last executing test programs: 9m17.31344638s ago: executing program 4 (id=837): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400fffffffe0000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014000a800800010008000000060018000100000008000500", @ANYRES32=r1], 0x54}}, 0x0) 9m17.116099206s ago: executing program 4 (id=838): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x0, 0x30}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 9m16.622543158s ago: executing program 4 (id=839): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f8000000190001002dbd70000000000000000000000000895fa6270000000000fe8000000000000000000000000000bb0000000000000000", @ANYRES32=0x0, @ANYRES32], 0xf8}}, 0x0) socket$inet(0x2, 0x1, 0x101) r2 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffffd, [{0xa, 0x2, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x5f, 0x61, 0x0, 0x61]}}, 0x0, 0x4c}, 0x28) sendmmsg$inet6(r2, &(0x7f0000000280)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0x5, @mcast1, 0x6400}, 0x1c, 0x0}}], 0x1, 0x4008810) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r5, r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) bind$netlink(r10, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x44}}, 0x0) 9m15.079343167s ago: executing program 4 (id=843): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2298450, 0x0) 9m14.994983044s ago: executing program 4 (id=844): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x90000004}) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7000000, 0xfffffffffffffffd, 0x10000000000100}) 9m14.210598261s ago: executing program 4 (id=846): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x3f) 9m13.896003034s ago: executing program 32 (id=846): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x3f) 7m7.301009203s ago: executing program 0 (id=1339): getpid() fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r0 = socket(0x10, 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=0x0, @ANYRESHEX=r3, @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300)="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", 0x2000, &(0x7f00000017c0)={&(0x7f00000000c0)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0xffffffffd0065de0, 0x4, 0x8010, 0xfffffffc, 0x6, 0x0, 0x0, 0x20, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x48, 0x30, 0x100, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474043, 0x44, 0x1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x7) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) close(0x3) r6 = socket(0x28, 0x3, 0x1) connect$vsock_stream(r6, 0x0, 0x0) shutdown(r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 7m7.204568729s ago: executing program 0 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) syz_extract_tcp_res(&(0x7f0000000100), 0x6, 0x1) syz_extract_tcp_res(&(0x7f0000000140), 0x9, 0x81) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_emit_ethernet(0x31a, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="f002000190780007040213126c71eb91cc4e2b051e69cc40d71d89491312fb3a3ec735e72170a65f3f9506ea21b405160000000300000004000000010000000900008000fe06e2d4c3d9040e00000ec3000000af000000011312c5a2c60a4355945db7acac2d379d60e80204400000001904881683b8f4c85ba7af06e14e4b2f78ac23c96bdb37ff8e7cd9e041d87951b84af01d704e3f5a3dcd8dc6ad133a4eb465ace22905ebee7a448762a01e924ade0419f0ae691d9450484f2667b83de87d0a8c4b0cd5fbba3488bbcc289937542177d52fc9b984f90434fc2d6b70f771328578fc85cded4e348b62895a1d91894e6e970fa4798d956971f7ac98904f2f77b1893ff20a26026c846ad079bb311cf33a2c898139ad84d2fdfaac50ecce1d07616defdcb11d9f71b0188bfeedd0b150b4f5bd8ca21fc16d662845fcf81e9289e7ce967468998c83587461441e79d9ef395517111ed8346c5e13c4335f87d1f07bb92af5339c4a363dfb642a80d0fa26fa2868bfee1975ca6617a5df5bfd8ab5d8d8492b836ec976d8854fed1fd462e8c08269c441cd131d0e13b116fe8e1114bea9a774daa884e24e3b60b431c5b9c1e41bb1c215ae871b6ea9708bfe16d82a3e910b2745aef2655693fcfffefe46caf5f45b9145a1f6f9ece7f36ee724370e364dc813e306bd31772c66669ef9bb57e93d338f6a83bbfbb2fcea5371b4ebbcc42016f8d839464781d2b5f47d81de72942deea15c8e5be00cb868d3ab2f1cc0ac48c8aabcb3e03cb9c6e0e6f7548799ec5c38b399740982080d32b2f3b96761247bed2d346aa4817a59ce7f0066e7e356da531e9b4bc0937cd050b39732838eb27b3dfe88da9185de87a7d3285f06"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="04"], 0x1c}}, 0x20000010) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_deladdr={0x44, 0x15, 0x20, 0x70bd29, 0x25dfdbfe, {0xa, 0x20, 0x18, 0x0, r5}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x40}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x442}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000d}, 0x4004840) 7m5.011870544s ago: executing program 0 (id=1348): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1ff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="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"], 0x2338}, 0x1, 0x0, 0x0, 0x448d3}, 0x20008040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4d814b0191be74b70da7480500000000000000bd6fe9fdab541c306cccdf", @ANYRES32=0x0, @ANYRES16=r3], 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x24008094) 7m4.391016342s ago: executing program 0 (id=1350): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0xfe5f, 0x30010, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f00000001c0)="ddf9293032f88acfbf9a4db4d7e5471604ce43305c7ae18a9832f6e0bb62aa935c814845f2a8da2ddaf65a218929a756167809a00ea25eef7f3e718e31d5f9f045ea8352df5b645ca60727d0bbd96fa9e5cc127df8626296a20b97ddc7e5e0551ce3078c43a0ee8f8a23ab63fac3ef4ed72c6cc01cf7fc1b4ed3f194dc128460a2247f0bde17aa0859522dee9456fec64973e773909b70a0b0e665d2adf4ed1bdb2f2336d99f40e63b6917a36b6715", &(0x7f0000000000)=""/77}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000888}, 0x20000400) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x88000, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f00000003c0)={0x3c00, 0xf0, 0x640, 0x384, 0x420, 0x100, 0x8, 0x0, {0xfffffff9, 0x2}, {0x5, 0x8, 0x1}, {0x2, 0x13a7, 0x1}, {0x1, 0x40}, 0x1, 0x1, 0x9, 0xf, 0x1, 0x1, 0x1, 0x3, 0x147b, 0x0, 0x6, 0x2, 0x6, 0x4, 0x2, 0xa}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a050000000000000000000200ffff0900010073797a300000000008000340100000010c0006400000000000000002"], 0x98}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0102030109021b00020000000009046f0000aad823000904"], 0x0) 7m2.289377733s ago: executing program 0 (id=1360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) (async) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6006}, @void, @arp=@generic={0x104, 0x88ca, 0x6, 0xd, 0x8, @empty, "66534e137c4b67a615fd7716df", @empty, "ddf2dc3c5cde4a"}}, 0x2c) (async) write$tun(r0, &(0x7f0000000240)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "38b177", 0xe0, 0x21, 0x0, @mcast1, @private2, {[@srh={0x6, 0x2, 0x4, 0x1, 0x0, 0x18, 0x6, [@rand_addr=' \x01\x00']}, @hopopts={0x2e}, @dstopts={0x6, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0xe7}, @jumbo={0xc2, 0x4, 0x80000000}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x10}]}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x7, "6de17e", 0x0, "00f600"}, "0d1198143f7e5b3152ca9da9dabff56658b4d3079e6cce1ab98662a450e0fc2b6c032668aab51dcde58d8c338f0123b1e2dd081fdf862d3da4e2c8cb1c59201be121b3145ce2acaabfa3ffde35ef4872f995ab49ad6b21ac3d56f9e348d77bf81175f9a9d6814c099b629902e7e91031fc7213c5f8d991ad77cd2c7005b05917"}}}}, 0x108) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r3, 0x0, 0xf) (async) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85", 0x5}], 0x1, 0x0, 0x0, 0x40844}, 0x0) (async) r4 = dup2(r2, r1) read$FUSE(r4, &(0x7f0000002600)={0x2020}, 0x2020) (async) r5 = memfd_create(&(0x7f0000000040)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\ah\xd9\xb7\x13W\xb14\xfe\xe7FW\x96\x7f\xe8\xce(Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0', 0x0) mmap(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x1, 0x12, r5, 0x7000) (async) r6 = userfaultfd(0x80801) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="0002"]) (async) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x1}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) 7m0.549462127s ago: executing program 0 (id=1368): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14}}}]}, 0xfffffe8c}}, 0x0) 7m0.370745941s ago: executing program 33 (id=1368): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14}}}]}, 0xfffffe8c}}, 0x0) 3m53.131762819s ago: executing program 1 (id=2021): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 3m52.592084044s ago: executing program 1 (id=2024): r0 = gettid() r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) listen(r1, 0x0) r2 = dup2(r1, r1) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3m52.029199155s ago: executing program 1 (id=2026): r0 = gettid() r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) listen(r1, 0x0) r2 = dup2(r1, r1) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3m50.923921913s ago: executing program 1 (id=2031): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x60}, {}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 3m50.458832394s ago: executing program 1 (id=2035): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x4, 0x0) r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', 0x0, 0xf0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x250942, 0x1cd) r3 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x40002, 0x0) preadv(r3, &(0x7f0000004040), 0x0, 0x401, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000000000002004e22ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a1e000000000000000000000000000000000000000c0000000000000000000000000000000000000000000000000000000100"/144], 0x90) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) ioctl$FIONREAD(r6, 0x541b, 0xfffffffffffffffe) write$P9_RGETLOCK(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2d0000000000007a264906572679d0a55a88000000000001", @ANYRES32=r4, @ANYBLOB="0f002f6465762f6370752f232f6d737200"], 0x2d) 3m49.518232929s ago: executing program 1 (id=2039): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x2, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x408, 0x17, 0x8, {0x8, 0x1000}, 0xfc, 0x9}}) 3m34.927921251s ago: executing program 34 (id=2039): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x2, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x408, 0x17, 0x8, {0x8, 0x1000}, 0xfc, 0x9}}) 16.873901395s ago: executing program 7 (id=2848): syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b"], 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd0c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x800) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind(r8, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e20, @broadcast}, 0x0, 0x3, 0x0, 0x4}}, 0x80) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 13.01734408s ago: executing program 2 (id=2860): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd697a402d00383afefc010000000000000000000000000601ff020000000000000000000000000001010390780500000064bbcf090009ff0000000000000000000000ffff6401010100000000000000000000ffffac1e01018ff940c9431ec2cc"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@getsadinfo={0x68, 0x23, 0x10, 0x70bd28, 0x25dfdbfd, 0x0, [@algo_aead={0x4c, 0x12, {{'echainiv(echainiv(aegis128l))\x00'}, 0x0, 0x200}}, @replay_thresh={0x8, 0xb, 0x80000000}]}, 0x68}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x800, 0x100000, 0x1000}}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xf}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ff, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) 11.982084108s ago: executing program 3 (id=2864): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'team0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r1, &(0x7f0000001780)=""/122, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x9}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) 11.726757124s ago: executing program 7 (id=2865): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000b00)={0x20, 0x16, 0x2, "e44e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x17, 0x2, "00a3"}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x84, 0x4, '\x00\x00\x00\x00'}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000b40)={0x40, 0x18, 0x2, "896d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000680)={0x0, 0x14, 0x3, "3b0f93"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.197427245s ago: executing program 2 (id=2866): r0 = syz_open_procfs(0x0, &(0x7f0000002280)='net/ip_mr_cache\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/keycreate\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x40800) r4 = syz_io_uring_setup(0xb77, &(0x7f0000000340)={0x0, 0xe824, 0x800, 0x10001, 0x3d2, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/232, 0xe8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.107009887s ago: executing program 3 (id=2867): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000a7ff10010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 10.810311176s ago: executing program 3 (id=2868): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x3a19, &(0x7f0000001c40)={0x0, 0x2f18, 0x2240e, 0x3, 0x38a}, &(0x7f0000000100), &(0x7f0000001cc0)) syz_io_uring_setup(0x1051, &(0x7f0000001d00)={0x0, 0x912f, 0x2, 0x0, 0x2bb, 0x0, r4}, &(0x7f0000001d80), &(0x7f0000001dc0)) r5 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) process_vm_writev(r6, &(0x7f0000001580)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000100)}, {&(0x7f0000001340)=""/161, 0xa1}, {&(0x7f0000001400)=""/101, 0x65}, {&(0x7f0000001480)=""/243, 0xf3}], 0x5, &(0x7f0000001bc0)=[{&(0x7f0000001600)=""/112, 0x70}, {&(0x7f0000001680)=""/75, 0x4b}, {&(0x7f0000001700)=""/125, 0x7d}, {&(0x7f0000001780)=""/227, 0xe3}, {&(0x7f0000001880)=""/154, 0x9a}, {&(0x7f0000001940)=""/181, 0xb5}, {&(0x7f0000001a00)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/255, 0xff}], 0x8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYBLOB="42cc9336a409c0c66bdf3af8083fabe5b726bb57ad2479e4215c0107331a304bc66f195a6f079d2b6f51e1c8d58c160b633dcf187ff02b2ad6eb33440ff87ee90f4fd83e0d629d77bce33187adcc28"], 0x36) 9.705695982s ago: executing program 3 (id=2870): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x4, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2f, 0x6, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x0, 0x10}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x0, 0x2, 0xc0, 0x8, 0x7}, 0x51, &(0x7f0000000100)={0x5, 0xf, 0x51, 0x1, [@generic={0x4c, 0x10, 0x6, "50e472d74ebba2867b51823552f4b65eb00c4ff5d1f55dd5cc61e46bbb9c09647700c8ad48691758d87da210f5e8adfcec1aa6c1185528272db7db93eecc62f70669f83c9436a0631c"}]}, 0x6, [{0x46, &(0x7f0000000280)=@string={0x46, 0x3, "d6c070a00c5612842c87bd514a42b7cf9c04bbe1dc9963310dbbbbac649e0969c5fb2f60f08a2cc49026216eb5b858629360873a5ea4f5e805a2f0450916c997c2f26d4a"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1001}}, {0x66, &(0x7f0000000380)=@string={0x66, 0x3, "2f3eb8dca12f5aa85df455641006af20f69a052be43bc16e298b85bc3ab29d6ce7a782ebd8a14552d26ce1aece4d62e261761733471a56135456fd053c1d4ff6ff0844e0a68140cb2d9402daea388af511c22be9706bf5277414c6ba31556998ae7cbc7b"}}, {0x50, &(0x7f0000000440)=@string={0x50, 0x3, "5bcf83532afff7ad7c00e4cf59889fe4d64ac68f0aaf1a9f8e0cc87e504446f2b8f2c07b9502023310af32b537af9de0d3b7a0a52532c0e3f6cba7fbd74481152bbe39bc7bcc431c94ba48566d31"}}]}) 9.546560801s ago: executing program 6 (id=2871): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) r3 = fspick(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000040)=0x9) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x4d2, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x40000, 0x2, 0x0, 0x0, 0x800000}, {}, {0x0, 0x1}, 0x70bd29, 0x0, 0xa}}}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x6}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x72}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) readv(r4, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x18}], 0x1) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net\x00') 8.774439083s ago: executing program 2 (id=2872): syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ptrace$getregset(0x4205, 0x0, 0x201, &(0x7f0000000080)={0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000003e00)) bind$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100"/16, @ANYRES32=r7, @ANYRES32], 0x18}}], 0x1, 0x0) 8.572836933s ago: executing program 6 (id=2873): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x8000020000000000, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1, 0xfffffffe}}}, &(0x7f0000000040)=0x84) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/64, 0x40}], 0x1, 0x3c, 0x8) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) 7.986499772s ago: executing program 5 (id=2874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x8000020000000000, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/64, 0x40}], 0x1, 0x3c, 0x8) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) 7.944944502s ago: executing program 7 (id=2875): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0xfe5f, 0x30010, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f00000001c0)="ddf9293032f88acfbf9a4db4d7e5471604ce43305c7ae18a9832f6e0bb62aa935c814845f2a8da2ddaf65a218929a756167809a00ea25eef7f3e718e31d5f9f045ea8352df5b645ca60727d0bbd96fa9e5cc127df8626296a20b97ddc7e5e0551ce3078c43a0ee8f8a23ab63fac3ef4ed72c6cc01cf7fc1b4ed3f194dc128460a2247f0bde17aa0859522dee9456fec64973e773909b70a0b0e665d2adf4ed1bdb2f2336d99f40e63b6917a36b6715", &(0x7f0000000000)=""/77}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000003c0)={0x3c00, 0xf0, 0x640, 0x384, 0x420, 0x100, 0x8, 0x0, {0xfffffff9, 0x2}, {0x5, 0x8, 0x1}, {0x2, 0x13a7, 0x1}, {0x1, 0x40}, 0x1, 0x1, 0x9, 0xf, 0x1, 0x1, 0x1, 0x3, 0x147b, 0x0, 0x6, 0x2, 0x6, 0x4, 0x2, 0xa}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x4) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x80, 0x4000000a, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000726) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) 7.391168674s ago: executing program 5 (id=2876): bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYBLOB=',wfd', @ANYBLOB]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="340000002d000100fcffffff0000000008001100", @ANYRES32], 0x34}], 0x1, 0x0, 0x0, 0x4}, 0x0) 7.326111849s ago: executing program 6 (id=2877): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x98, r2, 0x2a3, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000cb4000/0x1000)=nil, 0x1000}}) 6.917151819s ago: executing program 5 (id=2878): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0xca, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc02ffffc90000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.290434528s ago: executing program 3 (id=2879): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x58, 0x1, [@m_ctinfo={0x54, 0xb, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0x20, 0x6, "652a29f203c92c7a0e290ee07d44c53e32c48e0afa85395a9ed08514"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x6c}}, 0x2000e994) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x11) socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0xf, 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair(0x27, 0x2, 0x6, &(0x7f0000000080)) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a010400000000000000000200ffff1800ee7f140001800e000100696d6d6564696174650000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) 5.871094791s ago: executing program 6 (id=2880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180200008677000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000003000000081d5c7f80c857d", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.870682486s ago: executing program 5 (id=2881): syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ptrace$getregset(0x4205, 0x0, 0x201, &(0x7f0000000080)={0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000003e00)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r7, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100"/16, @ANYRES32=r9, @ANYRES32=r8], 0x18}}], 0x1, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 5.870420417s ago: executing program 6 (id=2882): syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ptrace$getregset(0x4205, 0x0, 0x201, &(0x7f0000000080)={0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000003e00)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r7, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100"/16, @ANYRES32=r9, @ANYRES32=r8], 0x18}}], 0x1, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 5.7697908s ago: executing program 7 (id=2883): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x16, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x1, 0x4000000, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000000)={0x0, 0x0, 0xfffff185}) ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x44080) getsockopt$inet_opts(r2, 0x0, 0x9, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket(0x5, 0x4, 0x3) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x3, 0x4002) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x4}}]}, 0x3c}}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x80) 5.332497063s ago: executing program 2 (id=2884): pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETFSLABEL(r2, 0x8917, 0x0) ioctl$COMEDI_SETRSUBD(r1, 0x6410) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x10, 0xf}, {0x0, 0xc}, {0x9, 0x1}}}, 0x24}}, 0x0) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000040)=0x6) r8 = socket(0x10, 0x80002, 0x0) bind$netlink(r8, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r9 = socket(0x400000000010, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x2, 0x800, 0x4) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r15, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xf8}]}}]}, 0x3c}, 0x1, 0xa0000000, 0x0, 0x80}, 0x20008800) 5.002588978s ago: executing program 2 (id=2885): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) getdents64(r1, &(0x7f0000001f00)=""/4093, 0xffd) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x80, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fb00080000528e46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28) close(0x3) r2 = open(&(0x7f0000000200)='./bus\x00', 0x208040, 0x13e) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) 4.675565434s ago: executing program 2 (id=2886): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = timerfd_create(0x0, 0x800) syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x129}, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x28, 0x0, @fd_index=0x8, 0x774c1db7, 0x0, 0x2, 0x6}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x10400, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r7 = shmat(r6, &(0x7f0000776000/0x4000)=nil, 0x5000) shmdt(r7) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x778, 0x408400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x1}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xc70}, 0x1, 0x0, 0x0, 0x44080}, 0x1080) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0xfff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88080) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='traNs=fd,kf\x00no=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB="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"]) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000500), &(0x7f0000000540)=@v3={0x3000000, [{0x10, 0x2}, {0x8, 0x4}], 0xee00}, 0x18, 0x1) 4.641726384s ago: executing program 7 (id=2887): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x8000020000000000, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/64, 0x40}], 0x1, 0x3c, 0x8) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) 4.055113284s ago: executing program 7 (id=2888): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x4, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001140)={0xfffffffffffffe26, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x1, 0xc, "000000000000000700000b000cdf49c12a91fe7109b0a2867d274050b41763d0cad274c6181869812cc28fafc2a8b16dc57d2eaaee9f4500ffc2faf0dfd7370c5bcffe635df0d869d82089cc3de2da89dad1bee1a39b05a1738df954abdd13f550c1636c000000000000230f680ea14a76c8a43fcccf5d93b00beb107bdb43542601ae629906b93e769a39babdcac2abe41395a83d8e41f2f7cd4d98ebda0000000000000000e69cf9e30ddd98bbc913cb67e9"}, 0x0}) 3.923487552s ago: executing program 5 (id=2889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x8000000000000003}, 0x18) sendmmsg$inet(r7, &(0x7f00000033c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)='~', 0x1}], 0x1}}, {{&(0x7f0000000580)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x2, 0x40000c1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000000)) 1.556538023s ago: executing program 3 (id=2890): syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) eventfd2(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x3, 0x1) r6 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r7, 0x8932, &(0x7f0000000140)={'wg1\x00', @ifru_flags=0x8000}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x810) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1.495336913s ago: executing program 6 (id=2891): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0xd6, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0xc000000, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0xa4}}, 0x0) 0s ago: executing program 5 (id=2892): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5, 0x5, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x2, 0xa}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7, 0x1, 0x80, 0x20, 0x6d}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0xd0, 0x1000}]}, 0x4, [{0xbc, &(0x7f0000000100)=@string={0xbc, 0x3, "b95bb8f6b1e9c14a29fc8c44af3f50f5193bcdfad61083339879b65cdb7040cdd9dfba250842edb4992e15d37a4ef643feb77e2eb7b9d2924efe79aabe55e2f4a2e94543a243c4136272cec850cda9af4882177eaf3b860e464ae01d6bbaab4312f8c58d005c200f9de2ce5f04477b15b5dbd82dee2cd6f26b35ef24fc506bc74ae3973fddc6b88b1f5b3be09d73a5ac37a0841b674b269aee3e961bc458e7c8d59193fbd452bfb9c1703121787bfd3f34eaf0245dcea2d2cc25"}}, {0x68, &(0x7f00000001c0)=@string={0x68, 0x3, "9fef74ad8ecfd69e1429c337307107ffac6b3b995de233622743e933bdc7e602a3d47cf7f25514d143a5f73b0e37f1df613f091ec7abdd1b82bed1ee2b42ea9b6a9b4dc8fec07848f026260b626beb5e545f55d5a976a6fa8893bcc5918255b588766db5b335"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x860}}, {0xf0, &(0x7f0000000280)=@string={0xf0, 0x3, "179c9567459b1f25b5780b1c1d2daf0484caebc6fdc20a9558c41fae1b9258e0c97adb12edd071cb322da5cfcaaac7204281709ee3d36a40c8d00f84ac181c2acc98cebb229160d967fde40f3df8b74742035a603e258b64aba3daf3dfa2f8342f1b31b1caceef0ba3d30be4e952e15954c596909b0526838cd2f64cc26d588bf247222151244da6e92c452a2bbc20f6973f5a5002b119b58d16a1a5cca259be2882aea8618ff5e6569850e47ea4bc8468f33619246075960a1f87ff6251312791a9fbacb29ca7d55a4423a79b39c030f8592d5f1ad2fe374306b6db747f50ecf2248703236ac460d74a93c58f6c"}}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xe, 0x4, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x24, 0x81, 0x2}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x1, 0x6, 0x64, 0x20, 0x7}, 0x5f, &(0x7f0000000480)={0x5, 0xf, 0x5f, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "1ae7df25a9c6f8c927f98ac16772acf4"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "d695f19ea929efcd923fa16dbc9fe2b7"}, @ssp_cap={0x14, 0x10, 0xa, 0x62, 0x2, 0x82, 0xf00, 0x97f, [0xffc00f, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "f2406275000ecaf60074df933f06b234"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x80, 0x5}]}, 0x6, [{0xfc, &(0x7f0000000500)=@string={0xfc, 0x3, "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"}}, {0x13, &(0x7f0000000600)=@string={0x13, 0x3, "5a4b85cfa1c5a6863e338d8799569cea50"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x4421}}]}) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x59, 0xc0, 0xa, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x6, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x8, 0x47}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x250, 0x7, 0x2, 0x7, 0x10, 0x5}, 0x31, &(0x7f0000000840)={0x5, 0xf, 0x31, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0x9, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "176ececa9b31447979b27204ebb0e1ad"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x2, 0xa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x5, 0xfff9}]}, 0x6, [{0x41, &(0x7f0000000880)=@string={0x41, 0x3, "753cdba5fc1ebd1ccfb287f96d14f043922cb594929feab860dd1d7303f9b22193db42cda231f492827e923db71a48b6ce13aa178eb79d89d376ec7149b47b"}}, {0xc2, &(0x7f0000000900)=@string={0xc2, 0x3, "f8ec7a43e5cd178dd0c29ae36392fe32420709431aeba58659d44cc07593112bc51a7fb23bf3bf1d235e6432345bff753fd3fefd32960651e0f3feff2d898937d66cb3d6a36d032174e9aba55403a42f283061008174c2f24ec553f52688e02f3cf4c45f3a0f58e80f714f67bab1ac472fa9f6ac6863dec659f621e88f15ccf203a4196655b399e5b0c5cadfb7e99675b9062ff94842d32540527106a446d66d96c37dbd2e2ffe11916e626e5a9859065faa8a53d26ce515d877175ff9940f52"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xe, &(0x7f0000000a80)=@string={0xe, 0x3, "1678659fc0a697b3ca786d85"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 34006][T14439] team0 (unregistering): Port device team_slave_0 removed [ 672.875931][T14439] team0 (unregistering): Port device team_slave_1 removed [ 673.025255][T14429] lo speed is unknown, defaulting to 1000 [ 673.535829][T14454] netlink: 'syz.7.2301': attribute type 1 has an invalid length. [ 673.620189][T14454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 673.740111][T14459] bond1: (slave veth3): Enslaving as an active interface with a down link [ 673.790849][T14454] vlan2: entered allmulticast mode [ 673.810307][T14454] veth1: entered allmulticast mode [ 673.826954][T14454] veth1: entered promiscuous mode [ 673.842655][T14454] veth1: left promiscuous mode [ 673.870703][T14454] bond1: (slave vlan2): making interface the new active one [ 673.891500][T14454] veth1: entered promiscuous mode [ 673.911080][T14454] vlan2: entered promiscuous mode [ 673.929468][T14454] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 674.141162][T14468] loop2: detected capacity change from 0 to 7 [ 674.157859][T14465] can0: slcan on ttyS3. [ 674.203055][T14468] loop2: [ 674.232037][T14468] loop2: partition table partially beyond EOD, truncated [ 674.318848][T13809] IPVS: starting estimator thread 0... [ 674.428955][T14472] IPVS: using max 39 ests per chain, 93600 per kthread [ 674.928784][T14461] can0 (unregistered): slcan off ttyS3. [ 675.230423][T12022] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 675.399456][T13205] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 675.455546][T12022] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.468776][T13205] usb 3-1: USB disconnect, device number 62 [ 675.495715][T12022] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.525728][ T5958] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 675.544096][T12022] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 675.556851][T12022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.612886][T12022] usb 4-1: config 0 descriptor?? [ 675.641710][T12022] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 675.688058][ T5958] usb 6-1: Using ep0 maxpacket: 32 [ 675.723015][ T5958] usb 6-1: config 0 has an invalid interface number: 202 but max is 0 [ 675.752287][ T5958] usb 6-1: config 0 has no interface number 0 [ 675.781902][ T5958] usb 6-1: config 0 interface 202 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 8 [ 675.820795][ T5958] usb 6-1: config 0 interface 202 has no altsetting 0 [ 675.851012][ T5958] usb 6-1: New USB device found, idVendor=19d2, idProduct=0147, bcdDevice=98.db [ 675.872570][T12022] usb 4-1: USB disconnect, device number 76 [ 675.971572][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.011688][ T5958] usb 6-1: Product: syz [ 676.021418][ T5958] usb 6-1: Manufacturer: syz [ 676.026046][ T5958] usb 6-1: SerialNumber: syz [ 676.072288][ T5958] usb 6-1: config 0 descriptor?? [ 676.116996][T14488] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 676.127744][ T5958] option 6-1:0.202: GSM modem (1-port) converter detected [ 676.172827][ T5958] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 677.147769][T14511] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.155386][T14511] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.387383][T14520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.398676][T14520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.691579][T14527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2315'. [ 677.754721][ T5917] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 677.817475][T14517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.826122][T14517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.291793][T14536] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2316'. [ 678.347093][T14538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2317'. [ 678.416391][ T5917] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 678.578996][ T5917] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 678.603457][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.612232][ T5917] usb 7-1: Product: syz [ 678.620381][ T5917] usb 7-1: Manufacturer: syz [ 679.025710][ T5917] usb 7-1: SerialNumber: syz [ 679.057037][T14550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.084278][ T5917] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 679.105336][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2320'. [ 679.160264][T14550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.360467][ T5917] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 679.394922][ T5917] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 679.414830][ T5917] usb 7-1: media controller created [ 679.439345][ T30] audit: type=1400 audit(1770156261.900:1028): avc: denied { call } for pid=14561 comm="syz.3.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 679.443594][T14562] binder: 14561:14562 unknown command 0 [ 679.466041][T14562] binder: 14561:14562 ioctl c0306201 2000000002c0 returned -22 [ 679.472321][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 679.530435][T14564] binder: 14563:14564 ioctl 227b 2000000000c0 returned -22 [ 679.702741][T12022] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 679.707451][ T5917] usb 7-1: USB disconnect, device number 22 [ 679.873849][T12022] usb 3-1: unable to get BOS descriptor or descriptor too short [ 679.891100][T12022] usb 3-1: not running at top speed; connect to a high speed hub [ 679.900802][T12022] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.911311][T12022] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 679.923510][T12022] usb 3-1: string descriptor 0 read error: -22 [ 679.931726][T12022] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 679.941900][T12022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.962995][T12022] usb 3-1: 0:2 : does not exist [ 680.070124][ T5875] usb 6-1: USB disconnect, device number 51 [ 680.088757][ T5875] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 680.118489][ T5875] option 6-1:0.202: device disconnected [ 680.214799][ T30] audit: type=1400 audit(1770156262.730:1029): avc: denied { getopt } for pid=14570 comm="syz.6.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 680.392501][T14576] gre0 speed is unknown, defaulting to 1000 [ 681.213105][T14576] lo speed is unknown, defaulting to 1000 [ 682.441289][T12022] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 682.469972][T12022] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 682.533602][T12022] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 682.733233][T12022] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 683.169471][T12022] usb 3-1: USB disconnect, device number 63 [ 683.724814][T14572] delete_channel: no stack [ 683.963846][T14615] macvlan2: entered allmulticast mode [ 683.970517][T14615] bridge0: port 3(macvlan2) entered blocking state [ 683.993540][T14615] bridge0: port 3(macvlan2) entered disabled state [ 684.108372][ T5958] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 684.147292][T14621] netlink: 'syz.3.2339': attribute type 21 has an invalid length. [ 684.156229][ T5917] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 684.184783][T14621] IPv6: NLM_F_CREATE should be specified when creating new route [ 684.302119][ T5958] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 684.308159][ T5917] usb 7-1: device descriptor read/64, error -71 [ 684.319652][ T5958] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 684.346048][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.377526][ T5958] usb 6-1: Product: syz [ 684.390056][ T5958] usb 6-1: Manufacturer: syz [ 684.409405][ T5958] usb 6-1: SerialNumber: syz [ 684.437015][ T5958] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 684.557977][ T5917] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 684.769477][ T5917] usb 7-1: device descriptor read/64, error -71 [ 684.919999][ T5917] usb usb7-port1: attempt power cycle [ 684.961249][ T5958] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 685.002517][ T5958] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 685.031204][ T5958] usb 6-1: media controller created [ 685.053202][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 685.140740][ T5958] usb 6-1: USB disconnect, device number 52 [ 685.251154][ T5875] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 685.260922][ T5917] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 685.301775][ T5917] usb 7-1: device descriptor read/8, error -71 [ 685.524189][ T5875] usb 4-1: config 6 has an invalid descriptor of length 127, skipping remainder of the config [ 685.553182][ T5875] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 685.565617][ T5917] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 685.993776][ T5875] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 686.014152][ T5813] Bluetooth: hci5: command 0x0c1a tx timeout [ 686.093987][ T5917] usb 7-1: device descriptor read/8, error -71 [ 686.220213][T14649] gre0 speed is unknown, defaulting to 1000 [ 686.235152][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.404322][ T5917] usb usb7-port1: unable to enumerate USB device [ 686.603929][ T5957] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 686.651592][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2349'. [ 686.663004][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2349'. [ 686.694220][ T30] audit: type=1326 audit(1770157037.526:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.3.2345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1802f9aeb9 code=0x0 [ 686.695784][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2349'. [ 686.744641][ T5957] usb 7-1: device descriptor read/64, error -71 [ 686.803290][ T5875] usb 4-1: string descriptor 0 read error: -71 [ 686.812830][ T5875] usb 4-1: USB disconnect, device number 77 [ 686.891045][ T50] vlan2: left promiscuous mode [ 686.976875][T14664] random: crng reseeded on system resumption [ 687.015545][T14649] lo speed is unknown, defaulting to 1000 [ 687.025039][T14664] 9p: Bad value for 'rfdno' [ 687.039900][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 687.048372][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 687.309221][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 687.315300][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 687.491094][T14677] pimreg: tun_chr_ioctl cmd 1074025676 [ 687.496757][T14677] pimreg: owner set to 0 [ 687.751008][T14664] ceph: No mds server is up or the cluster is laggy [ 687.806231][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 687.812308][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 688.070957][T14687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2354'. [ 688.080457][T14686] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000184467440737095516150x000000000000000000000000000000000000004' [ 688.128760][T14687] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2354'. [ 688.515014][T14691] mkiss: ax0: crc mode is auto. [ 689.041942][ T5875] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 689.104455][ T30] audit: type=1400 audit(1770157040.056:1031): avc: denied { map } for pid=14684 comm="syz.7.2355" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 689.195810][ T30] audit: type=1400 audit(1770157040.088:1032): avc: denied { execute } for pid=14684 comm="syz.7.2355" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 689.245587][ T5875] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 689.278171][ T5875] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 689.308115][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.340014][ T5875] usb 3-1: Product: syz [ 689.351756][ T5875] usb 3-1: Manufacturer: syz [ 689.375653][ T5875] usb 3-1: SerialNumber: syz [ 689.394268][ T5875] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 689.796909][ T5875] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 689.868720][ T5875] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 689.893447][ T5875] usb 3-1: media controller created [ 689.929463][T14713] gre0 speed is unknown, defaulting to 1000 [ 690.033930][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 690.168746][T14713] lo speed is unknown, defaulting to 1000 [ 690.563706][ T5875] usb 3-1: USB disconnect, device number 64 [ 690.798011][T14727] netlink: 'syz.5.2365': attribute type 1 has an invalid length. [ 691.271250][T14727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 691.310465][T14733] vlan3: entered allmulticast mode [ 691.341340][T14733] veth1: entered allmulticast mode [ 691.476062][T14733] bond1: (slave vlan3): making interface the new active one [ 691.494012][T14733] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 691.696668][T14734] gre0 speed is unknown, defaulting to 1000 [ 691.838761][ T30] audit: type=1400 audit(1770157042.923:1033): avc: denied { listen } for pid=14742 comm="syz.5.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 691.949719][T14751] ufs: You didn't specify the type of your ufs filesystem [ 691.949719][T14751] [ 691.949719][T14751] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 691.949719][T14751] [ 691.949719][T14751] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 691.981650][T14751] ufs: ufstype=old is supported read-only [ 692.001498][T14751] ufs: ufs_fill_super(): bad magic number [ 692.689867][ T5957] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 692.863215][ T5957] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 692.932471][ T5875] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 692.968080][T14734] lo speed is unknown, defaulting to 1000 [ 692.991389][ T5957] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 693.513752][T14771] random: crng reseeded on system resumption [ 693.632830][ T30] audit: type=1400 audit(1770157044.750:1034): avc: denied { ioctl } for pid=14766 comm="syz.7.2378" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 693.972771][ T5875] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 693.993630][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.002793][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.023945][ T5875] usb 6-1: Product: syz [ 694.959135][ T5957] usb 4-1: Product: syz [ 694.972599][ T5957] usb 4-1: Manufacturer: syz [ 694.972606][ T5875] usb 6-1: Manufacturer: syz [ 694.972626][ T5875] usb 6-1: SerialNumber: syz [ 694.999413][ T5957] usb 4-1: SerialNumber: syz [ 695.014547][ T5875] usb 6-1: config 0 descriptor?? [ 695.025259][ T5875] hub 6-1:0.0: bad descriptor, ignoring hub [ 695.031709][ T5875] hub 6-1:0.0: probe with driver hub failed with error -5 [ 695.065931][ T5957] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 695.157812][ T5875] f81232 6-1:0.0: f81534a converter detected [ 695.241893][ T5875] usb 6-1: f81534a converter now attached to ttyUSB0 [ 695.347956][ T5957] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 695.400536][ T5957] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 695.454317][ T5957] usb 4-1: media controller created [ 695.570728][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 695.661696][ T30] audit: type=1400 audit(1770157046.933:1035): avc: denied { mounton } for pid=14783 comm="syz.6.2383" path="/file0" dev="ramfs" ino=47745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 696.161501][ T5957] usb 4-1: USB disconnect, device number 78 [ 696.331920][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2375'. [ 696.566758][ T5957] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 696.597536][ T5875] usb 6-1: USB disconnect, device number 53 [ 696.631230][ T5875] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 696.656338][ T5875] f81232 6-1:0.0: device disconnected [ 696.671442][ T30] audit: type=1400 audit(1770157047.994:1036): avc: denied { write } for pid=14795 comm="syz.2.2387" name="file2" dev="tmpfs" ino=2604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 696.807246][ T30] audit: type=1400 audit(1770157047.994:1037): avc: denied { open } for pid=14795 comm="syz.2.2387" path="/481/file2" dev="tmpfs" ino=2604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 696.834043][ T30] audit: type=1400 audit(1770157048.046:1038): avc: denied { ioctl } for pid=14795 comm="syz.2.2387" path="/481/file2" dev="tmpfs" ino=2604 ioctlcmd=0x4b3a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 696.872701][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.903531][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.927095][ T5957] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 696.942342][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.979833][ T5957] usb 4-1: config 0 descriptor?? [ 696.988072][ T5957] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 697.414786][T14799] gre0 speed is unknown, defaulting to 1000 [ 697.492880][T14799] lo speed is unknown, defaulting to 1000 [ 698.122835][T14807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2382'. [ 698.186419][ T5957] usb 4-1: USB disconnect, device number 79 [ 698.266823][T14805] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 698.304702][T14805] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2386'. [ 699.198271][T14826] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2393'. [ 699.627012][T14827] loop1: detected capacity change from 0 to 7 [ 699.701934][ T5875] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 700.035401][T14827] loop1: [CUMANA/ADFS] p1 [ADFS] p1 [ 700.055322][T14827] loop1: partition table partially beyond EOD, truncated [ 700.080684][T14827] loop1: p1 size 2989602745 extends beyond EOD, truncated [ 700.101460][ T5875] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 700.113468][ T5875] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 700.138962][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.174805][ T5875] usb 6-1: Product: syz [ 700.218099][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 700.228131][ T5875] usb 6-1: Manufacturer: syz [ 700.258187][ T5875] usb 6-1: SerialNumber: syz [ 700.302169][ T5917] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 701.289738][ T5875] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 701.345567][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 701.357077][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 701.372096][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 701.391140][ T5917] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 701.419958][ T5917] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 701.445408][T14841] ceph: No mds server is up or the cluster is laggy [ 701.474111][ T5917] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 701.544692][ T5917] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 701.614416][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 701.662367][ T5917] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 701.691206][ T5917] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 701.713247][ T5875] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 701.734051][ T5917] usb 3-1: Product: syz [ 701.753994][ T5917] usb 3-1: Manufacturer: syz [ 701.765335][ T5875] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 701.783825][ T5917] usb 3-1: SerialNumber: syz [ 701.814727][ T5875] usb 6-1: media controller created [ 701.839423][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 701.918925][ T5917] usb 3-1: config 0 descriptor?? [ 701.948194][T13205] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 701.967302][ T5917] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 702.034086][ T5917] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 702.145871][ T5917] usb 3-1: USB disconnect, device number 65 [ 702.147268][T13205] usb 7-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 702.170068][T13205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.186556][T13205] usb 7-1: Product: syz [ 702.207846][ T5917] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 702.219690][T13205] usb 7-1: Manufacturer: syz [ 702.266727][T13205] usb 7-1: SerialNumber: syz [ 702.319805][ T5875] usb 6-1: USB disconnect, device number 54 [ 702.319834][T13205] usb 7-1: config 0 descriptor?? [ 702.426464][T13205] hub 7-1:0.0: bad descriptor, ignoring hub [ 702.481944][T13205] hub 7-1:0.0: probe with driver hub failed with error -5 [ 702.701266][T13205] f81232 7-1:0.0: f81534a converter detected [ 702.834530][T13205] usb 7-1: f81534a converter now attached to ttyUSB0 [ 703.735498][ T30] audit: type=1400 audit(1770157055.406:1039): avc: denied { write } for pid=14849 comm="syz.3.2402" path="socket:[48023]" dev="sockfs" ino=48023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 704.834100][ T5875] usb 7-1: USB disconnect, device number 29 [ 704.873691][ T5875] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 704.927710][ T5875] f81232 7-1:0.0: device disconnected [ 705.123086][T14886] loop2: detected capacity change from 0 to 7 [ 705.149901][ T5824] loop2: [ 705.155242][ T5824] loop2: partition table partially beyond EOD, truncated [ 705.175500][T14886] loop2: [ 705.183573][T14886] loop2: partition table partially beyond EOD, truncated [ 705.492308][T14889] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2412'. [ 705.930961][T14901] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2417'. [ 705.948471][ T5882] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 706.122639][ T5882] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 706.169123][ T5882] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 706.186444][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.194479][ T5882] usb 6-1: Product: syz [ 706.231414][ T5882] usb 6-1: Manufacturer: syz [ 706.243561][ T5882] usb 6-1: SerialNumber: syz [ 706.284026][ T5882] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 706.630988][ T5882] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 706.755033][ T5882] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 706.789550][ T5882] usb 6-1: media controller created [ 706.821119][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 706.949119][ T5882] usb 6-1: USB disconnect, device number 55 [ 707.621105][T14915] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 707.629294][T14915] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 707.635469][T14915] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 707.641525][T14915] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 707.708826][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 707.727656][T14930] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2426'. [ 707.738037][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 707.747475][T14930] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2426'. [ 707.757232][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 707.798342][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2427'. [ 707.853756][T14934] FAULT_INJECTION: forcing a failure. [ 707.853756][T14934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.870101][T14934] CPU: 1 UID: 0 PID: 14934 Comm: syz.3.2428 Tainted: G L syzkaller #0 PREEMPT(full) [ 707.870133][T14934] Tainted: [L]=SOFTLOCKUP [ 707.870140][T14934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 707.870151][T14934] Call Trace: [ 707.870158][T14934] [ 707.870166][T14934] dump_stack_lvl+0x100/0x190 [ 707.870196][T14934] should_fail_ex.cold+0x5/0xa [ 707.870229][T14934] _copy_to_user+0x32/0xd0 [ 707.870256][T14934] simple_read_from_buffer+0xcb/0x170 [ 707.870282][T14934] proc_fail_nth_read+0x1af/0x230 [ 707.870309][T14934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 707.870335][T14934] ? rw_verify_area+0xce/0x6d0 [ 707.870352][T14934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 707.870377][T14934] vfs_read+0x1e4/0xb30 [ 707.870400][T14934] ? __pfx_vfs_read+0x10/0x10 [ 707.870420][T14934] ? find_held_lock+0x2b/0x80 [ 707.870445][T14934] ? __fget_files+0x215/0x3d0 [ 707.870472][T14934] ? __fget_files+0x21f/0x3d0 [ 707.870502][T14934] ksys_read+0x12a/0x250 [ 707.870521][T14934] ? __pfx_ksys_read+0x10/0x10 [ 707.870538][T14934] ? fput+0x79/0x100 [ 707.870563][T14934] ? __x64_sys_quotactl_fd+0x1ff/0x580 [ 707.870590][T14934] do_syscall_64+0xc9/0xf80 [ 707.870615][T14934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.870633][T14934] RIP: 0033:0x7f1802f5b78e [ 707.870649][T14934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 707.870667][T14934] RSP: 002b:00007f1803f32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 707.870685][T14934] RAX: ffffffffffffffda RBX: 00007f1803f336c0 RCX: 00007f1802f5b78e [ 707.870697][T14934] RDX: 000000000000000f RSI: 00007f1803f330a0 RDI: 0000000000000004 [ 707.870708][T14934] RBP: 00007f1803f33090 R08: 0000000000000000 R09: 0000000000000000 [ 707.870719][T14934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.870730][T14934] R13: 00007f1803216038 R14: 00007f1803215fa0 R15: 00007ffdac1c4918 [ 707.870755][T14934] [ 708.071251][ T5958] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 708.160550][T14938] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 708.225146][ T5958] usb 7-1: Using ep0 maxpacket: 32 [ 708.231905][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.244131][ T5958] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice=f0.00 [ 708.253198][ T5958] usb 7-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 708.261954][ T5958] usb 7-1: Manufacturer: syz [ 708.269272][ T5958] usb 7-1: config 0 descriptor?? [ 708.870848][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 709.079163][ T5958] usbhid 7-1:0.0: can't add hid device: -71 [ 709.149406][ T5958] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 709.191563][ T5958] usb 7-1: USB disconnect, device number 30 [ 709.548939][T14949] Bluetooth: hci4: command 0x0406 tx timeout [ 709.768651][T14949] Bluetooth: hci5: command 0x0c1a tx timeout [ 709.774759][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 710.101823][ T5875] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 710.735661][ T5875] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 710.884611][ T5875] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 710.925078][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.024556][ T5875] usb 4-1: Product: syz [ 711.073116][ T5875] usb 4-1: Manufacturer: syz [ 711.271815][ T5875] usb 4-1: SerialNumber: syz [ 711.522772][ T5875] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 712.006968][T14949] Bluetooth: hci5: command 0x0c1a tx timeout [ 712.099810][ T5875] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 712.325230][T14989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2444'. [ 712.337602][T14989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2444'. [ 712.390651][ T5875] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 712.410700][ T5875] usb 4-1: media controller created [ 712.442475][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 713.266103][T15009] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2449'. [ 713.275462][T15009] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2449'. [ 713.315071][ T5875] usb 4-1: USB disconnect, device number 80 [ 713.327694][ T5824] udevd[5824]: setting mode of /dev/bus/usb/004/080 to 020664 failed: No such file or directory [ 713.339959][ T5824] udevd[5824]: setting owner of /dev/bus/usb/004/080 to uid=0, gid=0 failed: No such file or directory [ 713.518877][T15011] gre0 speed is unknown, defaulting to 1000 [ 713.652833][T15017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2452'. [ 713.662185][T15017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2452'. [ 713.671213][T15017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2452'. [ 714.496691][T13809] libceph: connect (1)[c::]:6789 error -101 [ 714.508828][T13809] libceph: mon0 (1)[c::]:6789 connect error [ 714.565391][T15011] lo speed is unknown, defaulting to 1000 [ 714.798166][T13809] libceph: connect (1)[c::]:6789 error -101 [ 714.822054][T13809] libceph: mon0 (1)[c::]:6789 connect error [ 715.267769][T15020] ceph: No mds server is up or the cluster is laggy [ 716.354632][T13205] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 716.636005][T13205] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 716.711479][T13205] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 716.731208][T13205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.769486][T13205] usb 4-1: Product: syz [ 716.791219][T13205] usb 4-1: Manufacturer: syz [ 716.806192][T13205] usb 4-1: SerialNumber: syz [ 716.828385][T13205] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 717.013613][T13205] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 717.031480][T13205] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 717.056115][T13205] usb 4-1: media controller created [ 717.078308][T13205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 717.131224][ T5882] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 717.161290][T13205] usb 4-1: USB disconnect, device number 81 [ 717.188378][ T5958] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 717.304421][ T5882] usb 7-1: unable to get BOS descriptor or descriptor too short [ 717.320536][ T5882] usb 7-1: not running at top speed; connect to a high speed hub [ 717.331282][ T5958] usb 6-1: device descriptor read/64, error -71 [ 717.339035][ T5882] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.349374][ T5882] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 717.380110][ T5882] usb 7-1: string descriptor 0 read error: -22 [ 717.386688][ T5882] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 717.400604][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.440459][ T5882] usb 7-1: 0:2 : does not exist [ 717.569542][ T5958] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 717.713165][ T5958] usb 6-1: device descriptor read/64, error -71 [ 717.827063][ T5958] usb usb6-port1: attempt power cycle [ 717.858015][T15058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.881331][T15058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.111741][T15058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.154217][T15058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.169767][ T5958] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 718.211641][ T5958] usb 6-1: device descriptor read/8, error -71 [ 718.446256][ T5958] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 718.485061][ T5882] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 718.501161][ T5958] usb 6-1: device descriptor read/8, error -71 [ 718.549496][ T5882] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 718.599716][ T5882] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 718.617716][ T5958] usb usb6-port1: unable to enumerate USB device [ 718.669038][ T5882] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 718.749151][ T5882] usb 7-1: USB disconnect, device number 31 [ 719.018235][ T30] audit: type=1400 audit(1770157072.458:1040): avc: denied { bind } for pid=15087 comm="syz.6.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 719.341301][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2475'. [ 719.446488][ T5958] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 719.571205][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2475'. [ 719.639597][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 719.639972][T15098] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 719.663249][ T5958] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 719.676919][ T5958] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 719.677071][T15098] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 719.730902][ T5958] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 719.774173][ T5958] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 719.795447][ T5958] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 719.816180][ T5958] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 719.838384][ T5958] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 719.852951][ T5958] usb 4-1: config 168 interface 0 has no altsetting 0 [ 719.861865][ T5958] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 719.870315][ T5958] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 719.881775][ T5958] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 719.932503][ T5958] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 719.955895][ T30] audit: type=1400 audit(1770157073.445:1041): avc: denied { setattr } for pid=15109 comm="syz.5.2478" name="RAW" dev="sockfs" ino=49579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 719.960866][ T5958] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 719.992600][ T5958] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 720.005440][ T5958] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 720.019219][ T5958] usb 4-1: config 168 interface 0 has no altsetting 0 [ 720.028526][ T5958] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 720.056748][ T5958] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 720.077636][ T5958] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 720.094778][T15115] netlink: 'syz.5.2480': attribute type 63 has an invalid length. [ 720.125178][ T5958] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 720.141131][ T5958] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 720.154044][ T5958] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 720.170219][T13809] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 720.172798][ T5958] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 720.192977][ T5958] usb 4-1: config 168 interface 0 has no altsetting 0 [ 720.210255][ T5958] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 720.238925][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.259401][ T5958] usb 4-1: Product: syz [ 720.263806][ T5958] usb 4-1: Manufacturer: syz [ 720.273131][ T30] audit: type=1326 audit(1770157073.781:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.5.2482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f169b39aeb9 code=0x0 [ 720.273145][ T5958] usb 4-1: SerialNumber: syz [ 720.381011][T13809] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 720.418863][T13809] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 720.452353][T13809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.467755][T13809] usb 7-1: Product: syz [ 720.475090][T13809] usb 7-1: Manufacturer: syz [ 720.479808][T13809] usb 7-1: SerialNumber: syz [ 720.500132][T13809] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 720.702236][T13809] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 720.857103][T13809] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 720.870076][T13809] usb 7-1: media controller created [ 721.235655][T13809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.410352][T15135] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2484'. [ 721.924140][T13809] usb 7-1: USB disconnect, device number 32 [ 721.959883][T15138] usb usb8: usbfs: process 15138 (syz.5.2482) did not claim interface 0 before use [ 722.342601][ T5958] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 722.402590][ T5958] usb 4-1: USB disconnect, device number 82 [ 722.556523][T15132] gre0 speed is unknown, defaulting to 1000 [ 722.653259][ T30] audit: type=1400 audit(1770157076.280:1043): avc: denied { write } for pid=15144 comm="syz.2.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 722.880231][T15157] netlink: 'syz.3.2490': attribute type 3 has an invalid length. [ 722.890746][T15157] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2490'. [ 722.960698][T15160] hub 8-0:1.0: USB hub found [ 722.990619][T15160] hub 8-0:1.0: 1 port detected [ 722.996435][T15159] loop2: detected capacity change from 0 to 7 [ 723.023223][T15159] Dev loop2: unable to read RDB block 7 [ 723.039134][T15159] loop2: AHDI p1 p2 p3 [ 723.125419][T15159] loop2: partition table partially beyond EOD, truncated [ 723.133293][T15159] loop2: p1 start 1601398130 is beyond EOD, truncated [ 723.151454][T15159] loop2: p2 start 1702059890 is beyond EOD, truncated [ 724.326948][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.333314][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 724.599643][ T5955] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 724.860302][ T5955] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 724.887540][ T5955] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 724.904415][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.922975][T15187] gre0 speed is unknown, defaulting to 1000 [ 724.931421][T15132] lo speed is unknown, defaulting to 1000 [ 724.950417][ T5955] usb 3-1: Product: syz [ 724.965962][ T5955] usb 3-1: Manufacturer: syz [ 724.979665][ T5955] usb 3-1: SerialNumber: syz [ 725.020100][ T5955] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 725.217868][ T5955] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 725.229881][ T5955] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 725.240406][ T5955] usb 3-1: media controller created [ 725.293136][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 725.355824][T15187] lo speed is unknown, defaulting to 1000 [ 725.526025][ T5955] usb 3-1: USB disconnect, device number 66 [ 726.352443][T15217] netlink: 'syz.6.2506': attribute type 13 has an invalid length. [ 726.360461][T15217] netlink: 'syz.6.2506': attribute type 17 has an invalid length. [ 726.755788][T15217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.791731][T15217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 727.033600][T15221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15221 comm=syz.3.2507 [ 728.220134][T15243] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2514'. [ 729.022202][T15258] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2520'. [ 729.102333][T15261] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2521'. [ 729.124266][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2520'. [ 730.224013][T15275] gre0 speed is unknown, defaulting to 1000 [ 730.658663][T15275] lo speed is unknown, defaulting to 1000 [ 730.664968][T15278] gre0 speed is unknown, defaulting to 1000 [ 731.144220][T15278] lo speed is unknown, defaulting to 1000 [ 731.206220][T15283] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2525'. [ 731.648283][ T30] audit: type=1400 audit(1770157085.717:1044): avc: denied { cmd } for pid=15288 comm="syz.3.2527" path="socket:[50060]" dev="sockfs" ino=50060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 731.734237][T13809] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 731.876977][T13809] usb 8-1: device descriptor read/64, error -71 [ 732.136802][T13809] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 732.206250][T15297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 732.265235][T15297] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 732.321085][T13809] usb 8-1: device descriptor read/64, error -71 [ 732.453947][T13809] usb usb8-port1: attempt power cycle [ 732.858391][ T5958] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 732.858407][T13809] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 732.995722][T13809] usb 8-1: device descriptor read/8, error -71 [ 733.163821][ T5957] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 733.197849][ T5958] usb 3-1: unable to get BOS descriptor or descriptor too short [ 733.207536][ T5958] usb 3-1: not running at top speed; connect to a high speed hub [ 733.217934][ T5958] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.229678][T13809] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 733.237905][ T5958] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 733.251638][ T5958] usb 3-1: string descriptor 0 read error: -22 [ 733.258108][ T5955] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 733.265898][ T5958] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 733.268136][T13809] usb 8-1: device descriptor read/8, error -71 [ 733.275244][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.315244][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 733.323388][ T5957] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 733.332599][ T5957] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 733.344503][ T5957] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 733.357135][ T5957] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 733.370455][ T5957] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 733.382221][ T5957] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 733.391808][T13809] usb usb8-port1: unable to enumerate USB device [ 733.392830][ T5957] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 733.412697][ T5957] usb 6-1: config 168 interface 0 has no altsetting 0 [ 733.425256][ T5957] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 733.433301][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 733.441197][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.466367][ T5958] usb 3-1: 0:2 : does not exist [ 733.475556][ T5957] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 733.487796][ T5957] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 733.499674][ T5955] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice=f0.00 [ 733.509038][ T5955] usb 4-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 733.517299][ T5957] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 733.530851][ T5955] usb 4-1: Manufacturer: syz [ 733.542108][ T5955] usb 4-1: config 0 descriptor?? [ 733.550688][ T5957] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 733.586299][ T5957] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 733.608266][ T5957] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 733.622977][ T5957] usb 6-1: config 168 interface 0 has no altsetting 0 [ 733.631446][ T5957] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 733.646770][ T5957] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 733.661327][ T5957] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 733.673264][ T5957] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 733.706862][ T5957] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 733.718978][ T5957] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 733.729383][ T5957] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 733.747481][ T5957] usb 6-1: config 168 interface 0 has no altsetting 0 [ 733.763278][ T5957] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 733.941562][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.949812][ T5957] usb 6-1: Product: syz [ 733.961909][ T5955] usbhid 4-1:0.0: can't add hid device: -71 [ 733.973953][ T5955] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 733.981221][T15319] gre0 speed is unknown, defaulting to 1000 [ 733.984141][ T5955] usb 4-1: USB disconnect, device number 83 [ 733.997520][ T5957] usb 6-1: Manufacturer: syz [ 734.002978][ T5957] usb 6-1: SerialNumber: syz [ 734.269169][ T5958] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 734.288667][ T5958] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 734.399096][ T5958] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 734.972168][ T5958] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 735.000111][ T5958] usb 3-1: USB disconnect, device number 67 [ 735.063842][T15327] binder: 15326:15327 unknown command 0 [ 735.070492][T15327] binder: 15326:15327 ioctl c0306201 2000000002c0 returned -22 [ 735.114187][T15329] netlink: 'syz.2.2540': attribute type 10 has an invalid length. [ 735.249033][ T5955] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 735.326271][T15319] lo speed is unknown, defaulting to 1000 [ 735.422636][ T5955] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 735.442583][ T5955] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 735.461894][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.485891][ T5955] usb 4-1: Product: syz [ 735.501329][ T5955] usb 4-1: Manufacturer: syz [ 735.512704][ T5955] usb 4-1: SerialNumber: syz [ 735.547554][ T5955] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 736.299411][ T5957] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 736.313332][ T5957] usb 6-1: USB disconnect, device number 60 [ 736.753996][ T5957] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 737.620839][ T30] audit: type=1326 audit(1770157091.691:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.6.2548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f887ff9aeb9 code=0x0 [ 738.219043][ T5957] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 738.348616][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.357792][ T5957] usb 6-1: Product: syz [ 738.361997][ T5957] usb 6-1: Manufacturer: syz [ 738.382817][ T5957] usb 6-1: SerialNumber: syz [ 738.398447][ T5957] usb 6-1: config 0 descriptor?? [ 738.411388][ T30] audit: type=1400 audit(1770157092.814:1046): avc: denied { read } for pid=15335 comm="syz.2.2543" lport=53926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 738.456909][ T5957] hub 6-1:0.0: bad descriptor, ignoring hub [ 738.463348][ T5957] hub 6-1:0.0: probe with driver hub failed with error -5 [ 738.471416][ T5957] f81232 6-1:0.0: f81534a converter detected [ 738.613502][ T5955] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 738.643706][ T5955] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 738.673937][ T5955] usb 4-1: media controller created [ 738.680637][ T5957] usb 6-1: f81534a converter now attached to ttyUSB0 [ 738.973880][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 739.164854][T15363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2549'. [ 739.174001][T15363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2549'. [ 740.265366][ T5955] usb 4-1: USB disconnect, device number 84 [ 740.329486][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'. [ 740.339275][T15381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2553'. [ 740.348949][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'. [ 740.358764][T15381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2553'. [ 740.368733][ T5957] usb 6-1: USB disconnect, device number 61 [ 740.435267][ T5957] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 740.475219][ T30] audit: type=1400 audit(1770157094.987:1047): avc: denied { watch_mount } for pid=15378 comm="syz.2.2552" path="/512" dev="tmpfs" ino=2762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 740.526376][T13205] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 740.540241][ T5957] f81232 6-1:0.0: device disconnected [ 740.676889][T15384] netlink: 'syz.5.2554': attribute type 1 has an invalid length. [ 740.720521][T13205] usb 8-1: unable to get BOS descriptor or descriptor too short [ 740.728551][ T5955] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 740.757911][T13205] usb 8-1: not running at top speed; connect to a high speed hub [ 740.784984][T13205] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.823382][T13205] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.857412][T13205] usb 8-1: string descriptor 0 read error: -22 [ 740.875271][T13205] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 740.886857][ T5955] usb 4-1: device descriptor read/64, error -71 [ 740.896350][T13205] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.969240][T13205] usb 8-1: 0:2 : does not exist [ 741.176571][ T5955] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 741.402868][ T5955] usb 4-1: device descriptor read/64, error -71 [ 741.413034][T15395] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2558'. [ 741.525012][ T5955] usb usb4-port1: attempt power cycle [ 741.898141][ T5955] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 741.946140][ T5955] usb 4-1: device descriptor read/8, error -71 [ 742.221749][ T5955] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 742.260569][ T5955] usb 4-1: device descriptor read/8, error -71 [ 742.393480][T13205] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 742.403139][ T5955] usb usb4-port1: unable to enumerate USB device [ 742.453421][T13205] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 742.482831][T13205] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 742.546443][T13205] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 742.587435][T13205] usb 8-1: USB disconnect, device number 6 [ 742.726923][T13809] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 742.888700][T13809] usb 7-1: Using ep0 maxpacket: 32 [ 742.912581][T13809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.951920][T13809] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice=f0.00 [ 742.965746][T13809] usb 7-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 742.985642][T13809] usb 7-1: Manufacturer: syz [ 743.025713][T13809] usb 7-1: config 0 descriptor?? [ 743.355263][ T5917] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 743.527511][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 743.564912][ T5917] usb 3-1: unable to get BOS descriptor or descriptor too short [ 743.598810][T15416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.615915][ T5917] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 743.634964][T15416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.659673][ T5917] usb 3-1: config 4 has an invalid descriptor of length 249, skipping remainder of the config [ 743.701502][ T5917] usb 3-1: config 4 has no interface number 0 [ 743.720286][ T5917] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 743.748952][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.763163][T15416] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2560'. [ 743.777728][ T5917] usb 3-1: Product: syz [ 743.802352][ T5917] usb 3-1: Manufacturer: syz [ 743.822174][ T5917] usb 3-1: SerialNumber: syz [ 744.046761][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 744.074858][ T30] audit: type=1400 audit(1770157098.766:1048): avc: denied { write } for pid=15406 comm="syz.2.2562" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 744.260291][T13205] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 744.300904][ T5917] uvcvideo 3-1:4.147: probe with driver uvcvideo failed with error -22 [ 744.322826][ T5917] usb 3-1: USB disconnect, device number 68 [ 744.444204][T13205] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 744.466966][T13205] usb 8-1: config 0 has no interface number 0 [ 744.614256][T13205] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 744.623797][T13205] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.634096][T13205] usb 8-1: Product: syz [ 744.641082][T13205] usb 8-1: Manufacturer: syz [ 744.647176][T13205] usb 8-1: SerialNumber: syz [ 745.256692][T13205] usb 8-1: config 0 descriptor?? [ 745.399238][T13809] usbhid 7-1:0.0: can't add hid device: -71 [ 745.427572][T13809] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 745.477026][T15428] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.484272][T15428] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.525074][T13809] usb 7-1: USB disconnect, device number 33 [ 745.774495][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2569'. [ 745.804384][T15433] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2569'. [ 745.831678][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2569'. [ 746.134772][T15433] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2569'. [ 746.190703][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2569'. [ 746.352508][T13205] dvb_usb_ec168 8-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 747.496602][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2566'. [ 747.529021][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2566'. [ 747.547585][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2566'. [ 747.580753][T15450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.592490][ T30] audit: type=1400 audit(1770157102.430:1049): avc: denied { connect } for pid=15451 comm="syz.3.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 747.936424][T15450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.254226][T15454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2575'. [ 748.872729][ T5955] usb 8-1: USB disconnect, device number 7 [ 748.928252][ T5917] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 749.128099][ T5917] usb 3-1: device descriptor read/64, error -71 [ 749.391858][T15493] vxcan1: entered promiscuous mode [ 749.397253][ T5917] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 749.454534][T15493] team0: Port device vxcan1 added [ 749.595885][ T5917] usb 3-1: device descriptor read/64, error -71 [ 749.756853][ T5917] usb usb3-port1: attempt power cycle [ 749.937814][T15495] __nla_validate_parse: 1 callbacks suppressed [ 749.937834][T15495] netlink: 6040 bytes leftover after parsing attributes in process `syz.7.2586'. [ 750.118882][ T5917] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 750.147845][ T5917] usb 3-1: device descriptor read/8, error -71 [ 750.394992][ T5917] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 750.433799][ T5917] usb 3-1: device descriptor read/8, error -71 [ 750.555452][ T5917] usb usb3-port1: unable to enumerate USB device [ 750.705670][T15504] Invalid source name [ 750.709908][T15504] UBIFS error (pid: 15504): cannot open "/dev/sg0", error -22 [ 751.024632][T15507] netlink: 'syz.5.2589': attribute type 10 has an invalid length. [ 751.069682][T15507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.277142][T13809] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 751.358142][ T5917] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 751.625655][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 751.638684][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 751.650169][T13809] usb 4-1: Using ep0 maxpacket: 16 [ 751.655761][T15528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=15528 comm=syz.7.2597 [ 751.669284][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 751.672504][T15528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=15528 comm=syz.7.2597 [ 751.682119][ T5917] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 751.704298][T13809] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 751.731200][T13809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 751.788339][T15528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=15528 comm=syz.7.2597 [ 751.833250][ T5955] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 751.859479][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 751.942508][T13809] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 751.985952][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 751.987196][T13809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.046673][ T5955] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 752.051339][T13809] usb 4-1: Product: syz [ 752.145146][ T5917] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 752.166628][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.174652][ T5917] usb 7-1: Product: syz [ 752.178973][T13809] usb 4-1: Manufacturer: syz [ 752.183800][T13809] usb 4-1: SerialNumber: syz [ 752.189356][ T5917] usb 7-1: Manufacturer: syz [ 752.194669][T13809] usb 4-1: config 0 descriptor?? [ 752.199925][ T5917] usb 7-1: SerialNumber: syz [ 752.207817][T13809] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 752.217433][ T5955] usb 6-1: config 0 has no interface number 0 [ 752.224150][ T5955] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 752.249136][ T5955] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 752.260740][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.270562][ T5955] usb 6-1: Product: syz [ 752.277745][ T5955] usb 6-1: Manufacturer: syz [ 752.624151][ T5917] usb 7-1: config 0 descriptor?? [ 752.633133][T13809] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 752.729741][ T5955] usb 6-1: SerialNumber: syz [ 752.739830][ T5955] usb 6-1: config 0 descriptor?? [ 752.745506][T15524] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 752.891216][T15511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.916375][T15541] netlink: 'syz.3.2591': attribute type 21 has an invalid length. [ 752.927718][T15511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.948546][T15541] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2591'. [ 752.958286][T15524] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 752.968166][ T5917] usb 7-1: USB disconnect, device number 35 [ 752.975084][T15541] netlink: 'syz.3.2591': attribute type 4 has an invalid length. [ 752.996247][T15541] netlink: 'syz.3.2591': attribute type 3 has an invalid length. [ 753.027428][T15541] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2591'. [ 753.181123][T13809] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 753.188307][T13809] em28xx 4-1:0.0: Config register raw data: 0x9b [ 753.300028][ T5958] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 753.604880][T13809] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 753.625587][T13809] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 753.632695][T13809] em28xx 4-1:0.0: No AC97 audio processor [ 753.658565][T13809] usb 4-1: USB disconnect, device number 89 [ 753.672972][T13809] em28xx 4-1:0.0: Disconnecting em28xx [ 753.745173][T13809] em28xx 4-1:0.0: Freeing device [ 753.848368][ T5955] asix 6-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 232 [ 753.875936][ T5958] usb 3-1: not running at top speed; connect to a high speed hub [ 753.897071][ T5958] usb 3-1: config 2 has an invalid interface number: 149 but max is 2 [ 753.905707][ T5958] usb 3-1: config 2 has an invalid interface number: 169 but max is 2 [ 753.914983][ T5958] usb 3-1: config 2 has an invalid interface number: 57 but max is 2 [ 753.923111][ T5958] usb 3-1: config 2 has no interface number 0 [ 753.929749][ T5958] usb 3-1: config 2 has no interface number 1 [ 753.935824][ T5958] usb 3-1: config 2 has no interface number 2 [ 753.942022][ T5958] usb 3-1: config 2 interface 149 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 753.966855][ T5958] usb 3-1: config 2 interface 149 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 753.978056][ T5958] usb 3-1: config 2 interface 149 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 753.989074][ T5958] usb 3-1: config 2 interface 149 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 754.010630][ T5958] usb 3-1: config 2 interface 169 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 754.022855][ T5958] usb 3-1: config 2 interface 169 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 754.034604][ T5958] usb 3-1: config 2 interface 169 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 754.045563][ T5958] usb 3-1: config 2 interface 169 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 754.059131][ T5958] usb 3-1: config 2 interface 169 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 754.070080][ T5958] usb 3-1: config 2 interface 169 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 754.085395][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has a duplicate endpoint with address 0xB, skipping [ 754.096463][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has a duplicate endpoint with address 0xD, skipping [ 754.117530][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has a duplicate endpoint with address 0xB, skipping [ 754.142041][ T5958] usb 3-1: config 2 interface 57 altsetting 124 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 754.182811][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has a duplicate endpoint with address 0x1, skipping [ 754.211587][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has an invalid descriptor for endpoint zero, skipping [ 754.337652][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has a duplicate endpoint with address 0x2, skipping [ 754.587513][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has a duplicate endpoint with address 0xF, skipping [ 754.601852][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has a duplicate endpoint with address 0x8, skipping [ 754.613511][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has a duplicate endpoint with address 0xF, skipping [ 754.643870][ T5958] usb 3-1: config 2 interface 57 altsetting 124 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 754.669476][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has a duplicate endpoint with address 0x9, skipping [ 754.687769][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has an invalid descriptor for endpoint zero, skipping [ 754.719628][T15567] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2605'. [ 754.733620][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has a duplicate endpoint with address 0xD, skipping [ 754.762126][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has a duplicate endpoint with address 0x2, skipping [ 754.795106][T15570] 9p: Bad value for 'wfdno' [ 754.804630][ T5958] usb 3-1: config 2 interface 57 altsetting 124 has a duplicate endpoint with address 0xF, skipping [ 754.826970][ T5958] usb 3-1: config 2 interface 149 has no altsetting 0 [ 754.834663][ T5958] usb 3-1: config 2 interface 57 has no altsetting 0 [ 754.843660][ T5958] usb 3-1: New USB device found, idVendor=05e0, idProduct=2001, bcdDevice=34.5b [ 754.856460][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.893168][ T5958] usb 3-1: Product: ш [ 754.907462][ T5958] usb 3-1: Manufacturer: ë…ŒâŒæ¬¨è¾¦â¬²å“ホᲉ׀णג햵î ì¯±è™§ìŽ‰éª»ì–¢î‹Šâ½ºîš“æ¼§ä„Ãᬻëꔖ♴ొ㧭咽Š⛌එ [ 754.931442][ T5958] usb 3-1: SerialNumber: áŠ¶ï‹æ‡Œí‹å—ŸìŠºï±ƒâ‘Šçª·èª·ä…ˆê¢¹ì„쬙儽⯷ꨅî•롳퓻꫊㧸ꑞç°âª—ͼé¹ï¤¼î‡¼ä“‚ᠾ姳㇣螦㬞퇲錌藟왴焴̇핒⌓ﱜ뾫侽ര㦶苋蔀뱹å¶é‹†å’á–¶ï‘ꭋ뢊᥵䎗ꋟꯇ봮磄ꗫ⚀䆰黔럈ᓟ硾瘮敘鸧⸲ꥴ똆 [ 754.972207][T15545] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 755.268541][ T5958] usb 3-1: USB disconnect, device number 73 [ 756.424912][ T5882] usb 6-1: USB disconnect, device number 62 [ 756.527122][T15589] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2612'. [ 756.542317][T15592] netlink: 'syz.2.2613': attribute type 2 has an invalid length. [ 756.818809][T12022] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 757.004530][T15601] netlink: 'syz.7.2616': attribute type 13 has an invalid length. [ 757.012639][T15601] netlink: 'syz.7.2616': attribute type 17 has an invalid length. [ 757.045658][T15601] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.052998][T15601] bridge0: port 2(bridge_slave_1) entered listening state [ 757.060622][T15601] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.067799][T15601] bridge0: port 1(bridge_slave_0) entered listening state [ 757.339501][T12022] usb 3-1: device descriptor read/64, error -71 [ 757.372891][T15601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 757.433466][T15603] FAULT_INJECTION: forcing a failure. [ 757.433466][T15603] name failslab, interval 1, probability 0, space 0, times 0 [ 757.458308][T15603] CPU: 1 UID: 0 PID: 15603 Comm: syz.5.2617 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.458336][T15603] Tainted: [L]=SOFTLOCKUP [ 757.458342][T15603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 757.458351][T15603] Call Trace: [ 757.458357][T15603] [ 757.458364][T15603] dump_stack_lvl+0x100/0x190 [ 757.458392][T15603] should_fail_ex.cold+0x5/0xa [ 757.458422][T15603] should_failslab+0xc2/0x120 [ 757.458444][T15603] kmem_cache_alloc_noprof+0x83/0x780 [ 757.458464][T15603] ? d_instantiate+0x90/0xb0 [ 757.458485][T15603] ? alloc_empty_file+0x55/0x1c0 [ 757.458511][T15603] ? alloc_empty_file+0x55/0x1c0 [ 757.458533][T15603] alloc_empty_file+0x55/0x1c0 [ 757.458555][T15603] alloc_file_pseudo+0x13a/0x230 [ 757.458578][T15603] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 757.458600][T15603] ? inode_init_always_gfp+0xd0e/0x1040 [ 757.458629][T15603] sock_alloc_file+0x50/0x210 [ 757.458654][T15603] do_accept+0x242/0x530 [ 757.458674][T15603] ? do_raw_spin_lock+0x128/0x260 [ 757.458694][T15603] ? __pfx_do_accept+0x10/0x10 [ 757.458725][T15603] __sys_accept4+0x108/0x200 [ 757.458745][T15603] ? __pfx___sys_accept4+0x10/0x10 [ 757.458763][T15603] ? __pfx_ksys_write+0x10/0x10 [ 757.458780][T15603] ? fput+0x79/0x100 [ 757.458805][T15603] __x64_sys_accept4+0x96/0x100 [ 757.458825][T15603] ? lockdep_hardirqs_on+0x78/0x100 [ 757.458844][T15603] do_syscall_64+0xc9/0xf80 [ 757.458866][T15603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.458884][T15603] RIP: 0033:0x7f169b39aeb9 [ 757.458900][T15603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.458918][T15603] RSP: 002b:00007f169c24c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 757.458937][T15603] RAX: ffffffffffffffda RBX: 00007f169b615fa0 RCX: 00007f169b39aeb9 [ 757.458949][T15603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 757.458959][T15603] RBP: 00007f169c24c090 R08: 0000000000000000 R09: 0000000000000000 [ 757.458968][T15603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.458978][T15603] R13: 00007f169b616038 R14: 00007f169b615fa0 R15: 00007ffeb6529c98 [ 757.459002][T15603] [ 757.846594][T12022] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 758.890860][T15621] netlink: 'syz.5.2622': attribute type 1 has an invalid length. [ 759.001501][T12022] usb 3-1: device descriptor read/64, error -71 [ 759.016961][T15621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 759.305478][T12022] usb usb3-port1: attempt power cycle [ 759.586624][T15622] bond2: (slave veth5): Enslaving as an active interface with a down link [ 759.962139][T15629] gre0 speed is unknown, defaulting to 1000 [ 760.304212][ T30] audit: type=1400 audit(1770157115.805:1050): avc: denied { ioctl } for pid=15634 comm="syz.3.2625" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 760.887777][T15658] Bluetooth: MGMT ver 1.23 [ 761.079240][T15629] lo speed is unknown, defaulting to 1000 [ 761.098390][T15661] 9p: Bad value for 'rfdno' [ 762.135872][T15682] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 762.757430][T15691] kAFS: unable to lookup cell '(' [ 762.793775][T15692] kAFS: unable to lookup cell '(,c¾ûL' [ 763.409202][T12022] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 763.470507][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2645'. [ 763.578481][T12022] usb 6-1: Using ep0 maxpacket: 8 [ 763.606238][T12022] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 763.722676][T12022] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 763.746348][T12022] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 763.848680][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2646'. [ 763.869166][ T30] audit: type=1400 audit(1770157119.521:1051): avc: denied { mount } for pid=15712 comm="syz.7.2646" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 764.139494][T12022] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 764.175606][T12022] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 764.217185][T12022] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 764.256109][T12022] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 764.301646][T12022] usb 6-1: config 168 interface 0 has no altsetting 0 [ 764.359619][T12022] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 764.373133][T12022] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 764.399726][T12022] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 764.511258][T12022] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 764.540762][T12022] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 764.557161][T12022] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 764.578634][T12022] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 764.616584][T12022] usb 6-1: config 168 interface 0 has no altsetting 0 [ 764.647992][T12022] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 764.658198][T12022] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 764.677225][T12022] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 764.702303][T12022] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 764.724261][T12022] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 764.788948][T12022] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 764.829947][ T30] audit: type=1400 audit(1770157120.518:1052): avc: denied { unmount } for pid=13546 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 764.855113][T12022] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 764.892490][T12022] usb 6-1: config 168 interface 0 has no altsetting 0 [ 764.933660][T12022] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 764.953862][T12022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.980667][T12022] usb 6-1: Product: syz [ 764.996564][T12022] usb 6-1: Manufacturer: syz [ 765.008706][T12022] usb 6-1: SerialNumber: syz [ 766.643800][T15746] overlayfs: failed to resolve './file1': -2 [ 767.028487][T15754] 9p: Bad value for 'wfdno' [ 767.030355][T12022] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 767.165297][ T30] audit: type=1326 audit(1770157122.933:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1802f9aeb9 code=0x7ffc0000 [ 767.443163][T12022] usb 6-1: USB disconnect, device number 63 [ 767.461286][ T30] audit: type=1326 audit(1770157122.943:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1802f9aeb9 code=0x7ffc0000 [ 767.576640][T15758] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2655'. [ 767.585884][T15758] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2655'. [ 767.880502][ T30] audit: type=1326 audit(1770157122.943:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1802f9aeb9 code=0x7ffc0000 [ 767.966983][ T30] audit: type=1326 audit(1770157122.943:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1802f9aeb9 code=0x7ffc0000 [ 768.086218][T12767] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 768.228182][ T30] audit: type=1326 audit(1770157122.943:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1802f9aeb9 code=0x7ffc0000 [ 769.045153][ T30] audit: type=1326 audit(1770157122.943:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1802f9aeb9 code=0x7ffc0000 [ 769.122197][ T30] audit: type=1326 audit(1770157122.943:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1802f9aeb9 code=0x7ffc0000 [ 769.146690][ T30] audit: type=1326 audit(1770157122.943:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f1802f9aeb9 code=0x7ffc0000 [ 769.181469][ T30] audit: type=1326 audit(1770157122.943:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1802f9aeb9 code=0x7ffc0000 [ 769.233290][ T30] audit: type=1326 audit(1770157122.943:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1802f9aeb9 code=0x7ffc0000 [ 769.605005][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2661'. [ 769.622435][T15780] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2663'. [ 769.792595][T15787] loop2: detected capacity change from 0 to 7 [ 769.803741][ T5824] loop2: [ 769.806774][ T5824] loop2: partition table partially beyond EOD, truncated [ 769.808389][ T5882] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 769.831519][T15787] loop2: [ 769.836676][T15787] loop2: partition table partially beyond EOD, truncated [ 769.846185][T13809] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 769.974282][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 769.991932][T15790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.007544][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.024468][T13809] usb 8-1: Using ep0 maxpacket: 32 [ 770.052542][T13809] usb 8-1: config 0 has an invalid interface number: 111 but max is 1 [ 770.075054][ T5882] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice=f0.00 [ 770.153295][T15794] netlink: 'syz.6.2667': attribute type 13 has an invalid length. [ 770.161318][T15794] netlink: 'syz.6.2667': attribute type 17 has an invalid length. [ 770.360797][T13809] usb 8-1: config 0 has no interface number 1 [ 770.378860][ T5882] usb 4-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 770.413222][ T5882] usb 4-1: Manufacturer: syz [ 770.418072][T15794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 770.451485][ T5882] usb 4-1: config 0 descriptor?? [ 770.519368][T13809] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 770.529828][T13809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.556250][T13809] usb 8-1: Product: syz [ 770.569501][T13809] usb 8-1: Manufacturer: syz [ 770.589282][T13809] usb 8-1: SerialNumber: syz [ 770.604026][T13809] usb 8-1: config 0 descriptor?? [ 770.660077][T13809] snd-usb-6fire 8-1:0.111: too many cards registered. [ 770.692133][T13809] snd-usb-6fire 8-1:0.0: too many cards registered. [ 770.867185][ T5882] usbhid 4-1:0.0: can't add hid device: -71 [ 770.873218][ T5882] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 770.902583][ T5882] usb 4-1: USB disconnect, device number 90 [ 770.905461][ T5955] usb 8-1: USB disconnect, device number 8 [ 772.170482][ T5882] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 772.411839][ T5882] usb 8-1: unable to get BOS descriptor or descriptor too short [ 772.757294][ T5882] usb 8-1: not running at top speed; connect to a high speed hub [ 772.777501][ T5882] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.791054][ T5882] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 772.813915][ T5882] usb 8-1: string descriptor 0 read error: -22 [ 772.820811][ T5882] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 772.850782][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.981688][ T5882] usb 8-1: 0:2 : does not exist [ 773.407019][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 773.407041][ T30] audit: type=1400 audit(1770157129.368:1127): avc: denied { watch } for pid=15836 comm="syz.5.2680" path="/356/bus/file1" dev="overlay" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 774.380535][T12022] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 774.520273][T15851] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2684'. [ 774.544044][ T5882] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 774.657221][T12022] usb 4-1: Using ep0 maxpacket: 32 [ 774.785733][T12022] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 774.883998][T12022] usb 4-1: config 0 has no interface number 0 [ 774.888983][ T5882] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 774.903083][T12022] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 774.906154][ T5882] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 774.912645][T12022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.949514][T12022] usb 4-1: Product: syz [ 774.959754][T12022] usb 4-1: Manufacturer: syz [ 774.963523][ T5882] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 774.977624][T12022] usb 4-1: SerialNumber: syz [ 775.075269][ T5882] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 775.091175][T12022] usb 4-1: config 0 descriptor?? [ 775.116351][T12022] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 775.120442][ T5882] usb 8-1: USB disconnect, device number 9 [ 775.357253][ T30] audit: type=1326 audit(1770157131.562:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15854 comm="syz.6.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887ff9aeb9 code=0x7ffc0000 [ 775.791672][ T30] audit: type=1326 audit(1770157131.562:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15854 comm="syz.6.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887ff9aeb9 code=0x7ffc0000 [ 775.820657][T12022] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 775.867787][ T30] audit: type=1326 audit(1770157131.562:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15854 comm="syz.6.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887ff9aeb9 code=0x7ffc0000 [ 775.895057][T12022] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 775.942483][ T30] audit: type=1326 audit(1770157131.573:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15854 comm="syz.6.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f887ff9aeb9 code=0x7ffc0000 [ 776.343716][ T30] audit: type=1326 audit(1770157131.573:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15854 comm="syz.6.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887ff9aeb9 code=0x7ffc0000 [ 776.401694][ T30] audit: type=1326 audit(1770157131.573:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15854 comm="syz.6.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887ff9aeb9 code=0x7ffc0000 [ 776.429761][ T30] audit: type=1326 audit(1770157131.573:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15854 comm="syz.6.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887ff9aeb9 code=0x7ffc0000 [ 776.472020][ T30] audit: type=1326 audit(1770157131.573:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15854 comm="syz.6.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f887ff9aeb9 code=0x7ffc0000 [ 776.508250][ T30] audit: type=1326 audit(1770157131.573:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15854 comm="syz.6.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887ff9aeb9 code=0x7ffc0000 [ 776.548344][T15868] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2689'. [ 776.956644][T15886] FAULT_INJECTION: forcing a failure. [ 776.956644][T15886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.975979][T15886] CPU: 1 UID: 0 PID: 15886 Comm: syz.6.2696 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.976015][T15886] Tainted: [L]=SOFTLOCKUP [ 776.976022][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 776.976033][T15886] Call Trace: [ 776.976040][T15886] [ 776.976047][T15886] dump_stack_lvl+0x100/0x190 [ 776.976078][T15886] should_fail_ex.cold+0x5/0xa [ 776.976111][T15886] _copy_to_user+0x32/0xd0 [ 776.976137][T15886] video_usercopy+0xec7/0x1660 [ 776.976159][T15886] ? __pfx___video_do_ioctl+0x10/0x10 [ 776.976180][T15886] ? __pfx_video_usercopy+0x10/0x10 [ 776.976215][T15886] v4l2_ioctl+0x1bd/0x250 [ 776.976234][T15886] ? __pfx_v4l2_ioctl+0x10/0x10 [ 776.976256][T15886] __x64_sys_ioctl+0x18e/0x210 [ 776.976277][T15886] do_syscall_64+0xc9/0xf80 [ 776.976300][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.976319][T15886] RIP: 0033:0x7f887ff9aeb9 [ 776.976335][T15886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.976353][T15886] RSP: 002b:00007f8880e45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.976372][T15886] RAX: ffffffffffffffda RBX: 00007f8880215fa0 RCX: 00007f887ff9aeb9 [ 776.976384][T15886] RDX: 0000200000000100 RSI: 00000000c0405668 RDI: 0000000000000003 [ 776.976396][T15886] RBP: 00007f8880e45090 R08: 0000000000000000 R09: 0000000000000000 [ 776.976406][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.976417][T15886] R13: 00007f8880216038 R14: 00007f8880215fa0 R15: 00007ffcb8fcd0c8 [ 776.976443][T15886] [ 778.486652][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 778.495070][T12022] usb 4-1: USB disconnect, device number 91 [ 778.516765][T12022] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 778.543718][T12022] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 778.838566][ T5955] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 778.877012][T15907] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 778.923907][T12022] quatech2 4-1:0.51: device disconnected [ 779.067129][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 779.078809][ T5955] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 779.102731][ T5955] usb 6-1: config 0 has no interface number 0 [ 779.145026][ T5955] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 779.157910][ T5957] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 779.176107][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.200410][ T5955] usb 6-1: Product: syz [ 779.209734][ T5955] usb 6-1: Manufacturer: syz [ 779.216907][ T5955] usb 6-1: SerialNumber: syz [ 779.229485][ T5955] usb 6-1: config 0 descriptor?? [ 779.237578][ T5955] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 779.305281][ T5957] usb 8-1: device descriptor read/64, error -71 [ 779.320169][T15927] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 779.343573][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 779.343589][ T30] audit: type=1400 audit(1770157135.793:1201): avc: denied { map } for pid=15928 comm="syz.2.2708" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 779.425128][ T30] audit: type=1400 audit(1770157135.824:1202): avc: denied { execute } for pid=15928 comm="syz.2.2708" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 779.455895][ T5955] usb 6-1: qt2_attach - failed to power on unit: -71 [ 779.472611][ T5955] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 779.489957][T15936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15936 comm=syz.6.2710 [ 779.514566][ T5955] usb 6-1: USB disconnect, device number 64 [ 779.533778][ T5957] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 779.695958][ T5957] usb 8-1: device descriptor read/64, error -71 [ 779.855409][ T5957] usb usb8-port1: attempt power cycle [ 779.970129][T15944] 9p: Unknown Cache mode or invalid value loGe [ 780.449229][T15948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2714'. [ 780.552924][ T5957] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 780.573023][ T5957] usb 8-1: device descriptor read/8, error -71 [ 780.746885][T12022] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 780.803755][ T5957] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 780.854876][ T5957] usb 8-1: device descriptor read/8, error -71 [ 780.934087][T12022] usb 7-1: Using ep0 maxpacket: 16 [ 780.961794][T12022] usb 7-1: unable to get BOS descriptor or descriptor too short [ 780.980977][T12022] usb 7-1: config index 0 descriptor too short (expected 61094, got 166) [ 780.995019][ T5957] usb usb8-port1: unable to enumerate USB device [ 781.004395][T12022] usb 7-1: config 47 has too many interfaces: 233, using maximum allowed: 32 [ 781.015639][T12022] usb 7-1: config 47 has an invalid descriptor of length 246, skipping remainder of the config [ 781.049557][T12022] usb 7-1: config 47 has 0 interfaces, different from the descriptor's value: 233 [ 781.073543][T12022] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 781.087981][T12022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.096313][T12022] usb 7-1: Product: syz [ 781.100541][T12022] usb 7-1: Manufacturer: syz [ 781.105182][T12022] usb 7-1: SerialNumber: syz [ 781.168428][T15964] loop2: detected capacity change from 0 to 7 [ 781.179043][ T5974] loop2: [ 781.185608][ T5974] loop2: partition table partially beyond EOD, truncated [ 781.224937][T15964] loop2: [ 781.228732][T15964] loop2: partition table partially beyond EOD, truncated [ 781.391639][T15950] capability: warning: `syz.6.2716' uses 32-bit capabilities (legacy support in use) [ 781.424074][T12022] usb 7-1: USB disconnect, device number 36 [ 781.547698][T15970] loop1: detected capacity change from 0 to 7 [ 781.750230][T15970] loop1: [CUMANA/ADFS] p1 [ADFS] p1 [ 781.758320][T15970] loop1: partition table partially beyond EOD, truncated [ 781.836818][T15970] loop1: p1 size 2989602745 extends beyond EOD, truncated [ 781.936933][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 782.170987][T15983] netlink: 'syz.5.2715': attribute type 21 has an invalid length. [ 782.179923][T15983] netlink: 'syz.5.2715': attribute type 6 has an invalid length. [ 782.187816][T15983] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2715'. [ 782.222035][T15984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2726'. [ 782.566060][T15985] bridge0: port 3(gretap0) entered blocking state [ 782.574336][T15985] bridge0: port 3(gretap0) entered disabled state [ 782.589752][T15985] gretap0: entered allmulticast mode [ 782.613223][T15985] gretap0: left allmulticast mode [ 782.795434][ T5875] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 782.858002][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.877134][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.973394][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 782.980494][ T5875] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 782.988410][ T5875] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 783.025795][ T5875] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 783.047585][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2728'. [ 783.060866][ T5875] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 783.107758][ T5875] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 783.120257][ T5875] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 783.208537][ T5875] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 783.267289][ T5875] usb 4-1: config 168 interface 0 has no altsetting 0 [ 783.311409][ T5875] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 783.328780][ T5875] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 783.648919][ T5875] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 783.687492][ T5875] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 783.717563][ T30] audit: type=1400 audit(1770157140.380:1203): avc: denied { create } for pid=16006 comm="syz.7.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 783.737756][ T5875] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 783.756906][ T5875] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 783.763198][T13205] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 783.783731][ T30] audit: type=1400 audit(1770157140.380:1204): avc: denied { setopt } for pid=16006 comm="syz.7.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 783.811082][ T5875] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 783.829277][ T5875] usb 4-1: config 168 interface 0 has no altsetting 0 [ 783.842420][ T5875] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 783.852139][ T5875] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 783.864631][ T5875] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 783.880234][ T5875] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 783.900186][ T5868] libceph: connect (1)[c::]:6789 error -22 [ 783.906468][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 783.912575][ T5875] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 783.924623][ T5875] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 783.925256][T13205] usb 3-1: device descriptor read/64, error -71 [ 783.935063][ T5875] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 783.965185][T16017] atomic_op ffff88805764f198 conn xmit_atomic 0000000000000000 [ 783.983277][ T5875] usb 4-1: config 168 interface 0 has no altsetting 0 [ 783.990450][T16017] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2734'. [ 784.004127][ T5875] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 784.016643][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.024959][ T5875] usb 4-1: Product: syz [ 784.065773][ T5875] usb 4-1: Manufacturer: syz [ 784.078593][ T5875] usb 4-1: SerialNumber: syz [ 784.163534][ T5868] libceph: connect (1)[c::]:6789 error -22 [ 784.169607][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 784.172676][T13205] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 784.306339][T13205] usb 3-1: device descriptor read/64, error -71 [ 784.441961][T13205] usb usb3-port1: attempt power cycle [ 785.010871][ T5868] libceph: connect (1)[c::]:6789 error -22 [ 785.016982][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 785.043911][T16012] ceph: No mds server is up or the cluster is laggy [ 785.087431][T13205] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 785.108147][T13205] usb 3-1: device descriptor read/8, error -71 [ 785.344341][T13205] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 785.377255][T13205] usb 3-1: device descriptor read/8, error -71 [ 785.441306][ T5882] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 785.487622][T13205] usb usb3-port1: unable to enumerate USB device [ 785.593473][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 785.605117][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.626815][ T5882] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 785.638405][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.666756][ T5882] usb 7-1: config 0 descriptor?? [ 785.896813][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 785.903993][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 786.079669][ T5875] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 786.087498][ T5882] isku 0003:1E7D:319C.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 786.111867][ T5875] usb 4-1: USB disconnect, device number 92 [ 786.255591][T16022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.279627][T16022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.516545][T13205] usb 7-1: USB disconnect, device number 37 [ 788.295795][T16071] gre0 speed is unknown, defaulting to 1000 [ 788.729926][T16086] netlink: 'syz.6.2758': attribute type 10 has an invalid length. [ 788.765926][T16086] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 788.858154][T16071] lo speed is unknown, defaulting to 1000 [ 789.697360][ T5868] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 789.879429][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 789.893994][ T5868] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.935023][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.987684][ T5868] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 790.020700][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.050223][ T5868] usb 4-1: Product: syz [ 790.069520][ T5868] usb 4-1: Manufacturer: syz [ 790.074148][ T5868] usb 4-1: SerialNumber: syz [ 790.109111][T16107] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2762'. [ 791.744957][ T5868] usb 4-1: 0:2 : does not exist [ 791.801467][T16092] syz.3.2759 (16092) used greatest stack depth: 19312 bytes left [ 791.859976][ T5868] usb 4-1: USB disconnect, device number 93 [ 792.620773][ T30] audit: type=1326 audit(1770157149.724:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.7.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13599aeb9 code=0x7ffc0000 [ 792.961411][ T30] audit: type=1326 audit(1770157149.724:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.7.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13599aeb9 code=0x7ffc0000 [ 793.910287][ T30] audit: type=1326 audit(1770157149.755:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.7.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa13595b78e code=0x7ffc0000 [ 794.193628][ T5955] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 794.308166][ T30] audit: type=1326 audit(1770157149.755:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.7.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa13595b78e code=0x7ffc0000 [ 794.357392][T16152] gre0 speed is unknown, defaulting to 1000 [ 794.395031][ T30] audit: type=1326 audit(1770157149.787:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.7.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa13599aeb9 code=0x7ffc0000 [ 794.498713][ T5955] usb 8-1: Using ep0 maxpacket: 32 [ 794.511934][ T5955] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 794.528213][ T5955] usb 8-1: config 0 has no interface number 0 [ 794.546462][ T30] audit: type=1326 audit(1770157149.808:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.7.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13599aeb9 code=0x7ffc0000 [ 794.577382][ T5955] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 794.599625][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.614796][ T5955] usb 8-1: Product: syz [ 794.623332][ T30] audit: type=1326 audit(1770157149.808:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.7.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13599aeb9 code=0x7ffc0000 [ 794.661560][ T5955] usb 8-1: Manufacturer: syz [ 794.676105][ T5955] usb 8-1: SerialNumber: syz [ 794.689384][ T5955] usb 8-1: config 0 descriptor?? [ 794.706023][ T5955] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 794.728653][ T30] audit: type=1326 audit(1770157149.808:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.7.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa13599aeb9 code=0x7ffc0000 [ 795.066732][ T5955] usb 8-1: qt2_attach - failed to power on unit: -71 [ 795.088269][ T5955] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 795.169638][ T5955] usb 8-1: USB disconnect, device number 14 [ 795.191041][ T30] audit: type=1400 audit(1770157151.718:1213): avc: denied { bind } for pid=16155 comm="syz.3.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 795.378874][T16152] lo speed is unknown, defaulting to 1000 [ 795.466169][T16170] 8021q: adding VLAN 0 to HW filter on device bond4 [ 795.498330][T16170] bond4: entered allmulticast mode [ 795.528631][T16170] bond0: (slave bond4): Enslaving as an active interface with a down link [ 795.800954][T16175] tun0: tun_chr_ioctl cmd 1074025675 [ 795.862062][T16178] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2783'. [ 796.221243][T16175] tun0: persist enabled [ 796.246679][T16179] tun0: tun_chr_ioctl cmd 1074025675 [ 796.266108][T16179] tun0: persist disabled [ 796.813512][T16194] netlink: 'syz.3.2787': attribute type 13 has an invalid length. [ 796.821486][T16194] netlink: 'syz.3.2787': attribute type 17 has an invalid length. [ 797.125267][T16194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.992874][T16210] netlink: 'syz.3.2792': attribute type 1 has an invalid length. [ 800.735172][ T30] audit: type=1326 audit(1770157158.237:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.5.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169b39aeb9 code=0x7ffc0000 [ 800.797543][ T30] audit: type=1326 audit(1770157158.237:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.5.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169b39aeb9 code=0x7ffc0000 [ 800.871029][ T30] audit: type=1326 audit(1770157158.248:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.5.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f169b39aeb9 code=0x7ffc0000 [ 800.909270][T13205] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 801.543669][T16240] gre0 speed is unknown, defaulting to 1000 [ 803.076520][T12767] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 804.473884][T16240] lo speed is unknown, defaulting to 1000 [ 805.746360][T16282] FAULT_INJECTION: forcing a failure. [ 805.746360][T16282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.787944][T16282] CPU: 0 UID: 0 PID: 16282 Comm: syz.3.2809 Tainted: G L syzkaller #0 PREEMPT(full) [ 805.787976][T16282] Tainted: [L]=SOFTLOCKUP [ 805.787983][T16282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 805.787994][T16282] Call Trace: [ 805.788002][T16282] [ 805.788009][T16282] dump_stack_lvl+0x100/0x190 [ 805.788039][T16282] should_fail_ex.cold+0x5/0xa [ 805.788072][T16282] _copy_from_user+0x2e/0xd0 [ 805.788098][T16282] kstrtouint_from_user+0xd6/0x1d0 [ 805.788117][T16282] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 805.788133][T16282] ? __lock_acquire+0x4a5/0x2630 [ 805.788156][T16282] ? lock_acquire+0x17c/0x330 [ 805.788180][T16282] proc_fail_nth_write+0x83/0x220 [ 805.788205][T16282] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 805.788235][T16282] vfs_write+0x2aa/0x1070 [ 805.788255][T16282] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 805.788281][T16282] ? __pfx_vfs_write+0x10/0x10 [ 805.788296][T16282] ? find_held_lock+0x2b/0x80 [ 805.788316][T16282] ? __fget_files+0x215/0x3d0 [ 805.788338][T16282] ? __fget_files+0x21f/0x3d0 [ 805.788362][T16282] ksys_write+0x12a/0x250 [ 805.788380][T16282] ? __pfx_ksys_write+0x10/0x10 [ 805.788395][T16282] ? v4l2_ioctl+0x1c5/0x250 [ 805.788414][T16282] ? fput+0x79/0x100 [ 805.788440][T16282] do_syscall_64+0xc9/0xf80 [ 805.788468][T16282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.788485][T16282] RIP: 0033:0x7f1802f5b78e [ 805.788499][T16282] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 805.788516][T16282] RSP: 002b:00007f1803f32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 805.788532][T16282] RAX: ffffffffffffffda RBX: 00007f1803f336c0 RCX: 00007f1802f5b78e [ 805.788543][T16282] RDX: 0000000000000001 RSI: 00007f1803f330a0 RDI: 0000000000000004 [ 805.788553][T16282] RBP: 00007f1803f33090 R08: 0000000000000000 R09: 0000000000000000 [ 805.788564][T16282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.788574][T16282] R13: 00007f1803216038 R14: 00007f1803215fa0 R15: 00007ffdac1c4918 [ 805.788601][T16282] [ 806.824541][ T30] audit: type=1400 audit(1770157164.641:1217): avc: denied { ioctl } for pid=16269 comm="syz.5.2806" path="socket:[55324]" dev="sockfs" ino=55324 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 807.342583][T16294] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 807.351894][T16294] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 807.363197][T16294] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 807.600092][ T30] audit: type=1400 audit(1770157165.208:1218): avc: denied { firmware_load } for pid=16285 comm="syz.3.2811" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 807.757043][T16304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2814'. [ 807.766718][T16304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2814'. [ 809.957124][T16336] fuse: Bad value for 'fd' [ 810.189869][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2825'. [ 810.382813][T16342] netlink: 'syz.7.2824': attribute type 13 has an invalid length. [ 810.393355][T16342] netlink: 'syz.7.2824': attribute type 17 has an invalid length. [ 810.708703][T16342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 811.532945][T16354] loop2: detected capacity change from 0 to 7 [ 811.557531][T16354] loop2: [ 811.568477][T16354] loop2: partition table partially beyond EOD, truncated [ 812.133642][T16367] syzkaller0: entered promiscuous mode [ 812.143939][T16367] syzkaller0: entered allmulticast mode [ 812.351191][ T5958] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 812.362856][ T30] audit: type=1400 audit(1770157170.436:1219): avc: denied { write } for pid=16378 comm="syz.6.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 813.008885][ T5958] usb 6-1: unable to get BOS descriptor or descriptor too short [ 813.027054][ T5958] usb 6-1: not running at top speed; connect to a high speed hub [ 813.054770][ T5958] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.077989][ T5958] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 813.263115][ T5958] usb 6-1: string descriptor 0 read error: -22 [ 813.269710][ T5958] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 813.369050][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.954735][T16392] gre0 speed is unknown, defaulting to 1000 [ 814.124827][ T5958] usb 6-1: 0:2 : does not exist [ 814.370318][T12767] Bluetooth: hci5: unexpected event for opcode 0x0c26 [ 814.549790][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.557078][ C0] bridge0: topology change detected, propagating [ 814.563612][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.570870][ C0] bridge0: topology change detected, propagating [ 815.225554][T16370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.289513][T16370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.322053][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2844'. [ 815.486750][T16404] hsr_slave_1 (unregistering): left promiscuous mode [ 815.600224][T16392] lo speed is unknown, defaulting to 1000 [ 816.169270][ T5958] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 816.413530][ T5958] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 816.437170][ T5958] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 816.535823][ T5958] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 816.562187][ T5958] usb 6-1: USB disconnect, device number 66 [ 816.750225][ T5875] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 816.960161][ T5875] usb 8-1: Using ep0 maxpacket: 32 [ 816.972670][ T5875] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.986649][ T5875] usb 8-1: config 0 has no interfaces? [ 817.006533][ T5875] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 817.457344][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.465843][ T5875] usb 8-1: Product: syz [ 817.470131][ T5875] usb 8-1: Manufacturer: syz [ 817.480104][ T5875] usb 8-1: SerialNumber: syz [ 817.571518][ T5875] usb 8-1: config 0 descriptor?? [ 817.579204][T16433] tipc: MTU too low for tipc bearer [ 818.197100][T12767] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 818.813083][T16418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.989288][T16418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.104704][T16418] bond0 (unregistering): Released all slaves [ 820.194479][T13205] usb 8-1: USB disconnect, device number 15 [ 820.242769][ T30] audit: type=1400 audit(1770157178.730:1220): avc: denied { listen } for pid=16462 comm="syz.5.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 820.959593][T16469] gre0 speed is unknown, defaulting to 1000 [ 821.202278][T16477] netlink: 'syz.2.2860': attribute type 13 has an invalid length. [ 821.210284][T16477] netlink: 'syz.2.2860': attribute type 17 has an invalid length. [ 821.308043][T16477] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.315174][T16477] bridge0: port 2(bridge_slave_1) entered listening state [ 821.322510][T16477] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.329645][T16477] bridge0: port 1(bridge_slave_0) entered listening state [ 821.376588][T16477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 821.665512][ T5957] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 822.092326][T16469] lo speed is unknown, defaulting to 1000 [ 822.159827][ T5957] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.184755][ T5957] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 822.266495][ T5957] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 822.295621][T12022] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 822.311260][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.328647][ T5957] usb 6-1: config 0 descriptor?? [ 822.346409][ T5957] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 822.355126][ T5957] dvb-usb: bulk message failed: -22 (3/0) [ 822.366713][ T5957] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 822.380510][ T5957] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 822.390766][ T5957] usb 6-1: media controller created [ 822.400990][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 822.420784][ T5957] dvb-usb: bulk message failed: -22 (6/0) [ 822.428119][ T5957] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 822.439350][ T5957] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 822.477214][T12022] usb 8-1: unable to get BOS descriptor or descriptor too short [ 822.486317][ T5957] dvb-usb: schedule remote query interval to 150 msecs. [ 822.493984][ T5957] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 822.503319][T12022] usb 8-1: not running at top speed; connect to a high speed hub [ 822.515108][T12022] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.528652][T12022] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 822.561614][T12022] usb 8-1: string descriptor 0 read error: -22 [ 822.578634][T12022] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 822.636894][T12022] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.648264][ T5957] dvb-usb: bulk message failed: -22 (1/0) [ 822.655641][ T5957] dvb-usb: error while querying for an remote control event. [ 822.828829][T12022] usb 8-1: 0:2 : does not exist [ 822.924279][ T5957] dvb-usb: bulk message failed: -22 (1/0) [ 822.942935][ T5957] dvb-usb: error while querying for an remote control event. [ 823.133288][ T5957] dvb-usb: bulk message failed: -22 (1/0) [ 823.140755][ T5957] dvb-usb: error while querying for an remote control event. [ 823.237092][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 823.313296][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 823.320651][ T5957] dvb-usb: bulk message failed: -22 (1/0) [ 823.336324][ T5957] dvb-usb: error while querying for an remote control event. [ 823.513306][ T5957] dvb-usb: bulk message failed: -22 (1/0) [ 823.537743][ T5957] dvb-usb: error while querying for an remote control event. [ 823.679005][T16503] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2869'. [ 823.733615][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 823.757124][ T5955] dvb-usb: error while querying for an remote control event. [ 823.949038][ T5957] dvb-usb: bulk message failed: -22 (1/0) [ 823.956221][ T5957] dvb-usb: error while querying for an remote control event. [ 824.009535][ T5955] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 824.126042][T16509] input: syz1 as /devices/virtual/input/input20 [ 824.140817][ T5957] dvb-usb: bulk message failed: -22 (1/0) [ 824.147152][ T5957] dvb-usb: error while querying for an remote control event. [ 824.233340][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 824.376676][T12022] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 824.385940][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.410976][ T5955] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 824.420688][T12022] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 824.435344][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.448624][T12022] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 824.461758][ T5955] usb 4-1: config 0 descriptor?? [ 824.515975][T12022] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 824.542579][ T5957] dvb-usb: bulk message failed: -22 (1/0) [ 824.559161][ T5957] dvb-usb: error while querying for an remote control event. [ 824.585897][T12022] usb 8-1: USB disconnect, device number 16 [ 824.765660][ T5957] dvb-usb: bulk message failed: -22 (1/0) [ 824.789874][ T5957] dvb-usb: error while querying for an remote control event. [ 824.939340][ T5955] isku 0003:1E7D:319C.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 824.946962][ T5917] usb 6-1: USB disconnect, device number 67 [ 825.218521][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.225831][ C0] bridge0: topology change detected, propagating [ 825.295046][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.302287][ C0] bridge0: topology change detected, propagating [ 825.314452][ T5958] dvb-usb: bulk message failed: -22 (1/0) [ 825.320249][ T5958] dvb-usb: error while querying for an remote control event. [ 825.360573][T16520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.447451][T16520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.799561][ T5955] isku 0003:1E7D:319C.002C: couldn't init struct isku_device [ 825.857125][ T5955] isku 0003:1E7D:319C.002C: couldn't install keyboard [ 825.968367][ T5955] isku 0003:1E7D:319C.002C: probe with driver isku failed with error -71 [ 826.074270][ T5917] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 826.098218][ T5955] usb 4-1: USB disconnect, device number 94 [ 826.179433][T16534] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2876'. [ 826.392078][T16533] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 826.629823][T16540] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2878'. [ 827.541604][T16543] gre0 speed is unknown, defaulting to 1000 [ 828.051582][T16564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2884'. [ 828.160980][T16543] lo speed is unknown, defaulting to 1000 [ 829.333508][T16586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.622131][ T5958] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 831.630228][T16582] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 831.657979][T16582] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 831.815009][ T5958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 831.841298][ T5958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.904247][ T5958] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 831.997063][ T5958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.008029][ T5958] usb 8-1: config 0 descriptor?? [ 832.266464][T16608] smc: removing ib device syz1 [ 834.083189][T16608] ------------[ cut here ]------------ [ 834.088874][T16608] !xa_empty(&pool->xa) [ 834.088884][T16608] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#1: syz.3.2890/16608 [ 834.104488][T16608] Modules linked in: [ 834.108945][T16608] CPU: 1 UID: 0 PID: 16608 Comm: syz.3.2890 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.120224][T16608] Tainted: [L]=SOFTLOCKUP [ 834.124521][T16608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 834.134834][T16608] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 834.140300][T16608] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 36 59 62 f9 5b c3 cc cc cc cc e8 2b 59 62 f9 90 <0f> 0b 90 e8 22 59 62 f9 5b c3 cc cc cc cc e8 d7 a7 cc f9 eb d0 0f [ 834.159930][T16608] RSP: 0018:ffffc90004e1f1b0 EFLAGS: 00010246 [ 834.166188][T16608] RAX: 0000000000080000 RBX: ffff888029ed9358 RCX: ffffc90011c18000 [ 834.174156][T16608] RDX: 0000000000080000 RSI: ffffffff88a4a235 RDI: ffff888029ed93d8 [ 834.182103][T16608] RBP: ffffffff88a30540 R08: 0000000000000005 R09: 0000000000000001 [ 834.190244][T16608] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888029ed8698 [ 834.198409][T16608] R13: ffff888029ed7fe0 R14: ffff888029ed7fe0 R15: ffff888029ed90b8 [ 834.206370][T16608] FS: 00007f1803ed06c0(0000) GS:ffff8881246db000(0000) knlGS:0000000000000000 [ 834.215739][T16608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 834.222535][T16608] CR2: 00002000001ee030 CR3: 0000000075fac000 CR4: 00000000003526f0 [ 834.230511][T16608] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 834.238457][T16608] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 834.246436][T16608] Call Trace: [ 834.249896][T16608] [ 834.252803][T16608] rxe_dealloc+0x25/0xc0 [ 834.257022][T16608] ib_dealloc_device+0x49/0x230 [ 834.261862][T16608] __ib_unregister_device+0x396/0x480 [ 834.267230][T16608] ib_unregister_device_and_put+0x5a/0x80 [ 834.272949][T16608] nldev_dellink+0x226/0x320 [ 834.277527][T16608] ? __pfx_nldev_dellink+0x10/0x10 [ 834.282627][T16608] ? __lock_acquire+0x4a5/0x2630 [ 834.288021][T16608] ? rcu_is_watching+0x12/0xc0 [ 834.292779][T16608] ? cap_capable+0x107/0x3f0 [ 834.297395][T16608] ? bpf_lsm_capable+0x9/0x10 [ 834.302053][T16608] ? security_capable+0x80/0x260 [ 834.307321][T16608] ? ns_capable+0xd2/0xf0 [ 834.311639][T16608] ? __pfx_nldev_dellink+0x10/0x10 [ 834.316929][T16608] rdma_nl_rcv_msg+0x38a/0x6e0 [ 834.321676][T16608] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 834.326960][T16608] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 834.333368][T16608] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 834.340297][T16608] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 834.345433][T16608] ? netlink_unicast+0x580/0x870 [ 834.350359][T16608] netlink_unicast+0x5aa/0x870 [ 834.355129][T16608] ? __pfx_netlink_unicast+0x10/0x10 [ 834.360397][T16608] netlink_sendmsg+0x8b0/0xda0 [ 834.365178][T16608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.370440][T16608] ? __might_fault+0x70/0x140 [ 834.375291][T16608] ____sys_sendmsg+0xa54/0xc30 [ 834.380058][T16608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.385513][T16608] ? __pfx___futex_wait+0x10/0x10 [ 834.390521][T16608] ? __pfx_futex_wake_mark+0x10/0x10 [ 834.395814][T16608] ___sys_sendmsg+0x190/0x1e0 [ 834.400467][T16608] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.406126][T16608] ? find_held_lock+0x2b/0x80 [ 834.410808][T16608] __sys_sendmsg+0x170/0x220 [ 834.415386][T16608] ? __pfx___sys_sendmsg+0x10/0x10 [ 834.420486][T16608] ? __x64_sys_futex+0x34f/0x4d0 [ 834.425473][T16608] do_syscall_64+0xc9/0xf80 [ 834.429951][T16608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.436111][T16608] RIP: 0033:0x7f1802f9aeb9 [ 834.440583][T16608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.460422][T16608] RSP: 002b:00007f1803ed0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.468841][T16608] RAX: ffffffffffffffda RBX: 00007f1803216270 RCX: 00007f1802f9aeb9 [ 834.476800][T16608] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 834.484879][T16608] RBP: 00007f1803008c1f R08: 0000000000000000 R09: 0000000000000000 [ 834.493126][T16608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.501277][T16608] R13: 00007f1803216308 R14: 00007f1803216270 R15: 00007ffdac1c4918 [ 834.509383][T16608] [ 834.512399][T16608] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 834.519664][T16608] CPU: 1 UID: 0 PID: 16608 Comm: syz.3.2890 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.530573][T16608] Tainted: [L]=SOFTLOCKUP [ 834.534871][T16608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 834.544910][T16608] Call Trace: [ 834.548171][T16608] [ 834.551076][T16608] dump_stack_lvl+0x100/0x190 [ 834.555738][T16608] vpanic+0x20d/0x630 [ 834.559707][T16608] panic+0xd1/0xd1 [ 834.563405][T16608] ? __pfx_panic+0x10/0x10 [ 834.567811][T16608] check_panic_on_warn.cold+0x19/0x34 [ 834.573166][T16608] ? rxe_pool_cleanup+0x46/0x60 [ 834.577994][T16608] __warn.cold+0x191/0x2f8 [ 834.582395][T16608] __report_bug+0x296/0x3d0 [ 834.586870][T16608] ? rxe_pool_cleanup+0x46/0x60 [ 834.591699][T16608] ? __pfx___report_bug+0x10/0x10 [ 834.596696][T16608] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 834.602488][T16608] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 834.608287][T16608] ? __flush_workqueue+0x426/0x1200 [ 834.613459][T16608] ? __mutex_unlock_slowpath+0x15c/0x790 [ 834.619080][T16608] ? rxe_pool_cleanup+0x46/0x60 [ 834.623908][T16608] report_bug+0xb2/0x220 [ 834.628139][T16608] ? rxe_pool_cleanup+0x46/0x60 [ 834.632966][T16608] handle_bug+0x166/0x2a0 [ 834.637270][T16608] exc_invalid_op+0x17/0x50 [ 834.641763][T16608] asm_exc_invalid_op+0x1a/0x20 [ 834.646588][T16608] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 834.652025][T16608] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 36 59 62 f9 5b c3 cc cc cc cc e8 2b 59 62 f9 90 <0f> 0b 90 e8 22 59 62 f9 5b c3 cc cc cc cc e8 d7 a7 cc f9 eb d0 0f [ 834.671622][T16608] RSP: 0018:ffffc90004e1f1b0 EFLAGS: 00010246 [ 834.677663][T16608] RAX: 0000000000080000 RBX: ffff888029ed9358 RCX: ffffc90011c18000 [ 834.685607][T16608] RDX: 0000000000080000 RSI: ffffffff88a4a235 RDI: ffff888029ed93d8 [ 834.693568][T16608] RBP: ffffffff88a30540 R08: 0000000000000005 R09: 0000000000000001 [ 834.701510][T16608] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888029ed8698 [ 834.709453][T16608] R13: ffff888029ed7fe0 R14: ffff888029ed7fe0 R15: ffff888029ed90b8 [ 834.717398][T16608] ? __pfx_rxe_dealloc+0x10/0x10 [ 834.722315][T16608] ? rxe_pool_cleanup+0x45/0x60 [ 834.727145][T16608] rxe_dealloc+0x25/0xc0 [ 834.731364][T16608] ib_dealloc_device+0x49/0x230 [ 834.736191][T16608] __ib_unregister_device+0x396/0x480 [ 834.741543][T16608] ib_unregister_device_and_put+0x5a/0x80 [ 834.747241][T16608] nldev_dellink+0x226/0x320 [ 834.751821][T16608] ? __pfx_nldev_dellink+0x10/0x10 [ 834.756910][T16608] ? __lock_acquire+0x4a5/0x2630 [ 834.761853][T16608] ? rcu_is_watching+0x12/0xc0 [ 834.766606][T16608] ? cap_capable+0x107/0x3f0 [ 834.771189][T16608] ? bpf_lsm_capable+0x9/0x10 [ 834.775843][T16608] ? security_capable+0x80/0x260 [ 834.780760][T16608] ? ns_capable+0xd2/0xf0 [ 834.785064][T16608] ? __pfx_nldev_dellink+0x10/0x10 [ 834.790153][T16608] rdma_nl_rcv_msg+0x38a/0x6e0 [ 834.794894][T16608] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 834.800162][T16608] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 834.806556][T16608] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 834.813487][T16608] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 834.818418][T16608] ? netlink_unicast+0x580/0x870 [ 834.823348][T16608] netlink_unicast+0x5aa/0x870 [ 834.828093][T16608] ? __pfx_netlink_unicast+0x10/0x10 [ 834.833359][T16608] netlink_sendmsg+0x8b0/0xda0 [ 834.838104][T16608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.843379][T16608] ? __might_fault+0x70/0x140 [ 834.848037][T16608] ____sys_sendmsg+0xa54/0xc30 [ 834.852776][T16608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.858048][T16608] ? __pfx___futex_wait+0x10/0x10 [ 834.863053][T16608] ? __pfx_futex_wake_mark+0x10/0x10 [ 834.868326][T16608] ___sys_sendmsg+0x190/0x1e0 [ 834.872993][T16608] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.878446][T16608] ? find_held_lock+0x2b/0x80 [ 834.883122][T16608] __sys_sendmsg+0x170/0x220 [ 834.887708][T16608] ? __pfx___sys_sendmsg+0x10/0x10 [ 834.892825][T16608] ? __x64_sys_futex+0x34f/0x4d0 [ 834.897746][T16608] do_syscall_64+0xc9/0xf80 [ 834.902231][T16608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.908111][T16608] RIP: 0033:0x7f1802f9aeb9 [ 834.912500][T16608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.932081][T16608] RSP: 002b:00007f1803ed0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.940468][T16608] RAX: ffffffffffffffda RBX: 00007f1803216270 RCX: 00007f1802f9aeb9 [ 834.948446][T16608] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 834.956406][T16608] RBP: 00007f1803008c1f R08: 0000000000000000 R09: 0000000000000000 [ 834.964361][T16608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.972320][T16608] R13: 00007f1803216308 R14: 00007f1803216270 R15: 00007ffdac1c4918 [ 834.980285][T16608] [ 834.983590][T16608] Kernel Offset: disabled [ 834.987901][T16608] Rebooting in 86400 seconds..