last executing test programs: 19.193196708s ago: executing program 1 (id=2709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x8, 0x40000000000180, 0x2, 0x6, 0x8, 0xd, 0x7fffffffffffe, 0x2, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x380b40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000140)={0x1000, 0x80000}) 18.495508008s ago: executing program 1 (id=2710): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280), 0x8, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x8, @vbi={0x9, 0x4, 0xffffff7f, 0x37303250, [0xfffffff3, 0xd4], [0x200007, 0x3], 0x108}}) read$msr(r0, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026400020100e0000904000001020d0000052403000105240000000d240f0103000000000006000006241a00000208241c03000f20000905810300020d00000904010102020d", @ANYBLOB="b80671008bca27c382ca12a91c2a1b303414486fdce794f447822db0804035354ecf4cbe882bb84ce7ba2102061ec531ea61e8d7bc499de223a3d05145353378b2f3fd689465bf872ec66fbd957818f571348ce5dd208072d000f6ec369c9642b6289c7d0abf991923642d08c2562dd0532d18dd39aefd14713d3ebccfa098e7822f2d104d611da6f57eb77145bd1734e89aca2e5d", @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES8], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 17.578226436s ago: executing program 1 (id=2712): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB], 0x1d) r3 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0x10) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102384, 0x18ff0) mkdir(&(0x7f0000000040)='./bus\x00', 0xa0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1ff, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x6, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000280)=0x7fffffff) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) 13.895762605s ago: executing program 3 (id=2724): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x164}, 0x1, 0x0, 0x0, 0x51}, 0x4010) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e64000000080009"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 13.561913979s ago: executing program 3 (id=2725): sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.560240552s ago: executing program 4 (id=2727): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000740)="59eced8ec6dc3f0adf33c9f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r7, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1c75, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 12.515997831s ago: executing program 3 (id=2728): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x80000001}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x90, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xb55}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1000}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r8 = io_uring_setup(0x270a, &(0x7f0000000180)={0x0, 0x5e7, 0x800, 0x1, 0x1e8}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000040)={0x6, 0xffffffffffffffff, 0x20, {0xc5, 0x100}, 0x4}, 0x1) 11.46301325s ago: executing program 4 (id=2730): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000640)={0x0, 0x44c0, 0x0, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000a80)="0549527141e628153e05a761847d8308a8d77881156f0e222ca9da33299c38548042ab69d0be60b20d75633865ae28718df01a206c3f450d4093dd8534a95687ff977c22a83b20e010ce42d939513b5a16ef27cf03358c55082bdb9ae8d451c2ea26065fda7869d3382eab1aa03eaedf8a981c6db0bafcf2b8f94d7b88e8d539f2e43809ae5523", &(0x7f0000000380)=@tcp6=r3, 0x2000000}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) r7 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r7, &(0x7f0000002380), 0x0, 0x26022, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, 0x0, 0x40004) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="c5d073b02487424d004d6c0c8b2a97dc2e7bfcadd4e8856a585724ba39d34c2f926b4d5a081262f0bedcd7668480472aa115de036c78a0aefe78cebc13992883eaaa9d1409a03a65b0194e9355776c90a710821e11acba5d956bf95a927fa601e3688ca3aceb3b89373c7cb32d9fd72f9a8ad98d4b1c19674d4ed37425560e770c4a3ce13110b937e139e84a9e1a190faa69e39df9fac230856ebe8f4c47005ea565d2f35f726282484f9e", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="d9587e0806976017d12b070101b604d81cfd58040000002c22ea335d94ca6d09006d3f78a018f6a90b44b74e39b8351b431d8cd1281a74ab55ab4605f081dc5ecb4a9451709b3700377f06f3b7f12da0ffb1c1d1487678ffd17d3e1269eaf53bbe94539cd1767fa3c2cf0300ed2992f9e24343cc0d04e2cd84cecc2e5042e4c88e6e38d0048f174e158ee47aaa98dd1765c8306c", @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x480, &(0x7f000000e6c0)={{{@in6=@local}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) 10.345788779s ago: executing program 0 (id=2731): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000a80), 0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb209ffc, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x4, 0x6, @remote}, 0x14) sendmmsg$sock(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004874) r7 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0xa2481, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r7, 0x0, 0x4c0c5) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f00005c0000/0x3000)=nil, 0x3000, 0x1}) 9.427257233s ago: executing program 4 (id=2732): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="000202"], 0x18) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) getsockopt$ax25_int(r7, 0x101, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800006d9000000000000000ff00d8acc2bea603b3a1da27ae0c00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f00000005c0), 0x0, 0x8000) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000380)={0x20, &(0x7f0000000080)=[{0xb, '\x00', @st={0x4, [{}, {0x2, @uvalue=0xd}, {0x3, @svalue=0x7}, {0x1, @uvalue=0x7}]}, 0x5}, {0x21, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x0, @uvalue=0x7}, {0x3, @uvalue=0x600000}, {0x0, @uvalue=0x6}]}, 0x75}]}) 9.318383921s ago: executing program 0 (id=2733): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x100) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000200)=[{0x2b, '\x00', @st={0x4, [{0x1, @uvalue=0xfffffffffffff393}, {0x1, @svalue=0x2}, {0x2, @uvalue=0x2}, {0x3, @uvalue=0x800}]}, 0x3}, {0x35, '\x00', @data=0x40000006, 0x3ff}, {0x26, '\x00', @st={0x4, [{0x1, @uvalue=0x2}, {0x3, @svalue=0x9}, {0x1, @svalue=0x1000}, {0x1, @svalue=0x1}]}, 0x4}, {0x3d, '\x00', @st={0x4, [{0x2, @uvalue=0x7}, {0x3, @svalue=0x6}, {0x0, @svalue=0x8000}, {0x2, @svalue=0x3}]}, 0x4}]}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000180)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x4, 0x4, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f00000000c0)={0xfffffffffffffffe, 0x8, 0xa1, 0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50158}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x5}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000, 0x80000000}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x40080) ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f0000000100)=0x8) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.031239759s ago: executing program 2 (id=2734): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) mremap(&(0x7f0000337000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00006c1000/0x3000)=nil) (async) mremap(&(0x7f0000337000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00006c1000/0x3000)=nil) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030"], 0x44}}, 0x10000) 8.4423036s ago: executing program 0 (id=2735): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x20000000, 0x0) syz_usb_connect$uac2(0x2, 0x9a, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x1344daefbaa74c4f, 0x4}, {0x0, 0x2}}}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt(r3, 0x1ff, 0x5, &(0x7f0000000180), 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') 8.290057357s ago: executing program 4 (id=2736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) fcntl$setstatus(r0, 0x4, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000040)={0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'dvmrp1\x00', &(0x7f00000001c0)=@ethtool_gfeatures={0x3a, 0x2, [{}, {}]}}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0x5}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a00000000000000001f0082edb4e3e2000004000000080000"], 0x20}}, 0x8000) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) 8.227591661s ago: executing program 2 (id=2737): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x38, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x7, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x6, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x100800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x5, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x6, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x8, 0x5, 0x3, 0x9bb, 0xa, 0x200, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xfd, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x48000046, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000300000000000004000000080002000500000006"], 0x24}}, 0x0) socket(0x10, 0x803, 0x0) 7.784541934s ago: executing program 1 (id=2738): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0xe9ae5e491f2ffe82) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a3100000000140007800800"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x694f840696960e3d) semget$private(0x0, 0x4000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x70}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) shmctl$IPC_RMID(0x0, 0xffffffffffffff7f) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendto$ax25(r7, &(0x7f0000000100)="453c8873ac594aa6427cb7e60696ad761aa767025deaa00ac7ed8bd41127592c96f6f0be16346bf2973d455e8424bc1e88e8ed22f6fc7163e8771ca67e244bc051864c2e7d8b37f40cf3a7b15856b15932d6c127613bc6b48d363d43631361f883f93edb1652ebf1e58339572dd31ad46e38e21ac09abdcfb7f9e19fc3f4ee1a4ad90526a13d106e2c5a6b7b80ba6b2f2c1d5a002dc39576d9cdbac011353dfc68881aad9042c95694b7531f2e", 0xad, 0x4000, &(0x7f00000001c0)={{0x3, @bcast, 0x7}, [@default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001480), 0x109501, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) close_range(r9, r9, 0x0) 7.251653583s ago: executing program 4 (id=2739): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x58, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3fe, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="40240400000015e3dc5497f85f059004014f56b899994d3c77a8695af00ae4bf9dd29c65d00b392802040fc160b7cd498a8bb6e4fd4c6e47d9a4674f3e087b5f7aa950dd5b078d8bc913a08b129d671735aba2185dbb1e230128843d6d4da69f374119cee3ac0388e7cc8bf1a5ff7fa1a4622265ceccf76641705c27d29566dc41865b19722d5f2673f84c4dbb8bb7dc277f031073a26fc273ec515b1b8e465f4890a5cbae232c"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x6, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400e707425a01080000000000000000000000000900020073797a3100000000050004000000000010000300686173683a69702c6d6163000c000780080006400000000005000500020000000500010006000000"], 0x54}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x10002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='\x00\x00\x00', &(0x7f0000000640)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d] \x8ab>\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000b40)=@vmx={0x103, 0x0, 0x2080, {0x10000, 0x3f000, {0xe771228b5ada17fa}, 0x1, 0x20000009a4}, {"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", "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"}}) r6 = fcntl$getown(r2, 0x9) tkill(r6, 0x13) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x4b08c3, 0x108) 7.114312313s ago: executing program 2 (id=2740): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02edffffff", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000206010300000000000000000000000037077a325ce1a00900020073797a3000000000050005"], 0x44}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe360", 0x33}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd66", 0x9}, {0x0}], 0x5, &(0x7f00000014c0)}}], 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000640)="84ff883679c11ac35107130a2aced33fe0d3cf4795613cfa9f4bb1a01486cdab59b5c4a8ff0fbe8ca6e6d1f1f9660ac1426e1e4e48bc27973f5ea258fc1a32667e07f2d368345a1411dd42", 0x4b}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000500)=""/189, 0xbd}], 0x3}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) syz_open_dev$ptys(0xc, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_pidfd_open(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0xcb) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) 6.389253076s ago: executing program 0 (id=2741): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(0x0, 0x78b5, 0x80) ioctl$I2C_RDWR(r1, 0x707, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x100000004], 0x0, 0x0, 0x1, 0x0, r6}}, 0x40) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(0x0, 0x0) socket(0x26, 0x5, 0x9b4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000940)=0x200000000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) 6.217174484s ago: executing program 3 (id=2742): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e610061610061"], 0x0, 0x58, 0x0, 0x1}, 0x28) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x240}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x42c6}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000003850000001700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0}, 0x40) bind(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="0112c6aa73e1cc11f6e64a861ded001a05f8"], 0x6) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 4.979157671s ago: executing program 2 (id=2743): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x90, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x20, r5, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000034) r6 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r6}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r7, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/178, 0xb2}], 0x1, 0x182, 0x0) 4.676020224s ago: executing program 0 (id=2744): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x20000050) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x4000084) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xe, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x57, 0x57, 0x2, [@datasec={0xc, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x200, 0xb}], '\x00h'}, @datasec={0xa, 0x3, 0x0, 0xf, 0x1, [{0x4, 0xcf7, 0x4}, {0x4, 0x7f}, {0x2, 0x80000001, 0x3ff}], "a9"}, @ptr={0xf, 0x0, 0x0, 0x2, 0x4}]}}, &(0x7f00000006c0)=""/78, 0x72, 0x4e, 0x1, 0x3c5, 0x10000}, 0x28) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a7597970", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3.840113573s ago: executing program 3 (id=2745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='6\x00\x00\x00, \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="c4ee1c9fc073431ce2205f96af9886efe1299b698d80c32b746122a4b02fe586cd96da8e317da4c2", @ANYRES64=0x0], 0x20) 3.649306423s ago: executing program 2 (id=2746): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x800000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x1210, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x11e0, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_ROUTE4_ACT={0x260, 0x6, [@m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0x0, 0x9, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x76ee3561}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffff229}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x37c5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x100, 0x0, 0xc98, 0x3}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x98, 0x11, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4684c}, @TCA_MPLS_LABEL={0x8, 0x5, 0x44c42}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x3a, 0x6, "35009eea5728e1ccc62684cd190ad09e3e022f90412955acd3c0dbd581b8004eaa8180600f4a1565ea8151366e61c730a9c078c241e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_gact={0x134, 0x6, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb03, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x186}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000, 0x0, 0x0, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x237f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c73, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10001, 0x4, 0x8, 0x81, 0xfffffffc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x7, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x10000000, 0x1f, 0xc6f}}]}, {0x75, 0x6, "2ccc6282bc8bac4447822da0d0531178774955f84bab8b87e551656def4084ba2ddad9a23a23028f3236b0f0b7d5e85b61e9ca14cb39f2b5a8d7e31217917e97b71587a9c53555a9bd7c79a550cf0053b56cb8554eb9da1defa7e337a4db48379019a8e0be89e81bee4e0f87c397b82512"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_ACT={0xf74, 0x6, [@m_pedit={0xf40, 0x4, 0x0, 0x0, {{0xa}, {0xf14, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x90, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x1000, 0x0, 0x2, 0x2, 0x6}, 0x2, 0x4, [{0x9, 0x6, 0x0, 0x401, 0x401, 0x8000}, {0x8000, 0x6, 0x800, 0x8, 0x0, 0x5}, {0x5, 0x5, 0xea49, 0xf093, 0x200, 0x4}, {0xc0000, 0x1, 0x8, 0x6, 0xdc, 0xd4bb}]}, [{0x80000000, 0x1, 0xe, 0x3, 0x2d9, 0x100}, {0x3da, 0x3, 0x0, 0x3, 0x6, 0x1}, {0x8, 0x50f9, 0x1, 0x7e9, 0xfffffffa, 0x4}, {0x9, 0x80000001, 0x4, 0x3, 0x6, 0xd1}, {0xf15, 0x8, 0x7fdb84d6, 0x4, 0x2, 0x3}, {0x9, 0x2, 0x995, 0x9, 0x2fe8, 0xbe}, {0x3, 0x1d, 0x76e, 0x1, 0x2, 0x3}, {0xffff, 0x6, 0x0, 0xb, 0x7fff, 0x7ff}, {0x2, 0x4, 0xc04, 0x3ff}, {0x4, 0x401, 0x1, 0x3c, 0x9}, {0xfffffff7, 0x9, 0x4b37, 0x5, 0x2, 0x784}, {0x4, 0x400, 0x6, 0x24, 0x7, 0xc}, {0xc39, 0x9, 0x94c, 0x4, 0xfffffff8, 0x9}, {0x9, 0x4, 0x91d, 0x2eb, 0xb, 0xff}, {0x5c, 0x8, 0x0, 0x6e46, 0x200, 0x8}, {0xe59b, 0xfff, 0x8, 0xd, 0x1, 0x100}, {0x3, 0xc, 0x401, 0x79, 0x7, 0xffff687e}, {0x9, 0x9, 0xaa, 0x1, 0x3, 0x2}, {0x1, 0xf2, 0xff, 0x1, 0x0, 0x5}, {0x6f7bbc65, 0x6, 0x1000, 0x4, 0x8, 0x6}, {0x0, 0xfffffffc, 0x2a, 0x400, 0x7, 0x1}, {0x3, 0xa26, 0x64, 0x9, 0x9, 0xf}, {0xa976, 0x2ab, 0x8, 0x5, 0x5, 0x8}, {0x8, 0x1, 0x2c000, 0x3, 0x3, 0xa56f}, {0x8, 0xcdd, 0xc223, 0x4, 0x10, 0x8000}, {0x1, 0xc171, 0x1, 0x536, 0x800, 0x1}, {0xffffffff, 0x8, 0x0, 0x7, 0x3, 0xb}, {0x6, 0x0, 0x2, 0xffffff0f, 0x8, 0x2}, {0x9, 0x80000000, 0x9, 0x81, 0x5, 0x10000}, {0xfff, 0x75b7, 0x5, 0x6, 0xffffff5f, 0x4}, {0x5, 0x2, 0x4, 0xa, 0x0, 0x3b}, {0x0, 0x9, 0x9, 0x10, 0x0, 0x1d}, {0x6, 0xb, 0x3, 0x5, 0xfffffffc, 0x9}, {0x5, 0xfffffffc, 0x464e, 0x10, 0x3, 0x401}, {0x7ff, 0x80000000, 0x1000, 0x5, 0x64a, 0x5}, {0x6, 0x6, 0x4, 0x3d3a, 0xffffffff, 0xa}, {0xbcb93609, 0x4, 0x752b, 0xfffffbff, 0x5, 0x31e}, {0x6, 0x8, 0x6, 0xd131, 0x0, 0x1ff}, {0x5, 0x200, 0x7fffffff, 0x9, 0x401, 0xfffffffa}, {0x3, 0x45e0, 0x4d6, 0xf, 0x5, 0x5}, {0x3, 0x6, 0x9, 0x0, 0x40, 0x2}, {0x9, 0xe, 0xac, 0x4, 0x200, 0x4}, {0x6, 0x4ae25296, 0x7fff, 0x8, 0x2, 0x3}, {0x6, 0x4, 0xb7a5, 0x401, 0x0, 0x7}, {0x0, 0xfffffffd, 0x3, 0x4d, 0x4, 0x8}, {0x6, 0xe38c, 0x200, 0xfffffffd, 0x1}, {0x4, 0x86, 0x1000, 0x9, 0xfffffffa, 0x9}, {0x7, 0x0, 0x6, 0x7, 0x4, 0x2}, {0x6, 0x7, 0x8001, 0xc, 0x9, 0x10}, {0x3, 0x1, 0x6, 0x0, 0xf61b, 0x3413}, {0xa5, 0x6, 0xc3, 0xea, 0x5, 0x3}, {0xfffffff7, 0x9, 0x3, 0x4, 0x0, 0x8}, {0x80, 0x800, 0x3b, 0x6, 0x8, 0x6}, {0x2, 0x7, 0x80, 0x3, 0xfffffdc6, 0xc}, {0x5, 0x1, 0x3, 0x2, 0x100, 0x3}, {0xfffffc00, 0x112f, 0x2, 0xfa000000, 0xfffffffd, 0x8}, {0x1, 0x18d21c25, 0xc6, 0x2fc, 0x80, 0xe}, {0x3, 0x1, 0x3, 0x6386, 0x0, 0xff}, {0x1ff, 0x55c1, 0x0, 0x2, 0x0, 0x1}, {0x3, 0x6, 0x6, 0x3, 0x0, 0x3}, {0x63d7, 0x1, 0xcaa, 0x3, 0x7, 0x8}, {0x4, 0x6, 0x1fc0a445, 0xe3e, 0x7, 0x20}, {0x519, 0xe9, 0x5, 0x81, 0x7, 0x3}, {0x9, 0x0, 0x3, 0x5e, 0x5, 0x3}, {0x3793, 0x4, 0x4, 0x8, 0x3, 0x4}, {0x35c6, 0x7, 0x3, 0x4, 0x3, 0x8}, {0x6, 0x9, 0x2, 0xe, 0x1340, 0xc726}, {0xe98, 0x93e, 0x5, 0x9, 0x7, 0xe}, {0x4, 0xa878, 0x1, 0x8, 0x5, 0x1}, {0xfff, 0x4, 0x1, 0x3, 0x4, 0xfffffff8}, {0xfffffffb, 0x80, 0x75, 0x9, 0x9, 0x6}, {0x0, 0xffffffff, 0x3, 0x0, 0x9f, 0xe}, {0xb613, 0x7, 0x8001, 0xd625, 0x0, 0x4}, {0xfffffff9, 0x10000, 0x1, 0xe2, 0x10, 0x9}, {0x7f, 0x7, 0x2, 0x6, 0x1, 0x5}, {0x7fffffff, 0x9, 0x9, 0x72, 0x6, 0x401}, {0x1, 0x8000, 0xa0a, 0x400, 0xfffffff9, 0xc11e}, {0x9, 0x2, 0x40000, 0x101, 0x10000, 0x5}, {0xfffffff8, 0x81, 0x80c1, 0xffff25a7, 0x9, 0x10}, {0x7fff, 0x2, 0x3, 0x9, 0x101, 0x9}, {0xfffffbff, 0x5, 0x6, 0x1, 0x7, 0x6}, {0x5, 0x6, 0x7, 0x3, 0x0, 0xa6c}, {0x200, 0x4, 0x3, 0x10, 0x3, 0xfffffff8}, {0x8, 0x6, 0xedd5, 0x0, 0x10, 0x80000000}, {0x80, 0x9, 0x3, 0x9, 0x3ec1, 0x8}, {0x3, 0x8000, 0x6, 0x101, 0x7d3}, {0x1, 0xfffffffd, 0x2, 0x3, 0x7, 0x2}, {0x10000, 0x8000, 0x5, 0x3, 0x7194, 0x8}, {0x6, 0x3, 0x764fd9bf, 0x66d6, 0x0, 0x7}, {0x8, 0x0, 0x0, 0x101, 0x9, 0x1}, {0x0, 0x41, 0x1f2, 0x100, 0x1, 0x8}, {0x100, 0x6, 0x6, 0x9, 0xfffffffc, 0x8}, {0x9, 0x1, 0x7, 0x4, 0x2000000, 0x2}, {0xb4, 0xfffffffb, 0x13, 0x8, 0x61, 0x94}, {0x0, 0x6, 0x7ff, 0xffffffff, 0x80, 0x5e}, {0x9, 0x1, 0xf, 0x5, 0x4aed91b3, 0xfffffffd}, {0x7ff, 0x2, 0xf8, 0x8, 0xacbc, 0x2}, {0xff, 0x3, 0x1, 0x48000000, 0xa9, 0xcfa6}, {0x4, 0x10000, 0x297, 0x8, 0xf0000000, 0xca}, {0x4, 0x1, 0x7, 0x4, 0x3, 0x7c}, {0xe146, 0x6, 0x5, 0x81, 0xec72}, {0x3, 0x80000000, 0x2, 0x2, 0x8, 0x4}, {0x56, 0x4, 0x80000001, 0x1ca, 0xa8, 0x10000}, {0x8001, 0x7, 0x6, 0xfffffffe, 0x3ff, 0xffff}, {0x5, 0x4, 0x3, 0x5, 0xbc, 0xd951}, {0x40, 0x6, 0x1, 0xfffff3e1, 0x895c, 0x1000}, {0xe, 0x8, 0x400, 0x5, 0x2c00}, {0x1, 0x7fff, 0x95, 0x7, 0x38a}, {0x62686865, 0x5e1, 0x6, 0x0, 0xd309, 0x7}, {0x7a, 0x3, 0x101, 0x3, 0x6, 0x1000}, {0x0, 0x0, 0x6, 0x7, 0x5, 0x4}, {0x1, 0x4, 0x800, 0x9e28, 0x2, 0xffff0000}, {0x7, 0x9, 0x0, 0x6, 0x5, 0x7fff}, {0x7, 0xb, 0x44a42eb6, 0xffffff0d, 0xfffffffc, 0x1}, {0xffff, 0xfffffbff, 0x7fff, 0x6, 0x5, 0x10100000}, {0x7, 0x8, 0x4, 0xf0e, 0xffff, 0x8}, {0xffffffff, 0x7, 0x2, 0x7, 0x8, 0x8327}, {0x9, 0x4, 0x6, 0x6, 0x3bc, 0x5950ccd}, {0x9, 0x4, 0x9, 0x2, 0x0, 0xdc4}, {0x5, 0x9, 0x6, 0x7, 0x9, 0x2}, {0x1f25, 0xb, 0xffff1d0c, 0x7, 0x2f, 0x1c0000}, {0x80, 0x9, 0xf, 0x9}, {0xe2c, 0x8000, 0x7, 0x2, 0x4, 0x1}, {0x5, 0xccb8, 0x5, 0xb, 0x5, 0x8}, {0x5, 0x4e7, 0x8, 0x6, 0x2, 0x9}, {0x100, 0x3, 0xffffffff, 0x0, 0x5}, {0x6, 0x7, 0x80, 0x6, 0x5, 0x4}, {0x6, 0x8, 0x0, 0x101, 0x2, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x2}, {0x5}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x62222125a2c20c84}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x6c295710423417d6}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0xa}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0xa508f9b45da4e087}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3}, {}, {0x481deeb6fe26e12c, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x30, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x1210}}, 0x0) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 3.587424183s ago: executing program 3 (id=2747): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008", @ANYRESOCT], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008009600d5155e0c146186d80fa4fdddd97c8c30d839bf04b380305152196e11c52a735daa666b24da666b2b809ffe1f5de492206f767eb31cf270b213a79ddfb5fb52711b1715db722432d716b05d6871663f958b83a61a2a1550ca2f3f54ae4c72", @ANYRES32=0x0, @ANYBLOB="04005b0006006500b0000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000070000d8", @ANYRES32=r6, @ANYBLOB="05005b0016000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r8 = io_uring_setup(0x6909, &(0x7f0000000080)={0x0, 0x4, 0x40, 0x1, 0x37e}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) migrate_pages(0x0, 0x8000, &(0x7f0000000140)=0x7f, &(0x7f0000000200)=0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = io_uring_setup(0x40aa, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) io_uring_enter(r9, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 3.121028523s ago: executing program 1 (id=2748): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x6, 0x101000) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000180)=@riscv64_csr={0x8030000000300008, &(0x7f0000000140)=0x8}) 3.100111188s ago: executing program 4 (id=2749): r0 = syz_open_dev$evdev(&(0x7f0000001600), 0x2, 0x8000) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x42, 0x4, 0x2f8, 0xffffffff, 0xc8, 0x188, 0xc8, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x2}, 0x0, 0xa0, 0xc8, 0x0, {0x100000000000000}, [@common=@unspec=@mac={{0x30}, {@empty, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@local, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0xc, 't\\'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x2b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0xfffffffffffffe8b}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000006640)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000040)="625c8d94f5d69430f57eaed5a0903be54deb614f5c8ac125"}) 2.36151986s ago: executing program 1 (id=2750): syz_usb_connect(0x5, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x0, 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000380)={r2, 0x1, 0xfffff000, 0x1000000000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_wait(r4, &(0x7f0000000280)=[{}], 0x1, 0x4000005) 0s ago: executing program 0 (id=2751): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000100001000400"/20, @ANYRES32=r1, @ANYBLOB="090000000000000008001e0008000000eeb4d0186f01866ffadb543c68547f66c46b0d3f96cc656ff7f523"], 0x28}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000002200)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7665727369676e3d3957946455302e752c00"]) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x4044890) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011015000000401c1b0b1c000000000001290224001c0abdc7010904000002030002000921fd7f000122eb000905f6031000fc0000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x13) setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000001280)=r8, 0x4) recvmsg(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/180, 0xb4}], 0x1}, 0x40000100) sendmsg$unix(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='c', 0x1}], 0x1}, 0x80) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$uac2(r10, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00080100001944"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): __pfx_____sys_sendmsg+0x10/0x10 [ 593.775239][T13347] ___sys_sendmsg+0x190/0x1e0 [ 593.775273][T13347] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.775341][T13347] __sys_sendmsg+0x170/0x220 [ 593.775366][T13347] ? __pfx___sys_sendmsg+0x10/0x10 [ 593.775404][T13347] ? rcu_is_watching+0x12/0xc0 [ 593.775441][T13347] do_syscall_64+0x10b/0xf80 [ 593.775461][T13347] ? clear_bhb_loop+0x40/0x90 [ 593.775489][T13347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.775512][T13347] RIP: 0033:0x7fdf7679c819 [ 593.775530][T13347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.775551][T13347] RSP: 002b:00007fdf77604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.775573][T13347] RAX: ffffffffffffffda RBX: 00007fdf76a15fa0 RCX: 00007fdf7679c819 [ 593.775587][T13347] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 593.775601][T13347] RBP: 00007fdf77604090 R08: 0000000000000000 R09: 0000000000000000 [ 593.775614][T13347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.775627][T13347] R13: 00007fdf76a16038 R14: 00007fdf76a15fa0 R15: 00007ffd5ddefbd8 [ 593.775658][T13347] [ 594.421834][ T29] audit: type=1400 audit(1776682735.626:1177): avc: denied { name_bind } for pid=13348 comm="syz.3.2070" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 594.730727][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 594.740233][ T5824] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 594.748718][ T29] audit: type=1400 audit(1776682735.636:1178): avc: denied { read } for pid=13348 comm="syz.3.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 594.779487][ T29] audit: type=1400 audit(1776682735.636:1179): avc: denied { setopt } for pid=13348 comm="syz.3.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 594.821637][ T5824] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 594.887002][T13361] QAT: Invalid ioctl 35092 [ 594.998529][T13364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.011227][T13364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.339065][T13371] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 596.217555][ T29] audit: type=1400 audit(1776682737.358:1180): avc: denied { read } for pid=5937 comm="kworker/0:4" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45539 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 596.248615][T13384] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13384 comm=syz.4.2080 [ 596.359792][T13386] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 597.121738][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 597.207357][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 597.338994][ T5824] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 598.015149][ T5824] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 598.140044][ T24] usb 4-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 598.156699][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 598.204100][ T24] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 598.231809][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.271656][ T29] audit: type=1400 audit(1776682739.285:1181): avc: denied { name_bind } for pid=13389 comm="syz.2.2081" src=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 598.317174][T13392] lo speed is unknown, defaulting to 1000 [ 598.326133][ T24] usb 4-1: config 0 descriptor?? [ 598.344145][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 598.396904][T13392] vxcan1 speed is unknown, defaulting to 1000 [ 598.573622][ T5937] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 598.750797][ T5937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.797446][ T5937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 598.829877][ T5937] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 598.861349][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.891379][ T5937] usb 1-1: config 0 descriptor?? [ 598.918765][ T5937] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 598.937043][ T5937] dvb-usb: bulk message failed: -22 (3/0) [ 598.966035][ T5937] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 598.999507][ T5937] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 599.033159][ T5937] usb 1-1: media controller created [ 599.052750][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.195065][ T5937] dvb-usb: bulk message failed: -22 (6/0) [ 599.210438][ T5937] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 599.238293][ T5937] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input55 [ 599.768186][ T5937] dvb-usb: schedule remote query interval to 150 msecs. [ 599.801238][ T5937] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 599.826610][ T5909] usb 4-1: USB disconnect, device number 62 [ 599.965912][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 600.036143][ T5937] dvb-usb: error while querying for an remote control event. [ 600.036573][T13407] FAULT_INJECTION: forcing a failure. [ 600.036573][T13407] name failslab, interval 1, probability 0, space 0, times 0 [ 600.059620][T13407] CPU: 1 UID: 0 PID: 13407 Comm: syz.3.2085 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.059653][T13407] Tainted: [L]=SOFTLOCKUP [ 600.059659][T13407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 600.059670][T13407] Call Trace: [ 600.059677][T13407] [ 600.059684][T13407] dump_stack_lvl+0x100/0x190 [ 600.059715][T13407] should_fail_ex.cold+0x5/0xa [ 600.059743][T13407] ? tomoyo_encode2+0xfb/0x3c0 [ 600.059764][T13407] should_failslab+0xc2/0x120 [ 600.059785][T13407] __kmalloc_noprof+0xe0/0x850 [ 600.059812][T13407] ? rcu_is_watching+0x12/0xc0 [ 600.059846][T13407] tomoyo_encode2+0xfb/0x3c0 [ 600.059872][T13407] tomoyo_encode+0x29/0x50 [ 600.059892][T13407] tomoyo_realpath_from_path+0x18c/0x690 [ 600.059921][T13407] tomoyo_path_number_perm+0x23c/0x580 [ 600.059951][T13407] ? tomoyo_path_number_perm+0x22e/0x580 [ 600.059983][T13407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 600.060046][T13407] ? find_held_lock+0x2b/0x80 [ 600.060064][T13407] ? __fget_files+0x215/0x3d0 [ 600.060086][T13407] ? hook_file_ioctl_common+0x149/0x410 [ 600.060110][T13407] ? __fget_files+0x215/0x3d0 [ 600.060136][T13407] ? __fget_files+0x21f/0x3d0 [ 600.060163][T13407] security_file_ioctl+0xd3/0x230 [ 600.060184][T13407] __x64_sys_ioctl+0xb7/0x210 [ 600.060208][T13407] do_syscall_64+0x10b/0xf80 [ 600.060228][T13407] ? clear_bhb_loop+0x40/0x90 [ 600.060253][T13407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.060273][T13407] RIP: 0033:0x7ffaaa79c819 [ 600.060291][T13407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.060318][T13407] RSP: 002b:00007ffaab5b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.060338][T13407] RAX: ffffffffffffffda RBX: 00007ffaaaa15fa0 RCX: 00007ffaaa79c819 [ 600.060352][T13407] RDX: 0000000000000000 RSI: 0000000080086601 RDI: 0000000000000005 [ 600.060364][T13407] RBP: 00007ffaab5b8090 R08: 0000000000000000 R09: 0000000000000000 [ 600.060377][T13407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.060389][T13407] R13: 00007ffaaaa16038 R14: 00007ffaaaa15fa0 R15: 00007ffc0c68c648 [ 600.060419][T13407] [ 600.290322][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 600.305032][T13407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 600.307470][ T5824] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 600.399205][ T5824] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 600.418309][T13412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.493508][ T5937] usb 1-1: USB disconnect, device number 65 [ 600.502964][T13412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.545995][ T987] dvb-usb: bulk message failed: -22 (1/0) [ 600.573383][ T987] dvb-usb: error while querying for an remote control event. [ 600.587968][T13412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.763915][T13412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.840200][ T5937] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 601.014766][ T5909] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 601.195193][ T5909] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 601.209514][ T5909] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 601.231211][ T5909] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 601.247573][ T5909] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.258486][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 601.266732][ T5909] usb 4-1: SerialNumber: syz [ 601.473707][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.501402][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.518006][T13415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 601.553970][ T5909] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 601.569790][ T5909] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 601.590277][ T5909] usb 4-1: USB disconnect, device number 63 [ 601.591801][T13439] fuse: fd is not a fuse device [ 602.763746][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 602.770289][ T5824] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 602.801388][ T5824] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 602.828853][ T5838] block nbd0: Receive control failed (result -32) [ 602.882565][T13458] 9p: Bad value for 'rfdno' [ 603.024195][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 603.185241][T13470] ubi: mtd0 is already attached to ubi31 [ 603.407368][T13473] lo speed is unknown, defaulting to 1000 [ 603.476610][T13473] vxcan1 speed is unknown, defaulting to 1000 [ 604.467135][ T5943] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 604.647397][ T29] audit: type=1400 audit(1776682745.256:1182): avc: denied { ioctl } for pid=13477 comm="syz.0.2107" path="socket:[46263]" dev="sockfs" ino=46263 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 604.751360][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 604.785368][ T5943] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 604.857858][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.936793][ T5943] usb 4-1: config 0 descriptor?? [ 604.945320][T13494] bridge0: entered promiscuous mode [ 604.954004][T13494] bridge0: port 3(vlan2) entered blocking state [ 604.960409][T13494] bridge0: port 3(vlan2) entered disabled state [ 604.966892][T13494] vlan2: entered allmulticast mode [ 604.972083][T13494] bridge0: entered allmulticast mode [ 604.980616][T13494] vlan2: left allmulticast mode [ 604.985648][T13494] bridge0: left allmulticast mode [ 604.991491][T13494] bridge0: left promiscuous mode [ 605.032480][T13491] ip6t_srh: unknown srh match flags 4000 [ 605.047745][ T5943] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 605.368389][T13497] input: syz0 as /devices/virtual/input/input56 [ 605.827061][T13504] bond4 (unregistering): Released all slaves [ 605.841610][ T5909] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 605.951145][ T5943] gspca_vc032x: reg_w err -71 [ 605.972935][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.988729][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.004338][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.014256][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.024440][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 606.031227][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.039348][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.041611][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.050494][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.073513][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 606.074675][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.092366][ T5909] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 606.115722][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.120870][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.126900][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.142590][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.154969][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.157060][ T5909] usb 1-1: config 0 descriptor?? [ 606.160948][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.178448][ T5909] hub 1-1:0.0: bad descriptor, ignoring hub [ 606.196957][ T5909] hub 1-1:0.0: probe with driver hub failed with error -5 [ 606.225437][ T5909] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 606.319875][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.325934][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.331254][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.336731][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.342519][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 606.347904][ T5943] gspca_vc032x: Unknown sensor... [ 606.353038][ T5943] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 606.364133][ T5943] usb 4-1: USB disconnect, device number 64 [ 606.557734][ T29] audit: type=1400 audit(1776682746.968:1183): avc: denied { block_suspend } for pid=13511 comm="syz.2.2118" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 607.003419][T13522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.015346][T13522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.053695][T13522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.064178][T13522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.540487][ T5909] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 607.652974][T13540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.664021][T13540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.700825][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 607.708065][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.720748][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 607.736413][ T5909] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 607.755070][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.773764][ T5909] usb 4-1: config 0 descriptor?? [ 607.792626][ T5909] hub 4-1:0.0: bad descriptor, ignoring hub [ 607.807679][ T5909] hub 4-1:0.0: probe with driver hub failed with error -5 [ 607.822840][ T5909] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 608.668196][T13547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.678983][T13547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.299856][ T5943] usb 1-1: USB disconnect, device number 66 [ 609.955578][ T5943] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 610.158859][ T5943] usb 1-1: Using ep0 maxpacket: 32 [ 610.222825][ T5943] usb 1-1: config index 0 descriptor too short (expected 114, got 109) [ 610.279124][ T5943] usb 1-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 610.358358][ T5943] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 610.564122][ T5943] usb 1-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40 [ 610.617702][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.714020][ T5943] usb 1-1: Product: syz [ 610.877589][ T5943] usb 1-1: Manufacturer: syz [ 610.963005][ T5943] usb 1-1: SerialNumber: syz [ 611.014705][ T5824] usb 4-1: USB disconnect, device number 65 [ 611.918569][T13555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.927580][T13555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.599990][ T29] audit: type=1400 audit(1776682752.695:1184): avc: denied { ioctl } for pid=13584 comm="syz.3.2139" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 612.626752][T13585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2139'. [ 612.659874][T13585] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2139'. [ 613.647113][ T5943] usb 1-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 613.673208][ T5943] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 613.863601][T13601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2143'. [ 613.957924][ T5943] usb 1-1: USB disconnect, device number 67 [ 614.143733][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.951133][T13622] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2149'. [ 614.989395][T13595] libceph: resolve '0..' (ret=-3): failed [ 615.011770][T13624] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2150'. [ 615.121156][T13624] Invalid option length (167) for dns_resolver key [ 615.701327][T13635] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 615.713219][T13635] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 616.373624][T13640] mkiss: ax0: crc mode is auto. [ 616.428850][T13643] tmpfs: User quota block hardlimit too large. [ 616.841530][T13664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.850802][T13664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.925808][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2159'. [ 617.346801][T13670] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2163'. [ 617.348250][T13664] netlink: 'syz.1.2162': attribute type 1 has an invalid length. [ 617.373045][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2159'. [ 617.430711][T13664] 8021q: adding VLAN 0 to HW filter on device bond4 [ 618.030517][T13664] vlan2: entered allmulticast mode [ 618.049758][T13664] bond4: entered allmulticast mode [ 618.157029][T13678] bond4: (slave geneve2): making interface the new active one [ 618.226729][T13678] geneve2: entered allmulticast mode [ 618.675783][T13678] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 619.168042][T13697] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 619.551591][ T5943] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 619.734718][ T5943] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 619.742819][ T5943] usb 1-1: config 0 has no interface number 0 [ 619.749280][ T5943] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 619.760744][ T5943] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 619.771833][ T5943] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 619.781871][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.792000][ T5943] usb 1-1: config 0 descriptor?? [ 619.797819][T13700] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 619.813225][ T5943] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 620.008331][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 620.037280][ T5909] usb 1-1: USB disconnect, device number 68 [ 620.043369][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 620.802461][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 621.261333][ T24] usb 4-1: device descriptor read/64, error -71 [ 621.330699][T13742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.347015][T13742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.550101][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 621.699643][ T24] usb 4-1: device descriptor read/64, error -71 [ 621.828028][ T24] usb usb4-port1: attempt power cycle [ 622.727773][ T24] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 622.823337][ T24] usb 4-1: device descriptor read/8, error -71 [ 623.099451][ T24] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 623.132557][ T24] usb 4-1: device descriptor read/8, error -71 [ 623.249370][ T24] usb usb4-port1: unable to enumerate USB device [ 623.831650][ T5909] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 624.332017][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.415921][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.552938][ T5909] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 624.574008][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.591939][ T5909] usb 1-1: config 0 descriptor?? [ 625.262898][ T5909] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 625.283711][ T5909] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 625.301010][ T5909] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 625.320862][ T5909] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 625.407503][ T5909] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 625.423132][ T5909] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 625.434977][ T5909] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 625.522345][ T5909] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 625.522378][ T5909] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 625.522404][ T5909] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 625.523222][ T5909] arvo 0003:1E7D:30D4.000E: unexpected long global item [ 625.523843][ T5909] arvo 0003:1E7D:30D4.000E: parse failed [ 625.523912][ T5909] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -22 [ 625.656088][T13805] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 628.121900][ T5907] usb 1-1: USB disconnect, device number 69 [ 628.225147][T13827] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2208'. [ 628.344576][T13828] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 628.787749][T13828] PKCS7: Only support pkcs7_signedData type [ 629.315492][T13852] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 630.243211][T13860] QAT: Invalid ioctl 35092 [ 630.889476][ T5943] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 631.039003][ T5943] usb 1-1: device descriptor read/64, error -71 [ 631.205548][T13868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.219126][T13868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.306513][ T5943] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 631.525326][ T5943] usb 1-1: device descriptor read/64, error -71 [ 631.648341][ T5943] usb usb1-port1: attempt power cycle [ 632.022282][ T5943] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 632.081891][ T5943] usb 1-1: device descriptor read/8, error -71 [ 632.352059][ T5943] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 632.450707][ T5943] usb 1-1: device descriptor read/8, error -71 [ 632.541318][T13892] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 632.915375][ T5943] usb usb1-port1: unable to enumerate USB device [ 633.055791][T13894] tipc: Started in network mode [ 633.071101][T13894] tipc: Node identity ea676d6a3514, cluster identity 4711 [ 633.091778][T13894] tipc: Enabled bearer , priority 0 [ 633.124343][T13894] Bluetooth: hci0: load_link_keys: too big key_count value 18432 [ 633.151511][T13893] tipc: Disabling bearer [ 633.342732][T13896] QAT: Invalid ioctl 35092 [ 633.649877][T13903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.129354][T13903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.140069][T13908] netlink: 'syz.2.2232': attribute type 39 has an invalid length. [ 634.487939][T13903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.509887][T13903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.640475][ T5909] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 634.834342][ T5909] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 634.843410][ T5909] usb 1-1: config 0 has no interface number 0 [ 634.854291][ T5909] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 634.887141][ T5909] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 634.899733][ T5909] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 634.938295][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.955764][ T5909] usb 1-1: config 0 descriptor?? [ 634.962411][T13912] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 634.973072][T13924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2237'. [ 634.986918][ T5909] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 635.202988][ T5909] usb 1-1: USB disconnect, device number 74 [ 635.203022][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 635.459654][T13934] FAULT_INJECTION: forcing a failure. [ 635.459654][T13934] name failslab, interval 1, probability 0, space 0, times 0 [ 635.484467][T13934] CPU: 1 UID: 0 PID: 13934 Comm: syz.1.2239 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.484506][T13934] Tainted: [L]=SOFTLOCKUP [ 635.484513][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 635.484526][T13934] Call Trace: [ 635.484535][T13934] [ 635.484544][T13934] dump_stack_lvl+0x100/0x190 [ 635.484575][T13934] should_fail_ex.cold+0x5/0xa [ 635.484605][T13934] should_failslab+0xc2/0x120 [ 635.484628][T13934] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 635.484661][T13934] ? __alloc_skb+0x140/0x710 [ 635.484682][T13934] ? __alloc_skb+0x5b7/0x710 [ 635.484714][T13934] __alloc_skb+0x140/0x710 [ 635.484735][T13934] ? __alloc_skb+0x5b7/0x710 [ 635.484755][T13934] ? __pfx___alloc_skb+0x10/0x10 [ 635.484785][T13934] netlink_alloc_large_skb+0x69/0x150 [ 635.484818][T13934] netlink_sendmsg+0x680/0xda0 [ 635.484856][T13934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.484884][T13934] ? __might_fault+0x90/0x140 [ 635.484924][T13934] ____sys_sendmsg+0x9e1/0xb70 [ 635.484952][T13934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.484984][T13934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.485017][T13934] ? __pfx__kstrtoull+0x10/0x10 [ 635.485054][T13934] ___sys_sendmsg+0x190/0x1e0 [ 635.485086][T13934] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.485130][T13934] ? find_held_lock+0x2b/0x80 [ 635.485169][T13934] __sys_sendmmsg+0x205/0x430 [ 635.485196][T13934] ? __pfx___sys_sendmmsg+0x10/0x10 [ 635.485229][T13934] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 635.485264][T13934] ? fput+0x79/0x100 [ 635.485290][T13934] ? ksys_write+0x1ac/0x250 [ 635.485311][T13934] ? __pfx_ksys_write+0x10/0x10 [ 635.485338][T13934] __x64_sys_sendmmsg+0x9c/0x100 [ 635.485362][T13934] ? lockdep_hardirqs_on+0x78/0x100 [ 635.485395][T13934] do_syscall_64+0x10b/0xf80 [ 635.485414][T13934] ? clear_bhb_loop+0x40/0x90 [ 635.485441][T13934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.485463][T13934] RIP: 0033:0x7fdf7679c819 [ 635.485481][T13934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.485502][T13934] RSP: 002b:00007fdf77604028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 635.485523][T13934] RAX: ffffffffffffffda RBX: 00007fdf76a15fa0 RCX: 00007fdf7679c819 [ 635.485538][T13934] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 635.485551][T13934] RBP: 00007fdf77604090 R08: 0000000000000000 R09: 0000000000000000 [ 635.485564][T13934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.485577][T13934] R13: 00007fdf76a16038 R14: 00007fdf76a15fa0 R15: 00007ffd5ddefbd8 [ 635.485606][T13934] [ 635.714819][T13931] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 637.916503][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'. [ 638.278280][T13956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.317611][T13956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.261365][T13971] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 642.386393][T13980] overlayfs: failed to resolve './file1/file0': -20 [ 642.453492][ T29] audit: type=1400 audit(1776682780.629:1185): avc: denied { shutdown } for pid=13983 comm="syz.0.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 642.695517][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 644.538582][T14012] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 644.624058][T14020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 645.232418][T14026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2269'. [ 647.693424][T14054] overlayfs: missing 'lowerdir' [ 648.218643][ T5824] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 648.906065][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 648.920912][ T5824] usb 4-1: unable to get BOS descriptor or descriptor too short [ 648.935833][T14061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.953812][ T5824] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 648.964517][T14061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.972424][ T5824] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 648.983008][ T5824] usb 4-1: SerialNumber: ર볠ã«ã’箶ꇶ鬵íŽå¼è´”侑᧧딽둞醰ᩀ舎疳ץ跱䗂Ảற줋槺엫뺕뵧å³æ›ì«‰é½¤é±”喺猪í’觭䄚慉赎㶧ꅺ룹ᯒ輓çºçµƒî§èˆá‚¥êŒì†ªå›˜ë°Šê‹¨ç´åœ¨ [ 649.004171][T14061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.084463][T14061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.370728][ T5824] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 649.392709][ T5824] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 649.406900][ T5824] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 649.455040][ T5824] usb 4-1: media controller created [ 649.474226][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 649.516585][ T5824] zl10353_read_register: readreg error (reg=127, ret==0) [ 649.574855][ T5824] usb 4-1: USB disconnect, device number 70 [ 649.616459][ T29] audit: type=1400 audit(1776682787.339:1186): avc: denied { connect } for pid=14077 comm="syz.2.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 649.874481][T14088] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2285'. [ 650.101702][T14087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.124747][T14087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.851707][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'. [ 652.180337][T14112] Failed to initialize the IGMP autojoin socket (err -2) [ 652.421038][T14124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.436982][T14124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.451258][T14124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.462720][T14124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.611500][T14131] /dev/nullb0: Can't lookup blockdev [ 652.635551][ T5907] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 652.808049][ T5907] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 652.817323][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.827049][ T5907] usb 4-1: config 0 descriptor?? [ 652.902681][ T5909] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 653.063670][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 653.072356][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 653.087866][ T5909] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 653.097437][ T5909] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 653.105565][ T5909] usb 1-1: SerialNumber: ર볠ã«ã’箶ꇶ鬵íŽå¼è´”侑᧧딽둞醰ᩀ舎疳ץ跱䗂Ảற줋槺엫뺕뵧å³æ›ì«‰é½¤é±”喺猪í’觭䄚慉赎㶧ꅺ룹ᯒ輓çºçµƒî§èˆá‚¥êŒì†ªå›˜ë°Šê‹¨ç´åœ¨ [ 654.037203][T14135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.080562][T14135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.250184][ T5909] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 654.267987][ T5907] usb 4-1: Cannot set autoneg [ 654.274866][ T5909] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 654.285575][ T5907] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 654.297531][ T5909] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 654.756888][ T5907] usb 4-1: USB disconnect, device number 71 [ 654.763067][ T5909] usb 1-1: media controller created [ 654.788342][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 654.804129][ T5909] zl10353_read_register: readreg error (reg=127, ret==0) [ 654.837749][ T5909] usb 1-1: USB disconnect, device number 75 [ 655.249197][T14158] ubi: mtd0 is already attached to ubi31 [ 657.768084][T14183] QAT: Invalid ioctl 35092 [ 658.048405][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2312'. [ 658.186898][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2312'. [ 659.212251][T14209] tmpfs: Bad value for 'mpol' [ 659.543202][ T5907] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 659.709967][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 659.801481][ T5907] usb 4-1: unable to get BOS descriptor or descriptor too short [ 659.998449][ T5907] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 660.021494][ T5907] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 660.038478][ T5907] usb 4-1: SerialNumber: ર볠ã«ã’箶ꇶ鬵íŽå¼è´”侑᧧딽둞醰ᩀ舎疳ץ跱䗂Ảற줋槺엫뺕뵧å³æ›ì«‰é½¤é±”喺猪í’觭䄚慉赎㶧ꅺ룹ᯒ輓çºçµƒî§èˆá‚¥êŒì†ªå›˜ë°Šê‹¨ç´åœ¨ [ 660.339762][T14205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.456127][T14205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.860542][ T5907] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 660.929392][ T5907] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 660.952821][ T5907] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 660.998721][ T5907] usb 4-1: media controller created [ 661.019291][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 661.043418][ T5907] zl10353_read_register: readreg error (reg=127, ret==0) [ 661.346604][ T5907] usb 4-1: USB disconnect, device number 72 [ 661.894868][T14228] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 662.230731][ T5943] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 662.414539][ T5943] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 662.425768][ T5943] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 662.468677][ T5943] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 662.502448][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 662.565737][ T5943] usb 4-1: Product: syz [ 662.588400][ T5943] usb 4-1: Manufacturer: syz [ 662.683839][ T5943] usb 4-1: SerialNumber: syz [ 662.699437][T14231] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 663.003415][ T5943] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 663.024946][ T29] audit: type=1326 audit(1776682799.878:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14246 comm="syz.2.2331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f506679c819 code=0x0 [ 663.114332][T14253] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2332'. [ 663.134080][T14255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.143307][T14231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.152631][T14255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.163082][T14231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.189336][ T29] audit: type=1400 audit(1776682800.037:1188): avc: denied { read write } for pid=14254 comm="syz.1.2333" name="lp0" dev="devtmpfs" ino=3805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 663.267808][ T29] audit: type=1400 audit(1776682800.065:1189): avc: denied { open } for pid=14254 comm="syz.1.2333" path="/dev/usb/lp0" dev="devtmpfs" ino=3805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 663.322906][T14256] netlink: 'syz.3.2325': attribute type 8 has an invalid length. [ 663.451674][T14262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.482827][T14262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.205460][T14270] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14270 comm=syz.4.2337 [ 664.368794][ T5943] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 664.370810][ T5907] usb 4-1: USB disconnect, device number 73 [ 664.410873][ T5907] usblp0: removed [ 665.063374][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 665.071091][ T5943] usb 1-1: unable to get BOS descriptor or descriptor too short [ 665.085464][ T5943] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 665.188961][ T5943] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 665.203303][ T5943] usb 1-1: SerialNumber: ર볠ã«ã’箶ꇶ鬵íŽå¼è´”侑᧧딽둞醰ᩀ舎疳ץ跱䗂Ảற줋槺엫뺕뵧å³æ›ì«‰é½¤é±”喺猪í’觭䄚慉赎㶧ꅺ룹ᯒ輓çºçµƒî§èˆá‚¥êŒì†ªå›˜ë°Šê‹¨ç´åœ¨ [ 665.674902][T14266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.844341][T14266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.872704][ T5943] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 666.294363][ T5943] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 666.305015][ T5943] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 666.320142][ T5943] usb 1-1: media controller created [ 666.348923][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 666.405467][ T5943] zl10353_read_register: readreg error (reg=127, ret==0) [ 666.491079][ T5943] usb 1-1: USB disconnect, device number 76 [ 666.512566][T14296] Invalid argument reading file caps for ./file0 [ 666.762597][ T29] audit: type=1400 audit(1776682803.378:1190): avc: denied { bind } for pid=14295 comm="syz.1.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 666.782682][ T29] audit: type=1400 audit(1776682803.406:1191): avc: denied { listen } for pid=14295 comm="syz.1.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 666.793823][T14299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.884403][T14304] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 667.283896][T14299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.317217][ T29] audit: type=1400 audit(1776682803.893:1192): avc: denied { accept } for pid=14295 comm="syz.1.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 667.994632][T14312] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 668.417349][T14310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.669961][T14316] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2349'. [ 669.951634][T14334] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 669.970052][ T5909] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 670.205046][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 670.665500][ T5909] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 670.680429][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.746277][ T5909] usb 1-1: Product: syz [ 670.765987][ T5909] usb 1-1: Manufacturer: syz [ 670.783087][ T5909] usb 1-1: SerialNumber: syz [ 670.809386][ T5909] usb 1-1: config 0 descriptor?? [ 670.827919][ T5909] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 670.859215][ T5909] pctv452e: pctv452e_power_ctrl: 1 [ 670.859215][ T5909] [ 670.891202][ T5909] usb 1-1: selecting invalid altsetting 3 [ 670.905966][ T5909] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 670.905966][ T5909] [ 670.937455][ T5909] dvb-usb: bulk message failed: -22 (5/0) [ 671.010003][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 671.060955][ T5909] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 671.176514][ T5909] usb 1-1: media controller created [ 671.190897][ T5909] dvb-usb: bulk message failed: -22 (8/0) [ 671.206179][T14330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.220562][ T5909] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 671.702103][ T5909] dvb-usb: MAC address reading failed. [ 671.736424][T14330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.868208][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.983917][T14351] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 672.369313][T14330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14330 comm=syz.0.2352 [ 672.524290][ T5909] DVB: Unable to find symbol stb0899_attach() [ 672.549409][ T5909] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 672.790288][ T5909] rc_core: IR keymap rc-tt-1500 not found [ 672.799804][ T5909] Registered IR keymap rc-empty [ 672.828196][ T5909] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 672.885381][ T5909] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input58 [ 672.918752][ T5909] dvb-usb: schedule remote query interval to 100 msecs. [ 672.936403][ T5909] pctv452e: pctv452e_power_ctrl: 0 [ 672.936403][ T5909] [ 673.058274][ T5907] dvb-usb: bulk message failed: -22 (4/0) [ 673.066170][ T5909] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 673.077720][ T5907] dvb-usb: error -22 while querying for an remote control event. [ 673.099975][ T5909] usb 1-1: USB disconnect, device number 77 [ 673.231272][T14364] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 673.701085][ T5909] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 674.561494][ T5943] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 674.697532][T14378] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 674.734519][ T5943] usb 1-1: device descriptor read/64, error -71 [ 675.047456][ T5943] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 675.218150][ T29] audit: type=1400 audit(1776682811.276:1193): avc: denied { getattr } for pid=14384 comm="syz.4.2368" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 675.343890][ T5943] usb 1-1: device descriptor read/64, error -71 [ 675.517496][ T5943] usb usb1-port1: attempt power cycle [ 676.047105][ T5943] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 676.167665][ T5943] usb 1-1: device descriptor read/8, error -71 [ 676.509478][ T5943] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 676.541091][ T5943] usb 1-1: device descriptor read/8, error -71 [ 676.586040][ T29] audit: type=1400 audit(1776682812.577:1194): avc: denied { ioctl } for pid=14377 comm="syz.1.2365" path="socket:[49857]" dev="sockfs" ino=49857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 676.657916][ T5943] usb usb1-port1: unable to enumerate USB device [ 676.978371][ T5907] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 677.159957][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 677.175306][ T5907] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 677.194660][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.209021][ T5907] usb 4-1: Product: syz [ 677.219786][ T5907] usb 4-1: Manufacturer: syz [ 677.228357][ T5907] usb 4-1: SerialNumber: syz [ 677.247934][ T5907] usb 4-1: config 0 descriptor?? [ 677.263757][ T5907] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 677.279988][ T5907] pctv452e: pctv452e_power_ctrl: 1 [ 677.279988][ T5907] [ 677.307676][ T5907] usb 4-1: selecting invalid altsetting 3 [ 677.328119][ T5907] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 677.328119][ T5907] [ 677.358900][ T5907] dvb-usb: bulk message failed: -22 (5/0) [ 677.376047][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 677.400792][ T5907] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 677.425816][ T5907] usb 4-1: media controller created [ 677.447976][ T5907] dvb-usb: bulk message failed: -22 (8/0) [ 677.458402][ T5907] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 677.481545][T14408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.495161][ T5907] dvb-usb: MAC address reading failed. [ 677.506415][T14408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.543373][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 677.558255][T14408] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14408 comm=syz.3.2374 [ 677.686865][ T5907] DVB: Unable to find symbol stb0899_attach() [ 677.693993][ T5907] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 677.868922][ T5907] rc_core: IR keymap rc-tt-1500 not found [ 677.875181][ T5907] Registered IR keymap rc-empty [ 677.885074][ T5907] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 677.933192][ T5907] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input59 [ 678.411439][T14414] IPVS: Error during creation of socket; terminating [ 678.424060][ T5907] dvb-usb: schedule remote query interval to 100 msecs. [ 678.445428][ T5907] pctv452e: pctv452e_power_ctrl: 0 [ 678.445428][ T5907] [ 678.465355][ T5907] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 678.489139][ T5907] usb 4-1: USB disconnect, device number 74 [ 678.607453][ T5907] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 680.942885][ T5907] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 681.113833][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 681.126083][ T5907] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 681.141177][ T5907] usb 1-1: config 0 has no interface number 0 [ 681.155495][ T5907] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 681.180861][ T5907] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 681.204432][ T5907] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 681.222583][ T5907] usb 1-1: config 0 interface 196 has no altsetting 0 [ 681.237816][ T5907] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 681.248030][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.263036][ T5907] usb 1-1: Product: syz [ 681.271826][ T5907] usb 1-1: Manufacturer: syz [ 681.280793][ T5907] usb 1-1: SerialNumber: syz [ 681.299216][ T5907] usb 1-1: config 0 descriptor?? [ 681.313444][T14445] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 681.763623][T14458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2389'. [ 681.775110][ T5907] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 3 bytes [ 681.854502][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'. [ 681.898163][T14459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'. [ 682.335112][ T5907] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 682.408120][ T5907] usb 1-1: USB disconnect, device number 82 [ 682.582437][T14465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2392'. [ 682.802805][T14471] 9p: Bad value for 'wfdno' [ 683.404347][T14480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.422247][ T5943] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 683.451016][T14480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.517125][T14480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.534801][T14480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.626939][ T5943] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 683.642201][ T5943] usb 1-1: config 0 has no interface number 0 [ 683.666664][ T5943] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 683.688712][ T5943] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 683.718626][ T5943] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 683.736029][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.752202][ T5943] usb 1-1: config 0 descriptor?? [ 683.759964][T14478] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 683.775448][ T5943] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 683.988938][ T5943] usb 1-1: USB disconnect, device number 83 [ 683.995062][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 684.557092][T14497] netlink: 'syz.1.2403': attribute type 10 has an invalid length. [ 684.568602][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.576026][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.739890][T14497] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.747110][T14497] bridge0: port 2(bridge_slave_1) entered listening state [ 684.754492][T14497] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.761730][T14497] bridge0: port 1(bridge_slave_0) entered listening state [ 684.842955][T14497] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 684.847796][T14509] ALSA: mixer_oss: invalid OSS volume '' [ 684.897351][T14505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.944822][T14505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.086540][ T29] audit: type=1400 audit(1776682820.531:1195): avc: denied { accept } for pid=14515 comm="syz.4.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 685.386140][T14522] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2408'. [ 686.024222][T14524] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 686.878042][T14502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2405'. [ 686.991243][T14531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.029495][T14531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.072022][T14531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.083852][T14531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.108269][ T29] audit: type=1400 audit(1776682822.422:1196): avc: denied { wake_alarm } for pid=14534 comm="syz.3.2414" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.310825][T14541] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2415'. [ 687.387317][ T29] audit: type=1400 audit(1776682822.674:1197): avc: denied { map } for pid=14551 comm="syz.2.2419" path="socket:[50071]" dev="sockfs" ino=50071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 687.436674][ T29] audit: type=1400 audit(1776682822.684:1198): avc: denied { read accept } for pid=14551 comm="syz.2.2419" path="socket:[50071]" dev="sockfs" ino=50071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 687.480068][ T29] audit: type=1800 audit(1776682822.721:1199): pid=14552 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.2419" name="/newroot/542/cgroup" dev="tmpfs" ino=2882 res=0 errno=0 [ 687.716659][T14563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.753993][T14563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.517734][T14576] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 688.989863][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2424'. [ 689.064947][T14587] netlink: 'syz.1.2425': attribute type 4 has an invalid length. [ 689.073010][T14587] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2425'. [ 689.232392][T14587] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 690.072886][T14600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.123148][T14600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.146658][T14600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.166669][T14600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.221531][T14609] ªªªªªª: renamed from vlan0 [ 690.439911][ T5943] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 691.364106][ T5943] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 691.376244][ T5943] usb 4-1: config 0 has no interface number 0 [ 691.843275][T14623] loop5: detected capacity change from 0 to 7 [ 691.859187][T14626] netlink: 'syz.1.2441': attribute type 10 has an invalid length. [ 691.919186][T14626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 691.942547][T14626] team0: Port device netdevsim0 added [ 692.397611][ T5943] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 692.409234][ T5943] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 692.420053][ T5943] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 692.429186][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.440396][ T5943] usb 4-1: config 0 descriptor?? [ 692.448735][T14607] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 692.525019][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2442'. [ 692.799210][T14638] Failed to initialize the IGMP autojoin socket (err -2) [ 692.825151][T14639] random: crng reseeded on system resumption [ 693.410161][ C1] blk_print_req_error: 131 callbacks suppressed [ 693.410182][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.425693][ C1] buffer_io_error: 130 callbacks suppressed [ 693.425713][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 693.452514][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.461782][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 693.474645][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.475786][ T5943] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 693.483877][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 693.488264][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.511861][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 693.528515][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.537759][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 693.546069][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.555300][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 693.563682][T14623] ldm_validate_partition_table(): Disk read failed. [ 693.570548][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.579752][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 693.588038][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.597249][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 693.609010][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.618247][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 693.642760][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.651997][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 693.660898][T14623] Dev loop5: unable to read RDB block 0 [ 693.802267][T14623] loop5: unable to read partition table [ 693.848453][T14623] loop5: partition table beyond EOD, truncated [ 694.046161][T14623] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 694.078503][T14639] Restarting kernel threads ... [ 694.080221][ T5943] usb 4-1: USB disconnect, device number 75 [ 694.086297][T14639] Done restarting kernel threads. [ 694.307354][T14652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.362176][T14652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.396098][T14654] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2445'. [ 694.500374][T14652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.660292][T14652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.748291][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.773857][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.888538][ T5194] ldm_validate_partition_table(): Disk read failed. [ 695.917549][ T5194] Dev loop9: unable to read RDB block 0 [ 695.935137][ T5194] loop9: unable to read partition table [ 695.964864][ T5194] loop9: partition table beyond EOD, truncated [ 696.534487][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2456'. [ 697.011278][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2456'. [ 697.184921][ T29] audit: type=1400 audit(1776682831.845:1200): avc: denied { connect } for pid=14691 comm="syz.4.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 698.382307][T14699] sch_tbf: peakrate 257 is lower than or equals to rate 13227048128461824939 ! [ 700.475942][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2469'. [ 700.573733][T14736] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 701.036933][T14737] sch_tbf: peakrate 257 is lower than or equals to rate 13227048128461824939 ! [ 702.069578][T14758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.082251][T14758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.097504][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2476'. [ 702.222403][T14759] nbd: socks must be embedded in a SOCK_ITEM attr [ 702.246334][T14074] block nbd64: NBD_DISCONNECT [ 702.502064][T14074] udevd[14074]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 702.875164][T14771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 703.302247][T14771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 703.408184][T14771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 703.793886][ T29] audit: type=1400 audit(1776682838.031:1201): avc: denied { ioctl } for pid=14785 comm="syz.3.2482" path="socket:[50748]" dev="sockfs" ino=50748 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 704.665991][T14796] siw: device registration error -23 [ 706.404852][ T29] audit: type=1400 audit(1776682840.370:1202): avc: denied { setattr } for pid=14797 comm="syz.3.2486" name="RDS" dev="sockfs" ino=51472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 706.815509][T14810] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2490'. [ 708.354334][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 708.611773][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 709.233075][T14829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.246263][T14829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.612767][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2498'. [ 709.760670][T14841] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2500'. [ 709.996995][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2498'. [ 710.087526][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2498'. [ 710.127707][T14849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2502'. [ 710.505041][T14856] netlink: 'syz.1.2504': attribute type 2 has an invalid length. [ 711.271084][T14870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.281935][T14870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.301413][T14870] tipc: Started in network mode [ 711.310943][T14870] tipc: Node identity 7, cluster identity 4711 [ 711.324936][T14870] tipc: Node number set to 7 [ 711.611932][T14873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2508'. [ 712.077709][T14883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2506'. [ 712.107935][T14883] bridge1: entered promiscuous mode [ 712.118852][T14883] bridge1: entered allmulticast mode [ 712.180763][T14886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.194199][T14886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.440501][T14893] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2513'. [ 712.603342][ T5937] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 712.739341][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2514'. [ 713.202716][ T5937] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 713.211051][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2514'. [ 713.838925][ T5937] usb 4-1: config 0 has no interface number 0 [ 713.938690][ T5937] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 713.967593][ T5937] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 714.001603][ T5937] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 714.024059][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.061868][ T5937] usb 4-1: config 0 descriptor?? [ 714.088618][T14889] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 714.117871][ T5937] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 714.376286][ T5943] usb 4-1: USB disconnect, device number 76 [ 714.382350][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 714.762113][T14932] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14932 comm=syz.4.2521 [ 716.035927][ T5943] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 716.198353][ T5943] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 716.221705][ T5943] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.246378][ T5943] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 716.276505][ T5943] usb 1-1: config 0 interface 0 has no altsetting 0 [ 716.283414][ T5943] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 716.292958][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.304893][ T5943] usb 1-1: config 0 descriptor?? [ 717.233745][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 717.244023][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 719.007288][T14993] FAT-fs (nullb0): bogus number of reserved sectors [ 719.014317][T14993] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 719.065345][ T5943] usbhid 1-1:0.0: can't add hid device: -71 [ 719.078473][ T5943] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 719.135977][T14995] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2542'. [ 719.159540][ T5943] usb 1-1: USB disconnect, device number 84 [ 721.305842][ T29] audit: type=1400 audit(1776682854.426:1203): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 721.408590][T15024] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 721.428045][T15024] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 722.126634][T15031] input: syz0 as /devices/virtual/input/input60 [ 722.296869][T15030] fuse: fd is not a fuse device [ 722.494779][T15034] netlink: 'syz.3.2548': attribute type 4 has an invalid length. [ 722.502979][T15034] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2548'. [ 722.520321][T15034] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 722.794945][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2551'. [ 723.149093][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2551'. [ 723.193702][T15046] netlink: 'syz.0.2553': attribute type 3 has an invalid length. [ 724.304813][ T29] audit: type=1804 audit(1776682857.196:1204): pid=15064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2557" name="/newroot/443/file0" dev="tmpfs" ino=2352 res=1 errno=0 [ 724.976559][T15110] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2563'. [ 725.150231][T15113] input: syz0 as /devices/virtual/input/input61 [ 725.261318][T15110] lo speed is unknown, defaulting to 1000 [ 725.319970][T15110] vxcan1 speed is unknown, defaulting to 1000 [ 726.058716][ T5909] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 726.249199][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 726.259534][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 726.289598][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 726.306886][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 726.327004][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 726.350864][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 726.383593][ T5909] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 726.400597][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.409619][ T5909] usb 4-1: Product: syz [ 726.423322][ T5909] usb 4-1: Manufacturer: syz [ 726.432466][ T5909] usb 4-1: SerialNumber: syz [ 726.680286][ T5909] usb 4-1: config 0 descriptor?? [ 727.220683][ T29] audit: type=1400 audit(1776682859.957:1205): avc: denied { write } for pid=15142 comm="syz.1.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 727.241104][T15143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27161 sclass=netlink_route_socket pid=15143 comm=syz.1.2573 [ 727.381310][T15151] 9p: Bad value for 'rfdno' [ 727.398471][ T29] audit: type=1400 audit(1776682860.125:1206): avc: denied { cmd } for pid=15150 comm="syz.4.2575" path="socket:[52292]" dev="sockfs" ino=52292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 727.447784][ T24] Process accounting resumed [ 727.471711][T15155] 9p: Bad value for 'wfdno' [ 727.494111][T15148] Process accounting resumed [ 727.972831][T15160] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 728.065208][ T29] audit: type=1400 audit(1776682860.743:1207): avc: denied { getopt } for pid=15157 comm="syz.1.2576" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 728.120097][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.144962][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.151417][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.158621][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.166660][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.173162][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.182554][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.189381][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.197601][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.204189][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.360181][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.369765][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.376276][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.383311][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.390837][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.398437][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.411475][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.419940][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 728.432880][ T5909] input input62: Timeout waiting for response from device. [ 728.451843][ T5909] usb 4-1: USB disconnect, device number 77 [ 729.778113][ T5909] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 729.842207][ T24] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 729.949049][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 729.969105][ T5909] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 729.997867][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.007301][ T5909] usb 4-1: Product: syz [ 730.014690][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.025123][ T5909] usb 4-1: Manufacturer: syz [ 730.030204][ T5909] usb 4-1: SerialNumber: syz [ 730.037107][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 730.047571][ T24] usb 1-1: config 1 has no interface number 0 [ 730.054280][ T5909] usb 4-1: config 0 descriptor?? [ 730.068501][ T5909] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 730.168654][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.180358][ T5909] pctv452e: pctv452e_power_ctrl: 1 [ 730.180358][ T5909] [ 730.188835][ T24] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 730.198536][ T5909] usb 4-1: selecting invalid altsetting 3 [ 730.204286][ T5909] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 730.204286][ T5909] [ 730.214668][ T24] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.228781][ T5909] dvb-usb: bulk message failed: -22 (5/0) [ 730.238929][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.260903][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.281638][ T24] usb 1-1: Product: syz [ 730.370807][ T24] usb 1-1: Manufacturer: syz [ 730.394611][ T24] usb 1-1: SerialNumber: syz [ 731.397226][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 731.409392][T15183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.448832][ T5909] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 731.468315][T15183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.478589][ T5909] usb 4-1: media controller created [ 731.487822][ T5909] dvb-usb: bulk message failed: -22 (8/0) [ 731.493716][ T5909] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 731.833427][T15183] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15183 comm=syz.3.2583 [ 731.856667][ T5909] dvb-usb: MAC address reading failed. [ 731.933624][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 732.024656][ T5909] DVB: Unable to find symbol stb0899_attach() [ 732.042113][ T5909] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 732.586308][ T24] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 732.595246][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 732.597050][ T5909] rc_core: IR keymap rc-tt-1500 not found [ 732.661644][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 732.667915][ T24] cdc_ncm 1-1:1.1: bind() failure [ 732.675590][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 732.683742][ T5909] Registered IR keymap rc-empty [ 732.684690][ T5909] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 732.696026][ T5909] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input63 [ 732.751788][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 732.770615][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 732.797284][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 732.805218][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 732.835755][ T5909] dvb-usb: schedule remote query interval to 100 msecs. [ 732.875728][ T5909] pctv452e: pctv452e_power_ctrl: 0 [ 732.875728][ T5909] [ 732.926243][ T5909] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 732.965758][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 733.005579][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 733.019720][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 733.068305][ T5909] usb 4-1: USB disconnect, device number 78 [ 733.227463][T15204] lo speed is unknown, defaulting to 1000 [ 733.236799][T15204] vxcan1 speed is unknown, defaulting to 1000 [ 733.792207][ T5909] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 734.188785][ T5937] usb 1-1: USB disconnect, device number 85 [ 734.781416][T15233] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 734.877293][T15232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2597'. [ 735.118055][ T29] audit: type=1400 audit(1776682867.350:1208): avc: denied { ioctl } for pid=15226 comm="syz.3.2596" path="/dev/video8" dev="devtmpfs" ino=953 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 735.169608][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2596'. [ 735.185518][ T5834] Bluetooth: hci5: command tx timeout [ 735.316392][ T8519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.432304][T15228] : entered promiscuous mode [ 735.570733][ T8519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.691171][ T8519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.386411][ T29] audit: type=1400 audit(1776682868.463:1209): avc: denied { read } for pid=15241 comm="syz.3.2599" dev="nsfs" ino=4026532860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 736.449358][ T29] audit: type=1400 audit(1776682868.463:1210): avc: denied { open } for pid=15241 comm="syz.3.2599" path="net:[4026532860]" dev="nsfs" ino=4026532860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 736.484136][ T8519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.506386][ T29] audit: type=1400 audit(1776682868.501:1211): avc: denied { read } for pid=15241 comm="syz.3.2599" name="frontend0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 736.548946][ T29] audit: type=1400 audit(1776682868.510:1212): avc: denied { open } for pid=15241 comm="syz.3.2599" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 736.574427][T15247] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 736.590212][T15204] chnl_net:caif_netlink_parms(): no params data found [ 737.049777][T15258] input: syz0 as /devices/virtual/input/input64 [ 737.225520][T15204] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.266338][T15204] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.281424][T15204] bridge_slave_0: entered allmulticast mode [ 737.312091][T15204] bridge_slave_0: entered promiscuous mode [ 737.326988][T15254] netlink: 'syz.3.2601': attribute type 3 has an invalid length. [ 737.407928][ T5834] Bluetooth: hci5: command tx timeout [ 737.617165][ T987] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 737.698959][T15204] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.706768][T15204] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.717597][T15204] bridge_slave_1: entered allmulticast mode [ 737.729504][T15204] bridge_slave_1: entered promiscuous mode [ 737.785697][ T987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 737.797863][ T987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 737.811087][ T987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 737.826000][ T987] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 737.840453][ T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.842477][T15204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.896636][ T987] usb 1-1: Product: syz [ 737.912684][ T987] usb 1-1: Manufacturer: syz [ 737.937954][ T987] usb 1-1: SerialNumber: syz [ 737.953857][ T987] usb 1-1: config 0 descriptor?? [ 738.016224][T15204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.196781][ T987] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 738.322120][T15204] team0: Port device team_slave_0 added [ 738.381546][ T8519] bridge_slave_1: left allmulticast mode [ 738.396201][ T8519] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.428701][ T8519] bridge_slave_0: left allmulticast mode [ 738.459542][ T8519] bridge_slave_0: left promiscuous mode [ 738.481974][ T8519] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.510725][T15282] ubi: mtd0 is already attached to ubi31 [ 738.547715][T15283] netlink: 'syz.0.2604': attribute type 1 has an invalid length. [ 738.574377][T15283] netlink: 'syz.0.2604': attribute type 2 has an invalid length. [ 738.598356][T15283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2604'. [ 739.403657][ T5824] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 739.412750][T15301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2611'. [ 739.426695][ T5824] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 739.508416][ T29] audit: type=1400 audit(1776682871.430:1213): avc: denied { map } for pid=15288 comm="syz.1.2609" path="socket:[53506]" dev="sockfs" ino=53506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 739.610709][ T29] audit: type=1400 audit(1776682871.430:1214): avc: denied { accept } for pid=15288 comm="syz.1.2609" path="socket:[53506]" dev="sockfs" ino=53506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 739.635919][ T5834] Bluetooth: hci5: command 0x040f tx timeout [ 740.140395][ T8519] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 740.284513][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2614'. [ 740.315651][ T29] audit: type=1400 audit(1776682872.178:1215): avc: denied { allowed } for pid=15316 comm="syz.2.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 740.696046][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2614'. [ 740.760617][ T8519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.781176][ T8519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.799385][ T8519] bond0 (unregistering): Released all slaves [ 740.815332][ T8519] bond1 (unregistering): Released all slaves [ 740.822739][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2614'. [ 740.856138][ T8519] bond2 (unregistering): Released all slaves [ 740.925980][T15204] team0: Port device team_slave_1 added [ 740.973342][ T5909] usb 1-1: USB disconnect, device number 86 [ 741.009095][ T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 741.061439][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 741.086683][T15204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.093954][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.150339][T15204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.177457][T15204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.303307][T15330] netlink: 'syz.0.2617': attribute type 3 has an invalid length. [ 741.378392][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.417309][T15204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.417865][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 741.480110][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.496208][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 741.535063][ T8519] tipc: Disabling bearer [ 741.555965][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 741.566229][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.593054][ T8519] tipc: Left network mode [ 741.689382][ T24] usb 4-1: config 0 descriptor?? [ 741.721592][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 741.763239][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 741.819965][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 742.041810][ T29] audit: type=1400 audit(1776682873.825:1216): avc: denied { write } for pid=15343 comm="syz.0.2620" name="radio2" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 742.373944][T15349] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 742.706627][T15204] hsr_slave_0: entered promiscuous mode [ 742.741401][T15204] hsr_slave_1: entered promiscuous mode [ 742.779613][T15204] debugfs: 'hsr0' already exists in 'hsr' [ 742.802294][T15204] Cannot create hsr debugfs directory [ 743.284789][T15371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.362797][T15371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.865925][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 746.670020][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'. [ 746.745701][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'. [ 746.774604][ T8519] hsr_slave_0: left promiscuous mode [ 746.786787][ T8519] hsr_slave_1: left promiscuous mode [ 746.798874][ T8519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.818090][ T8519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.966086][ T8519] veth0_macvtap: left promiscuous mode [ 746.993073][ T8519] veth1_vlan: left promiscuous mode [ 747.008303][ T8519] veth0_vlan: left promiscuous mode [ 747.146308][ T24] usb 4-1: USB disconnect, device number 79 [ 747.437634][T15423] QAT: Invalid ioctl 35092 [ 747.477656][ T5909] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 747.657635][ T5909] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 747.665576][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 747.677327][ T5909] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 747.690775][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 747.702366][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 747.715403][ T5909] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 747.722996][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 747.746831][ T1112] smc: removing ib device syz2 [ 747.753446][ T5909] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 747.787583][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 747.799118][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 747.814780][ T5909] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 747.822480][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 747.833458][ T5909] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 747.845405][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 747.868665][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 747.889254][ T5909] usb 4-1: string descriptor 0 read error: -22 [ 747.909237][ T5909] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 747.927416][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.949617][T15404] erspan1: entered promiscuous mode [ 747.963252][ T5909] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 747.984823][T15404] erspan1: entered allmulticast mode [ 748.010662][T15428] io-wq is not configured for unbound workers [ 748.033087][ T1170] smbdirect: ib_dev[syz1] removed [ 748.047150][ T1112] smbdirect: ib_dev[syz2] removed [ 748.071857][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 748.079733][ T5907] lo speed is unknown, defaulting to 1000 [ 748.094380][ T24] syz2: Port: 1 Link DOWN [ 748.100213][ T5907] syz1: Port: 1 Link DOWN [ 748.235980][T15434] fuse: fd is not a fuse device [ 748.270714][T15415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2631'. [ 748.380268][T15439] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15439 comm=syz.3.2631 [ 748.495390][T15442] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2636'. [ 748.620269][T15415] input: syz1 as /devices/virtual/input/input65 [ 748.705216][T15447] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2637'. [ 749.015053][ T29] audit: type=1400 audit(1776682880.357:1217): avc: denied { sqpoll } for pid=15446 comm="syz.1.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 749.392190][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.399475][ C1] bridge0: topology change detected, propagating [ 749.406706][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.414025][ C1] bridge0: topology change detected, propagating [ 749.604159][T15461] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 749.889637][ T5937] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 750.071497][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 750.084035][ T5937] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 750.119982][ T5937] usb 1-1: config 0 interface 0 has no altsetting 0 [ 750.127757][ T5937] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 750.136950][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.233544][ T5937] usb 1-1: config 0 descriptor?? [ 750.328637][T15483] netlink: 'syz.1.2644': attribute type 4 has an invalid length. [ 750.372453][T15483] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2644'. [ 750.403659][T15204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 750.582267][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 750.601779][T15204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 750.725682][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 750.733063][ T5937] hid_parser_main: 51 callbacks suppressed [ 750.733081][ T5937] logitech 0003:046D:C211.000F: unknown main item tag 0x0 [ 750.765912][T15204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 750.786831][ T5937] logitech 0003:046D:C211.000F: unknown main item tag 0x0 [ 750.813518][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 750.825453][ T5937] logitech 0003:046D:C211.000F: unknown main item tag 0x0 [ 750.850418][ T5937] logitech 0003:046D:C211.000F: unknown main item tag 0x0 [ 750.863848][T15204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 750.874511][ T29] audit: type=1400 audit(1776682882.098:1218): avc: denied { map } for pid=15499 comm="syz.2.2645" path="socket:[53979]" dev="sockfs" ino=53979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 750.924846][ T5937] logitech 0003:046D:C211.000F: unknown main item tag 0x0 [ 750.924846][ T29] audit: type=1400 audit(1776682882.098:1219): avc: denied { read } for pid=15499 comm="syz.2.2645" path="socket:[53979]" dev="sockfs" ino=53979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 750.989828][ T5937] logitech 0003:046D:C211.000F: unknown main item tag 0x0 [ 750.997154][ T5937] logitech 0003:046D:C211.000F: unknown main item tag 0x0 [ 751.007169][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 751.026364][ T5937] logitech 0003:046D:C211.000F: unknown main item tag 0x0 [ 751.038239][T15500] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2645'. [ 751.049624][ T5907] usb 4-1: USB disconnect, device number 80 [ 751.052063][ T5937] logitech 0003:046D:C211.000F: unknown main item tag 0x0 [ 751.070899][ T5937] logitech 0003:046D:C211.000F: unknown main item tag 0x0 [ 751.123607][ T5937] logitech 0003:046D:C211.000F: hidraw0: USB HID v0.04 Device [HID 046d:c211] on usb-dummy_hcd.0-1/input0 [ 751.169386][ T5937] logitech 0003:046D:C211.000F: no inputs found [ 751.340854][ T5937] usb 1-1: USB disconnect, device number 87 [ 751.457265][T15204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.390499][T15520] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2649'. [ 752.509987][T15513] fido_id[15513]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 752.608737][T15204] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.715152][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.722379][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.822367][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.829582][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.404949][ T5937] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 753.659054][ T5937] usb 1-1: device descriptor read/64, error -71 [ 754.037670][T15541] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 754.126696][T15551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.173697][T15551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.174610][ T5937] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 754.260956][T15204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.366717][ T5937] usb 1-1: device descriptor read/64, error -71 [ 754.497158][ T5937] usb usb1-port1: attempt power cycle [ 754.966163][ T5937] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 755.090466][ T5937] usb 1-1: device descriptor read/8, error -71 [ 755.486140][ T5937] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 755.526156][ T5937] usb 1-1: device descriptor read/8, error -71 [ 755.540941][T15204] veth0_vlan: entered promiscuous mode [ 755.590902][T15204] veth1_vlan: entered promiscuous mode [ 755.601849][T15584] fuse: fd is not a fuse device [ 755.655336][ T5937] usb usb1-port1: unable to enumerate USB device [ 755.661093][T15204] veth0_macvtap: entered promiscuous mode [ 755.686043][T15204] veth1_macvtap: entered promiscuous mode [ 755.774412][T15204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.840763][T15204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.894241][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.917526][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.944202][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.964677][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.460652][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.519679][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.052308][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.088829][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.634055][ T29] audit: type=1400 audit(1776682888.414:1220): avc: denied { mounton } for pid=15204 comm="syz-executor" path="/root/syzkaller.tDJlxj/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 757.693401][T15610] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 757.768085][ T29] audit: type=1400 audit(1776682888.461:1221): avc: denied { setopt } for pid=15614 comm="syz.3.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 758.004660][T15628] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 758.023505][T15628] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 758.377990][ T29] audit: type=1400 audit(1776682888.461:1222): avc: denied { mounton } for pid=15204 comm="syz-executor" path="/root/syzkaller.tDJlxj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 758.417143][ T29] audit: type=1400 audit(1776682888.471:1223): avc: denied { mounton } for pid=15204 comm="syz-executor" path="/root/syzkaller.tDJlxj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=55424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 758.494096][ T29] audit: type=1400 audit(1776682888.499:1224): avc: denied { mounton } for pid=15204 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 758.578280][T15633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2590'. [ 758.742233][ T29] audit: type=1400 audit(1776682888.508:1225): avc: denied { mounton } for pid=15204 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 758.851052][T15640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2666'. [ 759.248484][T15641] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15641 comm=syz.4.2590 [ 759.340241][T15646] 8021q: VLANs not supported on ip6_vti0 [ 759.876923][T15651] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2672'. [ 759.955761][T15656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.956491][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 759.985425][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 760.019690][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 760.264911][T15656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.312295][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 760.329249][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 760.501593][T13168] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 760.650020][T13168] usb 5-1: device descriptor read/64, error -71 [ 760.789258][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2674'. [ 761.022410][T13168] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 761.389084][T13168] usb 5-1: device descriptor read/64, error -71 [ 761.528531][T13168] usb usb5-port1: attempt power cycle [ 761.567224][T15652] chnl_net:caif_netlink_parms(): no params data found [ 761.642363][ T29] audit: type=1400 audit(1776682892.167:1226): avc: denied { write } for pid=15672 comm="syz.0.2675" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 762.062556][T13168] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 762.086337][T13168] usb 5-1: device descriptor read/8, error -71 [ 762.305973][T15652] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.317313][T15652] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.324624][T15652] bridge_slave_0: entered allmulticast mode [ 762.332999][T15652] bridge_slave_0: entered promiscuous mode [ 762.342250][T15652] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.349868][T13168] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 762.357955][T15652] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.365742][T15652] bridge_slave_1: entered allmulticast mode [ 762.373027][T13168] usb 5-1: device descriptor read/8, error -71 [ 762.380947][T15652] bridge_slave_1: entered promiscuous mode [ 762.456158][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 762.480497][T15683] netlink: 'syz.0.2677': attribute type 1 has an invalid length. [ 762.488727][T13168] usb usb5-port1: unable to enumerate USB device [ 762.515713][T15652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.541790][ T5834] Bluetooth: hci3: command tx timeout [ 762.570516][T15683] bond4: entered promiscuous mode [ 762.577074][T15683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 762.591198][T15652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.630218][T15683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 762.642681][T15683] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 762.653924][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 762.663946][ T24] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 762.673643][T15683] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 762.683131][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=235 [ 762.693741][ T24] usb 4-1: SerialNumber: syz [ 762.703503][T15683] bond4: (slave vti0): making interface the new active one [ 762.712727][ T24] usb 4-1: config 0 descriptor?? [ 762.720122][T15683] vti0: entered promiscuous mode [ 762.727443][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 762.743790][ T24] usb 4-1: Detected FT232A [ 762.748968][T15683] bond4: (slave vti0): Enslaving as an active interface with an up link [ 762.761103][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 762.925219][T15652] team0: Port device team_slave_0 added [ 762.938834][T15652] team0: Port device team_slave_1 added [ 762.994507][T15652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.019850][T15652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.074576][T15652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.130984][T15652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.181215][T15652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.391796][T15652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.940299][T15698] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.225143][T15652] hsr_slave_0: entered promiscuous mode [ 764.237635][T15652] hsr_slave_1: entered promiscuous mode [ 764.286019][T15698] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.436627][T15698] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.555679][T15698] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.764421][ T5834] Bluetooth: hci3: command tx timeout [ 764.905423][ T13] bond4 (unregistering): (slave sit1): Releasing backup interface [ 764.913449][ T13] sit1 (unregistering): left promiscuous mode [ 765.429486][ T24] usb 4-1: USB disconnect, device number 81 [ 765.447069][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 765.639294][ T24] ftdi_sio 4-1:0.0: device disconnected [ 765.734687][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.767753][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.787288][ T13] bond0 (unregistering): Released all slaves [ 765.820755][ T13] bond1 (unregistering): Released all slaves [ 766.720976][ T13] bond2 (unregistering): Released all slaves [ 766.777762][ T13] bond3 (unregistering): Released all slaves [ 766.815176][T15719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 766.877679][ T13] bond4 (unregistering): Released all slaves [ 766.986834][ T5834] Bluetooth: hci3: command tx timeout [ 767.082050][ T8516] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.109088][ T8516] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.698627][ T8516] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.717555][ T8516] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.750571][T15744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.815496][T15744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.885074][ T13] tipc: Left network mode [ 768.073319][ T29] audit: type=1400 audit(1776682898.175:1227): avc: denied { read } for pid=15745 comm="syz.3.2691" path="socket:[54834]" dev="sockfs" ino=54834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 768.787735][T15761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.812250][T15761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.837017][ T5943] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 769.041579][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x58, changing to 0x8 [ 769.096873][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 26, changing to 7 [ 769.133804][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 769.179512][ T5943] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 769.192667][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.209953][ T5834] Bluetooth: hci3: command tx timeout [ 769.246217][ T5943] usb 5-1: config 0 descriptor?? [ 769.291889][ T5943] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 769.432308][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 772.491779][ T13] dummy0: left promiscuous mode [ 772.559334][ T24] libceph: connect (1)[c::]:6789 error -101 [ 772.579512][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 772.597697][ T13] hsr_slave_0: left promiscuous mode [ 772.625565][ T13] hsr_slave_1: left promiscuous mode [ 772.888608][ T24] libceph: connect (1)[c::]:6789 error -101 [ 772.913132][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 773.585946][T15779] ceph: No mds server is up or the cluster is laggy [ 773.595182][ T24] libceph: connect (1)[c::]:6789 error -101 [ 773.634066][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 774.018036][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 774.105001][T15817] netlink: 'syz.1.2697': attribute type 3 has an invalid length. [ 774.364245][ T5907] usb 5-1: USB disconnect, device number 29 [ 774.860512][ T13] team0 (unregistering): Port device team_slave_1 removed [ 774.890050][ T13] team0 (unregistering): Port device team_slave_0 removed [ 775.014461][T15827] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 775.014461][T15827] The task syz.4.2702 (15827) triggered the difference, watch for misbehavior. [ 775.277590][T15833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.294882][T15833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.432311][T15836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2704'. [ 777.372317][T15851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2707'. [ 777.577928][T15851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2707'. [ 777.589606][T13168] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 777.817344][T13168] usb 5-1: unable to get BOS descriptor or descriptor too short [ 777.866681][T13168] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 777.951688][T13168] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 778.004838][T13168] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 778.038272][T13168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.087601][T13168] usb 5-1: Product: syz [ 778.121215][T13168] usb 5-1: Manufacturer: syz [ 778.138307][T15652] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 778.183800][T13168] usb 5-1: SerialNumber: syz [ 778.212094][T15652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 778.242076][T15652] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 778.341618][T15860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.352240][T15652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 778.374968][T15860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.384229][T15652] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 778.430928][T15652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 778.473251][T15652] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 778.520215][T15652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.597062][T13168] usb 5-1: Can't get UAC3 power state for id 10 [ 778.648674][T13168] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 778.702760][T13168] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 778.731551][T13168] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 778.764476][T13168] usb 5-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 778.772793][T15652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.837432][T15868] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2711'. [ 778.856713][T15652] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.885430][T15102] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.892631][T15102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.018822][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.025958][ T8517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.037792][T13168] usb 5-1: USB disconnect, device number 30 [ 779.260741][T15871] netlink: 'syz.1.2712': attribute type 1 has an invalid length. [ 779.520749][T15871] bond5: entered promiscuous mode [ 779.553945][T15871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 779.723813][T15881] macsec1: entered promiscuous mode [ 779.750222][T15881] macsec1: entered allmulticast mode [ 779.777240][T15881] veth1_macvtap: entered allmulticast mode [ 779.914396][T15881] veth1_macvtap: left allmulticast mode [ 780.022825][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2716'. [ 781.260159][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 782.855028][T15920] QAT: Invalid ioctl 35092 [ 782.939328][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2724'. [ 782.939972][T15652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.167683][T15652] veth0_vlan: entered promiscuous mode [ 784.122260][T15652] veth1_vlan: entered promiscuous mode [ 784.352649][T15652] veth0_macvtap: entered promiscuous mode [ 784.419582][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2727'. [ 784.808762][T15652] veth1_macvtap: entered promiscuous mode [ 784.851001][T15652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.871216][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2727'. [ 784.906310][T15652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.952340][ T8517] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.013325][ T8517] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.059518][ T8517] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.264190][ T8517] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.307225][T15102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.335423][T15102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.470877][ T8517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.480269][ T8517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.058152][T15953] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 787.503203][T15967] syz_tun: entered promiscuous mode [ 787.515102][T15967] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 787.697095][T15972] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 787.719314][T15972] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 788.159289][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 788.523171][T13168] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 788.744953][T13168] usb 1-1: Using ep0 maxpacket: 8 [ 788.759659][T13168] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 788.781009][T13168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.822400][T13168] usb 1-1: Product: syz [ 788.826665][T13168] usb 1-1: Manufacturer: syz [ 788.831740][T13168] usb 1-1: SerialNumber: syz [ 788.867002][T13168] usb 1-1: config 0 descriptor?? [ 788.891699][T13168] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 788.917625][T13168] pctv452e: pctv452e_power_ctrl: 1 [ 788.917625][T13168] [ 788.931884][T13168] usb 1-1: selecting invalid altsetting 3 [ 788.941084][T13168] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 788.941084][T13168] [ 788.952556][T13168] dvb-usb: bulk message failed: -22 (5/0) [ 788.967526][T15992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2738'. [ 788.981291][T13168] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 789.004488][T13168] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 789.017287][T13168] usb 1-1: media controller created [ 789.023916][T13168] dvb-usb: bulk message failed: -22 (8/0) [ 789.030363][T13168] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 789.039633][T13168] dvb-usb: MAC address reading failed. [ 789.081410][T13168] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 789.118536][T15979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.142742][T15979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.232078][T15995] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15995 comm=syz.0.2735 [ 789.307208][T13168] DVB: Unable to find symbol stb0899_attach() [ 789.315332][T13168] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 789.598505][T13168] rc_core: IR keymap rc-tt-1500 not found [ 789.712663][T13168] Registered IR keymap rc-empty [ 789.747128][T13168] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 789.773435][T13168] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input66 [ 789.787453][T13168] dvb-usb: schedule remote query interval to 100 msecs. [ 789.808704][T13168] pctv452e: pctv452e_power_ctrl: 0 [ 789.808704][T13168] [ 789.940484][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 789.941270][ T5943] dvb-usb: bulk message failed: -22 (4/0) [ 790.190696][T13168] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 790.252458][ T5943] dvb-usb: error -22 while querying for an remote control event. [ 790.291702][T13168] usb 1-1: USB disconnect, device number 92 [ 790.330396][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 790.366045][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.403125][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.431421][T13168] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 790.567296][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 791.614072][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.978481][ T24] usb 5-1: config 0 descriptor?? [ 792.645559][T13168] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 792.749776][ T24] konepure 0003:1E7D:2DB4.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 792.813367][ T24] usb 5-1: USB disconnect, device number 31 [ 792.912937][T13168] usb 1-1: Using ep0 maxpacket: 16 [ 792.924177][T13168] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.997920][T13168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 793.034480][T13168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 793.063349][T13168] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 793.101089][T13168] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.136114][T13168] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 793.165098][T13168] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 793.186554][T13168] usb 1-1: Manufacturer: syz [ 793.187013][T16023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2747'. [ 793.204473][T16019] fido_id[16019]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 793.253717][T13168] usb 1-1: config 0 descriptor?? [ 793.658750][T16032] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 793.671653][T13168] rc_core: IR keymap rc-hauppauge not found [ 793.737770][T13168] Registered IR keymap rc-empty [ 793.784400][T13168] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.831890][T13168] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.997103][T13168] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 794.143151][T13168] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input67 [ 794.172455][ T5943] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 794.559681][T13168] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 794.589962][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 794.595985][ C0] rc rc0: IR event FIFO is full! [ 794.600954][ C0] rc rc0: IR event FIFO is full! [ 794.605902][ C0] rc rc0: IR event FIFO is full! [ 794.610850][ C0] rc rc0: IR event FIFO is full! [ 794.615796][ C0] rc rc0: IR event FIFO is full! [ 794.620746][ C0] rc rc0: IR event FIFO is full! [ 794.626973][ C0] rc rc0: IR event FIFO is full! [ 794.631956][ C0] rc rc0: IR event FIFO is full! [ 794.636920][ C0] rc rc0: IR event FIFO is full! [ 794.641872][ C0] rc rc0: IR event FIFO is full! [ 794.646817][ C0] rc rc0: IR event FIFO is full! [ 794.652921][ C0] rc rc0: IR event FIFO is full! [ 794.657923][ C0] rc rc0: IR event FIFO is full! [ 794.662865][ C0] rc rc0: IR event FIFO is full! [ 794.667846][ C0] rc rc0: IR event FIFO is full! [ 794.672786][ C0] rc rc0: IR event FIFO is full! [ 794.677726][ C0] rc rc0: IR event FIFO is full! [ 794.682671][ C0] rc rc0: IR event FIFO is full! [ 794.689678][ C0] rc rc0: IR event FIFO is full! [ 794.694681][ C0] rc rc0: IR event FIFO is full! [ 794.699638][ C0] rc rc0: IR event FIFO is full! [ 794.704590][ C0] rc rc0: IR event FIFO is full! [ 794.709538][ C0] rc rc0: IR event FIFO is full! [ 794.714484][ C0] rc rc0: IR event FIFO is full! [ 794.719430][ C0] rc rc0: IR event FIFO is full! [ 794.725078][ C0] rc rc0: IR event FIFO is full! [ 794.730051][ C0] rc rc0: IR event FIFO is full! [ 794.735487][ C0] rc rc0: IR event FIFO is full! [ 794.740709][ C0] rc rc0: IR event FIFO is full! [ 794.745683][ C0] rc rc0: IR event FIFO is full! [ 794.750632][ C0] rc rc0: IR event FIFO is full! [ 794.755572][ C0] rc rc0: IR event FIFO is full! [ 794.760518][ C0] rc rc0: IR event FIFO is full! [ 794.765462][ C0] rc rc0: IR event FIFO is full! [ 794.770411][ C0] rc rc0: IR event FIFO is full! [ 794.777425][ C0] rc rc0: IR event FIFO is full! [ 794.782407][ C0] rc rc0: IR event FIFO is full! [ 794.787359][ C0] rc rc0: IR event FIFO is full! [ 794.792309][ C0] rc rc0: IR event FIFO is full! [ 794.797265][ C0] rc rc0: IR event FIFO is full! [ 794.802212][ C0] rc rc0: IR event FIFO is full! [ 794.807198][ C0] rc rc0: IR event FIFO is full! [ 794.812148][ C0] rc rc0: IR event FIFO is full! [ 794.817100][ C0] rc rc0: IR event FIFO is full! [ 794.822051][ C0] rc rc0: IR event FIFO is full! [ 794.904421][T16040] rc rc0: two consecutive events of type space [ 794.908889][T13168] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 795.114987][ T5943] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.171266][T13168] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 795.218998][ T5943] usb 5-1: config 0 interface 0 has no altsetting 0 [ 795.260573][ T5943] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 795.326203][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.334907][T13168] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 795.525981][T13168] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 795.759988][T13168] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 795.844868][T13168] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 795.865163][ T5943] usb 5-1: config 0 descriptor?? [ 795.877344][T13168] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 795.903968][T13168] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 795.951629][T13168] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 795.979712][T13168] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 795.989107][T13168] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 796.004549][T13168] usb 1-1: USB disconnect, device number 93 [ 796.354845][ T5943] hid_parser_main: 27 callbacks suppressed [ 796.354861][ T5943] logitech 0003:046D:C211.0011: unknown main item tag 0x0 [ 796.371768][ T5943] logitech 0003:046D:C211.0011: unknown main item tag 0x0 [ 796.381795][ T5943] logitech 0003:046D:C211.0011: unknown main item tag 0x0 [ 796.390467][ T5943] logitech 0003:046D:C211.0011: unknown main item tag 0x0 [ 796.401906][ T5943] logitech 0003:046D:C211.0011: unknown main item tag 0x0 [ 796.409411][ T5943] logitech 0003:046D:C211.0011: unknown main item tag 0x0 [ 796.424101][ T5943] logitech 0003:046D:C211.0011: unknown main item tag 0x0 [ 796.435441][ T5943] logitech 0003:046D:C211.0011: unknown main item tag 0x0 [ 796.447697][ T5943] logitech 0003:046D:C211.0011: unknown main item tag 0x0 [ 796.458061][ T5943] logitech 0003:046D:C211.0011: unknown main item tag 0x0 [ 796.510582][ T5943] logitech 0003:046D:C211.0011: hidraw0: USB HID v0.04 Device [HID 046d:c211] on usb-dummy_hcd.4-1/input0 [ 796.546519][ T5943] logitech 0003:046D:C211.0011: no inputs found [ 796.732635][T16046] ================================================================== [ 796.740733][T16046] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xbb/0x100 [ 796.748986][T16046] Read of size 43 at addr ffff88801ebf6480 by task fido_id/16046 [ 796.756693][T16046] [ 796.759028][T16046] CPU: 1 UID: 0 PID: 16046 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 796.759048][T16046] Tainted: [L]=SOFTLOCKUP [ 796.759053][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 796.759061][T16046] Call Trace: [ 796.759067][T16046] [ 796.759073][T16046] dump_stack_lvl+0x100/0x190 [ 796.759091][T16046] print_report+0x13d/0x4b0 [ 796.759108][T16046] ? __virt_addr_valid+0x239/0x430 [ 796.759122][T16046] ? report_descriptor_read+0xbb/0x100 [ 796.759137][T16046] kasan_report+0xdf/0x1d0 [ 796.759149][T16046] ? report_descriptor_read+0xbb/0x100 [ 796.759164][T16046] kasan_check_range+0x10f/0x1e0 [ 796.759178][T16046] __asan_memcpy+0x23/0x60 [ 796.759193][T16046] report_descriptor_read+0xbb/0x100 [ 796.759207][T16046] ? __pfx_report_descriptor_read+0x10/0x10 [ 796.759220][T16046] sysfs_kf_bin_read+0x156/0x210 [ 796.759237][T16046] kernfs_fop_read_iter+0x32b/0x610 [ 796.759261][T16046] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 796.759273][T16046] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 796.759291][T16046] vfs_read+0x825/0xb30 [ 796.759303][T16046] ? __pfx_vfs_read+0x10/0x10 [ 796.759314][T16046] ? __pfx_do_sys_openat2+0x10/0x10 [ 796.759333][T16046] ksys_read+0x12a/0x250 [ 796.759344][T16046] ? __pfx_ksys_read+0x10/0x10 [ 796.759356][T16046] ? rcu_is_watching+0x12/0xc0 [ 796.759375][T16046] do_syscall_64+0x10b/0xf80 [ 796.759387][T16046] ? clear_bhb_loop+0x40/0x90 [ 796.759400][T16046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.759413][T16046] RIP: 0033:0x7f15124a7407 [ 796.759425][T16046] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 796.759441][T16046] RSP: 002b:00007ffd6e0117e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 796.759461][T16046] RAX: ffffffffffffffda RBX: 00007f1512b99880 RCX: 00007f15124a7407 [ 796.759472][T16046] RDX: 0000000000001000 RSI: 00007ffd6e011830 RDI: 0000000000000004 [ 796.759480][T16046] RBP: 000055885f3042c0 R08: 0000000000000000 R09: 0000000000000000 [ 796.759487][T16046] R10: 0000000000000000 R11: 0000000000000202 R12: 000055885f3034c0 [ 796.759496][T16046] R13: 00007ffd6e011830 R14: 0000000000000004 R15: 0000558847c104d8 [ 796.759508][T16046] [ 796.759512][T16046] [ 796.982223][T16046] Allocated by task 5943: [ 796.986545][T16046] kasan_save_stack+0x30/0x50 [ 796.991222][T16046] kasan_save_track+0x14/0x30 [ 796.995898][T16046] __kasan_kmalloc+0xaa/0xb0 [ 797.000490][T16046] __kmalloc_node_track_caller_noprof+0x304/0x850 [ 797.006910][T16046] kmemdup_noprof+0x29/0x60 [ 797.011412][T16046] hid_open_report+0x214/0x810 [ 797.016166][T16046] lg_probe+0x246/0x7e0 [ 797.020323][T16046] hid_device_probe+0x50e/0x800 [ 797.025171][T16046] really_probe+0x241/0xa60 [ 797.029666][T16046] __driver_probe_device+0x22e/0x480 [ 797.034971][T16046] driver_probe_device+0x4c/0x1b0 [ 797.039990][T16046] __device_attach_driver+0x1df/0x340 [ 797.045374][T16046] bus_for_each_drv+0x159/0x1e0 [ 797.050218][T16046] __device_attach+0x1e4/0x4d0 [ 797.054978][T16046] device_initial_probe+0xaf/0xd0 [ 797.059997][T16046] bus_probe_device+0x64/0x160 [ 797.064752][T16046] device_add+0x1210/0x1950 [ 797.069253][T16046] hid_add_device+0x2bf/0x440 [ 797.073921][T16046] usbhid_probe+0xc3c/0x1230 [ 797.078504][T16046] usb_probe_interface+0x303/0x8f0 [ 797.083618][T16046] really_probe+0x241/0xa60 [ 797.088117][T16046] __driver_probe_device+0x22e/0x480 [ 797.093393][T16046] driver_probe_device+0x4c/0x1b0 [ 797.098432][T16046] __device_attach_driver+0x1df/0x340 [ 797.103803][T16046] bus_for_each_drv+0x159/0x1e0 [ 797.108641][T16046] __device_attach+0x1e4/0x4d0 [ 797.113425][T16046] device_initial_probe+0xaf/0xd0 [ 797.118447][T16046] bus_probe_device+0x64/0x160 [ 797.123204][T16046] device_add+0x1210/0x1950 [ 797.127700][T16046] usb_set_configuration+0xd97/0x1c60 [ 797.133066][T16046] usb_generic_driver_probe+0xa1/0xe0 [ 797.138429][T16046] usb_probe_device+0xef/0x400 [ 797.143188][T16046] really_probe+0x241/0xa60 [ 797.147680][T16046] __driver_probe_device+0x22e/0x480 [ 797.152954][T16046] driver_probe_device+0x4c/0x1b0 [ 797.157966][T16046] __device_attach_driver+0x1df/0x340 [ 797.163330][T16046] bus_for_each_drv+0x159/0x1e0 [ 797.168166][T16046] __device_attach+0x1e4/0x4d0 [ 797.172920][T16046] device_initial_probe+0xaf/0xd0 [ 797.177937][T16046] bus_probe_device+0x64/0x160 [ 797.182691][T16046] device_add+0x1210/0x1950 [ 797.187193][T16046] usb_new_device.cold+0x685/0x115c [ 797.192414][T16046] hub_event+0x314d/0x4af0 [ 797.196827][T16046] process_one_work+0xa0e/0x1980 [ 797.201757][T16046] worker_thread+0x5ef/0xe50 [ 797.206337][T16046] kthread+0x370/0x450 [ 797.210399][T16046] ret_from_fork+0x72b/0xd50 [ 797.214986][T16046] ret_from_fork_asm+0x1a/0x30 [ 797.219743][T16046] [ 797.222047][T16046] The buggy address belongs to the object at ffff88801ebf6480 [ 797.222047][T16046] which belongs to the cache kmalloc-64 of size 64 [ 797.235929][T16046] The buggy address is located 0 bytes inside of [ 797.235929][T16046] freed 64-byte region [ffff88801ebf6480, ffff88801ebf64c0) [ 797.249475][T16046] [ 797.252045][T16046] The buggy address belongs to the physical page: [ 797.258447][T16046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801ebf6300 pfn:0x1ebf6 [ 797.268520][T16046] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 797.276591][T16046] page_type: f5(slab) [ 797.280574][T16046] raw: 00fff00000000200 ffff88813fe878c0 ffffea00007ad4d0 ffffea0000e26d50 [ 797.289155][T16046] raw: ffff88801ebf6300 000000080020001d 00000000f5000000 0000000000000000 [ 797.297722][T16046] page dumped because: kasan: bad access detected [ 797.304124][T16046] page_owner tracks the page as allocated [ 797.309822][T16046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3626776348, free_ts 0 [ 797.328830][T16046] post_alloc_hook+0x153/0x170 [ 797.333597][T16046] get_page_from_freelist+0x11a6/0x33b0 [ 797.339141][T16046] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 797.345030][T16046] new_slab+0xa6/0x6c0 [ 797.349086][T16046] refill_objects+0x277/0x420 [ 797.353840][T16046] __pcs_replace_empty_main+0x375/0x650 [ 797.359379][T16046] __kmalloc_noprof+0x688/0x850 [ 797.364232][T16046] apply_wqattrs_prepare+0xfe/0xbb0 [ 797.369427][T16046] apply_workqueue_attrs_locked+0x64/0xe0 [ 797.375143][T16046] __alloc_workqueue+0x110c/0x19f0 [ 797.380263][T16046] alloc_workqueue_noprof+0xd2/0x200 [ 797.385534][T16046] nfsd_export_wq_init+0x1d/0x40 [ 797.390480][T16046] init_nfsd+0x71/0x210 [ 797.394628][T16046] do_one_initcall+0x121/0x750 [ 797.399400][T16046] kernel_init_freeable+0x6ea/0x7b0 [ 797.404597][T16046] kernel_init+0x1f/0x1e0 [ 797.408918][T16046] page_owner free stack trace missing [ 797.414270][T16046] [ 797.416676][T16046] Memory state around the buggy address: [ 797.422327][T16046] ffff88801ebf6380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 797.430384][T16046] ffff88801ebf6400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 797.438431][T16046] >ffff88801ebf6480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 797.446491][T16046] ^ [ 797.450552][T16046] ffff88801ebf6500: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 797.458597][T16046] ffff88801ebf6580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 797.466664][T16046] ================================================================== [ 797.493869][ T5943] usb 5-1: USB disconnect, device number 32 [ 797.605689][ T29] audit: type=1400 audit(1776682925.828:1228): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 797.628460][ T29] audit: type=1400 audit(1776682925.828:1229): avc: denied { search } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.672597][ T29] audit: type=1400 audit(1776682925.828:1230): avc: denied { search } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.695766][ T29] audit: type=1400 audit(1776682925.828:1231): avc: denied { add_name } for pid=5176 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.734130][ T29] audit: type=1400 audit(1776682925.828:1232): avc: denied { create } for pid=5176 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 797.786371][T16046] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 797.793628][T16046] CPU: 1 UID: 0 PID: 16046 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 797.804322][T16046] Tainted: [L]=SOFTLOCKUP [ 797.808693][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 797.818751][T16046] Call Trace: [ 797.822037][T16046] [ 797.824961][T16046] dump_stack_lvl+0x100/0x190 [ 797.829644][T16046] vpanic+0x552/0x970 [ 797.833626][T16046] ? __pfx_vpanic+0x10/0x10 [ 797.838133][T16046] ? irqentry_exit+0x246/0x790 [ 797.842906][T16046] ? report_descriptor_read+0xbb/0x100 [ 797.848373][T16046] panic+0xd1/0xe0 [ 797.852107][T16046] ? __pfx_panic+0x10/0x10 [ 797.856536][T16046] ? check_panic_on_warn+0x1f/0x90 [ 797.861668][T16046] check_panic_on_warn.cold+0x19/0x34 [ 797.867050][T16046] end_report.part.0+0x3a/0x90 [ 797.871831][T16046] kasan_report.cold+0xe/0x18 [ 797.876529][T16046] ? report_descriptor_read+0xbb/0x100 [ 797.882001][T16046] kasan_check_range+0x10f/0x1e0 [ 797.886947][T16046] __asan_memcpy+0x23/0x60 [ 797.891374][T16046] report_descriptor_read+0xbb/0x100 [ 797.896668][T16046] ? __pfx_report_descriptor_read+0x10/0x10 [ 797.902571][T16046] sysfs_kf_bin_read+0x156/0x210 [ 797.907513][T16046] kernfs_fop_read_iter+0x32b/0x610 [ 797.912713][T16046] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 797.918164][T16046] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 797.923886][T16046] vfs_read+0x825/0xb30 [ 797.928031][T16046] ? __pfx_vfs_read+0x10/0x10 [ 797.932694][T16046] ? __pfx_do_sys_openat2+0x10/0x10 [ 797.937893][T16046] ksys_read+0x12a/0x250 [ 797.942140][T16046] ? __pfx_ksys_read+0x10/0x10 [ 797.946892][T16046] ? rcu_is_watching+0x12/0xc0 [ 797.951654][T16046] do_syscall_64+0x10b/0xf80 [ 797.956232][T16046] ? clear_bhb_loop+0x40/0x90 [ 797.960909][T16046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.966795][T16046] RIP: 0033:0x7f15124a7407 [ 797.971594][T16046] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 797.991228][T16046] RSP: 002b:00007ffd6e0117e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 797.999646][T16046] RAX: ffffffffffffffda RBX: 00007f1512b99880 RCX: 00007f15124a7407 [ 798.007632][T16046] RDX: 0000000000001000 RSI: 00007ffd6e011830 RDI: 0000000000000004 [ 798.015615][T16046] RBP: 000055885f3042c0 R08: 0000000000000000 R09: 0000000000000000 [ 798.023596][T16046] R10: 0000000000000000 R11: 0000000000000202 R12: 000055885f3034c0 [ 798.031563][T16046] R13: 00007ffd6e011830 R14: 0000000000000004 R15: 0000558847c104d8 [ 798.039531][T16046] [ 798.043065][T16046] Kernel Offset: disabled [ 798.047390][T16046] Rebooting in 86400 seconds..