] _copy_from_user+0x2e/0xd0 [ 489.671856][T10802] kstrtouint_from_user+0xd6/0x1d0 [ 489.671868][T10802] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 489.671879][T10802] ? __lock_acquire+0x49f/0x1a40 [ 489.671900][T10802] proc_fail_nth_write+0x83/0x220 [ 489.671915][T10802] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 489.671930][T10802] vfs_write+0x2aa/0x1050 [ 489.671941][T10802] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 489.671953][T10802] ? __pfx_vfs_write+0x10/0x10 [ 489.671963][T10802] ? __fget_files+0x215/0x3d0 [ 489.671978][T10802] ? __fget_files+0x21f/0x3d0 [ 489.671994][T10802] ksys_write+0x12a/0x250 [ 489.672004][T10802] ? __pfx_ksys_write+0x10/0x10 [ 489.672014][T10802] ? fput+0x79/0x100 [ 489.672030][T10802] do_syscall_64+0x115/0x870 [ 489.672045][T10802] ? clear_bhb_loop+0x70/0xc0 [ 489.672059][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.672070][T10802] RIP: 0033:0x7fbdfcd5e90e [ 489.672080][T10802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 489.672091][T10802] RSP: 002b:00007fbdfdbb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 489.672102][T10802] RAX: ffffffffffffffda RBX: 00007fbdfdbb66c0 RCX: 00007fbdfcd5e90e [ 489.672109][T10802] RDX: 0000000000000001 RSI: 00007fbdfdbb60a0 RDI: 0000000000000005 [ 489.672116][T10802] RBP: 00007fbdfdbb6090 R08: 0000000000000000 R09: 0000000000000000 [ 489.672122][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.672129][T10802] R13: 00007fbdfd026038 R14: 00007fbdfd025fa0 R15: 00007ffd430bf468 [ 489.672143][T10802] [ 490.711054][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 490.777175][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 491.107503][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 491.175279][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 491.252128][T10815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=10815 comm=syz.4.1362 [ 491.308742][T10816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1362'. [ 492.147719][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 492.171255][T10832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1369'. [ 493.261421][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 493.281203][ T48] (NULL device *): queue 0 connect admin queue failed (-111). [ 493.312355][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 493.352564][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 495.433769][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 495.494678][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 495.527635][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 495.561842][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 495.903496][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.910837][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.492970][T10885] 9p: Bad value for 'rfdno' [ 496.951412][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 497.112687][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 497.121072][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.148952][ T10] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 497.163299][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 497.180219][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 497.194385][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.215317][ T10] usb 5-1: config 0 descriptor?? [ 497.232102][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 497.301054][ T5783] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 497.750526][ T57] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 497.827570][ T57] (NULL device *): queue 0 connect admin queue failed (-111). [ 497.842709][ T57] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 497.869909][ T57] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 497.976976][ T5783] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 498.285443][ T5783] usb 4-1: config 0 interface 0 has no altsetting 0 [ 498.298995][ T5783] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 498.379476][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.410319][ T5783] usb 4-1: config 0 descriptor?? [ 498.434480][T10894] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 499.829012][ T5783] lenovo 0003:17EF:6062.0005: unknown main item tag 0x2 [ 499.839626][ T5783] lenovo 0003:17EF:6062.0005: unknown main item tag 0x3 [ 499.867093][ T5783] lenovo 0003:17EF:6062.0005: unknown main item tag 0x0 [ 499.880516][ T5783] lenovo 0003:17EF:6062.0005: unexpected long global item [ 499.902629][ T57] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 499.921614][ T5783] lenovo 0003:17EF:6062.0005: hid_parse failed [ 499.921944][ T57] (NULL device *): queue 0 connect admin queue failed (-111). [ 499.964603][ T5783] lenovo 0003:17EF:6062.0005: probe with driver lenovo failed with error -22 [ 499.997246][ T57] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 500.007837][ T10] usb 5-1: USB disconnect, device number 25 [ 500.030459][ T57] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 500.039584][ T5783] usb 4-1: USB disconnect, device number 16 [ 501.671101][ T5797] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 501.832739][ T5797] usb 1-1: Using ep0 maxpacket: 8 [ 501.889954][ T5797] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.914935][ T5797] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.946108][ T5797] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 501.957657][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.968598][ T5797] usb 1-1: Product: syz [ 501.973711][ T5797] usb 1-1: Manufacturer: syz [ 501.978685][ T5797] usb 1-1: SerialNumber: syz [ 502.101281][ T57] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 502.548355][ T5797] usb 1-1: 1:1 : bogus bTerminalLink 7 [ 502.567012][ T57] (NULL device *): queue 0 connect admin queue failed (-111). [ 502.580644][ T5797] usb 1-1: unit 119 not found! [ 502.594679][ T57] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 502.614424][ T57] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 502.635967][ T5797] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 502.685815][ T5797] usb 1-1: USB disconnect, device number 23 [ 502.850949][ T5783] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 503.011180][ T5783] usb 6-1: Using ep0 maxpacket: 32 [ 503.075108][T10979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1406'. [ 503.117803][ T5783] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.348439][ T5783] usb 6-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 503.377932][ T5783] usb 6-1: config 0 interface 0 has no altsetting 0 [ 503.390314][ T5783] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 503.410363][ T5783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.818127][ T5783] usb 6-1: config 0 descriptor?? [ 503.848223][ T5783] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 504.911803][ T57] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 504.944798][ T57] (NULL device *): queue 0 connect admin queue failed (-111). [ 504.975182][ T57] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 505.007030][ T57] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 507.128885][ T42] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 507.166288][ T35] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 507.178197][ T983] usb 6-1: USB disconnect, device number 6 [ 507.198878][ T35] (NULL device *): queue 0 connect admin queue failed (-111). [ 507.238543][ T35] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 507.278114][ T35] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 507.381507][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 507.516740][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.902923][ T42] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.930009][ T42] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 507.939562][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.948576][ T42] usb 2-1: Product: syz [ 507.953040][ T42] usb 2-1: Manufacturer: syz [ 507.957718][ T42] usb 2-1: SerialNumber: syz [ 508.200482][ T42] usb 2-1: 1:1 : bogus bTerminalLink 7 [ 508.214157][ T42] usb 2-1: unit 119 not found! [ 508.260346][ T42] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 508.296068][ T42] usb 2-1: USB disconnect, device number 26 [ 509.437915][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 509.481696][ T48] (NULL device *): queue 0 connect admin queue failed (-111). [ 509.518649][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 509.541654][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 510.041090][ T983] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 510.251326][ T983] usb 2-1: device descriptor read/64, error -71 [ 511.057656][ T983] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 511.613724][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 511.638992][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 511.647200][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 511.658456][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 511.670983][ T983] usb 2-1: device descriptor read/64, error -71 [ 511.781683][ T983] usb usb2-port1: attempt power cycle [ 511.853978][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 511.871259][T11093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1436'. [ 512.151344][ T42] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 512.391215][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 512.449937][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.526279][ T42] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 512.619776][ T42] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 512.670034][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.630826][ T42] usb 6-1: Product: syz [ 513.642845][ T42] usb 6-1: Manufacturer: syz [ 513.647549][ T42] usb 6-1: SerialNumber: syz [ 513.741939][ T35] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 513.804291][ T35] (NULL device *): queue 0 connect admin queue failed (-111). [ 513.839420][ T35] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 513.860774][ T35] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 513.906560][ T42] usb 6-1: 1:1 : bogus bTerminalLink 7 [ 513.926440][ T42] usb 6-1: unit 119 not found! [ 513.969010][ T42] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 514.449144][ T42] usb 6-1: USB disconnect, device number 7 [ 514.773362][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1445'. [ 514.801065][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1445'. [ 515.901869][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 516.054772][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 516.071024][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 516.087521][T11128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1447'. [ 516.134520][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 516.209446][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 518.302193][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 518.326193][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 518.344133][T11149] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 518.351253][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 518.364324][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 518.829122][T11162] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1456'. [ 519.682611][ T57] Bluetooth: (null): Invalid header checksum [ 519.792623][ T769] Bluetooth: (null): Invalid header checksum [ 519.890951][ T5783] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 519.904039][ T57] Bluetooth: (null): Invalid header checksum [ 520.012630][ T769] Bluetooth: (null): Invalid header checksum [ 520.050958][ T5783] usb 1-1: Using ep0 maxpacket: 8 [ 520.066114][ T5783] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.090028][ T5783] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.122448][ T57] Bluetooth: (null): Invalid header checksum [ 520.133856][ T5783] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 520.161093][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.185589][ T5783] usb 1-1: Product: syz [ 520.201214][ T5783] usb 1-1: Manufacturer: syz [ 520.210976][ T5783] usb 1-1: SerialNumber: syz [ 520.232340][ T57] Bluetooth: (null): Invalid header checksum [ 520.344773][ T57] Bluetooth: (null): Invalid header checksum [ 520.452438][ T6144] Bluetooth: (null): Invalid header checksum [ 520.461308][ T57] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 520.477427][T11183] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1461'. [ 520.494201][ T5783] usb 1-1: 1:1 : bogus bTerminalLink 7 [ 520.501057][ T57] (NULL device *): queue 0 connect admin queue failed (-111). [ 520.519373][ T5783] usb 1-1: unit 119 not found! [ 520.548362][ T57] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 520.571739][ T5783] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 520.590522][ T57] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 520.607342][ T5783] usb 1-1: USB disconnect, device number 24 [ 520.893231][T11187] x_tables: duplicate underflow at hook 2 [ 522.621558][ T57] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 522.656893][ T57] (NULL device *): queue 0 connect admin queue failed (-111). [ 522.687795][ T57] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 522.727652][ T57] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 523.089485][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1469'. [ 523.232918][ T48] Bluetooth: (null): Invalid header checksum [ 523.341349][ T769] Bluetooth: (null): Invalid header checksum [ 523.466805][ T6144] Bluetooth: (null): Invalid header checksum [ 523.772980][ T6144] Bluetooth: (null): Invalid header checksum [ 523.797243][ T6144] Bluetooth: (null): Invalid header checksum [ 523.815992][ T6144] Bluetooth: (null): Invalid header checksum [ 523.912732][ T6144] Bluetooth: (null): Invalid header checksum [ 524.874479][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 524.895802][ T48] (NULL device *): queue 0 connect admin queue failed (-111). [ 524.907122][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 524.917602][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 526.193329][ T29] audit: type=1400 audit(1786223848.769:636): avc: denied { listen } for pid=11270 comm="syz.1.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 526.221121][T11271] befs: (nbd1): unable to read superblock [ 526.252739][ T29] audit: type=1400 audit(1786223848.769:637): avc: denied { accept } for pid=11270 comm="syz.1.1486" lport=35529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 526.942933][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 526.979091][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 527.000953][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 527.029062][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 528.107173][T11300] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1496'. [ 529.101099][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 529.201491][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 529.217833][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 529.235940][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 529.374958][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1499'. [ 529.760947][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 529.927464][ T9] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 529.970373][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.015620][ T9] usb 6-1: Product: syz [ 530.030607][ T9] usb 6-1: Manufacturer: syz [ 530.047625][ T9] usb 6-1: SerialNumber: syz [ 530.073409][ T9] usb 6-1: config 0 descriptor?? [ 530.100109][ T9] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 008 [ 530.308531][T11334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1504'. [ 531.090886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 531.107597][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1501'. [ 531.152468][ T9] i2c i2c-1: failure reading functionality [ 531.189445][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 531.213217][ T9] usb 6-1: USB disconnect, device number 8 [ 531.340971][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 531.380451][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 531.409210][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 531.444394][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 532.213100][T11350] gfs2: gfs2 mount does not exist [ 532.596973][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1513'. [ 532.902415][ T187] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 533.380923][ T187] usb 6-1: Using ep0 maxpacket: 32 [ 533.389696][ T187] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 533.409052][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.436375][ T187] usb 6-1: Product: syz [ 533.453108][ T187] usb 6-1: Manufacturer: syz [ 533.469071][ T187] usb 6-1: SerialNumber: syz [ 533.494980][ T187] usb 6-1: config 0 descriptor?? [ 533.501036][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 533.543524][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 533.578936][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 533.612813][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 535.663456][ T60] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 535.911214][ T60] (NULL device *): queue 0 connect admin queue failed (-111). [ 535.945342][ T60] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 535.968912][ T60] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 536.967595][ T187] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 537.394193][ T187] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 537.443678][ T187] usb 6-1: USB disconnect, device number 9 [ 538.043480][T11438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1533'. [ 538.061609][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 538.120374][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 538.169538][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 538.478406][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 540.546768][ T3272] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 540.590928][ T3272] (NULL device *): queue 0 connect admin queue failed (-111). [ 540.611252][ T3272] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 540.996270][ T3272] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 542.020250][ T29] audit: type=1400 audit(1786223864.589:638): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 543.031016][ T60] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 543.241608][ T60] (NULL device *): queue 0 connect admin queue failed (-111). [ 543.350916][ T60] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 543.387378][ T60] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 544.352755][T11520] i2c i2c-0: new_device: Extra parameters [ 544.881358][ T5783] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 545.386066][ T5783] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 545.397164][ T5783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.409321][ T5783] usb 6-1: Product: syz [ 545.415694][ T5783] usb 6-1: Manufacturer: syz [ 545.421895][ T7288] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 545.446257][ T5783] usb 6-1: SerialNumber: syz [ 545.457705][ T7288] (NULL device *): queue 0 connect admin queue failed (-111). [ 545.465767][ T5783] usb 6-1: config 0 descriptor?? [ 545.484939][ T5783] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 010 [ 545.505084][ T7288] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 545.526822][ T7288] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 546.485948][ T29] audit: type=1400 audit(1786223869.059:639): avc: denied { map } for pid=11524 comm="syz.5.1557" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 546.559954][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1557'. [ 546.616015][ T5783] i2c i2c-1: failure reading functionality [ 546.653092][ T5783] i2c i2c-1: connected i2c-tiny-usb device [ 546.689429][ T5783] usb 6-1: USB disconnect, device number 10 [ 546.799992][T11554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1566'. [ 547.581929][ T7288] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 547.623239][ T7288] (NULL device *): queue 0 connect admin queue failed (-111). [ 547.689987][ T7288] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 547.725035][ T7288] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 547.925799][T11570] FAULT_INJECTION: forcing a failure. [ 547.925799][T11570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.940719][T11570] CPU: 0 UID: 0 PID: 11570 Comm: syz.4.1570 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.940749][T11570] Tainted: [L]=SOFTLOCKUP [ 547.940755][T11570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 547.940765][T11570] Call Trace: [ 547.940771][T11570] [ 547.940779][T11570] dump_stack_lvl+0x100/0x190 [ 547.940805][T11570] should_fail_ex.cold+0x5/0xa [ 547.940829][T11570] _copy_to_user+0x32/0xd0 [ 547.940859][T11570] bpf_prog_test_run_syscall+0x5ea/0xad0 [ 547.940882][T11570] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 547.940899][T11570] ? fput+0x79/0x100 [ 547.940921][T11570] ? __bpf_prog_get+0x97/0x2a0 [ 547.940945][T11570] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 547.940964][T11570] __sys_bpf+0x2a12/0x4e80 [ 547.940988][T11570] ? __pfx___sys_bpf+0x10/0x10 [ 547.941006][T11570] ? find_held_lock+0x2b/0x80 [ 547.941029][T11570] ? get_pid_task+0xfc/0x250 [ 547.941045][T11570] ? get_pid_task+0xfc/0x250 [ 547.941070][T11570] ? find_held_lock+0x2b/0x80 [ 547.941091][T11570] ? rcu_read_lock_any_held+0x6a/0xa0 [ 547.941108][T11570] ? find_held_lock+0x2b/0x80 [ 547.941124][T11570] ? ksys_write+0x190/0x250 [ 547.941140][T11570] ? ksys_write+0x190/0x250 [ 547.941172][T11570] ? fput+0x79/0x100 [ 547.941198][T11570] ? __x64_sys_bpf+0xce/0x140 [ 547.941214][T11570] __x64_sys_bpf+0xce/0x140 [ 547.941234][T11570] ? do_syscall_64+0x90/0x870 [ 547.941257][T11570] do_syscall_64+0x115/0x870 [ 547.941278][T11570] ? clear_bhb_loop+0x70/0xc0 [ 547.941300][T11570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.941317][T11570] RIP: 0033:0x7f0de4f9e0d9 [ 547.941333][T11570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.941351][T11570] RSP: 002b:00007f0de5ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.941369][T11570] RAX: ffffffffffffffda RBX: 00007f0de5225fa0 RCX: 00007f0de4f9e0d9 [ 547.941380][T11570] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 547.941390][T11570] RBP: 00007f0de5ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 547.941401][T11570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.941411][T11570] R13: 00007f0de5226038 R14: 00007f0de5225fa0 R15: 00007ffc91519fa8 [ 547.941435][T11570] [ 548.709042][T11584] i2c i2c-0: new_device: Extra parameters [ 549.151209][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 549.308666][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 549.319116][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.327954][ T9] usb 5-1: Product: syz [ 549.334850][ T9] usb 5-1: Manufacturer: syz [ 549.339594][ T9] usb 5-1: SerialNumber: syz [ 549.349016][ T9] usb 5-1: config 0 descriptor?? [ 549.369096][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 026 [ 549.822386][ T35] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 549.850328][ T35] (NULL device *): queue 0 connect admin queue failed (-111). [ 549.857950][ T35] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 549.865903][ T35] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 549.901057][ T5783] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 550.014470][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'. [ 550.051571][ T9] i2c i2c-1: failure reading functionality [ 550.098027][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 550.098102][ T5783] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 550.130401][ T9] usb 5-1: USB disconnect, device number 26 [ 550.136461][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.136487][ T5783] usb 2-1: Product: syz [ 550.136524][ T5783] usb 2-1: Manufacturer: syz [ 550.136539][ T5783] usb 2-1: SerialNumber: syz [ 550.143416][ T5783] usb 2-1: config 0 descriptor?? [ 550.320477][ T5783] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 030 [ 551.240766][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 551.267918][ T5783] i2c i2c-1: failure reading functionality [ 551.320220][ T5783] i2c i2c-1: connected i2c-tiny-usb device [ 551.340538][ T5783] usb 2-1: USB disconnect, device number 30 [ 551.925716][ T60] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 552.334124][ T60] (NULL device *): queue 0 connect admin queue failed (-111). [ 552.372173][ T60] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 552.396299][ T60] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 553.268891][T11647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1591'. [ 554.462949][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 554.538822][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 554.568680][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 554.603225][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 554.619166][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 555.613160][T11680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1602'. [ 557.222504][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 557.275090][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 557.311329][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 557.384950][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.398001][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.414257][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 559.004851][T11734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1615'. [ 559.512371][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 559.587399][ T48] (NULL device *): queue 0 connect admin queue failed (-111). [ 559.595925][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 559.604289][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 559.881081][ T42] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 560.625033][ T42] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 560.638200][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.647529][ T42] usb 6-1: Product: syz [ 560.652569][ T42] usb 6-1: Manufacturer: syz [ 560.657333][ T42] usb 6-1: SerialNumber: syz [ 560.674563][ T42] usb 6-1: config 0 descriptor?? [ 560.708961][ T42] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 011 [ 561.582293][T11771] hub 8-0:1.0: USB hub found [ 561.588321][T11771] hub 8-0:1.0: 1 port detected [ 562.010016][ T3272] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 562.076860][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1616'. [ 562.108565][ T42] i2c i2c-1: failure reading functionality [ 562.121446][ T3272] (NULL device *): queue 0 connect admin queue failed (-111). [ 562.201221][T11776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1628'. [ 562.912280][ T3272] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 563.008310][ T3272] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 563.045840][ T42] i2c i2c-1: connected i2c-tiny-usb device [ 563.056700][ T42] usb 6-1: USB disconnect, device number 11 [ 565.101007][ T7288] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 565.164334][ T7288] (NULL device *): queue 0 connect admin queue failed (-111). [ 565.207035][ T7288] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 565.246732][ T7288] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 565.722186][T11828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1642'. [ 567.351517][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 567.714260][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 567.747416][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 567.784942][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 568.070997][ T5698] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 568.250542][ T5698] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 568.268329][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.278469][ T5698] usb 6-1: Product: syz [ 568.284606][ T5698] usb 6-1: Manufacturer: syz [ 568.289346][ T5698] usb 6-1: SerialNumber: syz [ 568.314782][ T5698] usb 6-1: config 0 descriptor?? [ 568.470976][ T42] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 568.589960][ T5698] usb 6-1: USB disconnect, device number 12 [ 568.633488][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 568.668926][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.950517][ T42] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 569.821073][ T769] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 569.846083][ T769] (NULL device *): queue 0 connect admin queue failed (-111). [ 569.869424][ T769] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 569.891487][ T769] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 569.931116][ T42] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 570.134442][ T42] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 570.152574][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.167666][ T42] usb 6-1: Product: syz [ 570.204914][ T42] usb 6-1: Manufacturer: syz [ 570.249333][ T42] usb 6-1: SerialNumber: syz [ 570.315447][ T42] usb 6-1: config 0 descriptor?? [ 570.369443][ T42] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 013 [ 571.014923][ T42] i2c i2c-1: failure reading functionality [ 571.029783][ T42] i2c i2c-1: connected i2c-tiny-usb device [ 571.060681][ T42] usb 6-1: USB disconnect, device number 13 [ 571.903645][T11899] 9p: Bad value for 'rfdno' [ 572.171404][ T57] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 572.205117][ T57] (NULL device *): queue 0 connect admin queue failed (-111). [ 572.248749][ T57] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 572.329142][ T57] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 572.612870][T11912] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c' [ 572.630740][T11912] CPU: 1 UID: 0 PID: 11912 Comm: syz.5.1667 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.630771][T11912] Tainted: [L]=SOFTLOCKUP [ 572.630779][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 572.630793][T11912] Call Trace: [ 572.630800][T11912] [ 572.630806][T11912] dump_stack_lvl+0x100/0x190 [ 572.630826][T11912] sysfs_warn_dup.cold+0x1c/0x28 [ 572.630852][T11912] sysfs_create_dir_ns+0x24b/0x2b0 [ 572.630871][T11912] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 572.630889][T11912] ? find_held_lock+0x2b/0x80 [ 572.630906][T11912] ? kobject_add_internal+0x25f/0x930 [ 572.630924][T11912] ? kobject_add_internal+0x25f/0x930 [ 572.630945][T11912] ? do_raw_spin_unlock+0x145/0x1e0 [ 572.630974][T11912] kobject_add_internal+0x2c8/0x930 [ 572.630997][T11912] kobject_add+0x16a/0x1e0 [ 572.631016][T11912] ? __pfx_kobject_add+0x10/0x10 [ 572.631035][T11912] ? __kasan_kmalloc+0xaa/0xb0 [ 572.631061][T11912] ? lockdep_init_map_type+0x5c/0x250 [ 572.631085][T11912] ? class_to_subsys+0x114/0x150 [ 572.631119][T11912] device_add+0x294/0x1970 [ 572.631149][T11912] ? lockdep_init_map_type+0x5c/0x250 [ 572.631174][T11912] ? __pfx_device_add+0x10/0x10 [ 572.631198][T11912] ? lockdep_init_map_type+0x5c/0x250 [ 572.631220][T11912] ? __init_waitqueue_head+0xca/0x150 [ 572.631253][T11912] i2c_new_client_device+0x660/0xd30 [ 572.631290][T11912] new_device_store+0x20f/0x420 [ 572.631318][T11912] ? lockdep_hardirqs_on+0x78/0x100 [ 572.631345][T11912] ? __pfx_new_device_store+0x10/0x10 [ 572.631397][T11912] ? __pfx_new_device_store+0x10/0x10 [ 572.631428][T11912] dev_attr_store+0x58/0x80 [ 572.631456][T11912] ? __pfx_dev_attr_store+0x10/0x10 [ 572.631480][T11912] sysfs_kf_write+0xf2/0x150 [ 572.631500][T11912] kernfs_fop_write_iter+0x3e0/0x5f0 [ 572.631524][T11912] ? __pfx_sysfs_kf_write+0x10/0x10 [ 572.631544][T11912] vfs_write+0x6ac/0x1050 [ 572.631560][T11912] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 572.631577][T11912] ? __pfx_vfs_write+0x10/0x10 [ 572.631597][T11912] ksys_write+0x12a/0x250 [ 572.631608][T11912] ? __pfx_ksys_write+0x10/0x10 [ 572.631623][T11912] do_syscall_64+0x115/0x870 [ 572.631636][T11912] ? clear_bhb_loop+0x70/0xc0 [ 572.631651][T11912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.631663][T11912] RIP: 0033:0x7f04d199e0d9 [ 572.631674][T11912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.631684][T11912] RSP: 002b:00007f04d2784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 572.631696][T11912] RAX: ffffffffffffffda RBX: 00007f04d1c25fa0 RCX: 00007f04d199e0d9 [ 572.631704][T11912] RDX: 000000000000000d RSI: 0000200000000100 RDI: 0000000000000006 [ 572.631710][T11912] RBP: 00007f04d1a35024 R08: 0000000000000000 R09: 0000000000000000 [ 572.631717][T11912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.631723][T11912] R13: 00007f04d1c26038 R14: 00007f04d1c25fa0 R15: 00007fffa0a05db8 [ 572.631740][T11912] [ 572.928301][T11912] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory. [ 572.942462][T11912] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17) [ 574.458854][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 574.474017][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 574.499661][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 574.511171][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 574.608663][ T187] usb 1-1: USB disconnect, device number 25 [ 576.321947][T11958] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c' [ 576.354452][T11958] CPU: 0 UID: 0 PID: 11958 Comm: syz.3.1680 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.354486][T11958] Tainted: [L]=SOFTLOCKUP [ 576.354492][T11958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 576.354501][T11958] Call Trace: [ 576.354506][T11958] [ 576.354511][T11958] dump_stack_lvl+0x100/0x190 [ 576.354531][T11958] sysfs_warn_dup.cold+0x1c/0x28 [ 576.354550][T11958] sysfs_create_dir_ns+0x24b/0x2b0 [ 576.354564][T11958] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 576.354576][T11958] ? find_held_lock+0x2b/0x80 [ 576.354587][T11958] ? kobject_add_internal+0x25f/0x930 [ 576.354599][T11958] ? kobject_add_internal+0x25f/0x930 [ 576.354611][T11958] ? do_raw_spin_unlock+0x145/0x1e0 [ 576.354629][T11958] kobject_add_internal+0x2c8/0x930 [ 576.354644][T11958] kobject_add+0x16a/0x1e0 [ 576.354655][T11958] ? __pfx_kobject_add+0x10/0x10 [ 576.354666][T11958] ? __kasan_kmalloc+0xaa/0xb0 [ 576.354681][T11958] ? lockdep_init_map_type+0x5c/0x250 [ 576.354696][T11958] ? class_to_subsys+0x114/0x150 [ 576.354716][T11958] device_add+0x294/0x1970 [ 576.354732][T11958] ? lockdep_init_map_type+0x5c/0x250 [ 576.354746][T11958] ? __pfx_device_add+0x10/0x10 [ 576.354762][T11958] ? lockdep_init_map_type+0x5c/0x250 [ 576.354777][T11958] ? __init_waitqueue_head+0xca/0x150 [ 576.354796][T11958] i2c_new_client_device+0x660/0xd30 [ 576.354819][T11958] new_device_store+0x20f/0x420 [ 576.354836][T11958] ? lockdep_hardirqs_on+0x78/0x100 [ 576.354851][T11958] ? __pfx_new_device_store+0x10/0x10 [ 576.354875][T11958] ? __pfx_new_device_store+0x10/0x10 [ 576.354892][T11958] dev_attr_store+0x58/0x80 [ 576.354907][T11958] ? __pfx_dev_attr_store+0x10/0x10 [ 576.354923][T11958] sysfs_kf_write+0xf2/0x150 [ 576.354935][T11958] kernfs_fop_write_iter+0x3e0/0x5f0 [ 576.354951][T11958] ? __pfx_sysfs_kf_write+0x10/0x10 [ 576.354963][T11958] vfs_write+0x6ac/0x1050 [ 576.354975][T11958] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 576.355000][T11958] ? __pfx_vfs_write+0x10/0x10 [ 576.355032][T11958] ksys_write+0x12a/0x250 [ 576.355050][T11958] ? __pfx_ksys_write+0x10/0x10 [ 576.355075][T11958] do_syscall_64+0x115/0x870 [ 576.355097][T11958] ? clear_bhb_loop+0x70/0xc0 [ 576.355122][T11958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.355142][T11958] RIP: 0033:0x7f3b4a39e0d9 [ 576.355159][T11958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.355178][T11958] RSP: 002b:00007f3b4b2c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.355196][T11958] RAX: ffffffffffffffda RBX: 00007f3b4a625fa0 RCX: 00007f3b4a39e0d9 [ 576.355209][T11958] RDX: 000000000000000d RSI: 0000200000000100 RDI: 0000000000000006 [ 576.355221][T11958] RBP: 00007f3b4a435024 R08: 0000000000000000 R09: 0000000000000000 [ 576.355233][T11958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.355244][T11958] R13: 00007f3b4a626038 R14: 00007f3b4a625fa0 R15: 00007ffdbd715d88 [ 576.355272][T11958] [ 576.359158][T11958] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory. [ 576.556180][ T57] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 576.699948][ T57] (NULL device *): queue 0 connect admin queue failed (-111). [ 576.707726][T11958] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17) [ 576.725814][ T57] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 576.736094][ T57] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 578.780928][ T57] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 578.813632][ T57] (NULL device *): queue 0 connect admin queue failed (-111). [ 578.822667][ T187] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 578.830789][ T57] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 578.840935][ T57] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 578.984100][ T187] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 579.000456][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.009811][ T187] usb 6-1: Product: syz [ 579.016038][ T187] usb 6-1: Manufacturer: syz [ 579.026143][ T187] usb 6-1: SerialNumber: syz [ 579.041745][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 579.050419][ T187] usb 6-1: config 0 descriptor?? [ 579.070529][ T187] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 014 [ 579.218378][ T9] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 579.231846][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.262990][ T9] usb 2-1: Product: syz [ 579.302716][ T9] usb 2-1: Manufacturer: syz [ 579.324048][ T9] usb 2-1: SerialNumber: syz [ 579.349145][ T9] usb 2-1: config 0 descriptor?? [ 579.391412][ T9] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 031 [ 579.526389][T12003] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c' [ 579.576244][T12003] CPU: 0 UID: 0 PID: 12003 Comm: syz.4.1692 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.576281][T12003] Tainted: [L]=SOFTLOCKUP [ 579.576289][T12003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 579.576302][T12003] Call Trace: [ 579.576308][T12003] [ 579.576317][T12003] dump_stack_lvl+0x100/0x190 [ 579.576347][T12003] sysfs_warn_dup.cold+0x1c/0x28 [ 579.576378][T12003] sysfs_create_dir_ns+0x24b/0x2b0 [ 579.576400][T12003] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 579.576422][T12003] ? find_held_lock+0x2b/0x80 [ 579.576441][T12003] ? kobject_add_internal+0x25f/0x930 [ 579.576461][T12003] ? kobject_add_internal+0x25f/0x930 [ 579.576483][T12003] ? do_raw_spin_unlock+0x145/0x1e0 [ 579.576515][T12003] kobject_add_internal+0x2c8/0x930 [ 579.576542][T12003] kobject_add+0x16a/0x1e0 [ 579.576562][T12003] ? __pfx_kobject_add+0x10/0x10 [ 579.576583][T12003] ? __kasan_kmalloc+0xaa/0xb0 [ 579.576609][T12003] ? lockdep_init_map_type+0x5c/0x250 [ 579.576635][T12003] ? class_to_subsys+0x114/0x150 [ 579.576671][T12003] device_add+0x294/0x1970 [ 579.576701][T12003] ? lockdep_init_map_type+0x5c/0x250 [ 579.576727][T12003] ? __pfx_device_add+0x10/0x10 [ 579.576754][T12003] ? lockdep_init_map_type+0x5c/0x250 [ 579.576781][T12003] ? __init_waitqueue_head+0xca/0x150 [ 579.576822][T12003] i2c_new_client_device+0x660/0xd30 [ 579.576855][T12003] new_device_store+0x20f/0x420 [ 579.576883][T12003] ? __lock_acquire+0x49f/0x1a40 [ 579.576908][T12003] ? __pfx_new_device_store+0x10/0x10 [ 579.576942][T12003] ? find_held_lock+0x2b/0x80 [ 579.576958][T12003] ? sysfs_file_kobj+0xe4/0x290 [ 579.576983][T12003] ? sysfs_file_kobj+0xe4/0x290 [ 579.577012][T12003] ? __pfx_new_device_store+0x10/0x10 [ 579.577041][T12003] dev_attr_store+0x58/0x80 [ 579.577068][T12003] ? __pfx_dev_attr_store+0x10/0x10 [ 579.577095][T12003] sysfs_kf_write+0xf2/0x150 [ 579.577114][T12003] kernfs_fop_write_iter+0x3e0/0x5f0 [ 579.577139][T12003] ? __pfx_sysfs_kf_write+0x10/0x10 [ 579.577160][T12003] vfs_write+0x6ac/0x1050 [ 579.577178][T12003] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 579.577206][T12003] ? __pfx_vfs_write+0x10/0x10 [ 579.577239][T12003] ksys_write+0x12a/0x250 [ 579.577257][T12003] ? __pfx_ksys_write+0x10/0x10 [ 579.577282][T12003] do_syscall_64+0x115/0x870 [ 579.577304][T12003] ? clear_bhb_loop+0x70/0xc0 [ 579.577327][T12003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.577345][T12003] RIP: 0033:0x7f0de4f9e0d9 [ 579.577360][T12003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.577376][T12003] RSP: 002b:00007f0de5ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 579.577393][T12003] RAX: ffffffffffffffda RBX: 00007f0de5225fa0 RCX: 00007f0de4f9e0d9 [ 579.577405][T12003] RDX: 000000000000000d RSI: 0000200000000100 RDI: 0000000000000006 [ 579.577416][T12003] RBP: 00007f0de5035024 R08: 0000000000000000 R09: 0000000000000000 [ 579.577426][T12003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.577437][T12003] R13: 00007f0de5226038 R14: 00007f0de5225fa0 R15: 00007ffc91519fa8 [ 579.577463][T12003] [ 579.577579][T12003] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory. [ 579.935745][T11980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.945046][T11980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.953482][T12003] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17) [ 579.965442][ T187] i2c i2c-1: failure reading functionality [ 579.979824][ T187] i2c i2c-1: connected i2c-tiny-usb device [ 579.991311][ T187] usb 6-1: USB disconnect, device number 14 [ 580.063787][T12003] i2c i2c-2: new_device: Instantiated device isp1301 at 0x2c [ 580.142467][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'. [ 580.200646][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.233027][T12010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1693'. [ 580.266681][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.882830][ T6144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 581.043110][ T9] i2c i2c-2: failure reading functionality [ 581.103736][ T6144] (NULL device *): queue 0 connect admin queue failed (-111). [ 581.118364][ T9] i2c i2c-2: connected i2c-tiny-usb device [ 581.146164][ T9] usb 2-1: USB disconnect, device number 31 [ 581.152668][ T6144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 581.187031][ T6144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 581.288673][ T9] ------------[ cut here ]------------ [ 581.294645][ T9] Device '2-002c' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. [ 581.307845][ T9] WARNING: drivers/base/core.c:2638 at device_release+0x1da/0x270, CPU#0: kworker/0:0/9 [ 581.317772][ T9] Modules linked in: [ 581.322172][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.333223][ T9] Tainted: [L]=SOFTLOCKUP [ 581.337899][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 581.348269][ T9] Workqueue: usb_hub_wq hub_event [ 581.353691][ T9] RIP: 0010:device_release+0x1dd/0x270 [ 581.359136][ T9] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 6d 94 af fb 48 8d 3d d6 1a d3 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 54 94 af fb 48 89 da 48 b8 00 00 [ 581.379288][ T9] RSP: 0018:ffffc900000e7548 EFLAGS: 00010287 [ 581.385665][ T9] RAX: 00000000000092a6 RBX: ffff8880356ce020 RCX: ffffc90019f1a000 [ 581.393725][ T9] RDX: 0000000000100000 RSI: ffff88802ae39820 RDI: ffffffff912deb50 [ 581.401982][ T9] RBP: ffff88802ae39820 R08: 0000000000000001 R09: 0000000000000000 [ 581.409963][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807aa65800 [ 581.417981][ T9] R13: dffffc0000000000 R14: ffff88802ae39820 R15: 0000000000000000 [ 581.426070][ T9] FS: 0000000000000000(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 581.435042][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.441685][ T9] CR2: 0000001b326e8ff8 CR3: 000000000e994000 CR4: 00000000003526f0 [ 581.450769][ T9] Call Trace: [ 581.454079][ T9] [ 581.457024][ T9] kobject_put+0x1f7/0x640 [ 581.461466][ T9] device_unregister+0x2f/0xe0 [ 581.466231][ T9] i2c_unregister_device+0xf5/0x270 [ 581.471750][ T9] i2c_deregister_clients+0x255/0x460 [ 581.477127][ T9] i2c_del_adapter+0x124/0x2d0 [ 581.482175][ T9] i2c_tiny_usb_disconnect+0x43/0xe0 [ 581.488103][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 581.493354][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 581.499080][ T9] device_remove+0x12a/0x180 [ 581.503694][ T9] device_release_driver_internal+0x44e/0x620 [ 581.509761][ T9] bus_remove_device+0x2bc/0x560 [ 581.514703][ T9] ? __pfx_bus_remove_device+0x10/0x10 [ 581.520149][ T9] ? __pfx_device_remove_attrs+0x10/0x10 [ 581.525795][ T9] device_del+0x376/0x9b0 [ 581.530112][ T9] ? __pfx_device_del+0x10/0x10 [ 581.534967][ T9] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 581.540677][ T9] usb_disable_device+0x367/0x810 [ 581.545707][ T9] ? mark_held_locks+0x40/0x70 [ 581.550466][ T9] usb_disconnect+0x2e2/0x9a0 [ 581.555142][ T9] hub_event+0x1c4f/0x4a60 [ 581.559579][ T9] ? __lock_acquire+0x49f/0x1a40 [ 581.564533][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 581.569715][ T9] ? __pfx_hub_event+0x10/0x10 [ 581.574744][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 581.580571][ T9] ? rcu_is_watching+0x12/0xc0 [ 581.585410][ T9] process_one_work+0xa23/0x1940 [ 581.590343][ T9] ? __pfx_process_one_work+0x10/0x10 [ 581.595718][ T9] ? __pfx_hub_event+0x10/0x10 [ 581.600470][ T9] worker_thread+0x5ef/0xe50 [ 581.605063][ T9] ? kthread+0x13a/0x450 [ 581.609291][ T9] ? __pfx_worker_thread+0x10/0x10 [ 581.614431][ T9] kthread+0x370/0x450 [ 581.618483][ T9] ? __pfx_kthread+0x10/0x10 [ 581.623182][ T9] ret_from_fork+0x72b/0xd50 [ 581.627764][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 581.632872][ T9] ? __switch_to+0x800/0x10f0 [ 581.637531][ T9] ? __pfx_kthread+0x10/0x10 [ 581.642174][ T9] ret_from_fork_asm+0x1a/0x30 [ 581.646945][ T9] [ 581.649943][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 581.657205][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.667853][ T9] Tainted: [L]=SOFTLOCKUP [ 581.672157][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 581.682186][ T9] Workqueue: usb_hub_wq hub_event [ 581.687195][ T9] Call Trace: [ 581.690449][ T9] [ 581.693363][ T9] dump_stack_lvl+0x100/0x190 [ 581.698032][ T9] vpanic+0x552/0x970 [ 581.701997][ T9] ? __pfx_vpanic+0x10/0x10 [ 581.706484][ T9] panic+0xd1/0xe0 [ 581.710176][ T9] ? __pfx_panic+0x10/0x10 [ 581.714576][ T9] check_panic_on_warn.cold+0x19/0x34 [ 581.719932][ T9] ? device_release+0x1da/0x270 [ 581.724768][ T9] __warn.cold+0x191/0x318 [ 581.729161][ T9] __report_bug+0x30f/0x440 [ 581.733643][ T9] ? device_release+0x1da/0x270 [ 581.738470][ T9] ? __pfx___report_bug+0x10/0x10 [ 581.743469][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 581.748658][ T9] ? device_release+0x1dd/0x270 [ 581.753488][ T9] report_bug_entry+0xe1/0x290 [ 581.758235][ T9] ? device_release+0x1dd/0x270 [ 581.763055][ T9] handle_bug+0x1cd/0x2a0 [ 581.767387][ T9] exc_invalid_op+0x17/0x50 [ 581.771880][ T9] asm_exc_invalid_op+0x1a/0x20 [ 581.776721][ T9] RIP: 0010:device_release+0x1dd/0x270 [ 581.782174][ T9] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 6d 94 af fb 48 8d 3d d6 1a d3 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 54 94 af fb 48 89 da 48 b8 00 00 [ 581.801764][ T9] RSP: 0018:ffffc900000e7548 EFLAGS: 00010287 [ 581.807808][ T9] RAX: 00000000000092a6 RBX: ffff8880356ce020 RCX: ffffc90019f1a000 [ 581.815759][ T9] RDX: 0000000000100000 RSI: ffff88802ae39820 RDI: ffffffff912deb50 [ 581.823712][ T9] RBP: ffff88802ae39820 R08: 0000000000000001 R09: 0000000000000000 [ 581.831661][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807aa65800 [ 581.839621][ T9] R13: dffffc0000000000 R14: ffff88802ae39820 R15: 0000000000000000 [ 581.847576][ T9] ? device_release+0x1d3/0x270 [ 581.852404][ T9] kobject_put+0x1f7/0x640 [ 581.856812][ T9] device_unregister+0x2f/0xe0 [ 581.861576][ T9] i2c_unregister_device+0xf5/0x270 [ 581.866761][ T9] i2c_deregister_clients+0x255/0x460 [ 581.872118][ T9] i2c_del_adapter+0x124/0x2d0 [ 581.876867][ T9] i2c_tiny_usb_disconnect+0x43/0xe0 [ 581.882136][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 581.887354][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 581.893059][ T9] device_remove+0x12a/0x180 [ 581.897633][ T9] device_release_driver_internal+0x44e/0x620 [ 581.903696][ T9] bus_remove_device+0x2bc/0x560 [ 581.908627][ T9] ? __pfx_bus_remove_device+0x10/0x10 [ 581.914064][ T9] ? __pfx_device_remove_attrs+0x10/0x10 [ 581.919688][ T9] device_del+0x376/0x9b0 [ 581.924000][ T9] ? __pfx_device_del+0x10/0x10 [ 581.928838][ T9] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 581.934550][ T9] usb_disable_device+0x367/0x810 [ 581.939554][ T9] ? mark_held_locks+0x40/0x70 [ 581.944305][ T9] usb_disconnect+0x2e2/0x9a0 [ 581.948971][ T9] hub_event+0x1c4f/0x4a60 [ 581.953372][ T9] ? __lock_acquire+0x49f/0x1a40 [ 581.958285][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 581.963471][ T9] ? __pfx_hub_event+0x10/0x10 [ 581.968300][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 581.973914][ T9] ? rcu_is_watching+0x12/0xc0 [ 581.978662][ T9] process_one_work+0xa23/0x1940 [ 581.983583][ T9] ? __pfx_process_one_work+0x10/0x10 [ 581.988942][ T9] ? __pfx_hub_event+0x10/0x10 [ 581.993692][ T9] worker_thread+0x5ef/0xe50 [ 581.998262][ T9] ? kthread+0x13a/0x450 [ 582.002487][ T9] ? __pfx_worker_thread+0x10/0x10 [ 582.007589][ T9] kthread+0x370/0x450 [ 582.011656][ T9] ? __pfx_kthread+0x10/0x10 [ 582.016236][ T9] ret_from_fork+0x72b/0xd50 [ 582.020813][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 582.025920][ T9] ? __switch_to+0x800/0x10f0 [ 582.030582][ T9] ? __pfx_kthread+0x10/0x10 [ 582.035244][ T9] ret_from_fork_asm+0x1a/0x30 [ 582.039994][ T9] [ 582.043299][ T9] Kernel Offset: disabled [ 582.047599][ T9] Rebooting in 86400 seconds..