last executing test programs: 9m28.007703749s ago: executing program 3 (id=1173): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0xfffff000, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) close(0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[]) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000000)=0x8, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000025c0), 0x1, 0x0) 9m27.591408025s ago: executing program 3 (id=1174): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000200)=""/121, 0x79}], 0x2}, 0x0) 9m27.524107368s ago: executing program 3 (id=1175): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) membarrier(0x4, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@mmap={0x2, 0x0, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x8, 0x3, 0x3, 0x6, 0x6c, "f2c1c5c0"}, 0x8af7, 0x1, {}, 0xf9b, 0x0, r0}) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) syz_open_dev$sg(0x0, 0x7fff, 0x48a001) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000440)={0x0}, &(0x7f0000000540)={0x0}) 9m26.28121199s ago: executing program 3 (id=1182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000030000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 9m22.291102149s ago: executing program 3 (id=1187): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r1, 0x409, 0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000000, 0x13, r1, 0xeff74000) write(r0, &(0x7f0000000240)="54483c916c8e", 0x6) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101301, 0x0) ptrace(0xb9c2789d3c76d9ff, r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f52163448412ba800000000", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) ptrace$getregs(0xc, r2, 0xd7d, &(0x7f0000000580)=""/190) ptrace$setopts(0x4206, r2, 0x8, 0xa) 9m22.07022311s ago: executing program 3 (id=1190): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2", 0x70}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9m4.323503848s ago: executing program 32 (id=1190): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2", 0x70}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.506382382s ago: executing program 4 (id=3076): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000040)="a0", 0x1}], 0x2) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x1c, r0, 0xb8b2a4096e024d47, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0xffffffffffffffbe, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x2040094) 14.213266248s ago: executing program 4 (id=3078): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x4c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xc, 0x30, 0x3c, 0x8}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x400}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c5161a6dc847"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 13.979500908s ago: executing program 4 (id=3080): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x23, 0x5, 0x0) close(0x3) stat(&(0x7f0000000040)='./dev/ttyACM0\x00', &(0x7f0000000180)) 12.281379547s ago: executing program 4 (id=3087): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000007b0001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000084) 12.031551996s ago: executing program 4 (id=3088): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000080)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r1, 0x5437, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000880)="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", 0x559, r2) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="bbe3d35fe7e0ab75d6cd1d2c9f6bb8117cf34bbc0d75efa4fe9bcfad68dadc09039cc3fc0ddd0363872fbd88cae7d6fb80fecb3c65ecf60c5ac559f6d6c01f0f698847a870ba7d58592f4486ef07e95f89b8c3b22ee165af9c8553b409230d8dd8c299d5c47a0c159c7d76ab89fa2f2e8d5764bb33a4bcbc69ea863d2096ac48efb387e0fa926a37d12a5dc6ba2145149ef2ffb898057b04", 0x98, 0x0) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="b7541d59c60460bcf859b8061903360fce8935c08096c62a1b986920c4db8c1060264dadde94de023d8cc4bd4d07d4a22ea7134a18371751928dd7079bb098bc9e11", 0x42, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r2, r3, r4}, &(0x7f0000000e00)=""/4096, 0x1000, &(0x7f0000001f40)={&(0x7f0000001e00)={'md4-generic\x00'}, &(0x7f0000001e40)="62d06c32d0f6f9af0da818c3d6476f70ecc97a2b3ad1e000da368bd75443074d2027d38526eb887789d9e7a1cfe554a685bbd216078068a99163f897eff985bbc89a0dba49ebec4c444755ba4ab7c4031aa3811fb8272ae0c418553ff2b78e0a4fc1c9438d0815e36ce62dc5e9fb94f6369b0902bdfc6836b742f42d6a47ce4fbbb91c88a7cb4eb606734e7efdfb14eef1297f892beb578540df1d7260ce626a95d65f4e8895158507cc746f6978b4185eb4238d146d8459dcaf5d0be25e0be7fbe948995e028d94ec0295a28da17d18eee889414203610968988f1b8fb2812a3c338a2bcbd6701439132a2f98d9", 0xee}) 11.07522913s ago: executing program 4 (id=3099): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c5", 0xa8}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.951011312s ago: executing program 5 (id=3109): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fc"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 7.666416139s ago: executing program 5 (id=3112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x4c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xc, 0x30, 0x3c, 0x8}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x400}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c5161a6dc847"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 6.428371217s ago: executing program 5 (id=3114): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) io_setup(0xe, &(0x7f0000000180)=0x0) io_pgetevents(r2, 0x3, 0x3, &(0x7f0000000380)=[{}, {}, {}], &(0x7f0000000400)={0x77359400}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25fc02000000000000000000000000000000000000000000000000ffffffffffff4e220cb24e24fff30a0000a02c00", @ANYRES32=0x0, @ANYRES64=r1, @ANYRESHEX=r1], 0x104}}, 0x88c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000177f000000000000ff000000850000006d00000018110000", @ANYRESHEX=r1, @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) read$msr(r0, 0x0, 0xffffffffffffffd1) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x101, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40c00, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000040)=0xf8000000, 0x4) timer_create(0x2, &(0x7f0000000380)={0x0, 0xd, 0x1}, &(0x7f00000003c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r8, &(0x7f0000000240)) socket(0x10, 0x803, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="111752540b57"}, 0x10) r9 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0xa, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r9, 0xc0984124, 0x40944f9c780000) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000000)={0x2, 0x8000, @empty}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) connect$netlink(r5, &(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYRES64=r1, @ANYRES32], 0x3c}}, 0x0) 6.279399914s ago: executing program 2 (id=3116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140009001000010000000000000000000200000a20000000000a010601000000000000000200000a0900010073797a30000000004c000000030a010602000000000000000200000a0900010073797a30000000000900030073797a30000000000b00070066696c746572000014000480080001400000000308000240000000006c000000060a010603000000000000000200000a0900010073797a30000000000900020073797a3000000000400004803c0001800a00010072616e67650000002c000280080001400000000108000240000000000c00038008000100313233340c0004"], 0x100}}, 0x0) 5.216865718s ago: executing program 2 (id=3117): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x7, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae64, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) 5.208985539s ago: executing program 0 (id=3118): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r2, 0x3, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x98, r4, 0xc29, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x26ea}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000b40)={&(0x7f0000000180), 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x260, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x672}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x75}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "306367fa8492121fbbb927ca503ac572e521972435a6019918a9b4"}}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000080)=""/125, 0x26, 0x7d, 0x1, 0x8}, 0x28) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xfffffefe, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0xfffffc00, 0x7, 0x9, 0x37f6, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x4, 0xc0, 0x0, 0x2005, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x3, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000007, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x5ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x0, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120001, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xdb, 0x200, 0xffff343e, 0xfff]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='sys_mnt\x00', 0x100) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) write$P9_RLERRORu(r8, &(0x7f0000000240)=ANY=[], 0x10) write(r5, &(0x7f0000000640)='alg', 0x3) 4.911350862s ago: executing program 2 (id=3121): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fc"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 4.784829733s ago: executing program 5 (id=3122): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86", 0xdf}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.734020203s ago: executing program 2 (id=3123): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000d4bad23f00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000100000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4.671802715s ago: executing program 1 (id=3124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x4c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xc, 0x30, 0x3c, 0x8}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x400}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c5161a6dc847"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 4.385454851s ago: executing program 1 (id=3125): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(0x0, 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3ff, 0x4600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x43cc, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) 4.304104595s ago: executing program 5 (id=3126): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x9, 0x7, 0x8, 0x2}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff00000007058103"], 0x0) setpgid(0x0, 0x0) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d000101ff90090904000d02030101050921050077b1ffb10f09058103200003"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) connect$inet(r6, 0x0, 0x0) pipe(0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x2) sendmmsg$inet(r6, 0x0, 0x0, 0x4040040) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.691000907s ago: executing program 2 (id=3127): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c761", 0xc4}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.103503288s ago: executing program 1 (id=3128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="060000000900a0eadd351c43fb297373a90480f1e1fa25be82eec835b09cf30325dbb2d340fd320314aff5efb689b4f64f9f3a19f391c0da195574b08b477c9cfa63524b4dd9484f6a878a786b8973c494578c4f38cf1f97a0db14a8c36794375b788f5fafbca013a4ff0202c4ed2b3142648aa9a5d8ccf40baf18a123698df444f53bb37f63c1ab20367cab013bbda7028b0871e7e1460a9e599faa47fce9f3b098"]) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.863274634s ago: executing program 1 (id=3129): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035", 0x47}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000200)=""/121, 0x79}], 0x2}, 0x0) 2.732380873s ago: executing program 2 (id=3130): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r1, &(0x7f0000001980)=[{&(0x7f0000000300)=""/196, 0xc4}, {0x0}, {0x0}, {0x0}], 0x4) close(0x3) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r2, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905d8"], 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x2000000000000006, 0x40) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) 2.708333181s ago: executing program 1 (id=3131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200591214120600002fb96dbcf706e10500000086ddfff51144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.223222305s ago: executing program 1 (id=3132): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185300, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket(0x10, 0x3, 0x0) io_uring_setup(0x22d2, &(0x7f0000000140)={0x0, 0x27e5, 0x20000, 0x2, 0xb0}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) r3 = socket$nl_generic(0x11, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1282, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETOWNER(r6, 0x400454c8, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @multicast2}, 0xffff, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x3, 0x0, 0x4, {0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x8000}}}, 0x3a) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x12001, 0x0) ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000200)=0x1) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) 2.182412581s ago: executing program 5 (id=3133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]}) syncfs(0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dummy\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000240)="390000001000111867090707a640400f0021ff3f30000000170a0017ffc30000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) write(r3, &(0x7f0000000500)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r5, &(0x7f0000001400)='2\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_getvlan={0x38, 0x72, 0x2, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x4ec59b98563619c1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0xc004) write(r6, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x4, 0x7}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c4820, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r8, &(0x7f0000002500)='1\n', 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f00dea600001000c33ce4020000", @ANYRES32=r1, @ANYBLOB, @ANYRES64=r2], 0x20) 2.065895469s ago: executing program 0 (id=3134): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58", 0xc2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.444193587s ago: executing program 0 (id=3135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x4c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xc, 0x30, 0x3c, 0x8}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x400}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c5161a6dc847"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 1.331015814s ago: executing program 0 (id=3136): ftruncate(0xffffffffffffffff, 0x80000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r4, 0x0, 0x0, 0x24000000) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x1b, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002102, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfaffffff}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 258.032198ms ago: executing program 0 (id=3137): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000000000/0x4000)=nil) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) getrandom(&(0x7f0000000540)=""/247, 0xf7, 0x3) sendto$inet6(r0, &(0x7f0000000500)="6000000400143340000000000000ea0000c0000000000000000000a52af834000000000000000000", 0x28, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) 0s ago: executing program 0 (id=3138): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(0x0, 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3ff, 0x4600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x43cc, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) kernel console output (not intermixed with test programs): 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.917999][T14595] RSP: 002b:00007f6748fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.918011][T14595] RAX: ffffffffffffffda RBX: 00007f674b026090 RCX: 00007f674ad9e0d9 [ 872.918018][T14595] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000004 [ 872.918025][T14595] RBP: 00007f674ae35024 R08: 0000000000000000 R09: 0000000000000000 [ 872.918031][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.918038][T14595] R13: 00007f674b026128 R14: 00007f674b026090 R15: 00007ffeccef92c8 [ 872.918053][T14595] [ 872.918076][T14595] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 873.281187][ T30] audit: type=1400 audit(1786075457.454:1402): avc: denied { associate } for pid=14579 comm="syz.5.2600" name="comedi2" dev="devtmpfs" ino=1275 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:root_t:s0" [ 874.222826][T14611] dummy0: entered promiscuous mode [ 874.519982][T14611] gretap0: entered promiscuous mode [ 874.538509][T14611] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 874.565556][T14611] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 874.586678][T14611] hsr1: entered allmulticast mode [ 874.602004][T14611] dummy0: entered allmulticast mode [ 874.613789][T14611] gretap0: entered allmulticast mode [ 875.204575][T14629] netlink: 'syz.0.2615': attribute type 4 has an invalid length. [ 875.223813][T14629] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2615'. [ 875.875219][ T30] audit: type=1400 audit(1786075460.434:1403): avc: denied { create } for pid=14650 comm="syz.5.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 875.907315][ T5697] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 875.927329][ T5732] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 875.945090][ T30] audit: type=1400 audit(1786075460.494:1404): avc: denied { sys_admin } for pid=14650 comm="syz.5.2621" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 876.077886][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 876.085100][ T5697] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 876.115134][ T5732] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 876.129211][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.148507][ T5732] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 876.210679][ T5732] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 876.246886][ T5697] usb 3-1: probing VID:PID(0424:012C) [ 876.270027][ T5732] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 876.298389][ T5697] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 876.334559][ T5697] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 876.342203][ T5732] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 876.380007][ T5697] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 876.413462][ T5732] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.430615][ T5697] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 876.472274][ T5697] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 876.504855][ T5732] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 876.681068][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.713985][ T5732] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 876.737272][ T5697] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 876.791102][T14672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 877.282991][ T5697] vub300 3-1:1.0: probe with driver vub300 failed with error -22 [ 877.649679][T14677] CacheFiles: No cache directory specified [ 877.827026][T14673] file system registered [ 877.840947][ T30] audit: type=1400 audit(1786075462.384:1405): avc: denied { write } for pid=14668 comm="syz.4.2626" name="functions" dev="configfs" ino=34590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 877.880921][ T5697] usb 3-1: USB disconnect, device number 113 [ 878.012819][ T30] audit: type=1400 audit(1786075462.384:1406): avc: denied { add_name } for pid=14668 comm="syz.4.2626" name="ffs.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 878.139153][ T30] audit: type=1400 audit(1786075462.384:1407): avc: denied { create } for pid=14668 comm="syz.4.2626" name="ffs.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 878.262887][ T30] audit: type=1400 audit(1786075462.624:1408): avc: denied { mount } for pid=14668 comm="syz.4.2626" name="/" dev="functionfs" ino=62026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 878.308218][ T5732] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 878.487148][ T5732] usb 5-1: Using ep0 maxpacket: 8 [ 878.504092][ T5732] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 878.533297][ T5732] usb 5-1: config 0 has no interface number 0 [ 878.554134][ T30] audit: type=1400 audit(1786075463.114:1409): avc: denied { write } for pid=14679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.591653][ T5732] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 878.661914][ T5732] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 878.730001][ T5732] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 878.809995][ T5732] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 878.837330][ T30] audit: type=1400 audit(1786075463.394:1410): avc: denied { execute } for pid=14702 comm="syz.2.2631" name="file0" dev="tmpfs" ino=2887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 878.872935][T14706] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2632'. [ 878.912668][ T5732] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.950003][ T5697] usb 2-1: USB disconnect, device number 98 [ 879.024476][ T5732] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 879.040132][ T30] audit: type=1400 audit(1786075463.394:1411): avc: denied { execute_no_trans } for pid=14702 comm="syz.2.2631" path="/530/file0" dev="tmpfs" ino=2887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 879.099637][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.170821][ T5732] usb 5-1: Product: syz [ 879.206426][ T5732] usb 5-1: Manufacturer: syz [ 879.235685][ T5732] usb 5-1: SerialNumber: syz [ 879.252184][ T30] audit: type=1400 audit(1786075463.454:1412): avc: denied { write } for pid=14701 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.302589][ T5732] usb 5-1: config 0 descriptor?? [ 879.457822][ T5697] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 880.378216][T14669] read descriptors [ 880.405927][T14669] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 880.461339][ T5732] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 880.518422][ T5697] usb 2-1: Using ep0 maxpacket: 8 [ 880.525587][ T5732] usb 5-1: USB disconnect, device number 108 [ 880.541301][ T5697] usb 2-1: unable to get BOS descriptor or descriptor too short [ 880.568658][ T5697] usb 2-1: config 4 interface 0 has no altsetting 0 [ 880.601486][ T5697] usb 2-1: string descriptor 0 read error: -22 [ 880.613524][ T5697] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 880.648823][ T5697] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 880.711101][ T5697] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 880.744434][ T5697] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 880.796721][ T5697] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 880.839895][ T5697] usb 2-1: media controller created [ 880.900143][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 880.939411][T14715] trusted_key: encrypted_key: master key parameter '^' is invalid [ 880.950139][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 880.950150][ T30] audit: type=1400 audit(1786075465.514:1414): avc: denied { read } for pid=14712 comm="syz.1.2635" path="socket:[62520]" dev="sockfs" ino=62520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 881.015212][T14749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2635'. [ 881.069650][T14752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.088092][ T5593] ffs_data_put(): freeing [ 881.109937][T14752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.149815][ T30] audit: type=1400 audit(1786075465.614:1415): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 881.231893][T14756] CacheFiles: No cache directory specified [ 881.322660][T14757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.417125][ T9] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 882.157313][ T5697] zl10353_read_register: readreg error (reg=127, ret==0) [ 882.220924][T14757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.295105][ T5697] usb 2-1: USB disconnect, device number 99 [ 882.349625][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 882.377544][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.439724][ T30] audit: type=1400 audit(1786075467.004:1416): avc: denied { read } for pid=14767 comm="syz.1.2650" path="socket:[62643]" dev="sockfs" ino=62643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 882.481301][T14770] xt_hashlimit: size too large, truncated to 1048576 [ 882.559922][T14773] xt_hashlimit: size too large, truncated to 1048576 [ 882.671038][ T9] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 882.944025][T14787] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2656'. [ 882.991771][T14787] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 883.052303][T14795] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2656'. [ 883.121969][T14787] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 883.469306][T14810] syzkaller0: entered promiscuous mode [ 883.489137][T14810] syzkaller0: entered allmulticast mode [ 883.507008][ T30] audit: type=1400 audit(1786075468.064:1417): avc: denied { getopt } for pid=14807 comm="syz.0.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 883.873410][ T30] audit: type=1400 audit(1786075468.434:1418): avc: denied { bind } for pid=14825 comm="syz.0.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 883.962630][ T30] audit: type=1400 audit(1786075468.464:1419): avc: denied { node_bind } for pid=14825 comm="syz.0.2668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 883.985733][T14829] can0: slcan on ttyS3. [ 884.009739][ T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 884.084409][ T30] audit: type=1400 audit(1786075468.464:1420): avc: denied { read } for pid=14825 comm="syz.0.2668" path="socket:[63060]" dev="sockfs" ino=63060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 884.207400][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 884.217347][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 884.236530][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 884.281895][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 884.324545][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 884.368061][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 884.421208][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 884.491722][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.568323][T14840] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2669'. [ 884.717974][T14825] can0 (unregistered): slcan off ttyS3. [ 884.733193][ T30] audit: type=1400 audit(1786075469.294:1421): avc: denied { write } for pid=14833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.822216][T14850] CacheFiles: No cache directory specified [ 885.953852][ T30] audit: type=1400 audit(1786075470.514:1422): avc: denied { write } for pid=14851 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 886.065672][ T9] usb 3-1: USB disconnect, device number 114 [ 886.940890][ T30] audit: type=1400 audit(1786075471.504:1423): avc: denied { write } for pid=14859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.225918][ T30] audit: type=1400 audit(1786075471.784:1424): avc: denied { write } for pid=14888 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.349413][ T30] audit: type=1400 audit(1786075471.864:1425): avc: denied { call } for pid=14896 comm="syz.1.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 888.399089][ T5697] usb 5-1: USB disconnect, device number 109 [ 888.481875][T14910] FAULT_INJECTION: forcing a failure. [ 888.481875][T14910] name failslab, interval 1, probability 0, space 0, times 0 [ 888.553810][T14910] CPU: 0 UID: 0 PID: 14910 Comm: syz.4.2684 Not tainted syzkaller #0 PREEMPT(full) [ 888.553827][T14910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 888.553834][T14910] Call Trace: [ 888.553838][T14910] [ 888.553843][T14910] dump_stack_lvl+0x100/0x190 [ 888.553861][T14910] should_fail_ex.cold+0x5/0xa [ 888.553875][T14910] should_failslab+0xc2/0x120 [ 888.553889][T14910] __kmalloc_noprof+0xfc/0x820 [ 888.553902][T14910] ? sock_kmalloc+0x111/0x170 [ 888.553919][T14910] sock_kmalloc+0x111/0x170 [ 888.553935][T14910] af_alg_alloc_areq+0x9e/0x250 [ 888.553952][T14910] aead_recvmsg+0x1b8/0xe80 [ 888.553969][T14910] ? __pfx_aead_recvmsg+0x10/0x10 [ 888.553983][T14910] ? __pfx_aead_recvmsg+0x10/0x10 [ 888.553995][T14910] sock_recvmsg+0x1d5/0x220 [ 888.554011][T14910] ____sys_recvmsg+0x21e/0x670 [ 888.554028][T14910] ? __pfx_____sys_recvmsg+0x10/0x10 [ 888.554048][T14910] ? __lock_acquire+0x49f/0x1a40 [ 888.554061][T14910] ? get_pid_task+0x106/0x250 [ 888.554080][T14910] ___sys_recvmsg+0x16a/0x1a0 [ 888.554096][T14910] ? __pfx____sys_recvmsg+0x10/0x10 [ 888.554113][T14910] ? find_held_lock+0x2b/0x80 [ 888.554139][T14910] __x64_sys_recvmsg+0x19a/0x260 [ 888.554152][T14910] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 888.554172][T14910] do_syscall_64+0x115/0x870 [ 888.554184][T14910] ? clear_bhb_loop+0x40/0x90 [ 888.554197][T14910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.554208][T14910] RIP: 0033:0x7f674ad9e0d9 [ 888.554218][T14910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.554229][T14910] RSP: 002b:00007f6748ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 888.554239][T14910] RAX: ffffffffffffffda RBX: 00007f674b025fa0 RCX: 00007f674ad9e0d9 [ 888.554246][T14910] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 888.554253][T14910] RBP: 00007f6748ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 888.554259][T14910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.554265][T14910] R13: 00007f674b026038 R14: 00007f674b025fa0 R15: 00007ffeccef92c8 [ 888.554280][T14910] [ 888.774542][T14913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.783194][T14913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.795830][T14913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.804558][T14913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.829107][ T30] audit: type=1400 audit(1786075473.354:1426): avc: denied { bind } for pid=14912 comm="syz.5.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 888.917280][ T5732] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 888.950345][T14919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.962607][T14919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.026429][T14920] CacheFiles: No cache directory specified [ 889.032386][ T30] audit: type=1400 audit(1786075473.584:1427): avc: denied { map } for pid=14912 comm="syz.5.2685" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 889.530667][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 889.891302][ T5732] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 889.900612][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.930785][ T5732] usb 3-1: Product: syz [ 889.945808][ T5732] usb 3-1: Manufacturer: syz [ 889.966122][ T5732] usb 3-1: SerialNumber: syz [ 890.002484][ T5732] usb 3-1: config 0 descriptor?? [ 890.207159][ T5697] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 890.227478][ T30] audit: type=1400 audit(1786075474.794:1428): avc: denied { read } for pid=14903 comm="syz.2.2681" path="socket:[63620]" dev="sockfs" ino=63620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 890.357196][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 890.375565][ T5697] usb 5-1: unable to get BOS descriptor or descriptor too short [ 890.410896][ T5697] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.474741][ T5697] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 891.549546][ T5697] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 891.581612][ T30] audit: type=1400 audit(1786075476.134:1429): avc: denied { mount } for pid=14932 comm="syz.0.2693" name="/" dev="ramfs" ino=63731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 891.615028][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.636362][ T5732] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 891.659658][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 891.681328][ T5697] usb 5-1: Product: syz [ 891.697855][ T5732] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 891.712834][ T5697] usb 5-1: Manufacturer: syz [ 891.744307][ T5697] usb 5-1: SerialNumber: syz [ 891.807581][ T5732] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 891.859915][ T5732] usb 3-1: USB disconnect, device number 115 [ 891.931854][T14947] veth1_to_bond: entered allmulticast mode [ 891.942800][T14947] veth1_to_bond: entered promiscuous mode [ 891.956746][T14947] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2696'. [ 891.996145][ T5697] usb 5-1: unit 4 not found! [ 892.012904][T14947] bridge_slave_0 (unregistering): left allmulticast mode [ 892.027771][ T5697] usb 5-1: unit 0 not found! [ 892.034046][T14947] bridge_slave_0 (unregistering): left promiscuous mode [ 892.055740][T14947] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.192568][T14922] SET target dimension over the limit! [ 893.072942][T14946] veth1_to_bond: left promiscuous mode [ 893.193957][T14946] veth1_to_bond: left allmulticast mode [ 893.346760][T14922] kvm: kvm [14921]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000008b [ 893.408300][T13521] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 893.428995][T14922] kvm: kvm [14921]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100002785 [ 893.475969][ T30] audit: type=1400 audit(1786075478.034:1430): avc: denied { getopt } for pid=14960 comm="syz.2.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 893.598819][T13521] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 893.646060][T13521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.684150][ T30] audit: type=1400 audit(1786075478.244:1431): avc: denied { mount } for pid=14970 comm="syz.0.2704" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 893.833204][ T30] audit: type=1400 audit(1786075478.274:1432): avc: denied { search } for pid=14970 comm="syz.0.2704" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 893.892571][T14978] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2706'. [ 893.936241][T13521] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 893.983285][ T30] audit: type=1400 audit(1786075478.274:1433): avc: denied { write } for pid=14970 comm="syz.0.2704" name="max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 894.134156][ T30] audit: type=1400 audit(1786075478.274:1434): avc: denied { open } for pid=14970 comm="syz.0.2704" path="/552/nfsd/max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 894.248816][ T30] audit: type=1400 audit(1786075478.354:1435): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 894.275694][ T5732] usb 2-1: USB disconnect, device number 100 [ 894.347875][T13521] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 894.528597][T13521] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.560983][T13521] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.594771][T13521] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 894.639215][T13521] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 894.694228][T13521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.733350][ T5697] usb 5-1: USB disconnect, device number 110 [ 895.094377][T13521] usb 3-1: config 0 descriptor?? [ 895.764957][T14597] udevd[14597]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 895.819814][T14994] FAULT_INJECTION: forcing a failure. [ 895.819814][T14994] name failslab, interval 1, probability 0, space 0, times 0 [ 895.898205][T14994] CPU: 0 UID: 0 PID: 14994 Comm: syz.5.2712 Not tainted syzkaller #0 PREEMPT(full) [ 895.898222][T14994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 895.898229][T14994] Call Trace: [ 895.898233][T14994] [ 895.898241][T14994] dump_stack_lvl+0x100/0x190 [ 895.898260][T14994] should_fail_ex.cold+0x5/0xa [ 895.898275][T14994] should_failslab+0xc2/0x120 [ 895.898289][T14994] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 895.898303][T14994] ? __alloc_skb+0x140/0x710 [ 895.898318][T14994] __alloc_skb+0x140/0x710 [ 895.898328][T14994] ? __alloc_skb+0x5b7/0x710 [ 895.898338][T14994] ? __pfx___alloc_skb+0x10/0x10 [ 895.898349][T14994] ? __kasan_slab_alloc+0x89/0x90 [ 895.898363][T14994] ? kmalloc_reserve+0x148/0x350 [ 895.898379][T14994] llc_alloc_frame+0xae/0x390 [ 895.898392][T14994] ? kmalloc_reserve+0xf9/0x350 [ 895.898408][T14994] llc_conn_ac_send_sabme_cmd_p_set_x+0x52/0x470 [ 895.898423][T14994] ? __alloc_skb+0x4e9/0x710 [ 895.898433][T14994] ? __alloc_skb+0x5b7/0x710 [ 895.898442][T14994] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 895.898459][T14994] llc_conn_state_process+0x3ec/0x1480 [ 895.898482][T14994] llc_establish_connection+0x354/0x500 [ 895.898505][T14994] ? __pfx_llc_establish_connection+0x10/0x10 [ 895.898523][T14994] ? __local_bh_enable_ip+0x9e/0x120 [ 895.898541][T14994] llc_ui_connect+0x429/0xdb0 [ 895.898556][T14994] ? selinux_netlbl_socket_connect+0x30/0x40 [ 895.898572][T14994] ? find_held_lock+0x2b/0x80 [ 895.898588][T14994] ? selinux_netlbl_socket_connect+0x30/0x40 [ 895.898604][T14994] ? __pfx_llc_ui_connect+0x10/0x10 [ 895.898618][T14994] ? __local_bh_enable_ip+0x9e/0x120 [ 895.898631][T14994] ? lockdep_hardirqs_on+0x78/0x100 [ 895.898642][T14994] ? selinux_netlbl_socket_connect+0x30/0x40 [ 895.898660][T14994] ? __local_bh_enable_ip+0x9e/0x120 [ 895.898674][T14994] ? selinux_netlbl_socket_connect+0x30/0x40 [ 895.898689][T14994] ? selinux_socket_connect+0x6b/0x80 [ 895.898704][T14994] ? __pfx_llc_ui_connect+0x10/0x10 [ 895.898717][T14994] __sys_connect_file+0x141/0x1a0 [ 895.898737][T14994] __sys_connect+0x141/0x170 [ 895.898754][T14994] ? __pfx___sys_connect+0x10/0x10 [ 895.898770][T14994] ? __fget_files+0x21f/0x3d0 [ 895.898786][T14994] ? __pfx_ksys_write+0x10/0x10 [ 895.898805][T14994] __x64_sys_connect+0x72/0xb0 [ 895.898821][T14994] ? lockdep_hardirqs_on+0x78/0x100 [ 895.898832][T14994] do_syscall_64+0x115/0x870 [ 895.898846][T14994] ? clear_bhb_loop+0x40/0x90 [ 895.898860][T14994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.898871][T14994] RIP: 0033:0x7f9dcdf9e0d9 [ 895.898881][T14994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.898892][T14994] RSP: 002b:00007f9dcef31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 895.898903][T14994] RAX: ffffffffffffffda RBX: 00007f9dce225fa0 RCX: 00007f9dcdf9e0d9 [ 895.898910][T14994] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000005 [ 895.898917][T14994] RBP: 00007f9dcef31090 R08: 0000000000000000 R09: 0000000000000000 [ 895.898923][T14994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.898929][T14994] R13: 00007f9dce226038 R14: 00007f9dce225fa0 R15: 00007ffe932e0c38 [ 895.898945][T14994] [ 895.905618][T14994] llc_conn_state_process: llc_conn_service failed [ 896.456190][ T30] audit: type=1400 audit(1786075480.974:1436): avc: denied { ioctl } for pid=15005 comm="syz.0.2717" path="socket:[64419]" dev="sockfs" ino=64419 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 896.490290][T13521] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 896.522283][T13521] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 896.624217][T13521] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 896.636261][T13521] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 896.654373][T13521] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 897.406383][ T5697] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 897.428811][T13521] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 897.436343][T13521] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 897.444676][T13521] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 897.458676][T13521] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 897.496396][T13521] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 897.532960][T13521] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 897.569261][ T5697] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 897.580532][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.599674][T13521] usb 3-1: USB disconnect, device number 116 [ 897.659629][ T5732] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 897.721211][T15023] fido_id[15023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 897.819004][ T5732] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 897.828459][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.903321][ T5697] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 898.127954][T15034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.158514][ T5697] usb 5-1: USB disconnect, device number 111 [ 898.191722][T15034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.476311][ T5732] cdc_acm 2-1:1.0: ttyACM1: USB ACM device [ 898.551209][T15043] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2726'. [ 898.627433][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'. [ 898.683125][T15045] 8021q: adding VLAN 0 to HW filter on device bond4 [ 898.708485][ T5732] usb 2-1: USB disconnect, device number 101 [ 898.848428][ T30] audit: type=1400 audit(1786075483.414:1437): avc: denied { listen } for pid=15047 comm="syz.0.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 899.016583][T15052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2728'. [ 900.025022][ T30] audit: type=1400 audit(1786075484.584:1438): avc: denied { create } for pid=15058 comm="syz.4.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 902.252297][ T30] audit: type=1400 audit(1786075486.814:1439): avc: denied { create } for pid=15066 comm="syz.2.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 902.422335][ T30] audit: type=1400 audit(1786075486.844:1440): avc: denied { bind } for pid=15066 comm="syz.2.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 902.497320][ T5732] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 902.560535][T15078] block device autoloading is deprecated and will be removed. [ 902.721304][T15085] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2738'. [ 902.759230][ T5732] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 902.809232][ T5732] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 902.882422][ T5732] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 902.909402][T15089] overlay: Bad value for 'xino' [ 903.036969][ T5732] usb 5-1: config 0 interface 0 has no altsetting 0 [ 903.063688][ T5732] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 903.306700][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.316881][T15100] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2744'. [ 903.366584][ T5732] usb 5-1: config 0 descriptor?? [ 903.410975][T15069] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 904.640311][ T30] audit: type=1400 audit(1786075489.184:1441): avc: denied { remount } for pid=15112 comm="syz.5.2749" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 904.689161][ T5732] hid_parser_main: 5 callbacks suppressed [ 904.689177][ T5732] playstation 0003:054C:05C4.000A: unknown main item tag 0x0 [ 904.722565][ T5732] playstation 0003:054C:05C4.000A: reserved main item tag 0xe [ 904.781732][ T30] audit: type=1400 audit(1786075489.344:1442): avc: denied { ioctl } for pid=15119 comm="syz.0.2750" path="/dev/sg0" dev="devtmpfs" ino=751 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 904.825837][ T5732] playstation 0003:054C:05C4.000A: unknown main item tag 0x2 [ 904.871837][ T5732] playstation 0003:054C:05C4.000A: hidraw0: USB HID v0.0c Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 904.936401][ T30] audit: type=1400 audit(1786075489.344:1443): avc: denied { getopt } for pid=15119 comm="syz.0.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 904.996910][T15127] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2752'. [ 905.029382][ T5732] playstation 0003:054C:05C4.000A: Invalid byte count transferred, expected 16 got 0 [ 905.074025][ T5732] playstation 0003:054C:05C4.000A: Failed to retrieve DualShock4 pairing info: -22 [ 905.085591][ T30] audit: type=1400 audit(1786075489.344:1444): avc: denied { ioctl } for pid=15119 comm="syz.0.2750" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 905.197366][ T5732] playstation 0003:054C:05C4.000A: Failed to get MAC address from DualShock4 [ 905.243971][ T5732] playstation 0003:054C:05C4.000A: Failed to create dualshock4. [ 905.358943][ T5732] playstation 0003:054C:05C4.000A: probe with driver playstation failed with error -22 [ 905.371499][ T30] audit: type=1400 audit(1786075489.804:1445): avc: denied { getopt } for pid=15134 comm="syz.1.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 906.228529][ T5732] usb 5-1: USB disconnect, device number 112 [ 906.338226][T15145] netlink: 'syz.5.2758': attribute type 1 has an invalid length. [ 906.357003][ T30] audit: type=1400 audit(1786075489.904:1446): avc: denied { lock } for pid=15134 comm="syz.1.2755" path="socket:[65012]" dev="sockfs" ino=65012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 906.472405][T15151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.524118][T15151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.211086][T15157] CacheFiles: No cache directory specified [ 908.485893][T15161] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2765'. [ 908.637255][ T5732] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 908.807394][ T5732] usb 3-1: Using ep0 maxpacket: 16 [ 908.835326][ T5732] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.874097][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 908.889861][T15171] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2767'. [ 908.933509][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 908.978468][ T5732] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 909.019581][ T5732] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.099048][ T5732] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 909.150383][ T5732] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 909.188918][ T5732] usb 3-1: Manufacturer: syz [ 909.216395][ T5732] usb 3-1: config 0 descriptor?? [ 909.507990][ T30] audit: type=1400 audit(1786075494.074:1447): avc: denied { listen } for pid=15176 comm="syz.0.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 909.569793][T15187] xt_connbytes: Forcing CT accounting to be enabled [ 909.593382][ T5732] rc_core: IR keymap rc-hauppauge not found [ 909.629982][ T5732] Registered IR keymap rc-empty [ 909.636688][T15182] syzkaller1: entered promiscuous mode [ 909.659976][ T5732] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 909.711431][T15182] syzkaller1: entered allmulticast mode [ 909.723100][ T5732] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 909.771909][ T5732] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 909.784060][T15189] netlink: 'syz.4.2773': attribute type 1 has an invalid length. [ 909.845009][ T5732] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49 [ 909.923247][ T5732] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 909.987302][ T5732] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 910.049645][ T5732] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 910.107231][ T5732] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 910.169390][ T5732] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 910.219007][ T5732] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 910.258103][ T5732] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 911.259073][ T5732] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 911.331862][T15206] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2778'. [ 911.348053][ T5732] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 911.398368][ T5732] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 911.472685][ T5732] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 911.532194][ T5732] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 912.446011][ T5732] usb 3-1: USB disconnect, device number 117 [ 913.680864][T15227] netlink: 'syz.5.2784': attribute type 1 has an invalid length. [ 913.918304][T15232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.950930][T15232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.556588][T15252] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2792'. [ 916.952044][T15273] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2801'. [ 916.998256][T15278] FAULT_INJECTION: forcing a failure. [ 916.998256][T15278] name failslab, interval 1, probability 0, space 0, times 0 [ 917.068425][T15278] CPU: 0 UID: 0 PID: 15278 Comm: syz.4.2803 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.068445][T15278] Tainted: [L]=SOFTLOCKUP [ 917.068449][T15278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 917.068456][T15278] Call Trace: [ 917.068460][T15278] [ 917.068465][T15278] dump_stack_lvl+0x100/0x190 [ 917.068484][T15278] should_fail_ex.cold+0x5/0xa [ 917.068498][T15278] should_failslab+0xc2/0x120 [ 917.068512][T15278] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 917.068527][T15278] ? __alloc_skb+0x5b7/0x710 [ 917.068538][T15278] ? __alloc_skb+0x140/0x710 [ 917.068551][T15278] __alloc_skb+0x140/0x710 [ 917.068561][T15278] ? __alloc_skb+0x5b7/0x710 [ 917.068573][T15278] ? __pfx___alloc_skb+0x10/0x10 [ 917.068588][T15278] netlink_alloc_large_skb+0x69/0x150 [ 917.068608][T15278] netlink_sendmsg+0x680/0xda0 [ 917.068626][T15278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.068644][T15278] ? selinux_socket_sendmsg+0x198/0x2f0 [ 917.068664][T15278] ____sys_sendmsg+0xa4d/0xbe0 [ 917.068678][T15278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.068695][T15278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 917.068716][T15278] ___sys_sendmsg+0x190/0x1e0 [ 917.068733][T15278] ? __pfx____sys_sendmsg+0x10/0x10 [ 917.068747][T15278] ? __lock_acquire+0x49f/0x1a40 [ 917.068760][T15278] ? get_pid_task+0x106/0x250 [ 917.068792][T15278] __sys_sendmsg+0x160/0x210 [ 917.068804][T15278] ? __pfx___sys_sendmsg+0x10/0x10 [ 917.068824][T15278] do_syscall_64+0x115/0x870 [ 917.068835][T15278] ? clear_bhb_loop+0x40/0x90 [ 917.068848][T15278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.068859][T15278] RIP: 0033:0x7f674ad9e0d9 [ 917.068869][T15278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.068880][T15278] RSP: 002b:00007f6748ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.068891][T15278] RAX: ffffffffffffffda RBX: 00007f674b025fa0 RCX: 00007f674ad9e0d9 [ 917.068898][T15278] RDX: 0000000000000880 RSI: 0000200000000180 RDI: 0000000000000003 [ 917.068904][T15278] RBP: 00007f6748ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 917.068910][T15278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.068918][T15278] R13: 00007f674b026038 R14: 00007f674b025fa0 R15: 00007ffeccef92c8 [ 917.068936][T15278] [ 917.647097][ T5697] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 917.798374][ T5697] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 918.246043][ T5697] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 918.290579][ T5697] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 919.084152][ T5697] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 919.176447][T15293] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2808'. [ 919.207277][ T5697] usb 2-1: Manufacturer: syz [ 919.217159][ T5697] usb 2-1: config 0 descriptor?? [ 919.224131][ T5697] igorplugusb 2-1:0.0: incorrect number of endpoints [ 919.441417][ T5697] usb 2-1: USB disconnect, device number 102 [ 919.883894][ T30] audit: type=1400 audit(1786075504.444:1448): avc: denied { accept } for pid=15310 comm="syz.2.2814" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 920.029152][T15316] comedi comedi3: comedi_config --init_data is deprecated [ 920.101455][ T30] audit: type=1400 audit(1786075504.624:1449): avc: denied { shutdown } for pid=15315 comm="syz.1.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 920.340934][T15321] 9p: Bad value for 'rfdno' [ 921.646265][T15334] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2823'. [ 921.919743][T15338] netlink: 'syz.2.2824': attribute type 1 has an invalid length. [ 921.927536][T15338] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2824'. [ 922.091457][T15345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.192076][T15345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.244568][T15386] tipc: Enabling of bearer rejected, failed to enable media [ 924.264815][T15386] netlink: 'syz.5.2841': attribute type 1 has an invalid length. [ 924.373781][T15386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 924.529839][T15391] bond2: (slave ip6erspan0): making interface the new active one [ 924.563397][T15391] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 924.720471][T15396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.750800][T15396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.997457][ T5732] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 925.150327][ T5732] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 925.180182][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.727096][ T5732] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 926.077868][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.124519][ T30] audit: type=1326 audit(1786075510.544:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15406 comm="syz.1.2849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2f99e0d9 code=0x7ffc0000 [ 926.185353][ T5732] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 926.213265][ T5732] usb 5-1: Manufacturer: syz [ 926.237556][ T5732] usb 5-1: config 0 descriptor?? [ 926.251779][ T30] audit: type=1326 audit(1786075510.544:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15406 comm="syz.1.2849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2f99e0d9 code=0x7ffc0000 [ 926.387730][ T5732] rc_core: IR keymap rc-hauppauge not found [ 926.407256][ T30] audit: type=1326 audit(1786075510.544:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15406 comm="syz.1.2849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0f2f99e0d9 code=0x7ffc0000 [ 926.436264][ T5732] Registered IR keymap rc-empty [ 926.455058][ T5732] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 926.523875][ T5732] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 926.586609][ T30] audit: type=1326 audit(1786075510.544:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15406 comm="syz.1.2849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2f99e0d9 code=0x7ffc0000 [ 926.676778][T15419] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input51 [ 926.687548][ T5732] usb 5-1: USB disconnect, device number 113 [ 926.761329][ T30] audit: type=1326 audit(1786075510.544:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15406 comm="syz.1.2849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2f99e0d9 code=0x7ffc0000 [ 926.804513][T15424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.884875][T15424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.009407][ T30] audit: type=1326 audit(1786075510.544:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15406 comm="syz.1.2849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f0f2f99e0d9 code=0x7ffc0000 [ 927.495056][T15429] CacheFiles: No cache directory specified [ 928.203125][ T30] audit: type=1326 audit(1786075510.544:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15406 comm="syz.1.2849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2f99e0d9 code=0x7ffc0000 [ 928.587353][ T5697] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 929.222270][ T30] audit: type=1326 audit(1786075510.544:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15406 comm="syz.1.2849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2f99e0d9 code=0x7ffc0000 [ 929.326891][T15438] kAFS: unable to lookup cell '' [ 929.378534][ T5697] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 930.235422][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.254162][ T30] audit: type=1400 audit(1786075512.744:1458): avc: denied { map } for pid=15432 comm="syz.4.2858" path="socket:[66976]" dev="sockfs" ino=66976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 930.408380][ T30] audit: type=1400 audit(1786075514.874:1459): avc: denied { ioctl } for pid=15448 comm="syz.2.2864" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 930.502758][ T5697] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 930.513429][T15459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.560101][T15459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.569284][T15458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.590628][T15458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.692541][T15463] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 930.704905][ T5697] usb 5-1: USB disconnect, device number 114 [ 930.922053][T15458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.933246][T15458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.424606][T15481] FAULT_INJECTION: forcing a failure. [ 932.424606][T15481] name failslab, interval 1, probability 0, space 0, times 0 [ 932.488824][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 932.488836][ T30] audit: type=1400 audit(1786075517.054:1461): avc: denied { ioctl } for pid=15477 comm="syz.0.2874" path="socket:[67236]" dev="sockfs" ino=67236 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 932.538239][T15481] CPU: 0 UID: 0 PID: 15481 Comm: syz.5.2876 Tainted: G L syzkaller #0 PREEMPT(full) [ 932.538258][T15481] Tainted: [L]=SOFTLOCKUP [ 932.538262][T15481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 932.538268][T15481] Call Trace: [ 932.538272][T15481] [ 932.538277][T15481] dump_stack_lvl+0x100/0x190 [ 932.538295][T15481] should_fail_ex.cold+0x5/0xa [ 932.538309][T15481] should_failslab+0xc2/0x120 [ 932.538323][T15481] __kmalloc_cache_noprof+0x91/0x6c0 [ 932.538341][T15481] ? kernfs_iop_get_link+0x65/0x16a0 [ 932.538361][T15481] kernfs_iop_get_link+0x65/0x16a0 [ 932.538376][T15481] ? find_held_lock+0x2b/0x80 [ 932.538398][T15481] pick_link+0xd17/0x13c0 [ 932.538415][T15481] ? d_splice_alias_ops+0x62b/0x15c0 [ 932.538432][T15481] ? __pfx_kernfs_iop_get_link+0x10/0x10 [ 932.538450][T15481] step_into_slowpath+0x9ba/0xf90 [ 932.538465][T15481] ? kernfs_iop_lookup+0x234/0x2d0 [ 932.538477][T15481] ? rcu_is_watching+0x12/0xc0 [ 932.538495][T15481] ? __pfx_step_into_slowpath+0x10/0x10 [ 932.538510][T15481] ? lookup_slow+0x5b/0x70 [ 932.538523][T15481] ? lookup_slow+0x5b/0x70 [ 932.538541][T15481] link_path_walk+0xf28/0x1cc0 [ 932.538562][T15481] path_openat+0x1c9/0x4280 [ 932.538573][T15481] ? __kasan_slab_alloc+0x89/0x90 [ 932.538585][T15481] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 932.538597][T15481] ? do_getname+0x35/0x390 [ 932.538610][T15481] ? __x64_sys_openat+0x12d/0x210 [ 932.538628][T15481] ? __pfx_path_openat+0x10/0x10 [ 932.538643][T15481] do_file_open+0x20e/0x430 [ 932.538659][T15481] ? __pfx_do_file_open+0x10/0x10 [ 932.538681][T15481] ? alloc_fd+0x471/0x7a0 [ 932.538694][T15481] ? do_getname+0x191/0x390 [ 932.538709][T15481] do_sys_openat2+0x10f/0x1e0 [ 932.538722][T15481] ? __pfx_do_sys_openat2+0x10/0x10 [ 932.538736][T15481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 932.538749][T15481] ? __fget_files+0x21f/0x3d0 [ 932.538762][T15481] __x64_sys_openat+0x12d/0x210 [ 932.538776][T15481] ? __pfx___x64_sys_openat+0x10/0x10 [ 932.538788][T15481] ? ksys_write+0x1ac/0x250 [ 932.538809][T15481] do_syscall_64+0x115/0x870 [ 932.538820][T15481] ? clear_bhb_loop+0x40/0x90 [ 932.538834][T15481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.538845][T15481] RIP: 0033:0x7f9dcdf9e0d9 [ 932.538858][T15481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.538869][T15481] RSP: 002b:00007f9dcef31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 932.538880][T15481] RAX: ffffffffffffffda RBX: 00007f9dce225fa0 RCX: 00007f9dcdf9e0d9 [ 932.538887][T15481] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 932.538893][T15481] RBP: 00007f9dcef31090 R08: 0000000000000000 R09: 0000000000000000 [ 932.538900][T15481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 932.538906][T15481] R13: 00007f9dce226038 R14: 00007f9dce225fa0 R15: 00007ffe932e0c38 [ 932.538921][T15481] [ 934.080925][T15494] kAFS: unable to lookup cell '(,c' [ 934.136178][ T30] audit: type=1400 audit(1786075517.704:1462): avc: denied { read write } for pid=15474 comm="syz.2.2875" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 934.165465][T15496] dlm: Unknown command passed to DLM device : 3 [ 934.165465][T15496] [ 934.320954][ T30] audit: type=1400 audit(1786075517.704:1463): avc: denied { open } for pid=15474 comm="syz.2.2875" path="/577/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 934.370347][T15502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.415996][T15502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.593251][ T30] audit: type=1400 audit(1786075519.154:1464): avc: denied { create } for pid=15505 comm="syz.5.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 934.666902][T15502] CacheFiles: No cache directory specified [ 934.719084][T15509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.727870][T15509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.821107][T15514] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 935.080810][T15512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 935.104512][T15514] 8021q: adding VLAN 0 to HW filter on device bond5 [ 935.489063][ T30] audit: type=1400 audit(1786075520.054:1465): avc: denied { compute_member } for pid=15525 comm="syz.5.2888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 935.729595][T15535] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2891'. [ 935.858596][ T5732] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 936.138359][ T5732] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 936.496302][T15546] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 936.782789][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.082888][ T5732] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 937.346324][ T5732] usb 5-1: USB disconnect, device number 115 [ 937.790912][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 937.805591][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 937.814239][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 937.822454][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 937.830666][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 937.881814][ T30] audit: type=1400 audit(1786075522.414:1466): avc: denied { mounton } for pid=15571 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 938.003678][T15577] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2905'. [ 938.021926][T15576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2904'. [ 938.134651][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2904'. [ 938.172093][T15576] 8021q: adding VLAN 0 to HW filter on device bond6 [ 938.513459][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.659199][T15583] bond6 (unregistering): Released all slaves [ 938.840393][T15597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2911'. [ 938.929161][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.967591][T15602] comedi: valid board names for 8255 driver are: [ 938.985484][T15602] 8255 [ 938.992052][T15602] comedi: valid board names for vmk80xx driver are: [ 939.007937][T15602] vmk80xx [ 939.042551][T15602] comedi: valid board names for usbduxsigma driver are: [ 939.081312][T15602] usbduxsigma [ 939.089628][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.113805][T15602] comedi: valid board names for usbduxfast driver are: [ 939.141596][T15602] usbduxfast [ 939.167914][T15602] comedi: valid board names for usbdux driver are: [ 939.211829][T15602] usbdux [ 939.231327][T15602] comedi: valid board names for ni6501 driver are: [ 939.273084][T15602] ni6501 [ 939.276878][T15612] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2916'. [ 939.289489][T15602] comedi: valid board names for dt9812 driver are: [ 939.312145][T15602] dt9812 [ 939.322219][T15602] comedi: valid board names for ni_labpc_cs driver are: [ 939.330635][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.358815][T15602] ni_labpc_cs [ 939.372128][T15602] comedi: valid board names for ni_daq_700 driver are: [ 939.379418][ T5732] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 939.415767][T15602] ni_daq_700 [ 939.423303][T15571] lo speed is unknown, defaulting to 1000 [ 939.437904][T15602] comedi: valid board names for labpc_pci driver are: [ 939.475110][T15602] labpc_pci [ 939.493121][T15602] comedi: valid board names for adl_pci9118 driver are: [ 939.525074][T15602] pci9118dg [ 939.538705][T15602] pci9118hg [ 939.555401][T15602] pci9118hr [ 939.563378][ T5732] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 939.576868][T15602] comedi: valid board names for 8255_pci driver are: [ 939.600813][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.612935][T15602] 8255_pci [ 939.629827][T15602] comedi: valid board names for s526 driver are: [ 939.671881][T15602] s526 [ 939.686805][T15602] comedi: valid board names for multiq3 driver are: [ 939.722341][T15602] multiq3 [ 939.735158][T15602] comedi: valid board names for pcmuio driver are: [ 939.832731][T15602] pcmuio48 [ 939.860427][ T5732] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 939.880807][T15602] pcmuio96 [ 939.898356][T15602] comedi: valid board names for pcmmio driver are: [ 939.918903][ T5605] Bluetooth: hci1: command tx timeout [ 939.956936][T15602] pcmmio [ 940.004488][T15602] comedi: valid board names for pcmda12 driver are: [ 940.059284][ T5697] usb 2-1: USB disconnect, device number 103 [ 940.068143][T15602] pcmda12 [ 940.095508][T15602] comedi: valid board names for pcmad driver are: [ 940.127907][ T57] bridge_slave_1: left promiscuous mode [ 940.149302][T15602] pcmad12 [ 940.160110][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.255166][T15602] pcmad16 [ 940.265254][T15602] comedi: valid board names for ni_labpc driver are: [ 940.301093][T15602] lab-pc-1200 [ 940.435344][T15602] lab-pc-1200ai [ 940.461429][T15602] lab-pc+ [ 940.472178][T15602] comedi: valid board names for atmio16 driver are: [ 940.505869][T15602] atmio16 [ 940.518346][T15602] atmio16d [ 940.533924][T15602] comedi: valid board names for ni_at_ao driver are: [ 940.569255][T15602] at-ao-6 [ 940.582365][T15602] at-ao-10 [ 940.594800][T15602] comedi: valid board names for ni_at_a2150 driver are: [ 940.629312][T15602] ni_at_a2150 [ 940.644492][T15602] comedi: valid board names for adq12b driver are: [ 940.685765][T15602] adq12b [ 940.700856][T15602] comedi: valid board names for mpc624 driver are: [ 940.726716][T15602] mpc624 [ 940.750142][T15602] comedi: valid board names for c6xdigio driver are: [ 940.762287][ T57] gretap0 (unregistering): left promiscuous mode [ 940.781654][T15602] c6xdigio [ 940.792956][T15602] comedi: valid board names for aio_iiro_16 driver are: [ 940.824628][ T30] audit: type=1400 audit(1786075525.384:1467): avc: denied { write } for pid=15621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 940.852644][T15602] aio_iiro_16 [ 940.943792][T15602] comedi: valid board names for aio_aio12_8 driver are: [ 940.981033][T15602] aio_aio12_8 [ 941.041543][ T57] bond3 (unregistering): (slave geneve3): Releasing active interface [ 941.065037][T15602] aio_ai12_8 [ 941.074978][T15602] aio_ao12_4 [ 941.090556][T15602] comedi: valid board names for fl512 driver are: [ 941.113153][ T57] bond1 (unregistering): (slave geneve2): Releasing active interface [ 941.126338][T15602] fl512 [ 941.132511][T15602] comedi: valid board names for dmm32at driver are: [ 941.166619][T15602] dmm32at [ 941.174534][ T30] audit: type=1400 audit(1786075525.734:1468): avc: denied { write } for pid=15648 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.205938][T15602] comedi: valid board names for dt282x driver are: [ 941.237794][T15602] dt2821 [ 941.243956][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.255088][T15602] dt2821-f [ 941.262579][T15602] dt2821-g [ 941.269014][T15602] dt2823 [ 941.274478][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.287215][T15602] dt2824-pgh [ 941.293513][T15602] dt2824-pgl [ 941.305052][T15602] dt2825 [ 941.310497][ T57] bond0 (unregistering): Released all slaves [ 941.316571][T15602] dt2827 [ 941.321104][T15602] dt2828 [ 941.326208][T15602] dt2829 [ 941.330630][ T57] bond1 (unregistering): Released all slaves [ 941.336744][T15602] dt21-ez [ 941.340776][T15602] dt23-ez [ 941.345965][T15602] dt24-ez [ 942.116658][ T5605] Bluetooth: hci1: command tx timeout [ 942.142879][T15602] dt24-ez-pgl [ 942.150814][ T57] bond2 (unregistering): Released all slaves [ 942.170400][T15602] comedi: valid board names for dt2817 driver are: [ 942.194733][T15602] dt2817 [ 942.204657][ T57] bond3 (unregistering): Released all slaves [ 942.213894][T15602] comedi: valid board names for dt2815 driver are: [ 942.251426][T15602] dt2815 [ 942.264656][T15602] comedi: valid board names for dt2814 driver are: [ 942.309885][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 942.324538][T15602] dt2814 [ 942.346137][T15602] comedi: valid board names for dt2811 driver are: [ 943.341385][T15602] dt2811-pgh [ 943.382541][T15602] dt2811-pgl [ 943.404546][T15602] comedi: valid board names for dt2801 driver are: [ 943.482016][T15602] dt2801 [ 943.492272][T15602] comedi: valid board names for das6402 driver are: [ 943.551430][T15602] das6402-12 [ 943.579857][T15602] das6402-16 [ 943.600130][T15602] comedi: valid board names for das1800 driver are: [ 943.648135][T15602] das-1701st [ 943.678408][T15602] das-1701st-da [ 943.712508][T15602] das-1702st [ 943.733997][T15602] das-1702st-da [ 943.770485][T15602] das-1702hr [ 943.803184][T15602] das-1702hr-da [ 943.823856][T15602] das-1701ao [ 943.856095][T15602] das-1702ao [ 943.880143][T15602] das-1801st [ 943.914879][T15602] das-1801st-da [ 943.942969][T15679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.958335][T15602] das-1802st [ 943.981279][T15602] das-1802st-da [ 944.000358][T15602] das-1802hr [ 944.018966][T15679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.036498][T15602] das-1802hr-da [ 944.054630][T15602] das-1801hc [ 944.070764][T15602] das-1802hc [ 944.100304][T15602] das-1801ao [ 944.121201][T15602] das-1802ao [ 944.139054][T15602] comedi: valid board names for das800 driver are: [ 944.158341][ T5605] Bluetooth: hci1: command tx timeout [ 944.179557][T15602] das-800 [ 944.195212][T15602] cio-das800 [ 944.208329][T15602] das-801 [ 944.222975][T15602] cio-das801 [ 944.243550][T15602] das-802 [ 944.276953][T15602] cio-das802 [ 944.295136][T15602] cio-das802/16 [ 944.323629][T15602] comedi: valid board names for isa-das08 driver are: [ 944.369191][T15571] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.378438][T15602] isa-das08 [ 944.394606][T15602] das08-pgm [ 944.410442][T15571] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.417577][T15602] das08-pgh [ 944.432625][T15602] das08-pgl [ 944.445806][T15602] das08-aoh [ 944.450606][T15571] bridge_slave_0: entered allmulticast mode [ 944.465248][T15602] das08-aol [ 944.476408][T15571] bridge_slave_0: entered promiscuous mode [ 944.482598][T15602] das08-aom [ 944.491869][T15602] das08/jr-ao [ 944.516786][T15571] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.526375][T15602] das08jr-16-ao [ 944.540850][T15602] pc104-das08 [ 944.553022][T15602] das08jr/16 [ 944.556420][T15571] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.570406][T15602] comedi: valid board names for das16m1 driver are: [ 944.587635][T15571] bridge_slave_1: entered allmulticast mode [ 944.603783][T15602] das16m1 [ 944.615065][ T30] audit: type=1400 audit(1786075529.174:1469): avc: denied { write } for pid=15677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.640016][T15602] comedi: valid board names for dac02 driver are: [ 944.652432][T15571] bridge_slave_1: entered promiscuous mode [ 944.667383][T13521] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 944.694721][T15602] dac02 [ 944.711831][T15602] comedi: valid board names for rti802 driver are: [ 944.758689][T15602] rti802 [ 944.762078][T15703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.783719][T15602] comedi: valid board names for rti800 driver are: [ 944.793625][ T57] dummy0: left promiscuous mode [ 944.810031][T15703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.823823][T15602] rti800 [ 944.907660][T13521] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 945.683607][T15602] rti815 [ 945.686585][ T57] hsr_slave_0: left promiscuous mode [ 945.698141][T15602] comedi: valid board names for pcm3724 driver are: [ 945.709079][T15703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15703 comm=syz.5.2934 [ 945.724246][T13521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.732349][ T57] hsr_slave_1: left promiscuous mode [ 945.739191][ T30] audit: type=1400 audit(1786075530.304:1470): avc: denied { write } for pid=15704 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.772157][T15602] pcm3724 [ 945.782084][T15602] comedi: valid board names for pcl818 driver are: [ 945.813197][T15602] pcl818l [ 945.838957][T15602] pcl818h [ 945.859244][T15602] pcl818hd [ 945.888542][T15602] pcl818hg [ 945.901705][T15602] pcl818 [ 945.916924][T15602] pcl718 [ 945.924855][T15602] pcm3718 [ 945.944209][T15602] comedi: valid board names for pcl816 driver are: [ 945.951354][T15602] pcl816 [ 945.957523][T15602] pcl814b [ 945.964536][T15602] comedi: valid board names for pcl812 driver are: [ 945.981369][T15602] pcl812 [ 945.986731][T15602] pcl812pg [ 945.995128][T15602] acl8112pg [ 946.004377][T15602] acl8112dg [ 946.013765][T15602] acl8112hg [ 946.021401][T15602] a821pgl [ 946.029915][T15602] a821pglnda [ 946.045808][T15602] a821pgh [ 946.050088][T13521] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 946.056310][T15602] a822pgl [ 946.062937][T15602] a822pgh [ 946.087481][T15602] a823pgl [ 946.093746][T15602] a823pgh [ 946.100033][T15602] pcl813 [ 946.110058][T15602] pcl813b [ 946.118676][T15602] acl8113 [ 946.126103][T15602] iso813 [ 946.133517][T15602] acl8216 [ 946.141281][T15602] a826pg [ 946.150113][T15602] comedi: valid board names for pcl730 driver are: [ 946.162883][T15602] pcl730 [ 946.169123][T15602] iso730 [ 946.175439][T15602] acl7130 [ 946.184395][T15602] pcm3730 [ 946.193922][T15602] pcl725 [ 946.200139][T15602] p8r8dio [ 946.210412][T15602] acl7225b [ 946.215793][T15602] p16r16dio [ 946.222992][T15602] pcl733 [ 946.230913][T15602] pcl734 [ 946.236912][T15602] opmm-1616-xt [ 946.240582][ T5605] Bluetooth: hci1: command tx timeout [ 946.253549][T13521] usb 2-1: USB disconnect, device number 104 [ 946.264455][T15602] pearl-mm-p [ 946.281502][T15602] ir104-pbf [ 946.295880][T15602] comedi: valid board names for pcl726 driver are: [ 946.310035][T15602] pcl726 [ 946.316343][T15602] pcl727 [ 946.324139][T15602] pcl728 [ 946.334005][T15602] acl6126 [ 946.342984][T15602] acl6128 [ 946.350952][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 946.360287][T15602] comedi: valid board names for pcl724 driver are: [ 946.373613][T15571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.404669][T15602] pcl724 [ 946.419341][T15602] pcl722 [ 946.442492][T15602] pcl731 [ 946.446923][T15571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.469762][T15602] acl7122 [ 946.486163][T15602] acl7124 [ 946.495438][T15602] pet48dio [ 946.599574][T15602] pcmio48 [ 946.608623][T15602] onyx-mm-dio [ 946.616547][T15602] comedi: valid board names for pcl711 driver are: [ 946.881864][T15602] pcl711 [ 946.885199][T15571] team0: Port device team_slave_0 added [ 946.891823][T15602] pcl711b [ 946.906533][T15602] acl8112hg [ 946.911008][T15571] team0: Port device team_slave_1 added [ 947.715432][T15602] acl8112dg [ 947.725567][T15602] comedi: valid board names for amplc_pc263 driver are: [ 947.805421][T15602] pc263 [ 947.830925][T15602] comedi: valid board names for amplc_pc236 driver are: [ 947.900357][T15602] pc36at [ 947.907826][ T57] IPVS: stop unused estimator thread 0... [ 947.927613][T15571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.940787][T15602] comedi: valid board names for amplc_dio200 driver are: [ 947.999008][T15571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.028360][T15602] pc212e [ 948.058728][T15602] pc214e [ 948.072039][T15602] pc215e [ 948.093764][T15602] pc218e [ 948.106418][T15602] pc272e [ 948.122000][T15602] comedi: valid board names for comedi_parport driver are: [ 948.167299][T15602] comedi_parport [ 948.185120][T15571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.198425][T15602] comedi: valid board names for comedi_test driver are: [ 948.230981][T15602] comedi_test [ 948.237495][T13521] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 948.249857][T15571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.257162][T15602] comedi: valid board names for comedi_bond driver are: [ 948.284029][T15602] comedi_bond [ 948.289932][T15571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.418542][T15571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.429437][T13521] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 948.451280][T13521] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.506824][T13521] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 948.556667][T13521] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 948.580118][ T30] audit: type=1400 audit(1786075533.144:1471): avc: denied { write } for pid=15726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.643723][ T5697] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 948.665989][T15571] hsr_slave_0: entered promiscuous mode [ 948.671672][T13521] usb 3-1: Manufacturer: syz [ 948.696053][T13521] usb 3-1: config 0 descriptor?? [ 948.702633][T15571] hsr_slave_1: entered promiscuous mode [ 948.737609][T15571] debugfs: 'hsr0' already exists in 'hsr' [ 948.744914][T15748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.753565][T15748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.784600][T15571] Cannot create hsr debugfs directory [ 948.837390][T13521] rc_core: IR keymap rc-hauppauge not found [ 948.847967][ T5697] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 948.861873][T15752] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2945'. [ 948.881013][T13521] Registered IR keymap rc-empty [ 948.890495][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.900763][ T30] audit: type=1400 audit(1786075533.444:1472): avc: denied { write } for pid=15751 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.936229][T13521] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 948.977281][ T5697] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 948.999779][T13521] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input52 [ 949.020506][ T5697] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 949.055573][ T5697] usb 5-1: Manufacturer: syz [ 949.078539][T13521] usb 3-1: USB disconnect, device number 118 [ 949.095430][ T5697] usb 5-1: config 0 descriptor?? [ 949.110551][ T5256] 8021q: adding VLAN 0 to HW filter on device eth7 [ 949.277428][ T5697] rc_core: IR keymap rc-hauppauge not found [ 949.292417][ T5697] Registered IR keymap rc-empty [ 949.312266][ T5697] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 949.369798][ T5697] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input53 [ 949.436669][ T5697] usb 5-1: USB disconnect, device number 116 [ 950.026891][ T30] audit: type=1400 audit(1786075534.584:1473): avc: denied { mounton } for pid=15774 comm="syz.2.2948" path="/595/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 950.161545][ T30] audit: type=1400 audit(1786075534.694:1474): avc: denied { write } for pid=15758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.337526][ T5697] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 950.404625][ T30] audit: type=1400 audit(1786075534.964:1475): avc: denied { write } for pid=15785 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.511101][ T5697] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 950.554598][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.347456][ T5697] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 951.696257][T15797] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 951.705320][T15797] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 951.742926][ T5697] usb 5-1: USB disconnect, device number 117 [ 951.753641][T15794] comedi: valid board names for 8255 driver are: [ 951.802195][T15794] 8255 [ 951.833286][T15794] comedi: valid board names for vmk80xx driver are: [ 951.895289][T15794] vmk80xx [ 951.921254][T15794] comedi: valid board names for usbduxsigma driver are: [ 951.972732][T15794] usbduxsigma [ 951.992875][T15794] comedi: valid board names for usbduxfast driver are: [ 952.041174][T15794] usbduxfast [ 952.064976][T15794] comedi: valid board names for usbdux driver are: [ 952.121330][T15794] usbdux [ 952.144835][T15794] comedi: valid board names for ni6501 driver are: [ 952.196205][T15794] ni6501 [ 952.228148][T15794] comedi: valid board names for dt9812 driver are: [ 952.250398][T15810] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2957'. [ 952.275393][T15794] dt9812 [ 952.293952][T15794] comedi: valid board names for ni_labpc_cs driver are: [ 952.322552][T15814] scsi_dev_info_list_add_str: bad dev info string 'vendor' '' '' [ 952.335686][T15794] ni_labpc_cs [ 952.349759][T15794] comedi: valid board names for ni_daq_700 driver are: [ 952.376314][T15815] team0: No ports can be present during mode change [ 952.390263][T15794] ni_daq_700 [ 952.408048][T15794] comedi: valid board names for labpc_pci driver are: [ 952.445512][ T30] audit: type=1400 audit(1786075537.004:1476): avc: denied { write } for pid=15796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 952.487621][T15794] labpc_pci [ 952.506805][T15794] comedi: valid board names for adl_pci9118 driver are: [ 952.643645][T15794] pci9118dg [ 952.669673][T15794] pci9118hg [ 952.826288][T15794] pci9118hr [ 952.841376][T15794] comedi: valid board names for 8255_pci driver are: [ 952.852246][ T30] audit: type=1400 audit(1786075537.384:1477): avc: denied { setopt } for pid=15822 comm="syz.2.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 952.901539][T15794] 8255_pci [ 952.913312][T15571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 952.924851][T15794] comedi: valid board names for s526 driver are: [ 952.947303][T15794] s526 [ 952.963282][T15571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 952.972802][T15794] comedi: valid board names for multiq3 driver are: [ 952.988860][ T30] audit: type=1400 audit(1786075537.514:1478): avc: denied { write } for pid=15825 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.023554][T15571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 953.033693][T15794] multiq3 [ 953.042731][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2961'. [ 953.052335][T15794] comedi: valid board names for pcmuio driver are: [ 953.068998][T15794] pcmuio48 [ 953.077901][T15571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 953.086565][T15794] pcmuio96 [ 953.100254][T15794] comedi: valid board names for pcmmio driver are: [ 953.113293][T15571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 953.121944][T13521] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 953.143675][T15794] pcmmio [ 953.159219][T15794] comedi: valid board names for pcmda12 driver are: [ 953.171384][T15571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 953.183906][T15794] pcmda12 [ 953.189515][T15794] comedi: valid board names for pcmad driver are: [ 953.197923][T15571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 953.211929][T15794] pcmad12 [ 953.219653][T15571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 953.231127][T15794] pcmad16 [ 953.240276][T15794] comedi: valid board names for ni_labpc driver are: [ 953.273177][T15794] lab-pc-1200 [ 953.287750][T15794] lab-pc-1200ai [ 953.297400][T13521] usb 3-1: Using ep0 maxpacket: 8 [ 953.310339][T15794] lab-pc+ [ 953.317573][T13521] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 953.334181][T15794] comedi: valid board names for atmio16 driver are: [ 953.414995][T13521] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 953.436109][T15794] atmio16 [ 953.462064][T15794] atmio16d [ 953.473210][T13521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.489919][T15794] comedi: valid board names for ni_at_ao driver are: [ 953.523091][T13521] usb 3-1: Product: syz [ 953.531864][T15794] at-ao-6 [ 953.546201][T15794] at-ao-10 [ 953.555753][T13521] usb 3-1: Manufacturer: 찲Ḧ샻䒏ᢒ㿈䩿鶭룃颓뺒웜ॷ眸Հ䃮밲񴃘ဈ撧碓롥맒䋕泰㠥ⷤ剥콎椶朋폡紑误ﳼ㸰邏ꇘ夕ꁂ疴의뾞ҥ꠿৵촴雳芸ꆢ쥽鸽횡쨵䰧⍯ᇾᷚ쪖챰靶峍둇东떠糴皂八쳁始㺖⦸冟퐞䓠笓돳䔖㩅붂愛灨덗⡓栱ا儸蓤쟸裾悦觱㴀˨㟰䃩ￓ쀲螯ၮサ∂䐼➀ꏭ앁䯥 [ 953.604514][T15794] comedi: valid board names for ni_at_a2150 driver are: [ 953.620556][T15571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.648990][T15794] ni_at_a2150 [ 953.659963][T15794] comedi: valid board names for adq12b driver are: [ 954.287320][T15571] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.570544][T15794] adq12b [ 954.580865][T15794] comedi: valid board names for mpc624 driver are: [ 954.614801][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.621947][ T9547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.632577][T15794] mpc624 [ 954.644583][T15794] comedi: valid board names for c6xdigio driver are: [ 954.657003][T13521] usb 3-1: SerialNumber: syz [ 954.680783][T15794] c6xdigio [ 954.702073][T15794] comedi: valid board names for aio_iiro_16 driver are: [ 954.718741][ T9547] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.725921][ T9547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.750204][T15794] aio_iiro_16 [ 954.765333][T15794] comedi: valid board names for aio_aio12_8 driver are: [ 954.799982][T15794] aio_aio12_8 [ 954.822886][T15794] aio_ai12_8 [ 954.843643][T15794] aio_ao12_4 [ 954.863334][T15794] comedi: valid board names for fl512 driver are: [ 954.904230][T15794] fl512 [ 954.922157][T15794] comedi: valid board names for dmm32at driver are: [ 954.935111][T13521] cdc_ncm 3-1:1.0: bind() failure [ 954.974591][T15794] dmm32at [ 954.983752][T13521] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 955.005183][T15794] comedi: valid board names for dt282x driver are: [ 955.017586][ T5697] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 955.044682][T13521] cdc_ncm 3-1:1.1: bind() failure [ 955.058138][T15794] dt2821 [ 955.066827][ T30] audit: type=1400 audit(1786075539.624:1479): avc: denied { write } for pid=15841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.100816][T15794] dt2821-f [ 955.112504][T15794] dt2821-g [ 955.115673][T13521] usb 3-1: USB disconnect, device number 119 [ 955.141853][T15794] dt2823 [ 955.166830][T15794] dt2824-pgh [ 955.196628][T15794] dt2824-pgl [ 955.213016][ T5697] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 955.225518][T15794] dt2825 [ 955.242430][T15794] dt2827 [ 955.251841][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.272768][T15794] dt2828 [ 955.290224][T15794] dt2829 [ 955.306862][T15794] dt21-ez [ 955.339832][T15794] dt23-ez [ 955.366073][T15794] dt24-ez [ 955.390717][T15794] dt24-ez-pgl [ 955.397003][ T30] audit: type=1400 audit(1786075539.954:1480): avc: denied { write } for pid=15870 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.435878][T15794] comedi: valid board names for dt2817 driver are: [ 955.475063][T15794] dt2817 [ 955.492105][T15794] comedi: valid board names for dt2815 driver are: [ 955.534711][ T5697] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 955.550318][T15794] dt2815 [ 955.574375][T15794] comedi: valid board names for dt2814 driver are: [ 955.631428][T15794] dt2814 [ 955.649839][T15794] comedi: valid board names for dt2811 driver are: [ 955.698889][T15794] dt2811-pgh [ 955.718460][T15794] dt2811-pgl [ 955.731018][T13521] usb 5-1: USB disconnect, device number 118 [ 955.753255][T15794] comedi: valid board names for dt2801 driver are: [ 955.802280][T15794] dt2801 [ 955.828757][T15794] comedi: valid board names for das6402 driver are: [ 955.875865][T15794] das6402-12 [ 955.894887][T15794] das6402-16 [ 955.948982][T15794] comedi: valid board names for das1800 driver are: [ 955.969319][T15892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.977965][T15892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.008293][T15794] das-1701st [ 956.023394][T15794] das-1701st-da [ 956.039384][T15794] das-1702st [ 956.054577][T15794] das-1702st-da [ 956.073193][T15794] das-1702hr [ 956.087740][T15794] das-1702hr-da [ 956.105600][T15794] das-1701ao [ 956.122411][T15571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.131384][T15794] das-1702ao [ 956.141307][T15794] das-1801st [ 956.152548][T15794] das-1801st-da [ 956.167970][T15794] das-1802st [ 956.183859][T15794] das-1802st-da [ 956.203257][T15794] das-1802hr [ 956.216633][T15794] das-1802hr-da [ 956.236588][T15794] das-1801hc [ 956.241276][T15571] veth0_vlan: entered promiscuous mode [ 956.256187][T15794] das-1802hc [ 956.276227][T15794] das-1801ao [ 956.302438][T15794] das-1802ao [ 956.305806][ T30] audit: type=1400 audit(1786075540.864:1481): avc: denied { write } for pid=15883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.331911][T15571] veth1_vlan: entered promiscuous mode [ 956.345682][T15794] comedi: valid board names for das800 driver are: [ 956.383451][T15794] das-800 [ 956.401744][T15794] cio-das800 [ 956.419170][T15794] das-801 [ 956.440583][T15571] veth0_macvtap: entered promiscuous mode [ 956.446543][T15794] cio-das801 [ 956.465333][T15794] das-802 [ 956.484429][T15794] cio-das802 [ 956.502858][T15571] veth1_macvtap: entered promiscuous mode [ 956.518530][T15794] cio-das802/16 [ 956.540714][T15794] comedi: valid board names for isa-das08 driver are: [ 956.579306][ T30] audit: type=1400 audit(1786075541.134:1482): avc: denied { write } for pid=15906 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.623752][T15794] isa-das08 [ 956.629717][T15571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.648796][T15794] das08-pgm [ 956.806240][T15794] das08-pgh [ 957.536232][T15794] das08-pgl [ 957.540599][T15571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.563979][T15794] das08-aoh [ 957.599046][T15794] das08-aol [ 957.624665][T15794] das08-aom [ 957.733102][T15794] das08/jr-ao [ 957.773329][T15794] das08jr-16-ao [ 957.867289][ T9547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.896944][T15794] pc104-das08 [ 957.914304][T15794] das08jr/16 [ 957.925741][ T9547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.936456][T15794] comedi: valid board names for das16m1 driver are: [ 957.966535][T15794] das16m1 [ 958.013546][ T9547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.029747][T15794] comedi: valid board names for dac02 driver are: [ 958.096730][T15794] dac02 [ 958.105095][ T9547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.123511][T15794] comedi: valid board names for rti802 driver are: [ 958.151355][T15794] rti802 [ 958.167868][T15794] comedi: valid board names for rti800 driver are: [ 958.276304][T15794] rti800 [ 958.289591][T15794] rti815 [ 958.305828][T15794] comedi: valid board names for pcm3724 driver are: [ 958.328276][ T9547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.351773][T15794] pcm3724 [ 958.361316][ T30] audit: type=1400 audit(1786075542.924:1483): avc: denied { create } for pid=15927 comm="syz.4.2980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 958.382685][T15794] comedi: valid board names for pcl818 driver are: [ 958.389255][ T9547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.413753][T15794] pcl818l [ 958.427329][T15794] pcl818h [ 958.436562][T15794] pcl818hd [ 958.452340][T15794] pcl818hg [ 958.460349][T15794] pcl818 [ 958.479567][T15794] pcl718 [ 958.499557][T15794] pcm3718 [ 958.512576][T15794] comedi: valid board names for pcl816 driver are: [ 958.541117][T15794] pcl816 [ 958.554222][T15794] pcl814b [ 958.661717][T15794] comedi: valid board names for pcl812 driver are: [ 959.164854][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.190582][T15794] pcl812 [ 959.250574][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.270516][ T30] audit: type=1400 audit(1786075543.824:1484): avc: denied { write } for pid=15915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.295603][T15794] pcl812pg [ 959.319501][T15794] acl8112pg [ 959.343359][T15794] acl8112dg [ 959.369459][T15794] acl8112hg [ 959.389972][T15794] a821pgl [ 959.421436][T15794] a821pglnda [ 959.451190][T15794] a821pgh [ 959.474756][T15794] a822pgl [ 959.479843][ T30] audit: type=1400 audit(1786075543.894:1485): avc: denied { mounton } for pid=15571 comm="syz-executor" path="/root/syzkaller.hDMxG9/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 959.508420][T15941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.519676][T15794] a822pgh [ 959.536597][T15794] a823pgl [ 959.545604][T15794] a823pgh [ 959.555857][T15941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.567952][T15794] pcl813 [ 959.584151][T15794] pcl813b [ 959.604546][T15794] acl8113 [ 959.625069][T15794] iso813 [ 959.652880][ T30] audit: type=1400 audit(1786075543.994:1486): avc: denied { mounton } for pid=15571 comm="syz-executor" path="/root/syzkaller.hDMxG9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=70136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 959.684101][T15794] acl8216 [ 959.716778][T15794] a826pg [ 959.743182][T15794] comedi: valid board names for pcl730 driver are: [ 959.780688][T15794] pcl730 [ 959.811529][T15794] iso730 [ 959.822893][T15794] acl7130 [ 959.860129][T15794] pcm3730 [ 959.881913][T15794] pcl725 [ 959.899119][ T30] audit: type=1400 audit(1786075544.034:1487): avc: denied { mounton } for pid=15571 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 959.932665][T15794] p8r8dio [ 959.956580][T15794] acl7225b [ 959.980328][T15794] p16r16dio [ 959.996667][T15794] pcl733 [ 960.016119][T15794] pcl734 [ 960.041996][T15794] opmm-1616-xt [ 960.061636][T15794] pearl-mm-p [ 960.088574][ T30] audit: type=1400 audit(1786075544.034:1488): avc: denied { mount } for pid=15571 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 960.111312][T15794] ir104-pbf [ 960.133865][T15794] comedi: valid board names for pcl726 driver are: [ 960.193399][T15794] pcl726 [ 960.200784][T12006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 960.219022][T15946] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 960.242318][T12006] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 960.256498][T12006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 960.265219][T12006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 960.272569][T12006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 960.294222][T15794] pcl727 [ 960.339379][T15794] pcl728 [ 960.353606][T15794] acl6126 [ 960.359163][T15946] device-mapper: ioctl: error adding target to table [ 960.377894][ T30] audit: type=1400 audit(1786075544.034:1489): avc: denied { mounton } for pid=15571 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 960.405240][T15794] acl6128 [ 960.425727][T15794] comedi: valid board names for pcl724 driver are: [ 961.333811][T15794] pcl724 [ 961.362220][T15794] pcl722 [ 961.394512][T15794] pcl731 [ 961.413798][T15794] acl7122 [ 961.431810][T15794] acl7124 [ 961.453891][ T30] audit: type=1400 audit(1786075544.144:1490): avc: denied { write } for pid=15942 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.490167][T15794] pet48dio [ 961.535347][T15794] pcmio48 [ 961.555390][T15794] onyx-mm-dio [ 961.588053][T15794] comedi: valid board names for pcl711 driver are: [ 961.644714][T15794] pcl711 [ 962.317272][ T5605] Bluetooth: hci4: command tx timeout [ 962.358960][T15794] pcl711b [ 962.560393][T15794] acl8112hg [ 962.658589][T15794] acl8112dg [ 962.690073][T15794] comedi: valid board names for amplc_pc263 driver are: [ 962.746046][T15794] pc263 [ 962.767283][T15794] comedi: valid board names for amplc_pc236 driver are: [ 962.784569][ T30] audit: type=1400 audit(1786075547.334:1491): avc: denied { write } for pid=15949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.840174][T15794] pc36at [ 962.865368][T15794] comedi: valid board names for amplc_dio200 driver are: [ 962.910217][T15794] pc212e [ 962.925103][T15794] pc214e [ 962.943293][T15794] pc215e [ 962.962958][T15794] pc218e [ 962.980544][T15794] pc272e [ 963.002870][T15794] comedi: valid board names for comedi_parport driver are: [ 963.046235][T15794] comedi_parport [ 963.061962][T15794] comedi: valid board names for comedi_test driver are: [ 963.087090][ T30] audit: type=1400 audit(1786075547.644:1492): avc: denied { write } for pid=15979 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.119209][T15794] comedi_test [ 963.138069][T15794] comedi: valid board names for comedi_bond driver are: [ 963.194500][T15794] comedi_bond [ 963.206575][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2984'. [ 963.560476][T16006] nfs4: Bad value for 'port' [ 963.745723][T16015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2996'. [ 963.795168][T15952] lo speed is unknown, defaulting to 1000 [ 964.397350][ T5605] Bluetooth: hci4: command tx timeout [ 964.413448][ T30] audit: type=1400 audit(1786075548.974:1493): avc: denied { write } for pid=15990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 964.630645][ T30] audit: type=1400 audit(1786075549.194:1494): avc: denied { write } for pid=16029 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.000834][T16035] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3000'. [ 965.020418][T16035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3000'. [ 965.040565][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 966.483562][ T5605] Bluetooth: hci4: command tx timeout [ 967.310299][ T30] audit: type=1400 audit(1786075551.874:1495): avc: denied { write } for pid=16053 comm="syz.0.3007" name="usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 967.376649][ T30] audit: type=1400 audit(1786075551.934:1496): avc: denied { load_policy } for pid=16053 comm="syz.0.3007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 967.418299][T16054] SELinux: invalid class [ 967.441571][T16054] SELinux: failed to load policy [ 968.043244][T16058] tipc: Started in network mode [ 968.058810][T16058] tipc: Node identity ac14140f, cluster identity 4711 [ 968.080414][T16058] tipc: New replicast peer: 255.255.255.255 [ 968.095353][T16058] tipc: Enabled bearer , priority 10 [ 968.259445][ T30] audit: type=1400 audit(1786075552.824:1497): avc: denied { ioctl } for pid=16067 comm="syz.1.3012" path="socket:[70802]" dev="sockfs" ino=70802 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 968.350474][ T30] audit: type=1400 audit(1786075552.854:1498): avc: denied { listen } for pid=16067 comm="syz.1.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 968.557489][ T5605] Bluetooth: hci4: command tx timeout [ 968.703995][ T9547] bridge_slave_1: left allmulticast mode [ 968.722717][ T9547] bridge_slave_1: left promiscuous mode [ 968.742741][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.767448][ T5715] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 968.850820][ T9547] veth3: left allmulticast mode [ 968.871537][ T9547] veth3: left promiscuous mode [ 968.896939][ T9547] bridge1: port 1(veth3) entered disabled state [ 968.938724][ T9547] pim6reg: left allmulticast mode [ 969.007226][ T5715] usb 2-1: Using ep0 maxpacket: 8 [ 969.043882][ T5715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.083636][ T5715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 969.116199][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 969.141867][ T30] audit: type=1400 audit(1786075553.694:1499): avc: denied { write } for pid=16078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.195192][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 969.234641][ T5715] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 969.271020][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.308879][ T30] audit: type=1400 audit(1786075553.874:1500): avc: denied { write } for pid=16100 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.349689][ T5715] hub 2-1:1.0: bad descriptor, ignoring hub [ 969.377984][ T5715] hub 2-1:1.0: probe with driver hub failed with error -5 [ 969.416779][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 969.444921][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 969.463134][ T5715] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 969.481646][ T5715] cdc_wdm 2-1:1.0: Unknown control protocol [ 969.490966][ T9547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.506377][ T9547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.521736][ T9547] bond0 (unregistering): Released all slaves [ 969.531236][ T9547] bond1 (unregistering): Released all slaves [ 969.543725][ T9547] bond2 (unregistering): Released all slaves [ 969.568365][ T30] audit: type=1400 audit(1786075554.124:1501): avc: denied { read write } for pid=16075 comm="syz.1.3013" name="cdc-wdm0" dev="devtmpfs" ino=4220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 969.599985][ T9547] bond3 (unregistering): Released all slaves [ 969.622506][ T9547] bond4 (unregistering): Released all slaves [ 969.642985][ T30] audit: type=1400 audit(1786075554.124:1502): avc: denied { open } for pid=16075 comm="syz.1.3013" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 969.735006][ T30] audit: type=1400 audit(1786075554.294:1503): avc: denied { recv } for pid=16082 comm="syz.4.3014" saddr=10.128.0.169 src=30006 daddr=10.128.0.31 dest=53670 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 969.796393][ T9] tipc: Node number set to 2886997007 [ 969.842141][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 969.922921][T16077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.943761][ T9547] tipc: Disabling bearer [ 969.965100][ T9547] tipc: Disabling bearer [ 969.981406][T16077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.992427][ T9547] tipc: Left network mode [ 969.999540][T16114] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 970.072545][T15952] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.124362][T15952] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.143004][T16119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.160955][T15952] bridge_slave_0: entered allmulticast mode [ 970.189186][T16119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.200551][T15952] bridge_slave_0: entered promiscuous mode [ 970.231261][T15952] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.259319][T15952] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.275877][T15952] bridge_slave_1: entered allmulticast mode [ 970.302525][T15952] bridge_slave_1: entered promiscuous mode [ 970.311052][ T5732] usb 2-1: USB disconnect, device number 105 [ 970.419890][ T9547] hsr_slave_0: left promiscuous mode [ 970.430240][ T9547] hsr_slave_1: left promiscuous mode [ 970.440424][ T9547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.456412][ T9547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.604446][ T30] audit: type=1400 audit(1786075555.164:1504): avc: denied { write } for pid=16120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.076085][ T9547] team0 (unregistering): Port device team_slave_1 removed [ 971.092656][ T9547] team0 (unregistering): Port device team_slave_0 removed [ 971.265194][T15952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.302879][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 971.334450][T15952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.444080][T16156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.456693][T16150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3025'. [ 971.487680][T15952] team0: Port device team_slave_0 added [ 971.494599][T16156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.529564][T15952] team0: Port device team_slave_1 added [ 972.604765][T15952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.676313][T15952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.820226][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 972.820238][ T30] audit: type=1400 audit(1786075557.274:1506): avc: denied { connect } for pid=16164 comm="syz.0.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 972.963374][T16170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.089718][T15952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.112426][T16170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.199216][T15952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.216295][T16179] CUSE: info not properly terminated [ 973.246709][T15952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.417411][T15952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.454217][T16181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.481795][ T30] audit: type=1400 audit(1786075558.044:1507): avc: denied { bind } for pid=16188 comm="syz.4.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 973.522891][T16181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.553482][ T9547] IPVS: stop unused estimator thread 0... [ 973.593186][T16189] can0: slcan on ttyS3. [ 973.760672][T16188] can0 (unregistered): slcan off ttyS3. [ 973.788427][T15952] hsr_slave_0: entered promiscuous mode [ 973.801715][ T30] audit: type=1400 audit(1786075558.364:1508): avc: denied { write } for pid=16168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.850066][T15952] hsr_slave_1: entered promiscuous mode [ 973.884075][T15952] debugfs: 'hsr0' already exists in 'hsr' [ 973.919447][T15952] Cannot create hsr debugfs directory [ 974.032519][ T30] audit: type=1400 audit(1786075558.594:1509): avc: denied { write } for pid=16203 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.262101][ T5256] 8021q: adding VLAN 0 to HW filter on device eth7 [ 976.722121][T16233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3048'. [ 977.253149][T16247] xt_CONNSECMARK: invalid mode: 0 [ 977.409330][T16239] 8021q: adding VLAN 0 to HW filter on device bond7 [ 977.456617][T16239] bond6: (slave bond7): Enslaving as an active interface with an up link [ 977.555593][ T30] audit: type=1400 audit(1786075562.114:1510): avc: denied { write } for pid=16226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.588560][ T5732] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 977.755771][ T30] audit: type=1400 audit(1786075562.314:1511): avc: denied { write } for pid=16265 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.784299][ T5732] usb 5-1: Using ep0 maxpacket: 8 [ 977.812028][ T5732] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.934183][ T5732] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 978.865812][ T5732] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 978.915657][ T5732] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 978.990575][ T5732] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 979.040645][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.106639][ T5732] hub 5-1:1.0: bad descriptor, ignoring hub [ 979.179306][ T5732] hub 5-1:1.0: probe with driver hub failed with error -5 [ 979.230016][ T5732] cdc_wdm 5-1:1.0: skipping garbage [ 979.260023][ T5732] cdc_wdm 5-1:1.0: skipping garbage [ 979.299195][ T5732] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 979.349485][ T5732] cdc_wdm 5-1:1.0: Unknown control protocol [ 979.545595][T16253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.595100][T16253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.634326][T16292] ip6erspan0: entered promiscuous mode [ 979.768113][ T9] usb 5-1: USB disconnect, device number 119 [ 979.910089][ T30] audit: type=1400 audit(1786075564.474:1512): avc: denied { write } for pid=16277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.971794][T15952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 980.025370][T15952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 980.066181][T15952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 980.116997][T15952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 980.145750][ T30] audit: type=1400 audit(1786075564.704:1513): avc: denied { write } for pid=16307 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.190108][T15952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 980.255346][T15952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 980.320011][T15952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 981.250476][T15952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 981.275601][T16321] netlink: 'syz.1.3069': attribute type 1 has an invalid length. [ 981.287324][T16319] lo: entered allmulticast mode [ 981.307084][T16316] lo: left allmulticast mode [ 981.320826][T16321] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3069'. [ 981.709285][T15952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.785119][ T30] audit: type=1400 audit(1786075566.344:1514): avc: denied { read write } for pid=16350 comm="syz.1.3077" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 981.813358][T15952] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.885331][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.892472][ T9547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.953829][ T30] audit: type=1400 audit(1786075566.344:1515): avc: denied { open } for pid=16350 comm="syz.1.3077" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 982.022844][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.029994][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.079694][T13521] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 982.167945][ T30] audit: type=1400 audit(1786075566.344:1516): avc: denied { ioctl } for pid=16350 comm="syz.1.3077" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 982.202153][T15952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 982.287667][T16368] random: crng reseeded on system resumption [ 982.298582][T13521] usb 2-1: Using ep0 maxpacket: 8 [ 982.303748][T15952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 982.341610][T13521] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.384334][ T30] audit: type=1400 audit(1786075566.464:1517): avc: denied { search } for pid=16355 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.435246][T13521] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 982.502250][T13521] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 982.561275][ T30] audit: type=1400 audit(1786075566.464:1518): avc: denied { search } for pid=16355 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.584987][ T5715] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 982.606933][T13521] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 982.670048][T13521] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 982.724113][T13521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.734766][ T30] audit: type=1400 audit(1786075566.464:1519): avc: denied { search } for pid=16355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.768884][T16379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.782496][ T5715] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 982.811658][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.828062][T13521] hub 2-1:1.0: bad descriptor, ignoring hub [ 982.835389][T16379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.873016][T13521] hub 2-1:1.0: probe with driver hub failed with error -5 [ 982.955716][ T30] audit: type=1400 audit(1786075566.464:1520): avc: denied { search } for pid=16355 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.981084][T13521] cdc_wdm 2-1:1.0: skipping garbage [ 983.015611][T13521] cdc_wdm 2-1:1.0: skipping garbage [ 983.060476][T13521] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 983.082112][T16385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.100184][T13521] cdc_wdm 2-1:1.0: Unknown control protocol [ 983.109811][ T5715] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 983.133060][T16385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.142654][ T30] audit: type=1400 audit(1786075566.484:1521): avc: denied { recv } for pid=16336 comm="syz.5.3072" saddr=10.128.0.169 src=30006 daddr=10.128.0.31 dest=53670 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 983.209456][T16385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.231230][T16385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.305150][T13521] usb 5-1: USB disconnect, device number 120 [ 983.387844][ T5715] usb 2-1: USB disconnect, device number 106 [ 983.636585][T15952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.731999][T16407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.774448][T15952] veth0_vlan: entered promiscuous mode [ 983.782720][T16407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.833201][T15952] veth1_vlan: entered promiscuous mode [ 983.929478][T16414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=16414 comm=syz.4.3087 [ 983.949365][T15952] veth0_macvtap: entered promiscuous mode [ 983.994423][T15952] veth1_macvtap: entered promiscuous mode [ 984.084332][T15952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.136095][T15952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.259507][T12200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.325563][T12200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.437194][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.516530][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.687750][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.735307][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.939508][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.009642][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.154966][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 985.154985][ T30] audit: type=1400 audit(1786075569.714:1600): avc: denied { mounton } for pid=15952 comm="syz-executor" path="/root/syzkaller.f7bmGI/syz-tmp" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 986.091615][ T5732] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 986.327102][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 986.334136][ T30] audit: type=1400 audit(1786075570.494:1601): avc: denied { unlink } for pid=16454 comm="syz.5.3097" name="#60" dev="tmpfs" ino=2203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 986.389390][ T5732] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.329903][ T5732] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 987.401977][ T30] audit: type=1400 audit(1786075570.494:1602): avc: denied { mount } for pid=16454 comm="syz.5.3097" name="/" dev="overlay" ino=2197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 987.430686][ T5732] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 987.518664][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.530258][ T5732] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 987.605692][ T30] audit: type=1400 audit(1786075570.514:1603): avc: denied { name_bind } for pid=16454 comm="syz.5.3097" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 987.636787][ T5732] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 987.723380][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.891732][ T5732] hub 2-1:1.0: bad descriptor, ignoring hub [ 987.900432][ T30] audit: type=1400 audit(1786075570.524:1604): avc: denied { mount } for pid=15952 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 987.935579][T16490] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3106'. [ 987.952915][ T5732] hub 2-1:1.0: probe with driver hub failed with error -5 [ 988.032225][ T5732] cdc_wdm 2-1:1.0: skipping garbage [ 988.076150][ T5732] cdc_wdm 2-1:1.0: skipping garbage [ 988.133019][T12006] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 988.147237][ T30] audit: type=1400 audit(1786075570.544:1605): avc: denied { mounton } for pid=15952 comm="syz-executor" path="/root/syzkaller.f7bmGI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 988.190268][T12006] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 988.204493][T12006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 988.216250][ T5732] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 988.243624][T12006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 988.258545][T12006] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 988.323243][ T5732] cdc_wdm 2-1:1.0: Unknown control protocol [ 988.434667][ T5732] usb 2-1: USB disconnect, device number 107 [ 988.521752][ T30] audit: type=1400 audit(1786075570.544:1607): avc: denied { execmem } for pid=16457 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 989.716408][ T30] audit: type=1400 audit(1786075570.544:1608): avc: denied { mmap_zero } for pid=16457 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 989.898534][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3114'. [ 989.930581][ T30] audit: type=1400 audit(1786075570.544:1609): avc: denied { create } for pid=16457 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 990.397368][T12006] Bluetooth: hci2: command tx timeout [ 990.961901][ T30] audit: type=1400 audit(1786075570.544:1606): avc: denied { mounton } for pid=15952 comm="syz-executor" path="/root/syzkaller.f7bmGI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=73285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 991.149727][ T30] audit: type=1400 audit(1786075570.544:1610): avc: denied { setopt } for pid=16457 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 991.265339][ T30] audit: type=1400 audit(1786075570.544:1611): avc: denied { ioctl } for pid=16457 comm="syz.0.3098" path="socket:[73287]" dev="sockfs" ino=73287 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 991.485992][ T30] audit: type=1400 audit(1786075570.544:1612): avc: denied { bind } for pid=16457 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 991.694480][ T30] audit: type=1400 audit(1786075570.544:1613): avc: denied { write } for pid=16457 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 991.831639][ T30] audit: type=1800 audit(1786075570.634:1614): pid=16459 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3097" name="file0" dev="overlay" ino=2205 res=0 errno=0 [ 992.477141][T12006] Bluetooth: hci2: command tx timeout [ 993.012307][T16575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.044233][ T30] audit: type=1400 audit(1786075570.664:1615): avc: denied { unmount } for pid=15952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 993.069333][T16493] lo speed is unknown, defaulting to 1000 [ 993.106154][T16575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.291643][T16575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.316644][ T30] audit: type=1400 audit(1786075570.684:1616): avc: denied { mounton } for pid=15952 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 993.366457][T16575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.500274][ T30] audit: type=1400 audit(1786075570.684:1617): avc: denied { mount } for pid=15952 comm="syz-executor" name="/" dev="gadgetfs" ino=7590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 993.594100][ T30] audit: type=1400 audit(1786075570.704:1618): avc: denied { write } for pid=16456 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.684585][T16588] syzkaller0: entered promiscuous mode [ 993.712789][T16588] syzkaller0: entered allmulticast mode [ 994.238440][T16607] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3133'. [ 994.560997][T12006] Bluetooth: hci2: command tx timeout [ 994.595040][T16616] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 994.727746][ T5715] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 994.780102][ T13] bond4 (unregistering): (slave erspan0): Releasing active interface [ 995.698287][ T5715] usb 3-1: Using ep0 maxpacket: 8 [ 995.708418][ T5715] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 995.730123][ T5715] usb 3-1: config 0 has no interface number 0 [ 995.746992][ T13] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 995.760413][ T5715] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 995.789061][ T5715] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 995.844158][ T13] bond1 (unregistering): Released all slaves [ 995.871706][ T5715] usb 3-1: config 0 interface 200 has no altsetting 0 [ 995.891171][T16633] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 995.909309][ T13] bond2 (unregistering): Released all slaves [ 995.916356][ T5715] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 995.950623][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.963148][ T13] bond0 (unregistering): Released all slaves [ 995.982853][ T5715] usb 3-1: Product: syz [ 995.999243][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 995.999253][ T30] audit: type=1400 audit(1786075580.564:1684): avc: denied { ioctl } for pid=16632 comm="syz.0.3137" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 996.036339][ T5715] usb 3-1: Manufacturer: syz [ 996.044443][ T13] bond3 (unregistering): Released all slaves [ 996.058263][ T5715] usb 3-1: SerialNumber: syz [ 996.090719][ T13] bond4 (unregistering): Released all slaves [ 996.103133][ T5715] usb 3-1: config 0 descriptor?? [ 996.126435][ T13] bond5 (unregistering): Released all slaves [ 996.143809][ T30] audit: type=1400 audit(1786075580.594:1685): avc: denied { write } for pid=16632 comm="syz.0.3137" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 996.193879][T16608] pimreg: tun_chr_ioctl cmd 1074025672 [ 996.637124][T12006] Bluetooth: hci2: command tx timeout [ 997.214003][T16608] pimreg: ignored: set checksum enabled [ 997.427216][ T13] rxrpc: Leaked peer 195 {1} 127.0.0.1:7003 [ 997.452596][ T13] ================================================================== [ 997.460671][ T13] BUG: KASAN: slab-use-after-free in rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 997.469089][ T13] Read of size 8 at addr ffff888021766820 by task kworker/u8:1/13 [ 997.476873][ T13] [ 997.479186][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 997.479205][ T13] Tainted: [L]=SOFTLOCKUP [ 997.479209][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 997.479218][ T13] Workqueue: netns cleanup_net [ 997.479236][ T13] Call Trace: [ 997.479242][ T13] [ 997.479248][ T13] dump_stack_lvl+0x100/0x190 [ 997.479262][ T13] print_report+0x13d/0x4b0 [ 997.479278][ T13] ? __virt_addr_valid+0x239/0x430 [ 997.479292][ T13] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 997.479304][ T13] kasan_report+0xdf/0x1c0 [ 997.479323][ T13] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 997.479337][ T13] rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 997.479349][ T13] rxrpc_exit_net+0x83/0xc0 [ 997.479365][ T13] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 997.479380][ T13] ops_undo_list+0x2ee/0xab0 [ 997.479394][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 997.479405][ T13] ? cleanup_net+0x332/0x920 [ 997.479418][ T13] ? idr_destroy+0x62/0x2e0 [ 997.479435][ T13] cleanup_net+0x499/0x920 [ 997.479449][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 997.479463][ T13] ? rcu_is_watching+0x12/0xc0 [ 997.479480][ T13] process_one_work+0xa23/0x1940 [ 997.479494][ T13] ? __pfx_process_one_work+0x10/0x10 [ 997.479507][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 997.479520][ T13] worker_thread+0x5ef/0xe50 [ 997.479533][ T13] ? kthread+0x13a/0x450 [ 997.479542][ T13] ? __pfx_worker_thread+0x10/0x10 [ 997.479552][ T13] kthread+0x370/0x450 [ 997.479561][ T13] ? __pfx_kthread+0x10/0x10 [ 997.479571][ T13] ret_from_fork+0x72b/0xd50 [ 997.479586][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 997.479600][ T13] ? __switch_to+0x800/0x10f0 [ 997.479611][ T13] ? __pfx_kthread+0x10/0x10 [ 997.479620][ T13] ret_from_fork_asm+0x1a/0x30 [ 997.479639][ T13] [ 997.479643][ T13] [ 997.659968][ T13] Allocated by task 11623: [ 997.664360][ T13] kasan_save_stack+0x30/0x50 [ 997.669011][ T13] kasan_save_track+0x14/0x30 [ 997.673659][ T13] __kasan_kmalloc+0xaa/0xb0 [ 997.678217][ T13] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 997.683562][ T13] rxrpc_alloc_peer+0xa7/0x400 [ 997.688295][ T13] rxrpc_lookup_peer+0x168/0x680 [ 997.693202][ T13] rxrpc_kernel_lookup_peer+0xa8/0xe0 [ 997.698547][ T13] afs_merge_fs_addr4+0x1cd/0x4c0 [ 997.703549][ T13] afs_parse_text_addrs+0x655/0xa10 [ 997.708732][ T13] afs_lookup_cell+0xbb6/0x1940 [ 997.713558][ T13] afs_proc_cells_write+0x2a3/0x3a0 [ 997.718738][ T13] proc_simple_write+0x10e/0x1a0 [ 997.723665][ T13] proc_reg_write+0x240/0x330 [ 997.728320][ T13] vfs_write+0x2aa/0x1050 [ 997.732628][ T13] ksys_write+0x12a/0x250 [ 997.736943][ T13] do_syscall_64+0x115/0x870 [ 997.741514][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.747378][ T13] [ 997.749674][ T13] Freed by task 15: [ 997.753446][ T13] kasan_save_stack+0x30/0x50 [ 997.758092][ T13] kasan_save_track+0x14/0x30 [ 997.762754][ T13] kasan_save_free_info+0x3b/0x70 [ 997.767768][ T13] __kasan_slab_free+0x5f/0x80 [ 997.772516][ T13] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 997.777958][ T13] rcu_free_sheaf+0x1a/0xe0 [ 997.782434][ T13] rcu_core+0x5a2/0x10d0 [ 997.786657][ T13] handle_softirqs+0x1ea/0x9b0 [ 997.791389][ T13] run_ksoftirqd+0x38/0x60 [ 997.795772][ T13] smpboot_thread_fn+0x3d3/0xaa0 [ 997.800682][ T13] kthread+0x370/0x450 [ 997.804817][ T13] ret_from_fork+0x72b/0xd50 [ 997.809384][ T13] ret_from_fork_asm+0x1a/0x30 [ 997.814121][ T13] [ 997.816414][ T13] The buggy address belongs to the object at ffff888021766800 [ 997.816414][ T13] which belongs to the cache kmalloc-512 of size 512 [ 997.830433][ T13] The buggy address is located 32 bytes inside of [ 997.830433][ T13] freed 512-byte region [ffff888021766800, ffff888021766a00) [ 997.844117][ T13] [ 997.846425][ T13] The buggy address belongs to the physical page: [ 997.852800][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021767400 pfn:0x21764 [ 997.862835][ T13] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 997.871299][ T13] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 997.879777][ T13] page_type: f5(slab) [ 997.883822][ T13] raw: 00fff00000000240 ffff88813fe21c80 ffffea000162ec10 ffffea0000cc4510 [ 997.892374][ T13] raw: ffff888021767400 000000080010000b 00000000f5000000 0000000000000000 [ 997.900925][ T13] head: 00fff00000000240 ffff88813fe21c80 ffffea000162ec10 ffffea0000cc4510 [ 997.909569][ T13] head: ffff888021767400 000000080010000b 00000000f5000000 0000000000000000 [ 997.918207][ T13] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 997.926843][ T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 997.935831][ T13] page dumped because: kasan: bad access detected [ 997.942224][ T13] page_owner tracks the page as allocated [ 997.947911][ T13] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 158, tgid 158 (kworker/u8:6), ts 73391035084, free_ts 73372132640 [ 997.968465][ T13] post_alloc_hook+0xfd/0x120 [ 997.973127][ T13] get_page_from_freelist+0xf48/0x3530 [ 997.978741][ T13] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 997.984604][ T13] new_slab+0xa2/0x640 [ 997.988663][ T13] refill_objects+0xe3/0x410 [ 997.993225][ T13] __pcs_replace_empty_main+0x376/0x680 [ 997.998747][ T13] __kmalloc_noprof+0x66d/0x820 [ 998.003568][ T13] fib6_info_alloc+0x40/0x160 [ 998.008219][ T13] ip6_route_info_create+0x14c/0xad0 [ 998.013567][ T13] ip6_route_add+0x4b/0x1d0 [ 998.018051][ T13] addrconf_prefix_route+0x2fb/0x510 [ 998.023337][ T13] addrconf_add_linklocal+0x329/0x500 [ 998.028761][ T13] addrconf_addr_gen+0x364/0x3b0 [ 998.033771][ T13] addrconf_init_auto_addrs+0x1cb/0x780 [ 998.039302][ T13] addrconf_notify+0xa10/0x1ba0 [ 998.044128][ T13] notifier_call_chain+0x99/0x3f0 [ 998.049139][ T13] page last free pid 5593 tgid 5593 stack trace: [ 998.055435][ T13] __free_frozen_pages+0x79f/0x1090 [ 998.060614][ T13] qlist_free_all+0x47/0xf0 [ 998.065111][ T13] kasan_quarantine_reduce+0x1a0/0x1f0 [ 998.070549][ T13] __kasan_slab_alloc+0x69/0x90 [ 998.075386][ T13] __kmalloc_noprof+0x2bf/0x820 [ 998.080228][ T13] fib_create_info+0x5bf/0x4640 [ 998.085051][ T13] fib_table_insert+0x169/0x1c70 [ 998.089963][ T13] fib_magic+0x4d4/0x5c0 [ 998.094182][ T13] fib_add_ifaddr+0x16d/0x560 [ 998.098828][ T13] fib_netdev_event+0x3d6/0x710 [ 998.103648][ T13] notifier_call_chain+0x99/0x3f0 [ 998.108660][ T13] call_netdevice_notifiers_info+0xbe/0x110 [ 998.114544][ T13] __dev_notify_flags+0x12c/0x2e0 [ 998.119551][ T13] netif_change_flags+0x108/0x160 [ 998.124553][ T13] do_setlink.isra.0+0x1ac4/0x3e60 [ 998.129636][ T13] rtnl_newlink+0x11c2/0x2380 [ 998.134282][ T13] [ 998.136579][ T13] Memory state around the buggy address: [ 998.142175][ T13] ffff888021766700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 998.150299][ T13] ffff888021766780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 998.158328][ T13] >ffff888021766800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 998.166366][ T13] ^ [ 998.171457][ T13] ffff888021766880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 998.179486][ T13] ffff888021766900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 998.187531][ T13] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 998.335606][ T30] audit: type=1400 audit(1786075582.854:1686): avc: denied { write } for pid=5578 comm="syz-executor" path="pipe:[4544]" dev="pipefs" ino=4544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 998.415025][ T30] audit: type=1400 audit(1786075582.894:1687): avc: denied { recv } for pid=15952 comm="syz-executor" saddr=10.128.0.169 src=40466 daddr=10.128.0.31 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 998.463607][ T5590] process 9247 (syz.1.1095) no longer affine to cpu1 [ 998.576286][ T5715] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input54 [ 998.613475][T16607] 0: renamed from hsr0 [ 998.817251][ T30] audit: type=1400 audit(1786075583.324:1688): avc: denied { read } for pid=4946 comm="acpid" name="event3" dev="devtmpfs" ino=4245 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 998.856189][T16607] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 998.891211][ T5715] usb 3-1: USB disconnect, device number 120 [ 998.926439][ T30] audit: type=1400 audit(1786075583.324:1689): avc: denied { open } for pid=4946 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=4245 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 998.972067][T16607] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 999.058031][T16607] 0: entered allmulticast mode [ 999.087085][T16607] hsr_slave_0: entered allmulticast mode [ 999.092913][ T30] audit: type=1400 audit(1786075583.484:1690): avc: denied { read } for pid=4943 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 999.115096][T16607] hsr_slave_1: entered allmulticast mode [ 999.131655][T16607] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 999.174961][T13521] usb 6-1: USB disconnect, device number 11 [ 999.228878][ T30] audit: type=1400 audit(1786075583.484:1691): avc: denied { search } for pid=4943 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 999.319636][ T30] audit: type=1400 audit(1786075583.484:1692): avc: denied { write search } for pid=4943 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 999.582853][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 999.675962][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 999.683356][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.694177][ T13] Tainted: [L]=SOFTLOCKUP [ 999.698482][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 999.708531][ T13] Workqueue: netns cleanup_net [ 999.713287][ T13] Call Trace: [ 999.716550][ T13] [ 999.719478][ T13] dump_stack_lvl+0x100/0x190 [ 999.724143][ T13] vpanic+0x552/0x970 [ 999.728101][ T13] ? __pfx_vpanic+0x10/0x10 [ 999.732588][ T13] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 999.738206][ T13] panic+0xd1/0xe0 [ 999.741920][ T13] ? __pfx_panic+0x10/0x10 [ 999.746311][ T13] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 999.751929][ T13] ? preempt_schedule_common+0x42/0xc0 [ 999.757379][ T13] ? check_panic_on_warn+0x1f/0x90 [ 999.762476][ T13] check_panic_on_warn.cold+0x19/0x34 [ 999.767835][ T13] end_report.part.0+0x3a/0x90 [ 999.772588][ T13] kasan_report.cold+0xe/0x18 [ 999.777267][ T13] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 999.782891][ T13] rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 999.788338][ T13] rxrpc_exit_net+0x83/0xc0 [ 999.792828][ T13] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 999.798009][ T13] ops_undo_list+0x2ee/0xab0 [ 999.802650][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 999.807748][ T13] ? cleanup_net+0x332/0x920 [ 999.812328][ T13] ? idr_destroy+0x62/0x2e0 [ 999.816810][ T13] cleanup_net+0x499/0x920 [ 999.821209][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 999.826132][ T13] ? rcu_is_watching+0x12/0xc0 [ 999.830893][ T13] process_one_work+0xa23/0x1940 [ 999.835855][ T13] ? __pfx_process_one_work+0x10/0x10 [ 999.841223][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 999.846179][ T13] worker_thread+0x5ef/0xe50 [ 999.850774][ T13] ? kthread+0x13a/0x450 [ 999.855003][ T13] ? __pfx_worker_thread+0x10/0x10 [ 999.860176][ T13] kthread+0x370/0x450 [ 999.864234][ T13] ? __pfx_kthread+0x10/0x10 [ 999.868794][ T13] ret_from_fork+0x72b/0xd50 [ 999.873364][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 999.878454][ T13] ? __switch_to+0x800/0x10f0 [ 999.883100][ T13] ? __pfx_kthread+0x10/0x10 [ 999.887658][ T13] ret_from_fork_asm+0x1a/0x30 [ 999.892407][ T13] [ 999.895443][ T13] Kernel Offset: disabled [ 999.899746][ T13] Rebooting in 86400 seconds..