last executing test programs: 6.458287233s ago: executing program 4 (id=3422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000170000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000340)=@tcp=r1, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001a80)={r0, &(0x7f0000000280)="f08227", &(0x7f0000000a80)=""/4096}, 0x20) 6.272352071s ago: executing program 4 (id=3423): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, 0x0}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, {[@generic={0x83, 0x8, "d3f0e755387d"}, @ssrr={0x89, 0x3, 0xd8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 5.985489781s ago: executing program 0 (id=3424): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000000c0)={0x3, 0x0, 0x8000200, 0xfffd, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x200, 0x0, 0x400000002c, 0x80000005, 0x2}) 5.774787761s ago: executing program 0 (id=3425): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) 5.196529611s ago: executing program 3 (id=3428): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 5.196190014s ago: executing program 3 (id=3429): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x100000001, 0x5, 0x8000000000000001, 0x2627bc44, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000001c0)={0x7ff, 0x7, 0x3ff, 0x4e, 0x80021, 0x164, 0x1, 0x7f}, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000001800)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e533005a5b152308435c559a2e30053a727c9"}) 4.997939578s ago: executing program 2 (id=3430): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x123a00, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe2$9p(&(0x7f0000000180), 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.919091561s ago: executing program 2 (id=3431): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3701) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 4.819382025s ago: executing program 4 (id=3432): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = syz_usbip_server_init(0x1) write$usbip_server(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r6, 0x80047453, &(0x7f0000000000)) r7 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r7) 4.289639042s ago: executing program 3 (id=3433): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfb}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa05", 0x5c}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6a", 0x1c}, {&(0x7f0000000d00)}, {0x0}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d", 0x9c}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.283778517s ago: executing program 1 (id=3434): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) 3.827535722s ago: executing program 3 (id=3435): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000000c0)={0x3, 0x0, 0x8000200, 0xfffd, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x200, 0x0, 0x400000002c, 0x80000005, 0x2}) 3.539887569s ago: executing program 2 (id=3436): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}}, 0x40c0080) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000002600)=0x2, 0x4) getsockname$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @broadcast}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 3.154666573s ago: executing program 1 (id=3437): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) close(0x3) 2.871149859s ago: executing program 1 (id=3438): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x4, 0x328}) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x5, 0x5}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2.829577463s ago: executing program 2 (id=3439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xee8d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040014}, 0x4) 2.684349941s ago: executing program 1 (id=3440): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2", 0xd2}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c530", 0x22}, {&(0x7f0000000ec0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0", 0x9}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 2.684027299s ago: executing program 2 (id=3441): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x52140) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x7a52, @local, 0x4}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)='x', 0x1}], 0x1}}], 0x1, 0x40c40c0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a0900000000004e22"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) recvmmsg(r2, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 2.421674505s ago: executing program 0 (id=3442): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x9) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') 2.266669591s ago: executing program 1 (id=3443): r0 = socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getrandom(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) r5 = dup2(r0, r0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x46) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xa052) 2.196517505s ago: executing program 0 (id=3444): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x100000001, 0x5, 0x8000000000000001, 0x2627bc44, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000001c0)={0x7ff, 0x7, 0x3ff, 0x4e, 0x80021, 0x164, 0x1, 0x7f}, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000001800)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e533005a5b152308435c559a2e30053a727c9"}) 1.773058287s ago: executing program 2 (id=3445): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x400800, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) sendfile(r4, r4, 0x0, 0x40008) 1.344868025s ago: executing program 1 (id=3446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') socket$inet6(0xa, 0x805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x7}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.216343169s ago: executing program 0 (id=3447): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') 972.258091ms ago: executing program 4 (id=3448): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) writev(0xffffffffffffffff, &(0x7f0000002c80)=[{&(0x7f0000001b40)="822e3cf057745ae1b1dfb88e64cbad1bae22b2ed03242c4e", 0x18}], 0x1) 816.067032ms ago: executing program 4 (id=3449): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) 716.086589ms ago: executing program 3 (id=3450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 686.990128ms ago: executing program 4 (id=3451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet(0x2, 0x4, 0x38000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101840, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0xd, 0x3, 0x5, 0x800006, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x7, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7dff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac6, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffd, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff001, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x400, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xa, 0x2, 0x4, @SEQ_CONTROLLER=0xfe, 0xff, 0x5, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 550.858482ms ago: executing program 3 (id=3452): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) 0s ago: executing program 0 (id=3453): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000200)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) kernel console output (not intermixed with test programs): number 72 using dummy_hcd [ 597.751336][ T29] audit: type=1400 audit(1775767957.310:649): avc: denied { write } for pid=14759 comm="syz.3.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 597.849857][ T5887] usb 5-1: device descriptor read/64, error -71 [ 598.038863][T14764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2683'. [ 598.946148][T14772] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 598.959655][ T5887] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 599.035212][T14772] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 599.061616][T14772] overlayfs: failed to look up (tracing) for ino (-66) [ 599.099654][ T5887] usb 5-1: device descriptor read/64, error -71 [ 599.210065][ T5887] usb usb5-port1: attempt power cycle [ 599.560293][T14783] fuse: Bad value for 'fd' [ 599.564864][ T5887] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 599.590229][ T5887] usb 5-1: device descriptor read/8, error -71 [ 599.849627][ T5887] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 599.919651][ T5887] usb 5-1: device descriptor read/8, error -71 [ 600.881002][ T5887] usb usb5-port1: unable to enumerate USB device [ 601.381035][T14793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14793 comm=syz.2.2691 [ 601.433316][T14792] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 601.439864][T14792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 601.447822][T14792] vhci_hcd vhci_hcd.0: Device attached [ 601.608155][T14794] vhci_hcd: connection closed [ 601.609071][T10588] vhci_hcd vhci_hcd.2: stop threads [ 601.764880][T10588] vhci_hcd vhci_hcd.2: release socket [ 601.809731][ T5931] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 601.899066][T10588] vhci_hcd vhci_hcd.2: disconnect device [ 602.667461][T14802] affs: No valid root block on device nullb0 [ 603.210347][T14805] netlink: 'syz.3.2694': attribute type 1 has an invalid length. [ 603.558744][T14805] 8021q: adding VLAN 0 to HW filter on device bond5 [ 604.044158][T14809] binder: BINDER_SET_CONTEXT_MGR already set [ 604.066923][T14809] binder: 14808:14809 ioctl 4018620d 200000004a80 returned -16 [ 604.096921][T14809] vivid-004: disconnect [ 604.120488][T14808] vivid-004: reconnect [ 604.683615][T14824] fuse: Bad value for 'fd' [ 604.810696][T14827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2702'. [ 606.576568][T14843] affs: No valid root block on device nullb0 [ 607.127038][T14834] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 607.133607][T14834] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 607.142165][T14834] vhci_hcd vhci_hcd.0: Device attached [ 607.148930][T14833] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14833 comm=syz.4.2703 [ 607.172748][ T8516] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 607.196839][ T5931] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 607.399731][T14836] vhci_hcd: connection closed [ 607.400073][T10588] vhci_hcd vhci_hcd.4: stop threads [ 607.410803][ T8516] usb 1-1: Using ep0 maxpacket: 32 [ 607.422727][ T8516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.452634][T10588] vhci_hcd vhci_hcd.4: release socket [ 607.458197][T10588] vhci_hcd vhci_hcd.4: disconnect device [ 607.472706][ T8516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.490305][ T8516] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 607.509975][ T8516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.520357][ T8516] usb 1-1: config 0 descriptor?? [ 608.000655][ T8516] hid_parser_main: 4086 callbacks suppressed [ 608.000673][ T8516] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 608.054426][ T8516] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 608.128521][T14859] netlink: 'syz.4.2709': attribute type 1 has an invalid length. [ 608.169956][T14858] netlink: 'syz.2.2710': attribute type 3 has an invalid length. [ 608.244755][T14859] 8021q: adding VLAN 0 to HW filter on device bond6 [ 608.530622][ T5887] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 608.689703][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 608.702966][ T5887] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 608.712398][ T5887] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 608.723144][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 608.737116][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 608.748497][ T5887] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 608.760137][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 608.774974][ T5887] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 608.787717][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.815267][ T5887] usb 3-1: config 0 descriptor?? [ 609.010371][ T8516] ft260 0003:0403:6030.0014: chip code: 0000 0000 [ 609.018428][ T8516] ft260 0003:0403:6030.0014: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 609.030114][ T8516] ft260 0003:0403:6030.0014: failed to retrieve status: -32, no wakeup [ 609.039265][ T8516] ft260 0003:0403:6030.0014: failed to retrieve status: -5 [ 609.056015][T14858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.068751][ T5887] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 609.114187][T14858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.619551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 609.786819][T14876] program syz.1.2713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.039555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 610.199547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 610.390489][ T29] audit: type=1400 audit(1775767969.340:650): avc: denied { append } for pid=14872 comm="syz.1.2713" name="sg0" dev="devtmpfs" ino=813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 610.446348][ T47] usb 3-1: USB disconnect, device number 56 [ 610.465825][ T47] usblp0: removed [ 610.476563][ T8516] ft260 0003:0403:6030.0014: failed to reset I2C controller: -71 [ 610.632353][T14880] fuse: Bad value for 'fd' [ 611.139669][ T794] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 611.295289][T14896] affs: No valid root block on device nullb0 [ 611.393320][ T8516] usb 1-1: USB disconnect, device number 76 [ 611.641515][ T794] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 611.652068][ T794] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 611.663751][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 611.696136][ T794] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.731778][ T794] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 611.749570][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.757667][ T794] usb 5-1: Product: syz [ 611.767768][ T794] usb 5-1: Manufacturer: syz [ 611.777867][ T794] usb 5-1: SerialNumber: syz [ 611.790363][ T794] usb 5-1: config 0 descriptor?? [ 612.004485][ T5931] usb 5-1: USB disconnect, device number 76 [ 612.036267][T14900] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14900 comm=syz.0.2719 [ 612.113970][T14898] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 612.120531][T14898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 612.129605][T14898] vhci_hcd vhci_hcd.0: Device attached [ 612.163661][T14899] vhci_hcd: connection closed [ 612.172874][ T9541] vhci_hcd vhci_hcd.0: stop threads [ 612.236122][T14905] netlink: 'syz.2.2721': attribute type 1 has an invalid length. [ 612.306598][ T9541] vhci_hcd vhci_hcd.0: release socket [ 612.367488][T14905] 8021q: adding VLAN 0 to HW filter on device bond4 [ 612.414545][ T9541] vhci_hcd vhci_hcd.0: disconnect device [ 612.492999][ T47] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 612.601754][ T47] usb 33-1: enqueue for inactive port 0 [ 612.790005][ T47] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 613.402465][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 613.637433][T14926] sctp: [Deprecated]: syz.2.2726 (pid 14926) Use of int in max_burst socket option. [ 613.637433][T14926] Use struct sctp_assoc_value instead [ 613.787680][T14929] netlink: 'syz.2.2728': attribute type 3 has an invalid length. [ 614.059911][ T5931] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 614.243231][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 614.251944][ T5931] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 614.260710][ T5931] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 614.269393][ T5931] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 614.299671][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 614.309443][ T5931] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 614.357037][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 614.380368][ T5931] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 614.419602][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.434819][ T5931] usb 3-1: config 0 descriptor?? [ 614.582396][ T29] audit: type=1400 audit(1775767974.140:651): avc: denied { accept } for pid=14938 comm="syz.1.2732" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 614.663469][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.671003][ T5931] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 614.694637][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.807707][T14944] netlink: 'syz.3.2733': attribute type 1 has an invalid length. [ 614.914945][T14944] 8021q: adding VLAN 0 to HW filter on device bond6 [ 614.967768][ T5931] usb 3-1: USB disconnect, device number 57 [ 615.192805][ T5931] usblp0: removed [ 616.177912][T14956] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 616.215959][T14956] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 616.242098][T14956] overlayfs: failed to look up (tracing) for ino (-66) [ 616.767077][T14963] overlayfs: failed to resolve './file1': -2 [ 616.867268][T14967] loop5: detected capacity change from 0 to 7 [ 616.892261][ T5811] Dev loop5: unable to read RDB block 7 [ 616.903043][ T5811] loop5: unable to read partition table [ 616.919046][ T5811] loop5: partition table beyond EOD, truncated [ 616.940139][T14967] Dev loop5: unable to read RDB block 7 [ 616.950163][T14967] loop5: unable to read partition table [ 616.987062][T14967] loop5: partition table beyond EOD, truncated [ 617.039605][T14967] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 617.063761][T14969] loop8: detected capacity change from 0 to 8 [ 617.074130][ T5811] Dev loop8: unable to read RDB block 8 [ 617.080156][ T5811] loop8: unable to read partition table [ 617.086553][ T5811] loop8: partition table beyond EOD, truncated [ 617.093694][T14969] Dev loop8: unable to read RDB block 8 [ 617.108117][T14969] loop8: unable to read partition table [ 617.133211][T14969] loop8: partition table beyond EOD, truncated [ 617.178798][T14969] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 617.316206][T14977] netlink: 'syz.3.2745': attribute type 3 has an invalid length. [ 617.447868][T14980] netlink: 'syz.2.2746': attribute type 1 has an invalid length. [ 617.511109][ T794] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 617.560667][ T5887] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 617.570052][T14980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 618.319938][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 618.329490][ T5887] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 618.340816][ T5887] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 618.344802][ T29] audit: type=1400 audit(1775767977.900:652): avc: denied { getopt } for pid=14988 comm="syz.2.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 618.349955][ T5887] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 618.378848][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 618.389006][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 618.400423][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 618.413735][ T5887] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 618.423393][ T794] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 618.440088][ T794] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 618.449296][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.464324][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.581020][ T5887] usb 4-1: config 0 descriptor?? [ 618.593572][ T794] usb 5-1: config 0 descriptor?? [ 618.818401][T14977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.928292][T14977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.057075][ T5887] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 619.206927][ T8516] usb 4-1: USB disconnect, device number 82 [ 619.224798][ T29] audit: type=1400 audit(1775767978.780:653): avc: denied { map } for pid=14998 comm="syz.0.2752" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 619.248771][ T8516] usblp0: removed [ 619.466839][T15012] loop5: detected capacity change from 0 to 7 [ 619.490420][T15012] Dev loop5: unable to read RDB block 7 [ 619.496189][T15012] loop5: unable to read partition table [ 619.620843][T15012] loop5: partition table beyond EOD, truncated [ 619.632588][T15012] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 619.745970][T15018] overlayfs: failed to resolve './file1': -2 [ 619.791939][ T29] audit: type=1400 audit(1775767979.340:654): avc: denied { read } for pid=15019 comm="syz.0.2757" path="socket:[48214]" dev="sockfs" ino=48214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 619.917758][T15024] netlink: 'syz.0.2760': attribute type 1 has an invalid length. [ 619.930853][T15024] netlink: 'syz.0.2760': attribute type 2 has an invalid length. [ 620.418765][ T8516] usb 5-1: USB disconnect, device number 77 [ 621.418784][T15066] affs: No valid root block on device nullb0 [ 621.976331][T11956] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 621.996753][T11956] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 622.005755][T11956] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 622.023311][T11956] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 622.075131][T11956] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 622.093152][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 622.124910][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 622.132291][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 622.161024][ T8516] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 622.163777][T15076] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 622.179475][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 622.200561][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 622.370939][ T8516] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 622.389608][ T8516] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 622.415372][ T8516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.440173][ T8516] usb 2-1: config 0 descriptor?? [ 622.759696][ T5887] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 622.836875][T15073] chnl_net:caif_netlink_parms(): no params data found [ 622.901591][ T5887] usb 3-1: device descriptor read/64, error -71 [ 622.965095][T15073] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.972451][T15073] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.979951][T15073] bridge_slave_0: entered allmulticast mode [ 622.986805][T15073] bridge_slave_0: entered promiscuous mode [ 622.994447][T15073] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.001746][T15073] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.009057][T15073] bridge_slave_1: entered allmulticast mode [ 623.016453][T15073] bridge_slave_1: entered promiscuous mode [ 623.039822][T15073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.051113][T15073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.074673][T15073] team0: Port device team_slave_0 added [ 623.082305][T15073] team0: Port device team_slave_1 added [ 623.102602][T15073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.109707][T15073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.135889][T15073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.148161][T15073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.155212][T15073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.159645][ T5887] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 623.181551][T15073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.244667][T15073] hsr_slave_0: entered promiscuous mode [ 623.252877][T15073] hsr_slave_1: entered promiscuous mode [ 623.260381][T15073] debugfs: 'hsr0' already exists in 'hsr' [ 623.266176][T15073] Cannot create hsr debugfs directory [ 623.329695][ T5887] usb 3-1: device descriptor read/64, error -71 [ 623.439814][ T5887] usb usb3-port1: attempt power cycle [ 623.753366][T15073] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 623.768054][T15073] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 623.779890][ T5887] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 623.782092][T15073] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 623.808362][T15073] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 623.820271][ T5887] usb 3-1: device descriptor read/8, error -71 [ 623.920493][T15073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.950392][T15073] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.964554][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.971698][ T9591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.994866][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.002028][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.060285][ T5887] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 624.092590][ T5887] usb 3-1: device descriptor read/8, error -71 [ 624.192715][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.199139][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.210132][ T5887] usb usb3-port1: unable to enumerate USB device [ 624.255099][T15073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.272150][T11956] Bluetooth: hci5: command tx timeout [ 624.799443][T15073] veth0_vlan: entered promiscuous mode [ 624.812445][T15073] veth1_vlan: entered promiscuous mode [ 624.835877][T15073] veth0_macvtap: entered promiscuous mode [ 624.844739][T15073] veth1_macvtap: entered promiscuous mode [ 624.859194][T15073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.874393][T15073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.886428][ T9602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.909236][ T9602] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.932521][ T9602] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.950819][ T9602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.962345][ T5887] usb 2-1: USB disconnect, device number 47 [ 625.161528][ T9602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.194529][ T9602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.233752][T15135] overlayfs: failed to resolve './file1': -2 [ 625.270806][ T5945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.283038][ T5945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.303038][ T29] audit: type=1400 audit(1775767984.860:655): avc: denied { mounton } for pid=15073 comm="syz-executor" path="/root/syzkaller.vi0BYi/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 625.356266][ T29] audit: type=1400 audit(1775767984.910:656): avc: denied { mounton } for pid=15073 comm="syz-executor" path="/root/syzkaller.vi0BYi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=48894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 625.465277][ T29] audit: type=1400 audit(1775767985.020:657): avc: denied { mounton } for pid=15073 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 626.366159][T11956] Bluetooth: hci5: command tx timeout [ 627.169951][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'. [ 627.188692][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'. [ 627.214271][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'. [ 627.295782][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'. [ 627.306305][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'. [ 627.353011][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'. [ 627.459238][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'. [ 627.572998][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'. [ 627.598326][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'. [ 627.813610][ T5863] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 627.949770][ T5863] usb 5-1: device descriptor read/64, error -71 [ 628.292237][ T5863] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 628.425329][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'. [ 628.433157][T11956] Bluetooth: hci5: command tx timeout [ 628.459755][ T5863] usb 5-1: device descriptor read/64, error -71 [ 629.171528][ T5863] usb usb5-port1: attempt power cycle [ 629.416931][T15210] program syz.0.2815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.659605][ T5863] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 629.724422][ T5863] usb 5-1: device descriptor read/8, error -71 [ 629.814105][T15221] 9pnet_fd: Insufficient options for proto=fd [ 630.080535][ T5863] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 630.109291][T15232] overlayfs: failed to resolve './file1': -2 [ 630.127739][ T5863] usb 5-1: device descriptor read/8, error -71 [ 630.510118][T11956] Bluetooth: hci5: command tx timeout [ 630.837178][ T5863] usb usb5-port1: unable to enumerate USB device [ 630.847710][T15214] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 630.854292][T15214] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.861950][T15214] vhci_hcd vhci_hcd.0: Device attached [ 630.868738][T15214] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15214 comm=syz.1.2817 [ 630.883537][T15239] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 630.896569][ T9590] vhci_hcd vhci_hcd.1: stop threads [ 630.912609][ T9590] vhci_hcd vhci_hcd.1: release socket [ 630.934729][ T9590] vhci_hcd vhci_hcd.1: disconnect device [ 631.259631][ T29] audit: type=1400 audit(1775767990.810:658): avc: denied { name_bind } for pid=15231 comm="syz.0.2825" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 631.319246][T15233] binder: Binderfs stats mode cannot be changed during a remount [ 632.047742][T15272] netlink: 'syz.1.2837': attribute type 3 has an invalid length. [ 632.339618][ T5863] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 632.519642][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 632.595696][T11956] Bluetooth: hci5: command tx timeout [ 632.606531][ T5863] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 632.615298][ T5863] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 632.624552][ T5863] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 632.635321][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 633.449981][ T5863] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 633.459722][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 633.476326][ T5863] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 633.485503][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.530660][ T5863] usb 2-1: config 0 descriptor?? [ 633.640723][ T29] audit: type=1400 audit(1775767993.190:659): avc: denied { set_context_mgr } for pid=15296 comm="syz.3.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 633.666502][T15297] binder: BINDER_SET_CONTEXT_MGR already set [ 633.684146][T15297] binder: 15296:15297 ioctl 4018620d 200000004a80 returned -16 [ 633.758095][T15298] vivid-001: disconnect [ 633.766051][T15272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.777859][ T5863] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 633.796607][T15296] vivid-001: reconnect [ 633.816660][T15272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.074515][ T10] usb 2-1: USB disconnect, device number 48 [ 634.117446][ T10] usblp0: removed [ 634.517581][T15291] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 634.524189][T15291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 634.531994][T15291] vhci_hcd vhci_hcd.0: Device attached [ 634.539110][T15291] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15291 comm=syz.4.2845 [ 634.553588][T15311] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 634.599675][ T9541] vhci_hcd vhci_hcd.4: stop threads [ 634.605099][ T9541] vhci_hcd vhci_hcd.4: release socket [ 634.662690][ T9541] vhci_hcd vhci_hcd.4: disconnect device [ 635.042501][T15321] affs: No valid root block on device nullb0 [ 635.079696][ T5863] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 635.654540][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.685140][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 635.713378][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 635.724878][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 635.746961][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 635.783094][ T5863] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 635.801083][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 635.809371][ T5863] usb 1-1: Product: syz [ 635.814372][ T5863] usb 1-1: Manufacturer: syz [ 635.819002][ T5863] usb 1-1: SerialNumber: syz [ 635.847299][ T5863] usb 1-1: config 0 descriptor?? [ 636.394745][T15337] vivid-002: disconnect [ 636.400368][T15330] vivid-002: reconnect [ 637.359984][ T5863] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 637.369008][ T5863] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 637.482740][ T5863] usb 1-1: USB disconnect, device number 77 [ 637.562827][T15348] netlink: 'syz.2.2865': attribute type 3 has an invalid length. [ 637.648307][T15352] 9p: Bad value for 'rfdno' [ 638.278791][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 638.297203][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 638.305963][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 638.318270][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 638.326328][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 638.332329][T10938] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 638.542054][T10938] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 638.579693][T10938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.606327][T10938] usb 5-1: config 0 descriptor?? [ 638.732242][T15360] chnl_net:caif_netlink_parms(): no params data found [ 639.208767][T15360] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.216284][T15360] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.224150][T15360] bridge_slave_0: entered allmulticast mode [ 639.234098][T15360] bridge_slave_0: entered promiscuous mode [ 639.247021][T15360] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.254478][T15360] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.261961][T15360] bridge_slave_1: entered allmulticast mode [ 639.263728][T15391] netlink: 'syz.3.2881': attribute type 3 has an invalid length. [ 639.269325][T15360] bridge_slave_1: entered promiscuous mode [ 639.305201][T15360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.317686][T15360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.350735][T15360] team0: Port device team_slave_0 added [ 639.359187][T15360] team0: Port device team_slave_1 added [ 639.387205][T15360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.394419][T15360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.421344][T15360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.429950][ T8516] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 639.433881][T15360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.446832][T15360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.473133][T15360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.520383][T15360] hsr_slave_0: entered promiscuous mode [ 639.527703][T15360] hsr_slave_1: entered promiscuous mode [ 639.534176][ T47] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 639.543945][T15360] debugfs: 'hsr0' already exists in 'hsr' [ 639.552597][T15360] Cannot create hsr debugfs directory [ 639.602952][ T8516] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 639.614735][ T8516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.637060][ T8516] usb 1-1: Product: syz [ 639.641411][ T8516] usb 1-1: Manufacturer: syz [ 639.646181][ T8516] usb 1-1: SerialNumber: syz [ 639.689623][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 639.712433][ T47] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 639.723231][ T47] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 639.841114][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 639.850706][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 639.860642][ T47] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 639.870746][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 639.884134][ T47] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 639.894497][T10938] usb 5-1: Cannot set autoneg [ 639.899391][T10938] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 639.913546][ T8516] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 639.939944][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.948382][T10938] usb 5-1: USB disconnect, device number 82 [ 639.954497][ T8516] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 639.971945][ T47] usb 4-1: config 0 descriptor?? [ 639.978521][ T8516] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 639.993984][ T8516] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 640.176211][T15360] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 640.188041][T15360] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 640.200790][T15360] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 640.206272][T15391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.217285][ T47] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 640.219661][T15360] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 640.237551][T15391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.300666][T15360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.318187][T15360] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.328701][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.335871][ T9590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.352601][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.360324][ T9590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.441117][ T5813] Bluetooth: hci1: command tx timeout [ 640.467447][ T10] usb 4-1: USB disconnect, device number 83 [ 640.480748][ T10] usblp0: removed [ 640.561813][T15360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.615887][T15360] veth0_vlan: entered promiscuous mode [ 640.658099][T15360] veth1_vlan: entered promiscuous mode [ 640.685833][T15360] veth0_macvtap: entered promiscuous mode [ 640.696741][T15360] veth1_macvtap: entered promiscuous mode [ 640.715540][T15360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.735543][T15360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.803336][ T9541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.813878][ T9541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.824884][ T9541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.837349][ T9541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.320834][T10588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.328721][T10588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.355061][T15433] loop5: detected capacity change from 0 to 7 [ 641.365685][ T5811] Dev loop5: unable to read RDB block 7 [ 641.372043][ T5811] loop5: unable to read partition table [ 641.377766][T10588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.377994][ T5811] loop5: partition table beyond EOD, truncated [ 641.392564][T10588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.412527][T15433] Dev loop5: unable to read RDB block 7 [ 641.419844][T15433] loop5: unable to read partition table [ 641.425835][T15433] loop5: partition table beyond EOD, truncated [ 641.433749][T15433] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 641.929594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 641.960799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 642.011696][T15463] loop5: detected capacity change from 0 to 7 [ 642.019656][T15463] Dev loop5: unable to read RDB block 7 [ 642.025286][T15463] loop5: unable to read partition table [ 642.031835][T15463] loop5: partition table beyond EOD, truncated [ 642.038336][T15463] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 642.128027][T15464] overlayfs: failed to resolve './file1': -2 [ 642.178942][ T5863] usb 1-1: USB disconnect, device number 78 [ 642.279290][ T8516] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 642.465108][T15466] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 642.471666][T15466] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 642.479444][T15466] vhci_hcd vhci_hcd.0: Device attached [ 642.486482][T15466] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15466 comm=syz.3.2906 [ 642.502607][T15468] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 642.511846][ T5813] Bluetooth: hci1: command tx timeout [ 642.536458][ T8516] usb 5-1: Using ep0 maxpacket: 32 [ 642.562085][T10588] vhci_hcd vhci_hcd.3: stop threads [ 642.567729][ T8516] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 642.663073][T10588] vhci_hcd vhci_hcd.3: release socket [ 642.672335][T10588] vhci_hcd vhci_hcd.3: disconnect device [ 642.679374][ T8516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 642.695772][ T8516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024 [ 642.718745][ T8516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 643.057011][ T5931] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 643.063716][ T8516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 643.081200][ T8516] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 643.094090][ T8516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.105666][ T8516] usb 5-1: Product: syz [ 643.111869][ T8516] usb 5-1: Manufacturer: syz [ 643.116552][ T8516] usb 5-1: SerialNumber: syz [ 643.127168][ T8516] usb 5-1: config 0 descriptor?? [ 643.332112][T15477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2909'. [ 643.345554][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 643.376227][T15477] bond6: entered promiscuous mode [ 643.381480][T15477] bond6: entered allmulticast mode [ 643.387262][T15477] 8021q: adding VLAN 0 to HW filter on device bond6 [ 643.476937][T15480] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2910'. [ 643.506792][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 643.522830][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 643.539239][T15484] fuse: Unknown parameter 'user_id00000000000000000000' [ 643.540947][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 643.552616][ T29] audit: type=1400 audit(1775768003.110:660): avc: denied { write } for pid=15481 comm="syz.0.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 643.583427][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 643.591982][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 643.598596][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.735854][ T5813] Bluetooth: hci1: command tx timeout [ 644.742924][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.759715][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.766930][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.784574][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.799844][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.818640][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.829043][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.848820][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.862115][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.878497][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.885222][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.899310][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.907024][ T8516] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 644.913833][ T8516] input input53: Timeout waiting for response from device. [ 644.925416][ T8516] usb 5-1: USB disconnect, device number 83 [ 645.130360][T15513] loop5: detected capacity change from 0 to 7 [ 645.160158][ T5813] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 645.195318][T15513] Dev loop5: unable to read RDB block 7 [ 645.201062][T15513] loop5: unable to read partition table [ 645.216980][T15513] loop5: partition table beyond EOD, truncated [ 645.883873][ T5931] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 645.897582][T15513] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 646.112666][ T5931] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 646.141774][ T5931] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 646.159647][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 646.176276][ T5931] usb 4-1: Product: syz [ 646.190602][ T5931] usb 4-1: Manufacturer: syz [ 646.195376][ T5931] usb 4-1: SerialNumber: syz [ 646.417827][ T5931] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 646.510809][T15538] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 646.522155][T15538] VFS: Can't find a romfs filesystem on dev nullb0. [ 646.522155][T15538] [ 646.545641][ T29] audit: type=1400 audit(1775768006.090:661): avc: denied { bind } for pid=15537 comm="syz.1.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 646.749582][ T5813] Bluetooth: hci1: command tx timeout [ 647.791960][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888077209c00: rx timeout, send abort [ 647.802939][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888077209c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 647.839580][ T29] audit: type=1400 audit(1775768007.390:662): avc: denied { read } for pid=5159 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 647.894378][ T29] audit: type=1400 audit(1775768007.390:663): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.942723][ T5887] usb 4-1: USB disconnect, device number 84 [ 647.965645][ T29] audit: type=1400 audit(1775768007.390:664): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.980306][T15554] 9p: Bad value for 'rfdno' [ 647.989147][ T29] audit: type=1400 audit(1775768007.390:665): avc: denied { add_name } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.016498][ T5887] usblp0: removed [ 648.060597][ T29] audit: type=1400 audit(1775768007.390:666): avc: denied { create } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 648.112559][ T29] audit: type=1400 audit(1775768007.390:667): avc: denied { append open } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 648.267477][ T29] audit: type=1400 audit(1775768007.390:668): avc: denied { getattr } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 649.861820][ T5887] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 650.044682][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 650.114787][T15586] affs: No valid root block on device nullb0 [ 650.484110][ T5887] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 650.492461][ T5887] usb 4-1: config 0 has no interface number 0 [ 650.510303][ T5887] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 650.519408][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.549586][ T5887] usb 4-1: Product: syz [ 650.553786][ T5887] usb 4-1: Manufacturer: syz [ 650.558384][ T5887] usb 4-1: SerialNumber: syz [ 650.571678][ T5887] usb 4-1: config 0 descriptor?? [ 650.590020][ T5887] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 650.807096][ T5887] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 650.858053][ T5887] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 651.236234][T15597] input: syz0 as /devices/virtual/input/input54 [ 651.316549][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 651.316920][ T5931] usb 4-1: USB disconnect, device number 85 [ 651.371107][ T5931] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 651.436370][ T5931] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 651.506387][ T5931] quatech2 4-1:0.51: device disconnected [ 653.555724][T15623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2964'. [ 653.599077][ T29] audit: type=1400 audit(1775768013.130:669): avc: denied { setopt } for pid=15622 comm="syz.2.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 655.575917][T15660] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2976'. [ 657.509776][T15715] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 657.711435][T15715] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 657.722004][T15715] overlayfs: failed to look up (tracing) for ino (-66) [ 660.847067][T15736] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 661.041402][ T29] audit: type=1400 audit(1775768020.600:670): avc: denied { unmount } for pid=15073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 663.436563][T15765] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 663.476448][T15765] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 663.486561][T15765] overlayfs: failed to look up (tracing) for ino (-66) [ 663.737606][T15772] affs: No valid root block on device nullb0 [ 664.713049][T11956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 664.733835][T11956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 664.742946][T11956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 664.759695][T11956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 664.768998][T11956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 665.308197][ T29] audit: type=1326 audit(1775768024.860:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18d9c819 code=0x7ffc0000 [ 665.418411][ T29] audit: type=1326 audit(1775768024.860:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18d9c819 code=0x7ffc0000 [ 665.490213][T15780] chnl_net:caif_netlink_parms(): no params data found [ 665.523028][T15795] 9pnet_fd: Insufficient options for proto=fd [ 665.569795][ T29] audit: type=1326 audit(1775768024.860:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18d9c819 code=0x7ffc0000 [ 665.595016][ T29] audit: type=1326 audit(1775768024.900:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f2b18d9c819 code=0x7ffc0000 [ 665.672127][ T29] audit: type=1326 audit(1775768024.900:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18d9c819 code=0x7ffc0000 [ 665.710772][ T29] audit: type=1326 audit(1775768024.900:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18d9c819 code=0x7ffc0000 [ 665.735972][ T29] audit: type=1326 audit(1775768024.900:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2b18d9c819 code=0x7ffc0000 [ 665.780083][ T29] audit: type=1326 audit(1775768024.900:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2b18d9c819 code=0x7ffc0000 [ 666.474245][T15780] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.493980][T15780] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.501454][T15780] bridge_slave_0: entered allmulticast mode [ 666.515835][T15780] bridge_slave_0: entered promiscuous mode [ 666.526485][T15780] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.537688][T15780] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.548752][T15780] bridge_slave_1: entered allmulticast mode [ 666.558637][T15780] bridge_slave_1: entered promiscuous mode [ 666.596151][T15780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.610784][T15780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.679471][ T29] audit: type=1800 audit(1775768026.230:679): pid=15810 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3025" name="bus" dev="overlay" ino=143 res=0 errno=0 [ 666.695847][T15780] team0: Port device team_slave_0 added [ 666.716012][ T5931] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 666.745723][T15780] team0: Port device team_slave_1 added [ 666.829761][ T5813] Bluetooth: hci3: command tx timeout [ 666.865591][T15780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.872909][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.900086][T15780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.921485][T15780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.928468][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.955740][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 666.965792][T15780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.980197][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.991351][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.019660][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 667.043127][ T5931] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 667.062886][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.072368][T15780] hsr_slave_0: entered promiscuous mode [ 667.080597][T15780] hsr_slave_1: entered promiscuous mode [ 667.087574][ T5931] usb 5-1: config 0 descriptor?? [ 667.100295][T15780] debugfs: 'hsr0' already exists in 'hsr' [ 667.206476][T15780] Cannot create hsr debugfs directory [ 667.879235][T15780] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.998772][ T5931] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 668.016532][ T5931] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 668.081115][ T5931] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0015/input/input55 [ 668.136770][T15780] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.220707][ T5931] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 668.359152][ T5931] usb 5-1: USB disconnect, device number 84 [ 668.413170][T15780] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.417300][T15834] fido_id[15834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 668.551396][T15780] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.804402][T15780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 668.911919][ T5813] Bluetooth: hci3: command tx timeout [ 669.214149][T15780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 669.345141][T15780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 669.494484][T15858] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 669.630445][T15858] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 669.640769][T15858] overlayfs: failed to look up (tracing) for ino (-66) [ 670.276004][ T29] audit: type=1326 audit(1775768029.830:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd33b9c819 code=0x7ffc0000 [ 670.324322][ T29] audit: type=1326 audit(1775768029.860:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd33b9c819 code=0x7ffc0000 [ 670.352360][T15780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 670.388214][ T29] audit: type=1326 audit(1775768029.860:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd33b9c819 code=0x7ffc0000 [ 670.442041][ T29] audit: type=1326 audit(1775768029.860:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd33b9c819 code=0x7ffc0000 [ 670.503986][T15780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.511133][ T29] audit: type=1326 audit(1775768029.860:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd33b9c819 code=0x7ffc0000 [ 670.565098][T15780] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.584513][T15869] loop5: detected capacity change from 0 to 7 [ 670.604366][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.611506][ T9531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.619820][ T29] audit: type=1326 audit(1775768029.860:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd33b9c819 code=0x7ffc0000 [ 670.621243][T15869] Dev loop5: unable to read RDB block 7 [ 670.649918][ T29] audit: type=1326 audit(1775768029.860:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd33b9c819 code=0x7ffc0000 [ 670.650592][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.675489][ T29] audit: type=1326 audit(1775768029.860:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd33b9c819 code=0x7ffc0000 [ 670.680483][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.727123][ T29] audit: type=1326 audit(1775768029.860:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd33b9c819 code=0x7ffc0000 [ 670.739599][T15869] loop5: unable to read partition table [ 670.772083][T15869] loop5: partition table beyond EOD, truncated [ 670.830622][T15869] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 670.917290][T15873] 9pnet_fd: Insufficient options for proto=fd [ 670.995865][ T5813] Bluetooth: hci3: command tx timeout [ 671.239136][T15780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.381150][T15899] overlayfs: failed to resolve './file1': -2 [ 671.418626][T15780] veth0_vlan: entered promiscuous mode [ 671.432275][T15904] syzkaller0: entered promiscuous mode [ 671.437790][T15904] syzkaller0: entered allmulticast mode [ 671.682625][T15780] veth1_vlan: entered promiscuous mode [ 672.158496][T15780] veth0_macvtap: entered promiscuous mode [ 672.187183][T15780] veth1_macvtap: entered promiscuous mode [ 672.247915][T15780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.288854][T15780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.585340][ T9541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.674321][ T9541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.806564][ T9541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.878959][ T9541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.069663][ T5813] Bluetooth: hci3: command tx timeout [ 673.291959][ T566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.339606][ T566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.406959][ T9531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.472386][ T9531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.063713][T15961] netlink: 'syz.4.3072': attribute type 1 has an invalid length. [ 674.119280][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 674.175934][T15960] loop5: detected capacity change from 0 to 7 [ 674.256568][T15961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 674.385464][T15960] Dev loop5: unable to read RDB block 7 [ 674.481926][T15960] loop5: unable to read partition table [ 674.534739][T15963] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 674.614058][T15960] loop5: partition table beyond EOD, truncated [ 674.783138][T15960] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 675.115338][ T9531] Bluetooth: hci0: Frame reassembly failed (-84) [ 676.533553][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3080'. [ 677.168061][ T5128] Bluetooth: hci0: command 0x1003 tx timeout [ 677.175861][ T5813] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 677.262743][ T5821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 677.295665][ T5821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 677.386738][T15991] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 677.513534][T15991] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 677.523713][T15991] overlayfs: failed to look up (tracing) for ino (-66) [ 678.270491][ T5821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 678.290908][ T5821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 678.299822][ T5821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 678.542380][T16000] loop5: detected capacity change from 0 to 7 [ 678.702814][T16000] Dev loop5: unable to read RDB block 7 [ 678.826625][T16000] loop5: unable to read partition table [ 678.863002][T16000] loop5: partition table beyond EOD, truncated [ 678.903715][T16000] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 679.575171][T15996] syzkaller0: entered promiscuous mode [ 679.580798][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 679.580814][ T29] audit: type=1400 audit(1775768039.130:779): avc: denied { read } for pid=16008 comm="syz.0.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 679.607531][T15996] syzkaller0: entered allmulticast mode [ 679.630105][ T29] audit: type=1400 audit(1775768039.190:780): avc: denied { ioctl } for pid=16008 comm="syz.0.3088" path="socket:[55460]" dev="sockfs" ino=55460 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 679.681249][ T29] audit: type=1400 audit(1775768039.240:781): avc: denied { write } for pid=16008 comm="syz.0.3088" path="socket:[55461]" dev="sockfs" ino=55461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 679.724252][T16005] lo speed is unknown, defaulting to 1000 [ 680.001026][T16005] lo speed is unknown, defaulting to 1000 [ 680.030426][T16005] lo speed is unknown, defaulting to 1000 [ 680.439214][ T5821] Bluetooth: hci6: command tx timeout [ 680.459922][T16005] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 680.526962][T16005] lo speed is unknown, defaulting to 1000 [ 680.556258][T16005] lo speed is unknown, defaulting to 1000 [ 680.569840][T15988] chnl_net:caif_netlink_parms(): no params data found [ 680.604708][T16005] lo speed is unknown, defaulting to 1000 [ 680.605569][T16005] lo speed is unknown, defaulting to 1000 [ 680.644025][T16005] lo speed is unknown, defaulting to 1000 [ 680.644844][T16005] lo speed is unknown, defaulting to 1000 [ 680.763872][T16005] lo speed is unknown, defaulting to 1000 [ 680.764676][T16005] lo speed is unknown, defaulting to 1000 [ 680.765414][T16005] lo speed is unknown, defaulting to 1000 [ 680.898227][ T9531] Bluetooth: hci0: Frame reassembly failed (-84) [ 681.008526][T16033] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 681.008556][T16033] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 681.008902][T16033] vhci_hcd vhci_hcd.0: Device attached [ 681.206373][T16034] vhci_hcd: connection closed [ 681.279310][ T50] vhci_hcd vhci_hcd.0: stop threads [ 681.279340][ T50] vhci_hcd vhci_hcd.0: release socket [ 681.284185][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 681.319630][ T5863] usb 34-1: enqueue for inactive port 0 [ 682.007018][ T5863] usb usb34-port1: attempt power cycle [ 682.488744][ T9590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.513423][T11956] Bluetooth: hci6: command tx timeout [ 682.911353][T11956] Bluetooth: hci0: command 0x1003 tx timeout [ 682.911830][ T5863] usb usb34-port1: unable to enumerate USB device [ 682.917788][ T5821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 682.987092][ T9590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.049652][T15988] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.058767][T15988] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.066197][T15988] bridge_slave_0: entered allmulticast mode [ 683.102183][T15988] bridge_slave_0: entered promiscuous mode [ 683.111823][T15988] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.119044][T15988] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.129875][T15988] bridge_slave_1: entered allmulticast mode [ 683.138526][T15988] bridge_slave_1: entered promiscuous mode [ 683.237367][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 683.374099][ T9590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.801119][T15988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.825722][T16064] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 683.827808][T15988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.907645][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'. [ 683.917000][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'. [ 684.456774][ T9590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.605130][ T5821] Bluetooth: hci6: command tx timeout [ 684.630358][T15988] team0: Port device team_slave_0 added [ 684.661134][T15988] team0: Port device team_slave_1 added [ 684.784291][T15988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.803684][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.885904][T15988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.973862][T15988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.999382][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.096360][T15988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.346070][T15988] hsr_slave_0: entered promiscuous mode [ 685.354500][T15988] hsr_slave_1: entered promiscuous mode [ 685.461810][T15988] debugfs: 'hsr0' already exists in 'hsr' [ 685.480199][T15988] Cannot create hsr debugfs directory [ 685.634303][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.640852][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.978950][ T9590] bond0 (unregistering): Released all slaves [ 686.008126][ T9590] bond1 (unregistering): Released all slaves [ 686.053552][ T9590] bond2 (unregistering): Released all slaves [ 686.100381][ T9590] bond3 (unregistering): Released all slaves [ 686.148427][ T9590] bond4 (unregistering): Released all slaves [ 686.189239][ T9590] bond5 (unregistering): Released all slaves [ 686.232649][ T9590] bond6 (unregistering): Released all slaves [ 686.259960][T16085] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 686.266514][T16085] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 686.319739][T16085] vhci_hcd vhci_hcd.0: Device attached [ 686.562845][T16086] vhci_hcd: connection closed [ 686.569714][ T9531] vhci_hcd vhci_hcd.0: stop threads [ 686.589806][ T9531] vhci_hcd vhci_hcd.0: release socket [ 686.599620][ T5863] usb 34-1: SetAddress Request (14) to port 0 [ 686.605800][ T5863] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd [ 686.628450][ T9531] vhci_hcd vhci_hcd.0: disconnect device [ 686.671647][ T5821] Bluetooth: hci6: command tx timeout [ 686.717599][ T5863] usb 34-1: enqueue for inactive port 0 [ 687.162686][ T5863] usb usb34-port1: attempt power cycle [ 687.657892][T16104] fuse: Bad value for 'fd' [ 687.842215][ T5863] usb usb34-port1: unable to enumerate USB device [ 687.995255][ T9590] hsr_slave_0: left promiscuous mode [ 688.038038][ T9590] hsr_slave_1: left promiscuous mode [ 688.092745][ T9590] veth1_macvtap: left promiscuous mode [ 688.098511][ T9590] veth0_macvtap: left promiscuous mode [ 688.130213][ T9590] veth1_vlan: left promiscuous mode [ 688.148957][ T9590] veth0_vlan: left promiscuous mode [ 688.755704][T16127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3116'. [ 690.309059][T15988] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 690.532629][T15988] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 690.723303][T16158] affs: No valid root block on device nullb0 [ 691.323975][T16161] bond_slave_0: entered promiscuous mode [ 691.329928][T16161] bond_slave_1: entered promiscuous mode [ 691.360138][T15988] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 691.675880][T15988] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 692.190991][T15988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.567958][T15988] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.634021][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.641137][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.690368][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.697575][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.762041][T16196] netlink: 'syz.3.3133': attribute type 3 has an invalid length. [ 692.783522][T15988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 692.830034][T16197] tmpfs: Unknown parameter 'usrquota_' [ 693.051946][ T5863] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 693.231622][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 693.252913][ T5863] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 693.262052][ T5863] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 693.285338][ T5863] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 693.311961][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 693.333430][ T5863] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 693.370241][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 693.407194][ T5863] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 693.427068][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.459971][ T5863] usb 4-1: config 0 descriptor?? [ 693.465092][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 693.527071][ T29] audit: type=1400 audit(1775768053.080:782): avc: denied { sys_module } for pid=15988 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 693.622861][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.646042][ T10] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 693.661909][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.682723][ T10] usb 1-1: Product: syz [ 693.701105][T16196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.710774][ T5863] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 86 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 693.732713][ T10] usb 1-1: Manufacturer: syz [ 693.737529][ T10] usb 1-1: SerialNumber: syz [ 693.743183][T16196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.780125][ T10] usb 1-1: config 0 descriptor?? [ 693.822434][T15988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.908115][T15988] veth0_vlan: entered promiscuous mode [ 693.936256][T15988] veth1_vlan: entered promiscuous mode [ 693.995485][ T8516] usb 4-1: USB disconnect, device number 86 [ 693.998606][ T5894] usb 1-1: USB disconnect, device number 79 [ 694.013540][ T8516] usblp0: removed [ 694.046796][T15988] veth0_macvtap: entered promiscuous mode [ 694.076025][T15988] veth1_macvtap: entered promiscuous mode [ 694.114869][T15988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.149167][T15988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.200597][ T9531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.229647][ T9531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.254222][ T9531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.263428][ T9531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.414078][ T9591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.422730][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.435070][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.443757][ T9591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.631908][T16215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3137'. [ 694.641069][T16215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3137'. [ 694.698371][T16216] capability: warning: `syz.2.3081' uses deprecated v2 capabilities in a way that may be insecure [ 695.189968][T10938] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 695.344964][T16229] comedi comedi0: Minor 3 could not be opened [ 695.379566][T10938] usb 4-1: Using ep0 maxpacket: 16 [ 695.401038][T10938] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 695.449605][T10938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 695.466938][T10938] usb 4-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 695.486519][T10938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.505877][T10938] usb 4-1: config 0 descriptor?? [ 695.610996][T16240] netlink: 'syz.2.3148': attribute type 3 has an invalid length. [ 695.829767][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 695.875558][ T8516] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 695.928762][T10938] usbhid 4-1:0.0: can't add hid device: -71 [ 695.940255][T10938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 695.958858][T10938] usb 4-1: USB disconnect, device number 87 [ 696.001779][ T24] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 696.012512][ T24] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 696.021506][ T24] usb 5-1: Product: syz [ 696.028357][ T24] usb 5-1: config 0 descriptor?? [ 696.039606][ T8516] usb 3-1: Using ep0 maxpacket: 32 [ 696.045970][ T24] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 696.055069][ T8516] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 696.064736][ T24] usb 5-1: Detected FT232H [ 696.070172][ T8516] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 696.079116][ T8516] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 696.089662][ T8516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 696.101987][ T8516] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 696.113352][ T8516] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 696.128504][ T8516] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 696.138776][ T8516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.155029][ T8516] usb 3-1: config 0 descriptor?? [ 696.219880][ T5931] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 696.371119][ T5931] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 696.372175][T16240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.388772][ T5931] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 696.402675][ T8516] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 696.418012][T16240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.432559][ T5931] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.452847][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 696.466565][ T24] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 696.478429][ T5931] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 696.500094][ T24] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 696.647852][ T5863] usb 3-1: USB disconnect, device number 62 [ 696.651996][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 696.665724][ T24] usb 5-1: USB disconnect, device number 85 [ 696.674994][ T5863] usblp0: removed [ 696.685452][ T5931] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 696.708934][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 696.722727][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.769530][ T24] ftdi_sio 5-1:0.0: device disconnected [ 697.007038][ T5931] usb 1-1: config 0 descriptor?? [ 697.532594][ T5931] ryos 0003:1E7D:3138.0016: item fetching failed at offset 3/5 [ 697.594749][ T5931] ryos 0003:1E7D:3138.0016: parse failed [ 697.645194][ T5931] ryos 0003:1E7D:3138.0016: probe with driver ryos failed with error -22 [ 697.761841][ T5931] usb 1-1: USB disconnect, device number 80 [ 698.203975][T16260] binder: Binderfs stats mode cannot be changed during a remount [ 698.834646][ T29] audit: type=1400 audit(1775768058.380:783): avc: denied { ioctl } for pid=16275 comm="syz.3.3163" path="socket:[57519]" dev="sockfs" ino=57519 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 698.987080][T11956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 698.998021][T11956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 699.007760][T11956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 699.015808][T11956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 699.023715][T11956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 699.026040][T16281] netlink: 'syz.3.3165': attribute type 3 has an invalid length. [ 699.122687][T16277] lo speed is unknown, defaulting to 1000 [ 699.319817][ T5931] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 699.499599][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 699.544810][ T5931] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 699.674944][ T5931] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 699.827502][ T5931] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 699.872800][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 699.890589][T16277] chnl_net:caif_netlink_parms(): no params data found [ 699.980733][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 699.999582][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 700.023679][ T5931] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 700.034694][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.433178][ T5931] usb 4-1: config 0 descriptor?? [ 700.524337][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3168'. [ 700.570889][T16277] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.588290][T16277] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.598464][T16277] bridge_slave_0: entered allmulticast mode [ 700.613385][T16277] bridge_slave_0: entered promiscuous mode [ 700.640624][T16277] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.666185][T16277] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.681196][T16277] bridge_slave_1: entered allmulticast mode [ 700.701049][T16277] bridge_slave_1: entered promiscuous mode [ 700.705124][T16281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.727592][ T5931] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 88 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 700.743857][T16281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.800346][T16277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.832071][T16277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.954198][T16277] team0: Port device team_slave_0 added [ 700.986457][T16277] team0: Port device team_slave_1 added [ 701.064398][T16277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.066312][ T5863] usb 4-1: USB disconnect, device number 88 [ 701.071707][ T5821] Bluetooth: hci0: command tx timeout [ 701.087838][T16277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.131280][ T5863] usblp0: removed [ 701.193412][T16277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.221367][T16277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.229644][T16277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.279726][T16277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.425785][T16277] hsr_slave_0: entered promiscuous mode [ 701.435731][T16277] hsr_slave_1: entered promiscuous mode [ 702.240415][T16277] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.307314][T16320] binder: Binderfs stats mode cannot be changed during a remount [ 702.317112][T16277] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.474532][T16330] netlink: 'syz.4.3177': attribute type 1 has an invalid length. [ 703.149650][ T5821] Bluetooth: hci0: command tx timeout [ 703.290657][T16277] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.342726][T16277] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.445302][T16330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 703.613889][T16277] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.637689][T16337] netlink: 'syz.3.3179': attribute type 3 has an invalid length. [ 703.670648][T16277] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.786641][ T29] audit: type=1400 audit(1775768063.340:784): avc: denied { map } for pid=16343 comm="syz.2.3182" path="socket:[57195]" dev="sockfs" ino=57195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 703.944810][T16277] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.016544][T16277] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.069740][ T5931] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 704.240345][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 704.253619][ T5931] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 704.321804][ T5931] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 704.359891][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 704.455441][ T5931] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 704.465453][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 704.475625][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 704.485758][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 704.499189][ T5931] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 704.515092][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.539916][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 704.547721][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 704.560964][ T5931] usb 4-1: config 0 descriptor?? [ 704.582155][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 704.601565][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.649539][ T24] usb 2-1: Product: syz [ 704.653762][ T24] usb 2-1: Manufacturer: syz [ 704.658458][ T24] usb 2-1: SerialNumber: syz [ 704.776515][T16337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.797572][ T24] usb 2-1: config 0 descriptor?? [ 704.809888][T16337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.818314][ T5931] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 704.909880][T16277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 704.920331][T16277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 704.931038][T16277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 704.941348][T16277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 705.022620][T16277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.041814][T16277] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.064023][ T9517] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.071249][ T9517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.072419][ T5931] usb 4-1: USB disconnect, device number 89 [ 705.095818][ T5931] usblp0: removed [ 705.133067][ T9982] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.140280][ T9982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.232146][ T5821] Bluetooth: hci0: command tx timeout [ 705.398563][T16277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.484525][T16277] veth0_vlan: entered promiscuous mode [ 705.508809][T16277] veth1_vlan: entered promiscuous mode [ 705.564986][T16277] veth0_macvtap: entered promiscuous mode [ 705.575048][T16277] veth1_macvtap: entered promiscuous mode [ 705.616033][T16277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.646082][T16277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.673933][T10588] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.703691][T10588] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.737009][T10588] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.766605][T10588] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.967459][ T9982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.995826][ T9982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.037651][ T9531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.047668][ T9531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.126109][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3187'. [ 707.298957][ T5931] usb 2-1: USB disconnect, device number 49 [ 707.309757][ T5821] Bluetooth: hci0: command tx timeout [ 707.360118][T16393] ref_ctr_offset mismatch. inode: 0xb0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 707.479602][T16394] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 707.511765][T16394] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 707.521815][T16394] overlayfs: failed to look up (tracing) for ino (-66) [ 708.503129][T16396] block nbd0: server does not support multiple connections per device. [ 708.525714][T16396] block nbd0: shutting down sockets [ 708.649347][T16412] syzkaller0: entered promiscuous mode [ 708.663495][T16412] syzkaller0: entered allmulticast mode [ 708.693090][T16417] nbd: socks must be embedded in a SOCK_ITEM attr [ 708.950893][T16427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.868754][T16447] netlink: 'syz.2.3211': attribute type 3 has an invalid length. [ 709.875790][T16416] Process accounting resumed [ 709.912165][T16449] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 710.199866][ T5894] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 710.360959][T16462] overlayfs: missing 'lowerdir' [ 710.370235][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 710.391524][ T5894] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 710.419921][ T5894] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 710.525022][ T5894] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 710.747915][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 710.766940][ T5894] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 710.778453][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 710.804343][ T5894] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 710.815614][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.988228][T16470] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 711.016625][T16470] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 711.026680][T16470] overlayfs: failed to look up (tracing) for ino (-66) [ 711.585265][ T5894] usb 3-1: config 0 descriptor?? [ 711.762264][ T29] audit: type=1400 audit(1775768071.310:785): avc: denied { mounton } for pid=16474 comm="syz.4.3220" path="/85/file0" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 711.870582][T16447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.885104][ T5894] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 711.896936][T16447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.932778][ T5863] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 712.091783][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 712.120877][ T5863] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 712.167405][ T5863] usb 2-1: config 0 has no interface number 0 [ 712.176164][ T5894] usb 3-1: USB disconnect, device number 63 [ 712.191665][ T5863] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 712.211038][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.222140][ T5863] usb 2-1: Product: syz [ 712.230210][ T5894] usblp0: removed [ 712.242114][ T5863] usb 2-1: Manufacturer: syz [ 712.271453][ T5863] usb 2-1: SerialNumber: syz [ 712.290638][ T5863] usb 2-1: config 0 descriptor?? [ 712.309131][ T5863] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 712.510366][ T5863] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 712.543249][ T5863] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 712.825067][T16490] syzkaller0: entered promiscuous mode [ 712.849592][T16490] syzkaller0: entered allmulticast mode [ 712.906764][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 712.939269][ T5894] usb 2-1: USB disconnect, device number 50 [ 712.971463][ T5894] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 713.001178][ T5894] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 713.027517][ T5894] quatech2 2-1:0.51: device disconnected [ 713.865729][T16516] netlink: 'syz.1.3236': attribute type 8 has an invalid length. [ 714.228458][ T5931] kernel write not supported for file /dsp (pid: 5931 comm: kworker/1:5) [ 714.384295][T16527] syzkaller0: entered promiscuous mode [ 714.401141][T16527] syzkaller0: entered allmulticast mode [ 715.434942][T16533] Process accounting resumed [ 715.649623][ T5863] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 715.871791][ T5863] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.944634][ T5863] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 715.965992][ T5863] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 716.079359][ T5863] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 716.099309][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.122142][ T5863] usb 2-1: Product: syz [ 716.129888][ T5863] usb 2-1: Manufacturer: syz [ 716.139765][ T5863] usb 2-1: SerialNumber: syz [ 716.236626][ T5863] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 716.268981][ T5863] cdc_ncm 2-1:1.0: bind() failure [ 716.680040][ T5863] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 716.726498][ T5863] cdc_ncm 2-1:1.1: bind() failure [ 716.789813][ T5863] usb 2-1: USB disconnect, device number 51 [ 717.749720][ T29] audit: type=1326 audit(1775768077.300:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16573 comm="syz.2.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a79c819 code=0x7ffc0000 [ 717.864158][ T29] audit: type=1326 audit(1775768077.300:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16573 comm="syz.2.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a79c819 code=0x7ffc0000 [ 717.962785][ T29] audit: type=1326 audit(1775768077.300:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16573 comm="syz.2.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a79c819 code=0x7ffc0000 [ 718.069624][ T29] audit: type=1326 audit(1775768077.340:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16573 comm="syz.2.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a79c819 code=0x7ffc0000 [ 718.144015][ T29] audit: type=1326 audit(1775768077.340:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16573 comm="syz.2.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f860a79c819 code=0x7ffc0000 [ 718.244232][ T29] audit: type=1326 audit(1775768077.340:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16573 comm="syz.2.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a79c819 code=0x7ffc0000 [ 718.413585][ T29] audit: type=1326 audit(1775768077.340:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16573 comm="syz.2.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a79c819 code=0x7ffc0000 [ 718.438598][ T29] audit: type=1326 audit(1775768077.340:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16573 comm="syz.2.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a79c819 code=0x7ffc0000 [ 718.490693][ T29] audit: type=1326 audit(1775768077.340:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16573 comm="syz.2.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f860a79c819 code=0x7ffc0000 [ 718.525963][ T29] audit: type=1326 audit(1775768077.340:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16573 comm="syz.2.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f860a79c819 code=0x7ffc0000 [ 719.184442][ T5931] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 719.364386][ T5931] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 719.389630][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.428273][ T5931] usb 4-1: Product: syz [ 719.459588][ T5931] usb 4-1: Manufacturer: syz [ 719.490168][ T5931] usb 4-1: SerialNumber: syz [ 719.971253][ T5931] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 720.296373][ T5931] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 720.309592][ T5931] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 720.323941][ T5931] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 720.719747][ T5894] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 720.848638][T16630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.892007][ T5894] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 720.917099][ T5894] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 720.956720][ T5894] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.975418][ T5894] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 720.995627][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 721.015350][ T5894] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 721.032994][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.056073][ T5894] usb 2-1: config 0 descriptor?? [ 721.260034][T16638] netlink: 'syz.0.3279': attribute type 3 has an invalid length. [ 721.597676][ T5894] usbhid 2-1:0.0: can't add hid device: -71 [ 721.604166][ T5894] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 721.620615][ T5894] usb 2-1: USB disconnect, device number 52 [ 721.912239][ T5931] usb 4-1: USB disconnect, device number 90 [ 721.992207][T16643] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3282'. [ 722.875429][T16661] comedi comedi0: Minor -1 is invalid! [ 723.489852][ T24] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 723.647490][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 723.669670][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.698885][ T24] usb 1-1: Product: syz [ 723.709018][ T24] usb 1-1: Manufacturer: syz [ 723.729270][ T24] usb 1-1: SerialNumber: syz [ 723.844695][T16679] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 723.851267][T16679] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 723.914442][T16679] vhci_hcd vhci_hcd.0: Device attached [ 723.966388][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 724.007764][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 724.039710][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 724.073336][ T24] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 724.084989][T16680] vhci_hcd: connection closed [ 724.088286][ T9517] vhci_hcd vhci_hcd.2: stop threads [ 724.114640][ T9517] vhci_hcd vhci_hcd.2: release socket [ 724.127918][ T9517] vhci_hcd vhci_hcd.2: disconnect device [ 725.186404][T16694] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 725.298009][T16694] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 725.308260][T16694] overlayfs: failed to look up (tracing) for ino (-66) [ 726.303817][ T24] usb 1-1: USB disconnect, device number 81 [ 726.402226][T16702] netlink: 'syz.0.3301': attribute type 3 has an invalid length. [ 726.719821][ T24] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 726.972325][ T29] audit: type=1400 audit(1775768086.100:796): avc: denied { bind } for pid=16703 comm="syz.3.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 727.149906][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 727.185210][T16716] netlink: 'syz.4.3305': attribute type 1 has an invalid length. [ 727.216508][ T24] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 727.273293][T16716] 8021q: adding VLAN 0 to HW filter on device bond3 [ 728.039897][ T24] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 728.049283][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 728.070499][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 728.082702][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 728.094350][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 728.108756][ T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 728.123001][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.144536][ T24] usb 1-1: config 0 descriptor?? [ 728.370846][T16702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.418588][T16702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.477492][ T29] audit: type=1400 audit(1775768088.030:797): avc: denied { setopt } for pid=16727 comm="syz.2.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 728.640274][ T24] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 728.684835][ T5863] usb 1-1: USB disconnect, device number 82 [ 728.709362][ T5863] usblp0: removed [ 728.949611][ T24] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 729.117341][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 729.137135][ T24] usb 5-1: config 0 has no interface number 0 [ 729.181159][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 729.226116][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 729.266342][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 729.336141][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.370467][ T24] usb 5-1: config 0 descriptor?? [ 729.382575][T16735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 729.402218][ T24] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 729.559662][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 729.598980][ T29] audit: type=1400 audit(1775768089.150:798): avc: denied { connect } for pid=16755 comm="syz.3.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 729.715640][ T5863] usb 5-1: USB disconnect, device number 86 [ 729.721696][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 729.785356][T16759] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 729.791996][T16759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 729.810583][T16759] vhci_hcd vhci_hcd.0: Device attached [ 729.960504][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 729.967211][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 729.979638][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 729.990464][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.014510][T16762] vhci_hcd: connection closed [ 730.019852][ T65] vhci_hcd vhci_hcd.1: stop threads [ 730.019964][ T10] usb 1-1: Product: syz [ 730.024603][ T65] vhci_hcd vhci_hcd.1: release socket [ 730.046943][ T65] vhci_hcd vhci_hcd.1: disconnect device [ 730.054901][ T10] usb 1-1: Manufacturer: syz [ 730.060497][ T10] usb 1-1: SerialNumber: syz [ 730.083468][ T10] usb 1-1: config 0 descriptor?? [ 730.133450][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 730.204294][ T10] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 730.706760][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 730.825122][T16778] syzkaller0: entered promiscuous mode [ 730.830841][T16778] syzkaller0: entered allmulticast mode [ 731.212067][ T10] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 731.599583][ T10] em28xx 1-1:0.0: board has no eeprom [ 731.689659][ T10] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 731.706561][ T10] em28xx 1-1:0.0: dvb set to bulk mode. [ 731.729582][ T5894] em28xx 1-1:0.0: Binding DVB extension [ 731.759700][ T10] usb 1-1: USB disconnect, device number 83 [ 731.794570][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 731.814935][ T5894] em28xx 1-1:0.0: Registering input extension [ 731.830621][ T10] em28xx 1-1:0.0: Closing input extension [ 731.865397][ T10] em28xx 1-1:0.0: Freeing device [ 731.896773][T16795] 9p: Bad value for 'wfdno' [ 732.270339][T16809] 9pnet: p9_errstr2errno: server reported unknown error [ 734.530036][ T29] audit: type=1400 audit(1775768094.070:799): avc: denied { mounton } for pid=16840 comm="syz.1.3352" path="/98/file0" dev="tmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 735.081340][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3355'. [ 735.119233][ T566] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.134266][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3355'. [ 735.143695][ T566] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.156465][ T566] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.176521][ T566] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.201031][ T29] audit: type=1400 audit(1775768094.760:800): avc: denied { unmount } for pid=15360 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 735.382458][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 735.644796][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 735.669734][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.680707][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 735.714188][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 735.729727][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 735.752880][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.785193][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 735.795399][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 735.821084][ T10] usb 4-1: Manufacturer: syz [ 735.850133][ T10] usb 4-1: config 0 descriptor?? [ 735.939580][T16872] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 735.946158][T16872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 736.108002][T16878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16878 comm=syz.0.3354 [ 736.149594][T16872] vhci_hcd vhci_hcd.0: Device attached [ 736.160002][ T10] rc_core: IR keymap rc-hauppauge not found [ 736.166435][ T10] Registered IR keymap rc-empty [ 736.173724][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.218602][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.241556][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 736.269750][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input57 [ 736.301822][ T5863] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 736.314188][T16873] vhci_hcd: connection closed [ 736.314939][ T566] vhci_hcd vhci_hcd.0: stop threads [ 736.334097][ T566] vhci_hcd vhci_hcd.0: release socket [ 736.352067][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.376239][ T566] vhci_hcd vhci_hcd.0: disconnect device [ 736.389892][ T5928] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 736.422424][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.459625][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 736.465037][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.476424][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 736.497872][ T5863] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 736.509926][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.517193][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.535925][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.556602][ T5863] usb 2-1: Product: syz [ 736.563879][ T5863] usb 2-1: Manufacturer: syz [ 736.568752][ T5863] usb 2-1: SerialNumber: syz [ 736.580931][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.594682][ T5863] usb 2-1: config 0 descriptor?? [ 736.612974][ T5863] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 736.626729][ T5863] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 736.633195][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.660855][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.690126][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.733995][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.796259][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.841600][ T10] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 736.875799][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 736.920714][ T10] usb 4-1: USB disconnect, device number 91 [ 737.225068][ T5863] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 737.258372][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3369'. [ 737.281336][T16895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.822197][ T5863] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 737.883769][ T5863] em28xx 2-1:0.0: board has no eeprom [ 738.179600][ T5863] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 738.187539][ T5863] em28xx 2-1:0.0: dvb set to bulk mode. [ 738.207432][ T10] em28xx 2-1:0.0: Binding DVB extension [ 738.314859][ T5931] usb 2-1: USB disconnect, device number 53 [ 738.321914][ T5931] em28xx 2-1:0.0: Disconnecting em28xx [ 738.404061][ T10] em28xx 2-1:0.0: Registering input extension [ 738.410521][ T5894] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 738.455521][ T5931] em28xx 2-1:0.0: Closing input extension [ 738.502065][ T5931] em28xx 2-1:0.0: Freeing device [ 738.606971][T16913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.654206][T10938] lo speed is unknown, defaulting to 1000 [ 738.812662][ T5894] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 738.822084][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.841993][ T5894] usb 3-1: Product: syz [ 738.846229][ T5894] usb 3-1: Manufacturer: syz [ 738.854957][ T5894] usb 3-1: SerialNumber: syz [ 739.214670][ T5894] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 739.269445][ T5894] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 739.395496][ T5894] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 739.450086][ T5894] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 739.567233][ T29] audit: type=1400 audit(1775768099.110:801): avc: denied { setopt } for pid=16926 comm="syz.1.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 740.460042][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3387'. [ 740.469298][T16945] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.483789][T16945] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.689716][ T5894] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 740.860088][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 740.866936][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 740.889016][ T5894] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 740.899375][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.909611][ T5894] usb 4-1: Product: syz [ 740.913887][ T5894] usb 4-1: Manufacturer: syz [ 740.918763][ T5894] usb 4-1: SerialNumber: syz [ 740.929233][ T5894] usb 4-1: config 0 descriptor?? [ 740.946089][ T5894] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 740.980208][ T5894] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 740.989649][ T5863] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 741.004239][T16954] fuse: Unknown parameter '0x0000000000000003' [ 741.117490][ T8516] usb 3-1: USB disconnect, device number 64 [ 741.149685][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 741.156724][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 741.333032][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 741.344701][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024 [ 741.357046][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 741.378509][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 741.392974][ T5863] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 741.433528][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.500498][ T5863] usb 1-1: Product: syz [ 741.560346][ T5894] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 741.578552][ T5863] usb 1-1: Manufacturer: syz [ 741.641961][ T5863] usb 1-1: SerialNumber: syz [ 741.789245][ T5863] usb 1-1: config 0 descriptor?? [ 741.839569][ T8516] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 741.849748][ T5928] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 741.991315][ T8516] usb 3-1: Using ep0 maxpacket: 16 [ 742.010397][ T8516] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 742.036437][ T8516] usb 3-1: config 0 interface 0 has no altsetting 0 [ 742.043725][ T8516] usb 3-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 742.063675][ T8516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.087286][ T5894] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 742.105268][ T5894] em28xx 4-1:0.0: board has no eeprom [ 742.106353][ T8516] usb 3-1: config 0 descriptor?? [ 742.301011][ T5863] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 742.307148][ T5863] input input59: Device does not respond to id packet M [ 742.325781][ T5863] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 742.399557][ T794] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 742.414362][ T5863] input input59: Device does not respond to id packet P [ 742.450473][ T5863] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 742.469631][ T5894] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 742.483000][ T5863] input input59: Device does not respond to id packet B [ 742.497047][ T5894] em28xx 4-1:0.0: dvb set to bulk mode. [ 742.512362][ T10] em28xx 4-1:0.0: Binding DVB extension [ 742.528040][ T5863] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 742.573695][ T794] usb 5-1: device descriptor read/64, error -71 [ 742.732453][ T5863] input input59: Device does not respond to id packet N [ 742.764915][ T5894] usb 4-1: USB disconnect, device number 92 [ 742.775533][ T8516] usbhid 3-1:0.0: can't add hid device: -71 [ 742.782853][ T5863] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 742.789067][ T8516] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 742.826440][ T10] em28xx 4-1:0.0: Registering input extension [ 742.837501][ T8516] usb 3-1: USB disconnect, device number 65 [ 742.837921][ T5894] em28xx 4-1:0.0: Disconnecting em28xx [ 742.855396][ T5863] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 742.869694][ T5863] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 742.875771][ T5894] em28xx 4-1:0.0: Closing input extension [ 742.898855][ T5863] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 742.947438][ T5863] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input59 [ 742.972846][ T5894] em28xx 4-1:0.0: Freeing device [ 742.989576][ T794] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 743.039940][ T5863] usb 1-1: USB disconnect, device number 84 [ 743.063869][T16972] 9p: Bad value for 'rfdno' [ 743.153224][ T794] usb 5-1: device descriptor read/64, error -71 [ 743.281215][ T794] usb usb5-port1: attempt power cycle [ 744.086895][ T29] audit: type=1400 audit(1775768103.630:802): avc: denied { view } for pid=16985 comm="syz.3.3405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 744.531333][ T794] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 744.560110][ T794] usb 5-1: device descriptor read/8, error -71 [ 744.669590][ T5863] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 744.799573][ T794] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 745.170608][ T5931] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 745.340213][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 745.355785][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 745.397328][ T5931] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 745.427729][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.456524][ T5931] usb 2-1: Product: syz [ 745.469864][ T5931] usb 2-1: Manufacturer: syz [ 745.493872][ T5931] usb 2-1: SerialNumber: syz [ 745.549827][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 745.554297][ T5931] usb 2-1: config 0 descriptor?? [ 745.558445][ T794] usb 5-1: device descriptor read/8, error -71 [ 745.572735][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 745.586556][ T5931] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 745.593389][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 745.619620][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024 [ 745.630622][ T5931] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 745.644728][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 745.680929][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 745.692466][ T794] usb usb5-port1: unable to enumerate USB device [ 745.715592][ T5863] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 745.734027][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.749640][ T5863] usb 3-1: Product: syz [ 745.753844][ T5863] usb 3-1: Manufacturer: syz [ 745.784227][ T5863] usb 3-1: SerialNumber: syz [ 745.796425][ T5863] usb 3-1: config 0 descriptor?? [ 746.226670][ T5863] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 746.237854][ T5863] input input61: Device does not respond to id packet M [ 746.277890][ T5863] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 746.304397][ T5863] input input61: Device does not respond to id packet P [ 746.331242][ T5863] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 746.350714][ T5863] input input61: Device does not respond to id packet B [ 746.374243][ T5863] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 746.397416][ T5863] input input61: Device does not respond to id packet N [ 746.422261][ T5863] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 746.443434][ T5863] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 746.470274][ T5863] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 746.499809][ T5863] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 746.538448][ T5863] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input61 [ 746.642838][ T5863] usb 3-1: USB disconnect, device number 66 [ 746.648892][ C0] iforce 3-1:0.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 746.865243][ T5931] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 747.071922][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.089733][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.109618][ T5894] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 747.221561][ T5931] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 747.236502][ T5931] em28xx 2-1:0.0: board has no eeprom [ 747.246785][ T5894] usb 1-1: device descriptor read/64, error -71 [ 747.489587][ T5894] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 747.521216][ T5931] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 747.549528][ T5931] em28xx 2-1:0.0: dvb set to bulk mode. [ 747.569197][ T8516] em28xx 2-1:0.0: Binding DVB extension [ 747.629770][ T5894] usb 1-1: device descriptor read/64, error -71 [ 747.671868][ T794] usb 2-1: USB disconnect, device number 54 [ 747.686282][ T794] em28xx 2-1:0.0: Disconnecting em28xx [ 747.704253][ T29] audit: type=1400 audit(1775768107.260:803): avc: denied { append } for pid=17060 comm="syz.2.3431" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 747.760100][ T5894] usb usb1-port1: attempt power cycle [ 747.857835][ T8516] em28xx 2-1:0.0: Registering input extension [ 747.867354][ T794] em28xx 2-1:0.0: Closing input extension [ 747.893158][ T794] em28xx 2-1:0.0: Freeing device [ 748.109571][ T5894] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 748.140165][ T5894] usb 1-1: device descriptor read/8, error -71 [ 748.330337][T17074] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17074 comm=syz.4.3432 [ 748.351635][T17069] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 748.358214][T17069] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 748.392297][T17069] vhci_hcd vhci_hcd.0: Device attached [ 748.397674][ T5894] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 748.442753][ T5894] usb 1-1: device descriptor read/8, error -71 [ 748.559915][ T5894] usb usb1-port1: unable to enumerate USB device [ 748.614596][T17071] vhci_hcd: connection closed [ 748.614917][T10588] vhci_hcd vhci_hcd.4: stop threads [ 748.641012][T10588] vhci_hcd vhci_hcd.4: release socket [ 748.653166][T10588] vhci_hcd vhci_hcd.4: disconnect device [ 748.670534][ T8516] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 748.678007][ T8516] usb 41-1: enqueue for inactive port 0 [ 748.799603][ T8516] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 749.152181][ T5821] Bluetooth: hci5: command 0x0406 tx timeout [ 749.564566][ T29] audit: type=1400 audit(1775768109.120:804): avc: denied { write } for pid=17085 comm="syz.1.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 752.477492][T17113] Process accounting resumed [ 752.572817][ T9590] ------------[ cut here ]------------ [ 752.578700][ T9590] conntrack cleanup blocked for 60s [ 752.578714][ T9590] WARNING: net/netfilter/nf_conntrack_core.c:2511 at nf_conntrack_cleanup_net_list+0x4f7/0x690, CPU#0: kworker/u8:46/9590 [ 752.597909][ T9590] Modules linked in: [ 752.602593][ T9590] CPU: 0 UID: 0 PID: 9590 Comm: kworker/u8:46 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.613760][ T9590] Tainted: [L]=SOFTLOCKUP [ 752.618077][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 752.628383][ T9590] Workqueue: netns cleanup_net [ 752.633263][ T9590] RIP: 0010:nf_conntrack_cleanup_net_list+0x4f7/0x690 [ 752.640081][ T9590] Code: 29 c3 48 89 de e8 49 a4 59 f8 48 85 db 78 0f e8 5f a9 59 f8 e8 9a 22 e3 01 e9 0e fc ff ff e8 50 a9 59 f8 48 8d 3d 29 1a 39 07 <67> 48 0f b9 3a eb de 4c 8b 6c 24 40 e8 38 a9 59 f8 48 b8 00 00 00 [ 752.660283][ T9590] RSP: 0018:ffffc90003647970 EFLAGS: 00010293 [ 752.666833][ T9590] RAX: 0000000000000000 RBX: ffffffffffffffdc RCX: ffffffff89af4e37 [ 752.675137][ T9590] RDX: ffff888035424980 RSI: ffffffff89af4e50 RDI: ffffffff90e86880 [ 752.683181][ T9590] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 752.691257][ T9590] R10: ffffffffffffffdc R11: 0000000000000000 R12: 0000000000000001 [ 752.699247][ T9590] R13: 0000000000000001 R14: ffffc90003647b28 R15: dffffc0000000000 [ 752.707372][ T9590] FS: 0000000000000000(0000) GS:ffff888124339000(0000) knlGS:0000000000000000 [ 752.716339][ T9590] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.722954][ T9590] CR2: 000020000034e030 CR3: 0000000074147000 CR4: 00000000003526f0 [ 752.731044][ T9590] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 752.738993][ T9590] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 752.747092][ T9590] Call Trace: [ 752.750595][ T9590] [ 752.753540][ T9590] ? nf_conntrack_cleanup_net_list+0x158/0x690 [ 752.759773][ T9590] ? __pfx_nf_conntrack_cleanup_net_list+0x10/0x10 [ 752.766732][ T9590] ? nf_conntrack_pernet_exit+0xaa/0x150 [ 752.772743][ T9590] ? kfree+0x1f6/0x6b0 [ 752.776857][ T9590] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 752.783125][ T9590] ops_undo_list+0x363/0xab0 [ 752.787771][ T9590] ? __pfx_ops_undo_list+0x10/0x10 [ 752.792979][ T9590] ? idr_destroy+0x62/0x2e0 [ 752.797580][ T9590] cleanup_net+0x499/0x920 [ 752.802161][ T9590] ? __pfx_cleanup_net+0x10/0x10 [ 752.807109][ T9590] ? rcu_is_watching+0x12/0xc0 [ 752.812025][ T9590] process_one_work+0xa23/0x19a0 [ 752.816981][ T9590] ? __pfx_process_one_work+0x10/0x10 [ 752.822515][ T9590] ? __pfx_cleanup_net+0x10/0x10 [ 752.827464][ T9590] worker_thread+0x5ef/0xe50 [ 752.832383][ T9590] ? kthread+0x13a/0x450 [ 752.836635][ T9590] ? __pfx_worker_thread+0x10/0x10 [ 752.841954][ T9590] kthread+0x370/0x450 [ 752.846065][ T9590] ? __pfx_kthread+0x10/0x10 [ 752.850699][ T9590] ret_from_fork+0x754/0xd80 [ 752.855294][ T9590] ? __pfx_ret_from_fork+0x10/0x10 [ 752.860452][ T9590] ? rcu_is_watching+0x12/0xc0 [ 752.865213][ T9590] ? __switch_to+0x7b4/0x1120 [ 752.870135][ T9590] ? __pfx_kthread+0x10/0x10 [ 752.874722][ T9590] ret_from_fork_asm+0x1a/0x30 [ 752.879827][ T9590] [ 752.882872][ T9590] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 752.890168][ T9590] CPU: 0 UID: 0 PID: 9590 Comm: kworker/u8:46 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.901257][ T9590] Tainted: [L]=SOFTLOCKUP [ 752.905562][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 752.915699][ T9590] Workqueue: netns cleanup_net [ 752.920479][ T9590] Call Trace: [ 752.923756][ T9590] [ 752.926696][ T9590] dump_stack_lvl+0x100/0x190 [ 752.931380][ T9590] vpanic+0x552/0x970 [ 752.935479][ T9590] ? __pfx_vpanic+0x10/0x10 [ 752.939982][ T9590] panic+0xd1/0xe0 [ 752.943691][ T9590] ? __pfx_panic+0x10/0x10 [ 752.948113][ T9590] ? check_panic_on_warn+0x1f/0x90 [ 752.953220][ T9590] check_panic_on_warn.cold+0x19/0x34 [ 752.958579][ T9590] ? nf_conntrack_cleanup_net_list+0x4f7/0x690 [ 752.964717][ T9590] __warn.cold+0x191/0x348 [ 752.969129][ T9590] __report_bug+0x296/0x3d0 [ 752.973646][ T9590] ? nf_conntrack_cleanup_net_list+0x4f7/0x690 [ 752.979802][ T9590] ? __pfx___report_bug+0x10/0x10 [ 752.984835][ T9590] ? nf_conntrack_cleanup_net_list+0x4f0/0x690 [ 752.990971][ T9590] ? nf_conntrack_cleanup_net_list+0x4d7/0x690 [ 752.997106][ T9590] ? nf_ct_iterate_cleanup_net+0xd9/0x110 [ 753.002806][ T9590] ? nf_ct_iterate_cleanup_net+0xd9/0x110 [ 753.008521][ T9590] report_bug_entry+0xe1/0x290 [ 753.013287][ T9590] ? nf_conntrack_cleanup_net_list+0x4f7/0x690 [ 753.019430][ T9590] handle_bug+0x1cd/0x2a0 [ 753.023816][ T9590] exc_invalid_op+0x17/0x50 [ 753.028340][ T9590] asm_exc_invalid_op+0x1a/0x20 [ 753.033191][ T9590] RIP: 0010:nf_conntrack_cleanup_net_list+0x4f7/0x690 [ 753.039961][ T9590] Code: 29 c3 48 89 de e8 49 a4 59 f8 48 85 db 78 0f e8 5f a9 59 f8 e8 9a 22 e3 01 e9 0e fc ff ff e8 50 a9 59 f8 48 8d 3d 29 1a 39 07 <67> 48 0f b9 3a eb de 4c 8b 6c 24 40 e8 38 a9 59 f8 48 b8 00 00 00 [ 753.059743][ T9590] RSP: 0018:ffffc90003647970 EFLAGS: 00010293 [ 753.065827][ T9590] RAX: 0000000000000000 RBX: ffffffffffffffdc RCX: ffffffff89af4e37 [ 753.073778][ T9590] RDX: ffff888035424980 RSI: ffffffff89af4e50 RDI: ffffffff90e86880 [ 753.081757][ T9590] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 753.089818][ T9590] R10: ffffffffffffffdc R11: 0000000000000000 R12: 0000000000000001 [ 753.097959][ T9590] R13: 0000000000000001 R14: ffffc90003647b28 R15: dffffc0000000000 [ 753.106020][ T9590] ? nf_conntrack_cleanup_net_list+0x4d7/0x690 [ 753.112166][ T9590] ? nf_conntrack_cleanup_net_list+0x4f0/0x690 [ 753.118452][ T9590] ? nf_conntrack_cleanup_net_list+0x158/0x690 [ 753.124617][ T9590] ? __pfx_nf_conntrack_cleanup_net_list+0x10/0x10 [ 753.131126][ T9590] ? nf_conntrack_pernet_exit+0xaa/0x150 [ 753.136765][ T9590] ? kfree+0x1f6/0x6b0 [ 753.140857][ T9590] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 753.146923][ T9590] ops_undo_list+0x363/0xab0 [ 753.151657][ T9590] ? __pfx_ops_undo_list+0x10/0x10 [ 753.156775][ T9590] ? idr_destroy+0x62/0x2e0 [ 753.161284][ T9590] cleanup_net+0x499/0x920 [ 753.165692][ T9590] ? __pfx_cleanup_net+0x10/0x10 [ 753.170635][ T9590] ? rcu_is_watching+0x12/0xc0 [ 753.175396][ T9590] process_one_work+0xa23/0x19a0 [ 753.180331][ T9590] ? __pfx_process_one_work+0x10/0x10 [ 753.185692][ T9590] ? __pfx_cleanup_net+0x10/0x10 [ 753.190610][ T9590] worker_thread+0x5ef/0xe50 [ 753.195197][ T9590] ? kthread+0x13a/0x450 [ 753.199415][ T9590] ? __pfx_worker_thread+0x10/0x10 [ 753.204511][ T9590] kthread+0x370/0x450 [ 753.208586][ T9590] ? __pfx_kthread+0x10/0x10 [ 753.213184][ T9590] ret_from_fork+0x754/0xd80 [ 753.217778][ T9590] ? __pfx_ret_from_fork+0x10/0x10 [ 753.222896][ T9590] ? rcu_is_watching+0x12/0xc0 [ 753.227645][ T9590] ? __switch_to+0x7b4/0x1120 [ 753.232319][ T9590] ? __pfx_kthread+0x10/0x10 [ 753.236904][ T9590] ret_from_fork_asm+0x1a/0x30 [ 753.241654][ T9590] [ 753.245009][ T9590] Kernel Offset: disabled [ 753.249316][ T9590] Rebooting in 86400 seconds..