last executing test programs: 3m31.628449307s ago: executing program 4 (id=173): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) stat(&(0x7f0000000e40)='.\x00', &(0x7f0000000e80)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x1c, r5, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6e}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4086) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 3m30.163638241s ago: executing program 4 (id=177): r0 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) 3m28.850012963s ago: executing program 4 (id=182): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40900}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x1000005, 0x13, r2, 0xa51bd000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 3m28.512586112s ago: executing program 4 (id=185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f00000001c0), 0x2) close(r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x2000004) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xcc4a08a5071b3260) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$int_in(r5, 0x0, &(0x7f0000003140)=0xffffffff) read$FUSE(r7, &(0x7f0000003180)={0x2020}, 0x2020) write$FUSE_INIT(r7, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m27.513850459s ago: executing program 4 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getrlimit(0x9, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x40885}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000130a010100000000000000"], 0x1c}}, 0x4044040) 3m26.345463311s ago: executing program 4 (id=196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0xd}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYBLOB="59001168f44a9bff3e61118b603bd1f10a73e33215982901ff5370db85577331161bfb7133edb9136fc2a64dd254325a4b7c366dd35cc5c85828a8c3b7853a36ffd88d6c0eee06e5b96c25cce9b5a93d7da7ab005b0617efb2245f4099be3ccb4594c4c24dc4882a6a972b697e3b69f121de5ec32e21a30cd9dd73e132ded241df23c2d0230c30ba3a5422ea556fd2961d831bc94bb7c2dcf9b73ad85829755515bd2809b234df5bd86506c5c349d1fa0f0984f74380dec99c11400fa7b8d94b37863c9cffb1c32ef9abfdc387913d01b70a29556cfbd1258358b6ba307c8bf71f12148a0f614c3a4926ee67716fd7cdf8", @ANYRES32=r0, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) iopl(0x3) gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x51) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="2fae", 0x2}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) 3m10.266108314s ago: executing program 32 (id=196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0xd}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYBLOB="59001168f44a9bff3e61118b603bd1f10a73e33215982901ff5370db85577331161bfb7133edb9136fc2a64dd254325a4b7c366dd35cc5c85828a8c3b7853a36ffd88d6c0eee06e5b96c25cce9b5a93d7da7ab005b0617efb2245f4099be3ccb4594c4c24dc4882a6a972b697e3b69f121de5ec32e21a30cd9dd73e132ded241df23c2d0230c30ba3a5422ea556fd2961d831bc94bb7c2dcf9b73ad85829755515bd2809b234df5bd86506c5c349d1fa0f0984f74380dec99c11400fa7b8d94b37863c9cffb1c32ef9abfdc387913d01b70a29556cfbd1258358b6ba307c8bf71f12148a0f614c3a4926ee67716fd7cdf8", @ANYRES32=r0, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) iopl(0x3) gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x51) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="2fae", 0x2}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) 21.110319692s ago: executing program 5 (id=744): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000191c0)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000019180)={&(0x7f0000019140)={0x40, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x5, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) 17.037790364s ago: executing program 5 (id=755): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000050000000000b65c590a00"/28], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r4, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x618f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) close(r2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) syz_clone(0x93f0b91, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = dup(r5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d032000000ac141400000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000004000000000000000000000000000000ffffffffffffffff000000400000000000000000000000000000020002000000000000000000000008000000000000000000000000000000000000000100000000000000020004000000000048"], 0x13c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000240)) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendfile(r6, r6, 0x0, 0xffffffff) 15.692297744s ago: executing program 3 (id=759): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="d8000000000000000a01000001040000222d3d34497cafd0c630026b890101c2e950ee6e34c4d5848289c700a5d8d4b1d4829f3ccec20d415b410c3abe2d68e18ec14ef6d9af87a2a5e594d22c4eeeb20a20a08d95f8632e1fd9ff5ac71ea7839013c117cb6459a36a591ca65eba12bd1cc7e35272f9239b3e3f40ea116f8c4f0f7e1e8d84a03c8765cc8219b376deb3211db2adb692b772d6ad472956512ba3064503746049634e2e5f7aacc5f46ca7e00d2775f454f8511083a89be6a2abf66caa6f0a5367ca66df75478cc3ca1c7f533080aa22f35d4160000000000000000c01000004000000b85a8e16f2e9a27cf0e86b8e63c4066f684cb5f33ee36c612bb8cd02655a78971c3ec773e3a840fb879cb8de184a23ecc71cba1ba02a324d6381f017f2d50bc533465a4aff6745fb20d584000000000094bdd638d967f705c95e29cfa07d0dcb70a1a19d65d34182af7fdf2f5eb3979e5a4bfeac3f60bab7"], 0x138}, 0x4081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4441, 0x42) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 13.948627764s ago: executing program 3 (id=760): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) close_range(r2, r2, 0x0) 12.589166908s ago: executing program 5 (id=765): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000191c0)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000019180)={&(0x7f0000019140)={0x40, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x5, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) 10.617505477s ago: executing program 5 (id=770): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x138}, 0x4081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4441, 0x42) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, 0x0) 9.592968256s ago: executing program 5 (id=773): r0 = userfaultfd(0x80001) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), 0x0}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f000022c000/0x3000)=nil) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="8c") 9.355530244s ago: executing program 3 (id=774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073797a3100000000140007800800124000000005080013400000000e0500050002000000050004000100dd0011000300686173683a69702c706f727400000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = fcntl$dupfd(r1, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r5, &(0x7f0000000e00)=ANY=[], 0x958) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) write$binfmt_script(r5, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "574af3849be3"}, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) shutdown(r1, 0x1) 8.989954389s ago: executing program 2 (id=775): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000005ac0)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000240)="01b78b5030000dc9f6", 0x9}, {0x0}], 0x2, 0x0, 0x0, 0x4000000}}, {{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4001}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000005c0)="db48e293", 0x4}, {&(0x7f0000000600)="0314357ee593e79f0af494fe21655c16822195a6f8432ea81d257ccb7d6859b994d5551ff11c1562bcf559f7429cf23b43df597032b5", 0x36}, {&(0x7f0000000680)="ff0637c426231315b1465eb2e0cc2b65c9481857bc22498f97060cc71a77b9c85fafe97b13ca1f1c8b2a743c7856a011f51d401179a552375d482043a54876e11ade39ca87a5b4ebaaab69782590501e0384178b03f2150e094892846366c5271ed38ab9e8b98b197533bb70ab5be768bed1a56ad62bfd1c39731c2a5c752cbbd51ff788c4260887410a9a9f8d61ac4683300dc186f83e", 0x97}], 0x3, &(0x7f0000000940), 0x0, 0x20000081}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a00)="df46de487cb8d84b386a80ad4d28adcda68bb0f1ded3756f7d51026ebc8507e1e9bf1aed54adc7e536aa135e6a3fccfe6567c5a1afeb67a4588d9523a6dff556bf781ea48ef0865a19f5cca9ccea68e7fff8c8e3a684b6ae90236e5409ab27abc6e286941d0cb9d90dc680dfe8", 0x6d}, {&(0x7f0000000b80)="3ada2ce1c90d9f98a3ac3aa83eb51ab67a7ed76f717bef72a2b6908fbaa248103a559c25706a4518fa9dc2284098df9d194b21b1ce3a7d79219b9ce43eae8efcded6a8dcc0310b81d77cf5d92fd692af61d071c7cfaf037ca4d0beb9cd3464b4d0f7662d0fcfb37a66d2b5293144abe38431bdfc58d74f9a290a587311ab297c8e987c09f5630fa06b01c220edcd5913f24e6f6bb9c739bb93764e25887ad9dafebe96a479089ee9b882e57388a65fc4e0e9252e80a5bc022221de64", 0xbc}], 0x2, &(0x7f0000000f00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90, 0x4040}}, {{&(0x7f0000002200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f0000002280)="bbc8f1d4c4c5918411efdc0eee3238e69b33a784d1ae001fa4d8b36d", 0x1c}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="d974ded297e0fcfe4ca2e0a97268d9dd44aa0bd2cec8b13bddf1ecebfea7a461eff4a5826bc073be29909daa110d58a83200c83edadc814bbd4a4d590544866e8523c5b66fe04300ebfadf02c45713a8e5bf41cc7f94cdcdcfd2120574ad0087a150b7d5b128f528c70fb2d2aa10b59e4e0ba1e7f7099d97dc004ff7660c4a90ef752c7eb938137515a9db84f45125042bc261ec0c7cc473", 0x98}, {&(0x7f0000003380)="6befdfef794a6de459135fa133dce7934e52a9906528651f8e6b1e62bf8942047e3d55463d4fe041dd3705b69105e9793d7e46d8f3aec8f31ef67a500e8381e74b7a493b08edbda7a6808cff2a6ae4fbc18cdfea910316935f87fbe813b6bbe0d00bfad194709da6eac33fc5e778ae755108d3163fb1cef9b7933bbaed027dd546c093be82fd1bfa16fe13b405aede15e4ae4b1d3ae4fabde2c833b6c907b24c3a82d55917b494fe06f997d268ccde97c6e5c5330b46636cdc10156c8f17f54c228dd91b6b22fd6da97c078a8e62a62f66c21937f860fe072e8906cd4f09af2e665a349ef1a227b3ec71cd", 0xeb}, {&(0x7f0000003480)="066d5a780b7b18192d3d7f2d16096ce9d1b73fdc73916b275fbd00984a6a00be93898c5b5e48b80973152279c26d26586fa90506e3a8955c8117169e5fb8213db5dfbc7b6c62a530eba1584df149e810baa9f3c5850e04bdbcaa759b8994cc167f78c846ad975a4385128af86fc77c760fec88f633fafa0ab8cba06cc9f2e3a797df1f155d725a55bd549a3087639626a27b66d9f68b65e6743b8c301bc8102df13210ae4e51c2a28af43ddffe169a99a9133f0f591fd8ca57a4222c3be3771d5d5762a428e287d98e06fb42aadd1e5086f1dced9a5e0c80253603bc0d13b931f79fbe8b67b660", 0xe7}, {&(0x7f0000003580)="3b722d4367804f912d0d667b26ec058172eefcc5f7e0a65a4074b3ddd1f26a668ec9f318c5703460729fff7a013bdee3ad5f7116f567c8d37b97f01b762a692b3d95651839d2d099fe3a5be6ea08c048c74b6feb34350a425415bc82f6a0fd680e203cf694228cad45c9c5fc511b5c6a5b9160675f91eb3e9d45eb8a3ac71ea9b6f160fd6e9902eb68a83526e1c827de26e99aa3a3640a5e3e3187982260294737bfcf887c26ac151c755c9ac23a979a8ca0e71869809fdff9adb1e93a2dd992320681294b92143dac5aea573e7f4a30", 0xd0}], 0x6, &(0x7f0000003980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40, 0x20000024}}, {{&(0x7f00000039c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000003a40)="05f955a41f6cebb30903baac6b96e4e9e096de8ae59aab7701d5853325897276c90b13716c45d385d4888875c9712f44c29297404c6a82ddce9310a09b3fa5e55066859f8f84e2b3cdf4eed113fb028624cb4619f462063c09878f331904c4c20b2c4d811bc4c2b4a71a96338b9b21c9a1addbf7f1", 0x75}, {&(0x7f0000003b00)="228d0b1353df4a325685291d2819378148e649611362c8d89109f67dc5a08d418eb908e742b57385b980d30dc2a2b9bfc38734c0a9efaa4ee86d3b551f22f1bdf37f8d1fa14730919f5a920baaab06bb9069071f57d841d962da76969a1648", 0x5f}, {&(0x7f0000003b80)}, {&(0x7f0000003c00)="7063f1b8ea35b328829460b9cc7c1cbbb31af8eb9001e4084f28d992d90e413b582f8babc1af56c8080ab57ae705661975666ac2192e6c07d59b957535c2f7383bf4f4c407e06f72ae87c8705a77f2ebd9cfc9ee11dce66289846ba7a33a049c77349ba87604b0a91c153779aa3e7ed8aee8bb8f02e5e28f9def750a0ad1fc3977a8b028ea0cfaa116848347ceb854cd280462dfcd5f088734e445bf250ad8b868a1", 0xa2}, {&(0x7f0000003cc0)="2b49ea7ec09519816e6ee94403a7dc4e1d251ac86e631ca0a51eac99c9a85f9577ac7f67ce0d327896adc793e7fd24c85563fc9923bdccd65df4404287c55a5252cf9ff380d1577a2ace0ace49f17624f424514f9867cd40fdfed0d5e1886cd41627e13f494174cea97db84b37b29e778aba5c0222b509bf17577cb5ed0c09d54429bef721d236b971456d27579e8e3d", 0x90}, {&(0x7f0000003d80)="2488d8d707edb340905d115fe76507bacad334412e8abd3d05be", 0x1a}], 0x6, 0x0, 0x0, 0x890}}, {{&(0x7f0000003e00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003e80)="75a27a899d30dd7671f8c154eb54c02a1440f8989e6f3c2e3e91be4d591f1cdb6bedc1a58e11c30fc98b97470ffc2ad3bdb0c390d398a082ef36296347d76b5d51dd1f3e6756cd503c488898b89e8586668a446a9c938e397e50d78008fbfbd2f0cd79a92b1078565a48ee154016175c574390613939c2279e4859176de2e8d8d76eac361c22d67dcdfc6798176fa4760ad6ee58e11e49fde50183e4b08ea3708866904787b853e5dc78efbe33aa5816548a4a773dee1d3ce3e3165b881b105f480b", 0xc2}, {&(0x7f0000003f80)="970d781dbc8c1f76e2b33fd26578f4e1cdbc115d4a4aff5a57fcdfdc300a308ce3e21959f2690f3f60454ac4e6263056e48876f070bd8304c0cc6f253ea958c49d64d791db17a78234004f4a3e13d5018f1cb6453be7d231d1", 0x59}], 0x2, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000004040)="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", 0x800}, {&(0x7f0000005040)="a054ee554c4fed95b85b936e92a4db2f755bea6f4fb7a8a09388e46da0a56609ab29e6282d5c7844331079c2332eb854bd7c4ab83a46718cb13c7244270900063a7d7120003a5e693bf899dd2fe1bedfdba760db17f32613967d458bd17416ee722cbfc45387cf760c2c9e0cf846cdc26eaf81d96f028c8443bcfa72ae0d28971e0f5432b8140e583fa0c8880ca7c1cc755937b2f5fac355af1f50e5ebbe55ce", 0xa0}, {0x0}], 0x3, &(0x7f0000005240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8, 0x40000}}], 0x8, 0x40) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0x15, 0x0, &(0x7f0000000100)) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) 8.97287133s ago: executing program 1 (id=776): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x7, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa3, 0xfffffffffffffff7, 0x40, 0xfffffffffffffffb}}, @nested_load_code={0x12e, 0x5b, {0x2, "b9800000c00f3235008000000f30420f01f836410f23b4410f01c9431026c4a17e121dfe870000460f013bc4c33d426e071d66ba2000b87d1d8e71ef2e2666410f6f12"}}], 0xab}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.781270978s ago: executing program 0 (id=777): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x48201, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, 0x0, 0x0, 0x47, 0x3) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xd6af) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000280)='c:::\x00', 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000900)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000080)="2665660f28c7f20f2c7ff3b816000f00d866b9060200000f320f01cf66b94102000066b8f600000066ba000000000f300f20029a050016019a090021016666deaf4000"}], 0x1, 0x50, 0x0, 0x52) ioctl$KVM_RUN(r0, 0xae80, 0x0) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil) madvise(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x19) 8.00141234s ago: executing program 3 (id=778): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) eventfd2(0x10000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) io_submit(0x0, 0x0, &(0x7f0000004200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) mmap(&(0x7f00005b3000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r4, 0xe1306000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x90, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0x4f6a, 0x0, 0x8, {0x8, 0xffffffff}, 0x1, 0x2}}) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x1, 0x101, 0x6, {0x3, 0xfa5, 0x7, 0x6d0}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20001840}, 0x44) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) 7.731167501s ago: executing program 1 (id=779): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x40005) listen(r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000180)=0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES8=r4, @ANYRES32=r1, @ANYRESOCT=r6, @ANYRES64=r1, @ANYRESOCT=r8, @ANYRESDEC=r9, @ANYRESDEC=r6], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) sendmmsg$inet6(r7, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x6}, &(0x7f0000000200)=0x7fffffff, 0x0, 0x10000, 0x7, 0x8, 0xcebc, 0x11, 0x9}}], 0x58, 0x40845}, 0x0) 7.048451061s ago: executing program 2 (id=780): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024000000000080001400000000009000100"], 0xf4}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x48, 0x0, r5, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x220000) ioctl$USBDEVFS_DISCARDURB(r6, 0x550b, &(0x7f0000000240)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000010000000900030073797a3200000000090001007379"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.799197498s ago: executing program 1 (id=781): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000191c0)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000019180)={&(0x7f0000019140)={0x40, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x5, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) 6.092119261s ago: executing program 2 (id=782): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r5, &(0x7f00000000c0)="66ec", 0x2, 0x5}]) semget$private(0x0, 0x2, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r7}, 0x20) 5.262187505s ago: executing program 0 (id=783): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x138}, 0x4081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4441, 0x42) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, 0x0) 5.212882306s ago: executing program 1 (id=784): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r3 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000240)=0x2c) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0x17, 0x0, 0x0) 4.576551394s ago: executing program 2 (id=785): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) 4.218702702s ago: executing program 0 (id=786): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) 2.458184832s ago: executing program 2 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0), 0x0, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r5, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000001900), 0x0, 0x10, &(0x7f0000001940), &(0x7f0000001980), 0x8, 0x18, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="008000006400000008001b00000000000c002b8008000100", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.438816574s ago: executing program 0 (id=788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073797a3100000000140007800800124000000005080013400000000e0500050002000000050004000100dd0011000300686173683a69702c706f727400000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = fcntl$dupfd(r1, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r5, &(0x7f0000000e00)=ANY=[], 0x958) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) write$binfmt_script(r5, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "574af3849be3"}, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) shutdown(r1, 0x1) 1.672743511s ago: executing program 3 (id=789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) brk(0x55d55ede6004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x60}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x1d, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000059a20000000000018590000050000000000000000000000850000009600000072670800ffffffff3d49000110000000bf91000000000000b7020000010000008500000085000000b7000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000"], 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)}], 0x1) 1.574330879s ago: executing program 1 (id=790): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x20004010) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 1.466539863s ago: executing program 0 (id=791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd26, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3}}, 0x1c}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007a706f6c34105568b86db7ee9eae21b01fefeffff00000000017c000004004280140001800600"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x20000010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f00000002c0)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000340), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={r3}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x800, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20044000) 399.70956ms ago: executing program 0 (id=792): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f00000007c0)=[{0x1, 0xda01, 0x0, 0x0}, {0x1, 0xa01, 0x0, 0x0}], 0x2}) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x16) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) getdents(r5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000ce000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10005}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="1b0000001a005f0400f9f407000904018000200000000000000000", 0x1b) syz_open_dev$hidraw(&(0x7f00000000c0), 0xfffffffffffffff7, 0x10000) 210.695671ms ago: executing program 3 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) r8 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x3c82) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2e0000000000000000000002", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r6, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000001900)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001940), &(0x7f0000001980), 0x8, 0x18, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x14, 0xd, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x14, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@snprintf]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xdb, &(0x7f0000001680)=""/219, 0x41100, 0x4c, '\x00', 0x0, @lirc_mode2=0x10, r6, 0x8, &(0x7f0000000180)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x7, 0x4}, 0x10, 0x0, r5, 0x1, &(0x7f0000000380)=[r6, r9, r9, r4, r4, r3, r7], &(0x7f00000003c0)=[{0x5, 0x2, 0x3}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="008000006400000008001b00000000000c002b8008000100", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) 180.136823ms ago: executing program 2 (id=794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48084) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x1d4, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9c}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x70, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @remote, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00', 0xbf7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1f, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x17}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd52}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {0x0}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x3c}}, 0x0) 19.899944ms ago: executing program 1 (id=795): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x7, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa3, 0xfffffffffffffff7, 0x40, 0xfffffffffffffffb}}, @nested_load_code={0x12e, 0x5b, {0x2, "b9800000c00f3235008000000f30420f01f836410f23b4410f01c9431026c4a17e121dfe870000460f013bc4c33d426e071d66ba2000b87d1d8e71ef2e2666410f6f12"}}], 0xab}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@rdmsr={0x66, 0x18, {0x8e}}], 0x18}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 5 (id=796): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x138}, 0x4081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4441, 0x42) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, 0x0) kernel console output (not intermixed with test programs): port of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.279229][ T6793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.480907][ T5827] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 148.568064][ T6793] hsr_slave_0: entered promiscuous mode [ 148.584773][ T6793] hsr_slave_1: entered promiscuous mode [ 148.592848][ T6950] binder: 6948:6950 ioctl 80089418 2000000000c0 returned -22 [ 148.601307][ T6793] debugfs: 'hsr0' already exists in 'hsr' [ 148.607606][ T6950] binder: 6948:6950 ioctl 81f8943c 2000000003c0 returned -22 [ 148.615084][ T6793] Cannot create hsr debugfs directory [ 148.627012][ T6950] binder: 6948:6950 ioctl c0c89425 2000000005c0 returned -22 [ 148.634931][ T12] bridge_slave_1: left allmulticast mode [ 148.641988][ T12] bridge_slave_1: left promiscuous mode [ 148.648710][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.660982][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 148.668421][ T5827] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 148.679463][ T5827] usb 3-1: config 0 has no interface number 0 [ 149.246559][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 149.246575][ T30] audit: type=1326 audit(1765102517.509:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0d78f749 code=0x7ffc0000 [ 149.300992][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 149.476793][ T5886] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.970923][ T6004] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 150.502813][ T5827] usb 3-1: config 0 interface 184 has no altsetting 0 [ 150.523069][ T5827] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 150.541355][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.549357][ T5827] usb 3-1: Product: syz [ 150.559254][ T30] audit: type=1326 audit(1765102517.509:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0d78f749 code=0x7ffc0000 [ 150.560881][ T5827] usb 3-1: Manufacturer: syz [ 150.584431][ T12] bridge_slave_0: left allmulticast mode [ 150.593603][ T5827] usb 3-1: SerialNumber: syz [ 150.621314][ T5827] usb 3-1: config 0 descriptor?? [ 150.629123][ T12] bridge_slave_0: left promiscuous mode [ 150.634105][ T5827] smsc75xx v1.0.0 [ 150.648817][ T30] audit: type=1326 audit(1765102517.539:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f9f0d78f749 code=0x7ffc0000 [ 150.651068][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.672281][ T30] audit: type=1326 audit(1765102517.539:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0d78f749 code=0x7ffc0000 [ 150.770890][ T5886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 151.200384][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 151.213050][ T5886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 248 [ 151.223066][ T30] audit: type=1326 audit(1765102517.539:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0d78f749 code=0x7ffc0000 [ 151.248064][ T30] audit: type=1326 audit(1765102517.539:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f0d78df90 code=0x7ffc0000 [ 151.272326][ T30] audit: type=1326 audit(1765102517.549:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9f0d790f77 code=0x7ffc0000 [ 151.296109][ T30] audit: type=1326 audit(1765102517.549:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f0d78f749 code=0x7ffc0000 [ 151.319823][ T5886] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 151.328937][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.337178][ T5886] usb 1-1: Product: syz [ 151.341558][ T5886] usb 1-1: Manufacturer: syz [ 151.346171][ T5886] usb 1-1: SerialNumber: syz [ 151.351104][ T30] audit: type=1326 audit(1765102517.549:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9f0d790f77 code=0x7ffc0000 [ 151.377138][ T5886] usb 1-1: config 0 descriptor?? [ 151.382974][ T6951] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 151.388401][ T30] audit: type=1326 audit(1765102517.549:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9f0d78e3aa code=0x7ffc0000 [ 151.396677][ T6951] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 151.422037][ T5886] usb 1-1: ucan: probing device on interface #0 [ 151.446891][ T5827] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 151.459963][ T5827] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 151.472853][ T5827] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 151.483818][ T5827] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 151.501102][ T5827] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 151.529064][ T5827] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 151.541891][ T5827] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 151.559379][ T5827] usb 3-1: USB disconnect, device number 3 [ 151.574077][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 151.624030][ T5886] usb 1-1: ucan: could not read protocol version, ret=-71 [ 151.642699][ T5886] usb 1-1: ucan: probe failed; try to update the device firmware [ 151.659927][ T5886] usb 1-1: USB disconnect, device number 3 [ 151.715679][ T6978] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 151.722306][ T6978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.752472][ T6978] vhci_hcd vhci_hcd.0: Device attached [ 151.770168][ T6978] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 151.776791][ T6978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.803673][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.812403][ T6978] vhci_hcd vhci_hcd.0: Device attached [ 151.822749][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.838291][ T12] bond0 (unregistering): Released all slaves [ 151.861322][ T6978] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 151.867930][ T6978] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 151.897015][ T6989] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 151.903620][ T6989] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.911077][ T6978] vhci_hcd vhci_hcd.0: Device attached [ 151.921150][ T6989] vhci_hcd vhci_hcd.0: Device attached [ 151.947773][ T6978] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 151.954389][ T6978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.962311][ T6978] vhci_hcd vhci_hcd.0: Device attached [ 151.969873][ T6978] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 151.976471][ T6978] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 151.991476][ T6978] vhci_hcd vhci_hcd.0: Device attached [ 152.008372][ T6978] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 152.196099][ T6844] usb usb34-port1: attempt power cycle [ 152.460916][ T5958] usb 40-1: SetAddress Request (2) to port 0 [ 152.573435][ T6989] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(31) [ 152.580059][ T6989] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.637888][ T5958] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 152.741065][ T6978] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(26) [ 152.747688][ T6978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.835454][ T6844] usb usb34-port1: unable to enumerate USB device [ 152.882813][ T6989] vhci_hcd vhci_hcd.0: Device attached [ 152.928986][ T6978] vhci_hcd vhci_hcd.0: Device attached [ 152.988957][ T6990] vhci_hcd: connection closed [ 152.989140][ T33] vhci_hcd vhci_hcd.3: stop threads [ 153.000601][ T7000] vhci_hcd: connection closed [ 153.001359][ T6993] vhci_hcd: connection closed [ 153.006124][ T6995] vhci_hcd: connection reset by peer [ 153.023965][ T6987] vhci_hcd: connection closed [ 153.024278][ T6985] vhci_hcd: connection closed [ 153.029068][ T6981] vhci_hcd: connection closed [ 153.055799][ T33] vhci_hcd vhci_hcd.3: release socket [ 153.113881][ T33] vhci_hcd vhci_hcd.3: disconnect device [ 153.131525][ T33] vhci_hcd vhci_hcd.3: stop threads [ 153.136749][ T33] vhci_hcd vhci_hcd.3: release socket [ 153.164724][ T33] vhci_hcd vhci_hcd.3: disconnect device [ 153.205870][ T33] vhci_hcd vhci_hcd.3: stop threads [ 153.236640][ T33] vhci_hcd vhci_hcd.3: release socket [ 153.261093][ T33] vhci_hcd vhci_hcd.3: disconnect device [ 153.465656][ T33] vhci_hcd vhci_hcd.3: stop threads [ 153.481094][ T33] vhci_hcd vhci_hcd.3: release socket [ 153.486664][ T33] vhci_hcd vhci_hcd.3: disconnect device [ 153.493931][ T12] hsr_slave_0: left promiscuous mode [ 153.919096][ T7024] binder: 7019:7024 ioctl 80089418 2000000000c0 returned -22 [ 153.986202][ T33] vhci_hcd vhci_hcd.3: stop threads [ 153.991653][ T12] hsr_slave_1: left promiscuous mode [ 153.997656][ T7024] binder: 7019:7024 ioctl 81f8943c 2000000003c0 returned -22 [ 154.007655][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.007876][ T33] vhci_hcd vhci_hcd.3: release socket [ 154.020914][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.032973][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.040385][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.050156][ T7027] binder: 7019:7027 ioctl c0c89425 2000000005c0 returned -22 [ 154.055836][ T7001] vhci_hcd: connection closed [ 154.058634][ T33] vhci_hcd vhci_hcd.3: disconnect device [ 154.076658][ T33] vhci_hcd vhci_hcd.3: stop threads [ 154.199834][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 154.223344][ T33] vhci_hcd vhci_hcd.3: release socket [ 154.314981][ T33] vhci_hcd vhci_hcd.3: disconnect device [ 154.406570][ T33] vhci_hcd vhci_hcd.3: stop threads [ 154.487906][ T33] vhci_hcd vhci_hcd.3: release socket [ 154.572559][ T33] vhci_hcd vhci_hcd.3: disconnect device [ 154.682162][ T33] vhci_hcd vhci_hcd.3: stop threads [ 154.747179][ T33] vhci_hcd vhci_hcd.3: release socket [ 154.837293][ T33] vhci_hcd vhci_hcd.3: disconnect device [ 155.141968][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 155.141988][ T30] audit: type=1400 audit(1765102523.399:424): avc: denied { write } for pid=7030 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.319948][ T7036] netlink: 'syz.3.277': attribute type 10 has an invalid length. [ 155.687506][ T12] veth1_macvtap: left promiscuous mode [ 155.854610][ T12] veth0_macvtap: left promiscuous mode [ 155.860754][ T12] veth1_vlan: left promiscuous mode [ 155.866585][ T12] veth0_vlan: left promiscuous mode [ 156.661111][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 157.431020][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 157.480201][ T43] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 157.495708][ T43] usb 3-1: config 0 has no interface number 0 [ 157.503645][ T43] usb 3-1: config 0 interface 184 has no altsetting 0 [ 157.523801][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 157.533623][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.564470][ T43] usb 3-1: Product: syz [ 157.590215][ T43] usb 3-1: Manufacturer: syz [ 157.625720][ T12] team0 (unregistering): Port device team_slave_1 removed [ 157.639018][ T43] usb 3-1: SerialNumber: syz [ 157.740433][ T43] usb 3-1: config 0 descriptor?? [ 157.746014][ T5958] usb 40-1: device descriptor read/8, error -110 [ 157.835764][ T7068] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 157.842387][ T7068] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.871114][ T43] smsc75xx v1.0.0 [ 157.956168][ T7067] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 157.962801][ T7067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.085464][ T7068] vhci_hcd vhci_hcd.0: Device attached [ 158.091742][ T12] team0 (unregistering): Port device team_slave_0 removed [ 158.100451][ T7067] vhci_hcd vhci_hcd.0: Device attached [ 158.117613][ T7073] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18) [ 158.124220][ T7073] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 158.154088][ T7067] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 158.160707][ T7067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.189129][ T7073] vhci_hcd vhci_hcd.0: Device attached [ 158.202907][ T5958] usb usb40-port1: attempt power cycle [ 158.212497][ T7068] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22) [ 158.219103][ T7068] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.226718][ T6844] usb 33-2: new low-speed USB device number 3 using vhci_hcd [ 158.252614][ T7067] vhci_hcd vhci_hcd.0: Device attached [ 158.266396][ T7068] vhci_hcd vhci_hcd.0: Device attached [ 158.285616][ T7067] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 158.292218][ T7067] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 158.322925][ T7067] vhci_hcd vhci_hcd.0: Device attached [ 158.334644][ T7068] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 158.368005][ T7067] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(24) [ 158.374618][ T7067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.405366][ T7067] vhci_hcd vhci_hcd.0: Device attached [ 158.426157][ T7068] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(31) [ 158.432769][ T7068] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 158.455360][ T7068] vhci_hcd vhci_hcd.0: Device attached [ 158.484762][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 158.510528][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 158.530622][ T7082] vhci_hcd: connection closed [ 158.530786][ T6102] vhci_hcd vhci_hcd.0: stop threads [ 158.547170][ T7069] vhci_hcd: connection closed [ 158.548305][ T7080] vhci_hcd: connection closed [ 158.550941][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 158.553085][ T7078] vhci_hcd: connection closed [ 158.565122][ T7074] vhci_hcd: connection closed [ 158.570417][ T7070] vhci_hcd: connection reset by peer [ 158.580545][ T7076] vhci_hcd: connection closed [ 158.591726][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 158.607998][ T6102] vhci_hcd vhci_hcd.0: release socket [ 158.622492][ T6102] vhci_hcd vhci_hcd.0: disconnect device [ 158.634972][ T6102] vhci_hcd vhci_hcd.0: stop threads [ 158.640284][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 158.663240][ T6102] vhci_hcd vhci_hcd.0: release socket [ 158.668704][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 158.679162][ T6102] vhci_hcd vhci_hcd.0: disconnect device [ 158.688817][ T6102] vhci_hcd vhci_hcd.0: stop threads [ 158.705375][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 158.715320][ T6102] vhci_hcd vhci_hcd.0: release socket [ 158.728275][ T6102] vhci_hcd vhci_hcd.0: disconnect device [ 158.737938][ T43] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 158.752215][ T6102] vhci_hcd vhci_hcd.0: stop threads [ 158.757420][ T6102] vhci_hcd vhci_hcd.0: release socket [ 158.771903][ T6102] vhci_hcd vhci_hcd.0: disconnect device [ 158.778160][ T6102] vhci_hcd vhci_hcd.0: stop threads [ 158.783903][ T6102] vhci_hcd vhci_hcd.0: release socket [ 158.789407][ T6102] vhci_hcd vhci_hcd.0: disconnect device [ 158.797133][ T6102] vhci_hcd vhci_hcd.0: stop threads [ 158.801155][ T43] usb 3-1: USB disconnect, device number 4 [ 158.808296][ T6102] vhci_hcd vhci_hcd.0: release socket [ 158.821223][ T6102] vhci_hcd vhci_hcd.0: disconnect device [ 158.831966][ T6102] vhci_hcd vhci_hcd.0: stop threads [ 158.838281][ T6102] vhci_hcd vhci_hcd.0: release socket [ 158.847252][ T6102] vhci_hcd vhci_hcd.0: disconnect device [ 159.217979][ T7036] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 159.268864][ T7084] vhci_hcd: connection closed [ 159.269109][ T134] vhci_hcd vhci_hcd.0: stop threads [ 159.291085][ T134] vhci_hcd vhci_hcd.0: release socket [ 159.296504][ T134] vhci_hcd vhci_hcd.0: disconnect device [ 159.520878][ T30] audit: type=1804 audit(1765102527.769:425): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.290" name=2F6E6577726F6F742F35352F10FBFF67525673312B0104 dev="tmpfs" ino=299 res=1 errno=0 [ 159.558925][ T6793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.590962][ T5958] usb usb40-port1: unable to enumerate USB device [ 159.688080][ T6793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.723394][ T6793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.846203][ T6793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.532368][ T30] audit: type=1400 audit(1765102528.799:426): avc: denied { getopt } for pid=7117 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.639821][ T6793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.761310][ T30] audit: type=1400 audit(1765102528.969:427): avc: denied { write } for pid=7119 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.833975][ T6793] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.848435][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.855611][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.871694][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.878766][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.518665][ T6793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.926512][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'. [ 162.959465][ T7161] input: syz0 as /devices/virtual/input/input7 [ 163.176101][ T6793] veth0_vlan: entered promiscuous mode [ 163.199642][ T30] audit: type=1400 audit(1765102531.459:428): avc: denied { accept } for pid=7171 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.226823][ T6793] veth1_vlan: entered promiscuous mode [ 163.311634][ T7169] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.330947][ T6844] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 163.477657][ T6793] veth0_macvtap: entered promiscuous mode [ 163.507143][ T6793] veth1_macvtap: entered promiscuous mode [ 164.093466][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.192287][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.239896][ T6102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.278805][ T6102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.292336][ T30] audit: type=1400 audit(1765102532.559:429): avc: denied { write } for pid=7194 comm="syz.3.309" name="tcp" dev="proc" ino=4026533122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 164.357169][ T6102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.384518][ T6102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.710968][ T5879] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 164.883062][ T5879] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 164.893228][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 164.915470][ T5879] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 248 [ 164.934645][ T5879] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 165.020949][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 165.047337][ T5958] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 165.057835][ T5958] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 165.066702][ T49] usb usb34-port1: attempt power cycle [ 165.082324][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.152202][ T5879] usb 1-1: Product: syz [ 165.180495][ T5879] usb 1-1: Manufacturer: syz [ 165.202588][ T5879] usb 1-1: SerialNumber: syz [ 165.222894][ T5879] usb 1-1: config 0 descriptor?? [ 165.228987][ T7200] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.240957][ T7200] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.261692][ T5879] usb 1-1: ucan: probing device on interface #0 [ 165.268030][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.300841][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.382169][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.396876][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.476542][ T5879] usb 1-1: ucan: could not read protocol version, ret=0 [ 165.507547][ T5879] usb 1-1: ucan: probe failed; try to update the device firmware [ 165.544845][ T30] audit: type=1400 audit(1765102533.809:430): avc: denied { mount } for pid=6793 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 165.677721][ T49] usb usb34-port1: unable to enumerate USB device [ 165.704310][ T5879] usb 1-1: USB disconnect, device number 4 [ 168.208439][ T7255] binder: 7254:7255 ioctl 80089418 2000000000c0 returned -22 [ 168.221309][ T7255] binder: 7254:7255 ioctl 81f8943c 2000000003c0 returned -22 [ 168.363354][ T7255] binder: 7254:7255 ioctl c0c89425 2000000005c0 returned -22 [ 168.771468][ T30] audit: type=1326 audit(1765102537.019:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 168.821631][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 171.415568][ T30] audit: type=1326 audit(1765102537.019:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 171.496787][ T30] audit: type=1326 audit(1765102537.039:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 171.625112][ T30] audit: type=1326 audit(1765102537.039:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 171.721300][ T30] audit: type=1326 audit(1765102537.039:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 171.778822][ T7282] kvm: kvm [7281]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 171.780306][ T30] audit: type=1326 audit(1765102537.069:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d82f8df90 code=0x7ffc0000 [ 171.813702][ T30] audit: type=1326 audit(1765102537.069:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1d82f90f77 code=0x7ffc0000 [ 171.813936][ T7285] loop6: detected capacity change from 0 to 524287999 [ 171.863961][ T30] audit: type=1326 audit(1765102537.069:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 171.889098][ T30] audit: type=1326 audit(1765102537.069:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1d82f90f77 code=0x7ffc0000 [ 172.113527][ T30] audit: type=1326 audit(1765102537.069:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1d82f8e3aa code=0x7ffc0000 [ 172.334922][ T30] audit: type=1326 audit(1765102537.069:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 172.944738][ T7303] overlayfs: missing 'lowerdir' [ 173.711930][ T7318] input: syz0 as /devices/virtual/input/input8 [ 175.720393][ T7336] vivid-007: disconnect [ 175.749590][ T7336] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 175.785138][ T7336] loop7: detected capacity change from 0 to 7 [ 175.807209][ T7336] Dev loop7: unable to read RDB block 7 [ 175.819482][ T7336] loop7: AHDI p1 p2 [ 175.829578][ T7336] loop7: partition table partially beyond EOD, truncated [ 175.864345][ T7336] loop7: p1 start 1702000233 is beyond EOD, truncated [ 175.884339][ T7342] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 176.092577][ T6003] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.780117][ T6003] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 176.789220][ T6003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.800414][ T6003] usb 1-1: config 0 descriptor?? [ 176.804393][ T7363] tipc: Started in network mode [ 176.805601][ T6004] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 176.821698][ T7363] tipc: Node identity 6674bdc12458, cluster identity 4711 [ 176.828956][ T7363] tipc: Enabled bearer , priority 0 [ 176.847751][ T7363] tipc: Resetting bearer [ 176.862513][ T7362] tipc: Disabling bearer [ 177.020909][ T6004] usb 6-1: Using ep0 maxpacket: 32 [ 177.037978][ T6004] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 177.077770][ T6004] usb 6-1: config 0 has no interface number 0 [ 177.087144][ T6004] usb 6-1: config 0 interface 184 has no altsetting 0 [ 177.104846][ T6004] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 177.132736][ T7375] loop6: detected capacity change from 0 to 524287999 [ 177.132921][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.152008][ T6004] usb 6-1: Product: syz [ 177.228748][ T6004] usb 6-1: Manufacturer: syz [ 177.254357][ T6003] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 177.265061][ T7335] vivid-007: reconnect [ 177.273661][ T6004] usb 6-1: SerialNumber: syz [ 177.278416][ T6003] [drm:udl_init] *ERROR* Selecting channel failed [ 177.307516][ T6004] usb 6-1: config 0 descriptor?? [ 177.344227][ T6004] smsc75xx v1.0.0 [ 177.388304][ T6003] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 177.423747][ T6003] [drm] Initialized udl on minor 2 [ 177.454375][ T6003] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 177.496609][ T6003] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 177.515368][ T5827] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 177.547841][ T6003] usb 1-1: USB disconnect, device number 5 [ 177.570386][ T5827] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 177.963644][ T6004] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 178.000853][ T6004] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 178.167924][ T6004] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 178.190853][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 178.190868][ T30] audit: type=1400 audit(1765102546.449:464): avc: denied { lock } for pid=7401 comm="syz.3.359" path="socket:[16722]" dev="sockfs" ino=16722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 178.294875][ T6004] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 178.416041][ T6004] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 178.451052][ T6004] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 178.571224][ T6004] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 178.677383][ T6004] usb 6-1: USB disconnect, device number 2 [ 178.832418][ T30] audit: type=1400 audit(1765102547.099:465): avc: denied { connect } for pid=7412 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 178.872658][ T7416] overlayfs: missing 'lowerdir' [ 178.882416][ T7415] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 178.889026][ T7415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.915397][ T7415] vhci_hcd vhci_hcd.0: Device attached [ 178.921364][ T7420] vivid-007: disconnect [ 178.940341][ T7420] loop7: detected capacity change from 0 to 7 [ 178.950379][ T7421] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 178.956987][ T7421] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.973283][ T6807] Dev loop7: unable to read RDB block 7 [ 178.980232][ T6807] loop7: unable to read partition table [ 178.986086][ T6807] loop7: partition table beyond EOD, truncated [ 178.995871][ T7421] vhci_hcd vhci_hcd.0: Device attached [ 179.004620][ T7420] Dev loop7: unable to read RDB block 7 [ 179.023735][ T7420] loop7: unable to read partition table [ 179.033822][ T7415] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 179.040424][ T7415] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 179.048588][ T7420] loop7: partition table beyond EOD, truncated [ 179.068655][ T7420] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 179.077454][ T7431] tipc: Enabling of bearer rejected, failed to enable media [ 179.098166][ T7415] vhci_hcd vhci_hcd.0: Device attached [ 179.124045][ T7419] vivid-007: reconnect [ 179.131986][ T7421] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 179.138588][ T7421] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.176255][ T7421] vhci_hcd vhci_hcd.0: Device attached [ 179.207746][ T6844] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 179.228128][ T7421] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 179.252879][ T7415] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19) [ 179.259505][ T7415] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 179.312898][ T7421] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 179.362204][ T7415] vhci_hcd vhci_hcd.0: Device attached [ 179.372572][ T7421] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(27) [ 179.379182][ T7421] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.453241][ T7421] vhci_hcd vhci_hcd.0: Device attached [ 179.459230][ T7415] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(31) [ 179.465837][ T7415] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 179.541052][ T7415] vhci_hcd vhci_hcd.0: Device attached [ 179.559092][ T7435] vhci_hcd: connection closed [ 179.559261][ T3517] vhci_hcd vhci_hcd.3: stop threads [ 179.565464][ T7444] vhci_hcd: connection closed [ 179.584015][ T7428] vhci_hcd: connection closed [ 179.589598][ T7432] vhci_hcd: connection closed [ 179.599136][ T7417] vhci_hcd: connection reset by peer [ 179.609398][ T7422] vhci_hcd: connection closed [ 179.609591][ T3517] vhci_hcd vhci_hcd.3: release socket [ 179.630138][ T3517] vhci_hcd vhci_hcd.3: disconnect device [ 179.660273][ T3517] vhci_hcd vhci_hcd.3: stop threads [ 179.665898][ T3517] vhci_hcd vhci_hcd.3: release socket [ 179.680072][ T3517] vhci_hcd vhci_hcd.3: disconnect device [ 179.692613][ T3517] vhci_hcd vhci_hcd.3: stop threads [ 179.711561][ T3517] vhci_hcd vhci_hcd.3: release socket [ 179.722278][ T3517] vhci_hcd vhci_hcd.3: disconnect device [ 179.738241][ T3517] vhci_hcd vhci_hcd.3: stop threads [ 179.758427][ T3517] vhci_hcd vhci_hcd.3: release socket [ 179.788851][ T3517] vhci_hcd vhci_hcd.3: disconnect device [ 179.809017][ T3517] vhci_hcd vhci_hcd.3: stop threads [ 179.828972][ T3517] vhci_hcd vhci_hcd.3: release socket [ 179.841203][ T3517] vhci_hcd vhci_hcd.3: disconnect device [ 179.875235][ T3517] vhci_hcd vhci_hcd.3: stop threads [ 179.896980][ T3517] vhci_hcd vhci_hcd.3: release socket [ 179.927696][ T3517] vhci_hcd vhci_hcd.3: disconnect device [ 180.014543][ T7465] vivid-007: disconnect [ 180.023247][ T7465] loop7: detected capacity change from 0 to 7 [ 180.031835][ T6807] Dev loop7: unable to read RDB block 7 [ 180.037406][ T6807] loop7: unable to read partition table [ 180.204121][ T6807] loop7: partition table beyond EOD, truncated [ 180.421056][ T49] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 180.514207][ T7465] Dev loop7: unable to read RDB block 7 [ 180.520968][ T7465] loop7: unable to read partition table [ 180.537008][ T7465] loop7: partition table beyond EOD, truncated [ 180.550888][ T7465] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.561069][ T7447] vhci_hcd: connection closed [ 180.570673][ T3517] vhci_hcd vhci_hcd.3: stop threads [ 180.624586][ T3517] vhci_hcd vhci_hcd.3: release socket [ 180.649113][ T3517] vhci_hcd vhci_hcd.3: disconnect device [ 180.691886][ T49] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 180.701776][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.736131][ T49] usb 3-1: config 0 descriptor?? [ 180.918204][ T7483] Zero length message leads to an empty skb [ 181.000030][ T49] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 181.225182][ T49] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 181.240317][ T49] [drm] Initialized udl on minor 2 [ 181.281122][ T5827] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 181.426936][ T7464] vivid-007: reconnect [ 181.431306][ T6004] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 181.438893][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 181.447627][ T5827] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 181.468472][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.545120][ T5827] pvrusb2: Hardware description: Terratec Grabster AV400 [ 181.588988][ T5827] pvrusb2: ********** [ 181.608638][ T5827] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 181.620260][ T6004] usb 1-1: Using ep0 maxpacket: 32 [ 181.632190][ T49] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 181.642232][ T49] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 181.650028][ T5958] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 181.650877][ T6004] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 181.660472][ T49] usb 3-1: USB disconnect, device number 5 [ 181.672162][ T5958] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 181.686431][ T5827] pvrusb2: Important functionality might not be entirely working. [ 181.716073][ T5827] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 181.737201][ T6004] usb 1-1: config 0 has no interface number 0 [ 181.746147][ T5827] pvrusb2: ********** [ 181.752701][ T6004] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 181.762816][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.771276][ T6004] usb 1-1: Product: syz [ 181.772931][ T2341] pvrusb2: Invalid write control endpoint [ 181.787195][ T6004] usb 1-1: Manufacturer: syz [ 181.792035][ T6004] usb 1-1: SerialNumber: syz [ 181.804347][ T6004] usb 1-1: config 0 descriptor?? [ 181.827855][ T6004] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 181.879716][ T2341] pvrusb2: Invalid write control endpoint [ 181.885924][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 181.903141][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 181.921417][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 181.931618][ T2341] pvrusb2: Device being rendered inoperable [ 181.939717][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 181.947051][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 181.969305][ T2341] pvrusb2: Attached sub-driver cx25840 [ 182.129971][ T30] audit: type=1326 audit(1765102550.389:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.1.374" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27d9b8f749 code=0x0 [ 182.283079][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.399172][ T6004] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 182.405231][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.408483][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 182.420796][ T7494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.443766][ T7494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.452099][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 182.461812][ T6004] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 182.500768][ T30] audit: type=1400 audit(1765102550.759:467): avc: denied { ioctl } for pid=7493 comm="syz.0.377" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.764304][ T7509] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 182.770930][ T7509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.883259][ T7509] vhci_hcd vhci_hcd.0: Device attached [ 183.066758][ T7514] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 183.073382][ T7514] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.093224][ T7514] vhci_hcd vhci_hcd.0: Device attached [ 183.100330][ T7519] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(18) [ 183.106904][ T7519] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 183.148776][ T7519] vhci_hcd vhci_hcd.0: Device attached [ 183.154739][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 183.158867][ T7514] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(17) [ 183.162707][ T6004] usb 1-1: USB disconnect, device number 6 [ 183.168692][ T7514] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 183.209454][ T7509] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(14) [ 183.216073][ T7509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.221016][ T5958] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 183.242787][ T7509] vhci_hcd vhci_hcd.0: Device attached [ 183.287205][ T7514] vhci_hcd vhci_hcd.0: Device attached [ 183.317144][ T6004] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 183.367338][ T7509] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 183.376108][ T6004] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 183.392486][ T7509] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 183.401778][ T6004] quatech2 1-1:0.51: device disconnected [ 183.886154][ T7514] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(26) [ 183.892764][ T7514] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.910234][ T7509] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(31) [ 183.916833][ T7509] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 183.927147][ T7514] vhci_hcd vhci_hcd.0: Device attached [ 183.931378][ T7509] vhci_hcd vhci_hcd.0: Device attached [ 183.947381][ T7533] vhci_hcd: connection closed [ 183.947548][ T6016] vhci_hcd vhci_hcd.5: stop threads [ 183.947877][ T7523] vhci_hcd: connection closed [ 183.953334][ T6016] vhci_hcd vhci_hcd.5: release socket [ 183.957709][ T7522] vhci_hcd: connection closed [ 183.962431][ T6016] vhci_hcd vhci_hcd.5: disconnect device [ 183.978327][ T7520] vhci_hcd: connection closed [ 183.978488][ T7511] vhci_hcd: connection reset by peer [ 183.988782][ T7516] vhci_hcd: connection closed [ 183.989378][ T6016] vhci_hcd vhci_hcd.5: stop threads [ 183.999437][ T6016] vhci_hcd vhci_hcd.5: release socket [ 184.005192][ T6016] vhci_hcd vhci_hcd.5: disconnect device [ 184.011617][ T6016] vhci_hcd vhci_hcd.5: stop threads [ 184.016978][ T6016] vhci_hcd vhci_hcd.5: release socket [ 184.022849][ T6016] vhci_hcd vhci_hcd.5: disconnect device [ 184.028714][ T6016] vhci_hcd vhci_hcd.5: stop threads [ 184.035214][ T6016] vhci_hcd vhci_hcd.5: release socket [ 184.045832][ T6016] vhci_hcd vhci_hcd.5: disconnect device [ 184.053249][ T6016] vhci_hcd vhci_hcd.5: stop threads [ 184.058586][ T6016] vhci_hcd vhci_hcd.5: release socket [ 184.064496][ T6016] vhci_hcd vhci_hcd.5: disconnect device [ 184.072495][ T6004] usb 2-1: USB disconnect, device number 3 [ 184.149416][ T6016] vhci_hcd vhci_hcd.5: stop threads [ 184.160948][ T6016] vhci_hcd vhci_hcd.5: release socket [ 184.173766][ T6016] vhci_hcd vhci_hcd.5: disconnect device [ 184.364726][ T7545] afs: Unknown parameter 'dy' [ 184.371779][ T6844] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 184.473937][ T7550] overlayfs: missing 'lowerdir' [ 184.609276][ T7532] vhci_hcd: connection closed [ 184.609476][ T6016] vhci_hcd vhci_hcd.5: stop threads [ 184.625386][ T30] audit: type=1400 audit(1765102552.889:468): avc: denied { write } for pid=7553 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.641627][ T6016] vhci_hcd vhci_hcd.5: release socket [ 184.850644][ T30] audit: type=1400 audit(1765102552.889:469): avc: denied { nlmsg_write } for pid=7553 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.882364][ T6016] vhci_hcd vhci_hcd.5: disconnect device [ 186.000911][ T30] audit: type=1400 audit(1765102554.199:470): avc: denied { create } for pid=7553 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.171321][ T30] audit: type=1400 audit(1765102554.199:471): avc: denied { ioctl } for pid=7553 comm="syz.0.391" path="socket:[17164]" dev="sockfs" ino=17164 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.252401][ T7560] can: request_module (can-proto-3) failed. [ 187.148702][ T5899] usb usb40-port1: attempt power cycle [ 187.892059][ T7587] nbd5: detected capacity change from 0 to 127 [ 187.934900][ T5899] usb usb40-port1: unable to enumerate USB device [ 188.064623][ T5828] block nbd5: Receive control failed (result -104) [ 188.263839][ T6500] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.351280][ T7593] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 188.357908][ T7593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.396653][ T7593] vhci_hcd vhci_hcd.0: Device attached [ 188.406571][ T7593] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 188.413175][ T7593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.431258][ T7593] vhci_hcd vhci_hcd.0: Device attached [ 188.440917][ T6500] usb 2-1: Using ep0 maxpacket: 32 [ 188.447465][ T7593] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 188.452059][ T5958] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 188.454059][ T7593] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 188.461957][ T7601] mmap: syz.0.401 (7601) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 188.488377][ T6500] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 188.496581][ T7593] vhci_hcd vhci_hcd.0: Device attached [ 188.500394][ T7606] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 188.509003][ T7606] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.530923][ T6500] usb 2-1: config 0 has no interface number 0 [ 188.543625][ T6500] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 188.555662][ T6500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.564885][ T6500] usb 2-1: Product: syz [ 188.569047][ T6500] usb 2-1: Manufacturer: syz [ 188.573726][ T6500] usb 2-1: SerialNumber: syz [ 188.650152][ T7606] vhci_hcd vhci_hcd.0: Device attached [ 188.660902][ T7593] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21) [ 188.667520][ T7593] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 188.669814][ T6500] usb 2-1: config 0 descriptor?? [ 188.686897][ T6500] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 188.687277][ T7593] vhci_hcd vhci_hcd.0: Device attached [ 188.711055][ T5899] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 188.788830][ T7606] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 188.833696][ T7593] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.114676][ T7593] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(26) [ 189.121294][ T7593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.138058][ T7606] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(31) [ 189.140777][ T6500] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 189.144669][ T7606] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 189.144927][ T7606] vhci_hcd vhci_hcd.0: Device attached [ 189.539110][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.553745][ T6500] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 189.581553][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.583676][ T7593] vhci_hcd vhci_hcd.0: Device attached [ 190.731878][ T7616] vhci_hcd: connection closed [ 190.732984][ T7594] vhci_hcd: connection reset by peer [ 190.759812][ T7598] vhci_hcd: connection closed [ 190.760116][ T5017] vhci_hcd vhci_hcd.2: stop threads [ 190.761130][ T7602] vhci_hcd: connection closed [ 190.765132][ T5017] vhci_hcd vhci_hcd.2: release socket [ 190.770129][ T7607] vhci_hcd: connection closed [ 190.780186][ T7611] vhci_hcd: connection closed [ 190.796288][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 190.797418][ T6003] usb 2-1: USB disconnect, device number 4 [ 190.840274][ T5017] vhci_hcd vhci_hcd.2: disconnect device [ 190.865741][ T6003] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 190.883443][ T6003] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 190.971769][ T5017] vhci_hcd vhci_hcd.2: stop threads [ 190.977006][ T5017] vhci_hcd vhci_hcd.2: release socket [ 190.984607][ T5017] vhci_hcd vhci_hcd.2: disconnect device [ 190.987696][ T6003] quatech2 2-1:0.51: device disconnected [ 190.999787][ T5017] vhci_hcd vhci_hcd.2: stop threads [ 191.006494][ T49] usb usb44-port1: attempt power cycle [ 191.039037][ T5017] vhci_hcd vhci_hcd.2: release socket [ 191.495931][ T57] block nbd5: Connection timed out, retrying (0/1 alive) [ 191.503429][ T57] block nbd5: Connection timed out, retrying (0/1 alive) [ 191.511091][ T5940] block nbd5: Dead connection, failed to find a fallback [ 191.518149][ T5940] block nbd5: shutting down sockets [ 191.523526][ T57] block nbd5: Connection timed out, retrying (0/1 alive) [ 191.530557][ T5940] blk_print_req_error: 138 callbacks suppressed [ 191.530566][ T5940] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.547124][ T57] block nbd5: Connection timed out, retrying (0/1 alive) [ 191.554345][ T5940] buffer_io_error: 138 callbacks suppressed [ 191.554364][ T5940] Buffer I/O error on dev nbd5, logical block 0, async page read [ 191.568177][ T5940] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.577349][ T5940] Buffer I/O error on dev nbd5, logical block 3, async page read [ 191.591803][ T5940] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.601111][ T5940] Buffer I/O error on dev nbd5, logical block 2, async page read [ 191.608952][ T5940] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.618097][ T5940] Buffer I/O error on dev nbd5, logical block 1, async page read [ 191.626137][ T6807] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.640769][ T5017] vhci_hcd vhci_hcd.2: disconnect device [ 191.649469][ T6807] Buffer I/O error on dev nbd5, logical block 0, async page read [ 191.657602][ T5017] vhci_hcd vhci_hcd.2: stop threads [ 191.663038][ T5017] vhci_hcd vhci_hcd.2: release socket [ 191.668644][ T6807] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.774809][ T6807] Buffer I/O error on dev nbd5, logical block 1, async page read [ 191.775928][ T5017] vhci_hcd vhci_hcd.2: disconnect device [ 191.782907][ T6807] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.797514][ T6807] Buffer I/O error on dev nbd5, logical block 2, async page read [ 191.810791][ T6807] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.819987][ T5017] vhci_hcd vhci_hcd.2: stop threads [ 191.820448][ T6807] Buffer I/O error on dev nbd5, logical block 3, async page read [ 191.833774][ T6807] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.854495][ T5017] vhci_hcd vhci_hcd.2: release socket [ 191.866107][ T6807] Buffer I/O error on dev nbd5, logical block 0, async page read [ 191.873612][ T5017] vhci_hcd vhci_hcd.2: disconnect device [ 191.874369][ T6807] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.892037][ T30] audit: type=1400 audit(1765102560.159:472): avc: denied { append } for pid=7633 comm="syz.3.409" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 191.894739][ T5017] vhci_hcd vhci_hcd.2: stop threads [ 191.938648][ T6807] Buffer I/O error on dev nbd5, logical block 1, async page read [ 191.944088][ T7617] vhci_hcd: connection closed [ 191.951429][ T6807] ldm_validate_partition_table(): Disk read failed. [ 191.984330][ T5017] vhci_hcd vhci_hcd.2: release socket [ 191.992516][ T5017] vhci_hcd vhci_hcd.2: disconnect device [ 191.999897][ T5017] vhci_hcd vhci_hcd.2: stop threads [ 192.013761][ T5017] vhci_hcd vhci_hcd.2: release socket [ 192.031452][ T5017] vhci_hcd vhci_hcd.2: disconnect device [ 192.039317][ T6807] Dev nbd5: unable to read RDB block 0 [ 192.045607][ T49] usb usb44-port1: unable to enumerate USB device [ 192.067606][ T6807] nbd5: unable to read partition table [ 192.101934][ T6807] ldm_validate_partition_table(): Disk read failed. [ 192.115035][ T6807] Dev nbd5: unable to read RDB block 0 [ 192.195048][ T6807] nbd5: unable to read partition table [ 193.074518][ T7664] syz.2.417 uses obsolete (PF_INET,SOCK_PACKET) [ 193.121038][ T30] audit: type=1400 audit(1765102561.379:473): avc: denied { ioctl } for pid=7663 comm="syz.2.417" path="socket:[17317]" dev="sockfs" ino=17317 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.514548][ T5926] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 193.762244][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 193.779511][ T5926] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 193.796395][ T5926] usb 6-1: config 0 has no interface number 0 [ 193.809953][ T5926] usb 6-1: config 0 interface 184 has no altsetting 0 [ 193.810967][ T5899] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 193.826546][ T5926] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 193.934532][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.943618][ T5926] usb 6-1: Product: syz [ 193.950767][ T5926] usb 6-1: Manufacturer: syz [ 193.956270][ T5926] usb 6-1: SerialNumber: syz [ 193.989035][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.989968][ T5926] usb 6-1: config 0 descriptor?? [ 193.997428][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.003267][ T5926] smsc75xx v1.0.0 [ 194.446197][ T7658] overlayfs: missing 'lowerdir' [ 194.709307][ T30] audit: type=1400 audit(1765102562.969:474): avc: denied { create } for pid=7678 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 194.744799][ T5926] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 194.755633][ T30] audit: type=1400 audit(1765102562.999:475): avc: denied { bind } for pid=7678 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 194.804074][ T5926] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 194.945133][ T5926] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 194.958785][ T5926] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 195.001247][ T5926] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 195.012845][ T5926] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 195.031366][ T5926] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 195.078438][ T5926] usb 6-1: USB disconnect, device number 3 [ 195.084354][ T5827] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 195.201500][ T6004] usb usb38-port1: attempt power cycle [ 195.240987][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 195.249093][ T5827] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 195.259463][ T5827] usb 3-1: config 0 has no interface number 0 [ 195.267524][ T5827] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 195.277096][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.285196][ T5827] usb 3-1: Product: syz [ 195.289340][ T5827] usb 3-1: Manufacturer: syz [ 195.294214][ T5827] usb 3-1: SerialNumber: syz [ 195.300462][ T5827] usb 3-1: config 0 descriptor?? [ 195.307504][ T5827] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 195.316297][ T6003] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 195.495614][ T6003] usb 2-1: Using ep0 maxpacket: 16 [ 195.516412][ T6003] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.531076][ T5827] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 195.540611][ T6003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.556363][ T5827] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 195.574857][ T6003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 195.587372][ T6003] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 195.597420][ T7696] vivid-007: disconnect [ 195.604711][ T7696] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 195.612230][ T6003] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.628335][ T7695] vivid-007: reconnect [ 195.634094][ T6003] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 195.651139][ T6003] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 195.659208][ T6003] usb 2-1: Manufacturer: syz [ 195.776820][ T6003] usb 2-1: config 0 descriptor?? [ 195.787175][ T6004] usb usb38-port1: unable to enumerate USB device [ 195.814885][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.431226][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.206360][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 197.207664][ T5899] usb 3-1: USB disconnect, device number 6 [ 197.769873][ T5899] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 197.784706][ T5899] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 197.802728][ T5899] quatech2 3-1:0.51: device disconnected [ 198.750892][ T6003] rc_core: IR keymap rc-hauppauge not found [ 198.756812][ T6003] Registered IR keymap rc-empty [ 198.816099][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.871488][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 199.780199][ T30] audit: type=1400 audit(1765102567.979:476): avc: denied { ioctl } for pid=7727 comm="syz.2.439" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 199.832330][ T6003] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 199.850249][ T6003] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 200.193499][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.221226][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.221657][ T30] audit: type=1326 audit(1765102567.999:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 200.287186][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.313256][ T30] audit: type=1326 audit(1765102567.999:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 200.343860][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.354407][ T7742] nbd: must specify a size in bytes for the device [ 200.382890][ T30] audit: type=1326 audit(1765102567.999:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 200.391794][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.445582][ T30] audit: type=1326 audit(1765102567.999:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 200.552600][ T30] audit: type=1326 audit(1765102567.999:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 200.586433][ T7747] vivid-007: disconnect [ 200.598234][ T7747] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 200.610992][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.787171][ T5827] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 200.972655][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.988138][ T30] audit: type=1326 audit(1765102568.009:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 201.015862][ T30] audit: type=1326 audit(1765102568.009:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 201.041741][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.057692][ T30] audit: type=1326 audit(1765102568.009:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 201.084656][ T30] audit: type=1326 audit(1765102568.009:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 201.108199][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.294643][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 201.302756][ T5827] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 201.310997][ T5827] usb 3-1: config 0 has no interface number 0 [ 201.317956][ T5827] usb 3-1: config 0 interface 184 has no altsetting 0 [ 201.325211][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.347350][ T5827] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 201.632248][ T7761] hub 6-0:1.0: USB hub found [ 201.637270][ T7761] hub 6-0:1.0: 1 port detected [ 202.065957][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.074285][ T5827] usb 3-1: Product: syz [ 202.078518][ T5827] usb 3-1: Manufacturer: syz [ 202.085190][ T6003] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 202.093301][ T5827] usb 3-1: SerialNumber: syz [ 202.097974][ T6003] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 202.108959][ T5827] usb 3-1: config 0 descriptor?? [ 202.129368][ T5827] smsc75xx v1.0.0 [ 202.154890][ T6003] usb 2-1: USB disconnect, device number 5 [ 202.190983][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 202.397016][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 202.571086][ T6003] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 202.734481][ T5827] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 202.745800][ T5827] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 202.756586][ T6003] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 202.766403][ T6003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.777834][ T6003] usb 2-1: config 0 descriptor?? [ 203.383766][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.406718][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.872085][ T5827] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 203.888910][ T6003] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 203.896510][ T5827] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 203.906227][ T5827] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 203.916512][ T5827] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 204.108723][ T7774] hub 6-0:1.0: USB hub found [ 204.121078][ T7774] hub 6-0:1.0: 1 port detected [ 204.190704][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 204.200456][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 204.219853][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.283617][ T6003] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 204.290320][ T6003] [drm] Initialized udl on minor 2 [ 204.295779][ T5827] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 204.338921][ T5899] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 204.355941][ T5827] usb 3-1: USB disconnect, device number 7 [ 204.388768][ T5899] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 204.417956][ T5899] usb 4-1: Manufacturer: syz [ 204.418601][ T6003] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 204.419389][ T7746] vivid-007: reconnect [ 204.438947][ T6003] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 204.452558][ T5899] usb 4-1: config 0 descriptor?? [ 205.421120][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 205.421138][ T30] audit: type=1326 audit(1765102573.129:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 205.453390][ T5899] usb 4-1: can't set config #0, error -71 [ 205.457006][ T6003] usb 2-1: USB disconnect, device number 6 [ 205.495414][ T5899] usb 4-1: USB disconnect, device number 5 [ 205.638738][ T7785] nbd: must specify a size in bytes for the device [ 205.707147][ T7775] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 205.718611][ T7775] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 205.727107][ T30] audit: type=1326 audit(1765102573.129:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 205.751271][ T30] audit: type=1326 audit(1765102573.129:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 205.774777][ T30] audit: type=1326 audit(1765102573.129:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 205.798253][ T30] audit: type=1326 audit(1765102573.129:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 205.894653][ T30] audit: type=1326 audit(1765102573.129:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 206.046715][ T30] audit: type=1326 audit(1765102573.129:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 206.070235][ T30] audit: type=1326 audit(1765102573.129:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 206.125767][ T30] audit: type=1326 audit(1765102573.129:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 206.259778][ T30] audit: type=1326 audit(1765102573.129:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 208.813953][ T7821] loop6: detected capacity change from 0 to 524287999 [ 209.598787][ T7830] vivid-007: disconnect [ 209.608298][ T7830] loop7: detected capacity change from 0 to 7 [ 209.625967][ T6027] Dev loop7: unable to read RDB block 7 [ 209.636988][ T6027] loop7: AHDI p1 p2 [ 209.645639][ T6027] loop7: partition table partially beyond EOD, truncated [ 209.665521][ T6027] loop7: p1 start 1702000233 is beyond EOD, truncated [ 209.680559][ T7830] Dev loop7: unable to read RDB block 7 [ 209.704719][ T7830] loop7: AHDI p1 p2 [ 209.708690][ T7830] loop7: partition table partially beyond EOD, truncated [ 209.726878][ T7830] loop7: p1 start 1702000233 is beyond EOD, truncated [ 209.851278][ T5958] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 209.911140][ T5899] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 210.271152][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 210.279960][ T5958] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 210.288958][ T5899] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 210.299249][ T5958] usb 4-1: config 0 has no interface number 0 [ 210.305689][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.314493][ T5958] usb 4-1: config 0 interface 184 has no altsetting 0 [ 210.324680][ T7847] capability: warning: `syz.0.474' uses deprecated v2 capabilities in a way that may be insecure [ 210.336610][ T5899] usb 2-1: config 0 descriptor?? [ 210.343908][ T5958] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 210.355607][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.377460][ T5958] usb 4-1: Product: syz [ 210.381982][ T5958] usb 4-1: Manufacturer: syz [ 210.386639][ T5958] usb 4-1: SerialNumber: syz [ 210.393343][ T5958] usb 4-1: config 0 descriptor?? [ 210.401094][ T5958] smsc75xx v1.0.0 [ 210.476225][ T7849] binder: BINDER_SET_CONTEXT_MGR already set [ 210.482640][ T7849] binder: 7843:7849 ioctl 4018620d 2000000002c0 returned -16 [ 210.588706][ T5899] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 210.973563][ T5899] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 210.983553][ T7829] vivid-007: reconnect [ 211.011289][ T5899] [drm] Initialized udl on minor 2 [ 211.029683][ T5899] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.157238][ T5899] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 211.164330][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 211.176140][ T7580] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.193120][ T5899] usb 2-1: USB disconnect, device number 7 [ 211.213122][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 211.226746][ T7580] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 211.744974][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 211.758924][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 211.797046][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 211.818640][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 211.837567][ T5958] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 211.859513][ T5958] usb 4-1: USB disconnect, device number 6 [ 213.793477][ T7874] hub 6-0:1.0: USB hub found [ 213.798327][ T7874] hub 6-0:1.0: 1 port detected [ 218.722300][ T7934] hub 6-0:1.0: USB hub found [ 218.772020][ T7934] hub 6-0:1.0: 1 port detected [ 223.283464][ T7973] hub 6-0:1.0: USB hub found [ 223.288348][ T7973] hub 6-0:1.0: 1 port detected [ 224.466274][ T7991] ip6t_REJECT: ECHOREPLY is not supported [ 226.412204][ T8014] loop6: detected capacity change from 0 to 524287999 [ 227.542155][ T8033] vivid-007: disconnect [ 227.555944][ T8033] loop7: detected capacity change from 0 to 7 [ 227.567051][ T6807] Dev loop7: unable to read RDB block 7 [ 228.467986][ T6807] loop7: unable to read partition table [ 228.474149][ T6807] loop7: partition table beyond EOD, truncated [ 228.558036][ T8033] Dev loop7: unable to read RDB block 7 [ 228.581033][ T8033] loop7: unable to read partition table [ 228.597917][ T8033] loop7: partition table beyond EOD, truncated [ 228.617882][ T8031] vivid-007: reconnect [ 228.626534][ T8033] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 229.280981][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 229.281020][ T30] audit: type=1326 audit(1765102597.289:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 229.668473][ T30] audit: type=1326 audit(1765102597.289:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 229.721777][ T8057] vivid-007: disconnect [ 229.736559][ T8057] loop7: detected capacity change from 0 to 7 [ 229.751655][ T8057] Dev loop7: unable to read RDB block 7 [ 229.757242][ T8057] loop7: AHDI p1 p2 [ 229.785666][ T8059] netlink: 'syz.1.535': attribute type 10 has an invalid length. [ 229.791108][ T30] audit: type=1326 audit(1765102597.289:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 229.800183][ T8057] loop7: partition table partially beyond EOD, [ 229.817894][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.831988][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.860301][ T30] audit: type=1326 audit(1765102597.289:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 229.912066][ T8057] truncated [ 229.921315][ T8057] loop7: p1 start 1702000233 is beyond EOD, truncated [ 229.931114][ T30] audit: type=1326 audit(1765102597.289:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 230.008792][ T30] audit: type=1326 audit(1765102597.289:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 230.033248][ T30] audit: type=1326 audit(1765102597.289:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 230.057028][ T30] audit: type=1326 audit(1765102597.289:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 230.080679][ T30] audit: type=1326 audit(1765102597.289:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 230.327321][ T30] audit: type=1326 audit(1765102597.289:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 230.509294][ T6003] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 231.348416][ T6003] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 231.357658][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.389676][ T6003] usb 6-1: config 0 descriptor?? [ 231.808659][ T6003] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 232.539960][ T8056] vivid-007: reconnect [ 232.575083][ T6003] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 232.610951][ T6003] [drm] Initialized udl on minor 2 [ 232.624578][ T6003] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.632946][ T6003] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 232.640001][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.649018][ T6003] usb 6-1: USB disconnect, device number 4 [ 232.678237][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 233.446507][ T8093] can: request_module (can-proto-3) failed. [ 234.643876][ T8111] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 234.651904][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.659459][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.581854][ T8139] vivid-007: disconnect [ 237.597461][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 237.597478][ T30] audit: type=1400 audit(1765102605.849:598): avc: denied { create } for pid=8137 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.715767][ T8139] loop7: detected capacity change from 0 to 7 [ 237.760730][ T6807] Dev loop7: unable to read RDB block 7 [ 237.766443][ T6807] loop7: AHDI p1 p2 [ 237.770348][ T6807] loop7: partition table partially beyond EOD, truncated [ 237.778129][ T6807] loop7: p1 start 1702000233 is beyond EOD, truncated [ 237.791761][ T8139] Dev loop7: unable to read RDB block 7 [ 237.797331][ T8139] loop7: AHDI p1 p2 [ 237.874691][ T8139] loop7: partition table partially beyond EOD, truncated [ 237.946104][ T8139] loop7: p1 start 1702000233 is beyond EOD, truncated [ 238.011003][ T7775] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 238.270305][ T7775] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 238.320073][ T7775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.354241][ T7775] usb 6-1: config 0 descriptor?? [ 238.562812][ T7775] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 238.882890][ T7775] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 238.907821][ T7775] [drm] Initialized udl on minor 2 [ 239.127181][ T7775] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 239.168788][ T8138] vivid-007: reconnect [ 239.283542][ T7775] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 239.390393][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 239.410370][ T7775] usb 6-1: USB disconnect, device number 5 [ 239.419223][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 239.470324][ T8158] netlink: 'syz.2.560': attribute type 10 has an invalid length. [ 239.844640][ T8166] binder: 8165:8166 ioctl 80089418 2000000000c0 returned -22 [ 239.994100][ T8166] binder: 8165:8166 ioctl 81f8943c 2000000003c0 returned -22 [ 240.193357][ T8168] binder: 8165:8168 ioctl c0c89425 2000000005c0 returned -22 [ 240.417389][ T30] audit: type=1326 audit(1765102608.679:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d9b8f749 code=0x7ffc0000 [ 240.571808][ T30] audit: type=1326 audit(1765102608.709:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d9b8f749 code=0x7ffc0000 [ 240.762042][ T30] audit: type=1326 audit(1765102608.709:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f27d9b8f749 code=0x7ffc0000 [ 240.793460][ T30] audit: type=1326 audit(1765102608.709:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d9b8f749 code=0x7ffc0000 [ 240.816987][ T30] audit: type=1326 audit(1765102608.709:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27d9b8df90 code=0x7ffc0000 [ 240.840292][ T30] audit: type=1326 audit(1765102608.709:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f27d9b90f77 code=0x7ffc0000 [ 240.873474][ T30] audit: type=1326 audit(1765102608.709:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27d9b8f749 code=0x7ffc0000 [ 240.940201][ T30] audit: type=1326 audit(1765102608.709:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f27d9b90f77 code=0x7ffc0000 [ 241.021913][ T7775] IPVS: starting estimator thread 0... [ 241.042922][ T30] audit: type=1326 audit(1765102608.719:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f27d9b8e3aa code=0x7ffc0000 [ 241.918732][ T8179] IPVS: using max 37 ests per chain, 88800 per kthread [ 241.981518][ T8178] nbd6: detected capacity change from 0 to 127 [ 242.120963][ T8187] netlink: 64 bytes leftover after parsing attributes in process `syz.5.566'. [ 242.130402][ T8187] block nbd0: reconnected socket [ 242.132273][ T5828] block nbd6: Receive control failed (result -104) [ 242.151861][ T5137] block nbd0: Receive control failed (result -32) [ 242.489193][ T8198] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 244.091394][ T8224] hub 6-0:1.0: USB hub found [ 244.096256][ T8224] hub 6-0:1.0: 1 port detected [ 244.660917][ T8228] nbd7: detected capacity change from 0 to 127 [ 244.685947][ T8230] netlink: 64 bytes leftover after parsing attributes in process `syz.5.581'. [ 244.701289][ T8230] block nbd0: reconnected socket [ 244.711916][ T5137] block nbd7: Receive control failed (result -104) [ 244.719787][ T5828] block nbd0: Receive control failed (result -32) [ 245.006686][ T8240] vivid-007: disconnect [ 245.034556][ T8240] loop7: detected capacity change from 0 to 7 [ 245.056489][ T8240] Dev loop7: unable to read RDB block 7 [ 245.081333][ T8240] loop7: unable to read partition table [ 245.089077][ T8242] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 245.111987][ T8240] loop7: partition table beyond EOD, truncated [ 245.131119][ T8240] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 245.371550][ T49] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 245.440899][ T98] block nbd6: Connection timed out, retrying (0/1 alive) [ 245.448002][ T98] block nbd6: Connection timed out, retrying (0/1 alive) [ 245.455141][ T98] block nbd6: Connection timed out, retrying (0/1 alive) [ 245.462685][ T5950] block nbd6: Dead connection, failed to find a fallback [ 245.469828][ T5950] block nbd6: shutting down sockets [ 245.475152][ T98] block nbd6: Connection timed out, retrying (0/1 alive) [ 245.482208][ T5950] blk_print_req_error: 138 callbacks suppressed [ 245.482223][ T5950] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.497578][ T5950] buffer_io_error: 138 callbacks suppressed [ 245.497593][ T5950] Buffer I/O error on dev nbd6, logical block 1, async page read [ 245.511458][ T5950] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.520658][ T5950] Buffer I/O error on dev nbd6, logical block 0, async page read [ 245.529827][ T5950] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.539009][ T5950] Buffer I/O error on dev nbd6, logical block 3, async page read [ 245.542877][ T49] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 245.546856][ T5950] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.565025][ T5950] Buffer I/O error on dev nbd6, logical block 2, async page read [ 245.572917][ T6807] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.575285][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.582249][ T6807] Buffer I/O error on dev nbd6, logical block 0, async page read [ 245.582393][ T6807] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.582418][ T6807] Buffer I/O error on dev nbd6, logical block 1, async page read [ 245.582531][ T6807] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.631088][ T6807] Buffer I/O error on dev nbd6, logical block 2, async page read [ 245.639063][ T6807] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.648321][ T6807] Buffer I/O error on dev nbd6, logical block 3, async page read [ 245.656309][ T6807] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.660291][ T49] usb 6-1: config 0 descriptor?? [ 245.665464][ T6807] Buffer I/O error on dev nbd6, logical block 0, async page read [ 245.679251][ T6807] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.688449][ T6807] Buffer I/O error on dev nbd6, logical block 1, async page read [ 245.699741][ T6807] ldm_validate_partition_table(): Disk read failed. [ 245.708006][ T6807] Dev nbd6: unable to read RDB block 0 [ 245.715352][ T6807] nbd6: unable to read partition table [ 245.726456][ T6807] ldm_validate_partition_table(): Disk read failed. [ 245.743124][ T6807] Dev nbd6: unable to read RDB block 0 [ 245.758489][ T6807] nbd6: unable to read partition table [ 246.323967][ T8238] vivid-007: reconnect [ 246.351245][ T49] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 246.360125][ T49] [drm:udl_init] *ERROR* Selecting channel failed [ 246.400611][ T49] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 246.421839][ T49] [drm] Initialized udl on minor 2 [ 246.432789][ T49] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 246.463876][ T49] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 246.482990][ T5956] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 246.494140][ T49] usb 6-1: USB disconnect, device number 6 [ 246.500682][ T5956] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 248.307860][ T5950] block nbd7: Connection timed out, retrying (0/1 alive) [ 248.315038][ T5950] block nbd7: Connection timed out, retrying (0/1 alive) [ 248.322187][ T6870] block nbd7: Dead connection, failed to find a fallback [ 248.329669][ T5950] block nbd7: Connection timed out, retrying (0/1 alive) [ 248.336789][ T6870] block nbd7: shutting down sockets [ 248.342115][ T5950] block nbd7: Connection timed out, retrying (0/1 alive) [ 248.354042][ T6027] ldm_validate_partition_table(): Disk read failed. [ 248.383273][ T6027] Dev nbd7: unable to read RDB block 0 [ 248.390421][ T6027] nbd7: unable to read partition table [ 248.422838][ T6027] ldm_validate_partition_table(): Disk read failed. [ 248.439545][ T6027] Dev nbd7: unable to read RDB block 0 [ 248.451085][ T8274] nbd8: detected capacity change from 0 to 127 [ 248.463850][ T6027] nbd7: unable to read partition table [ 248.486227][ T8274] netlink: 64 bytes leftover after parsing attributes in process `syz.1.596'. [ 248.520443][ T8274] block nbd0: reconnected socket [ 248.539324][ T5828] block nbd0: Receive control failed (result -32) [ 248.550771][ T5137] block nbd8: Receive control failed (result -104) [ 249.181329][ T8290] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 249.376044][ T8290] xt_hashlimit: max too large, truncated to 1048576 [ 249.383792][ T8290] xt_limit: Overflow, try lower: 0/0 [ 249.405134][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 249.405169][ T30] audit: type=1400 audit(1765102617.459:629): avc: denied { connect } for pid=8285 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.551431][ T30] audit: type=1400 audit(1765102617.459:630): avc: denied { write } for pid=8285 comm="syz.1.600" laddr=fe80::a lport=33838 faddr=fe80::3a fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.081413][ T8308] vivid-007: disconnect [ 251.134420][ T8308] loop7: detected capacity change from 0 to 7 [ 251.143447][ T8308] Dev loop7: unable to read RDB block 7 [ 251.149386][ T8308] loop7: unable to read partition table [ 251.161049][ T8308] loop7: partition table beyond EOD, truncated [ 251.184160][ T8308] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.441107][ T5956] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 251.638865][ T5956] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 251.737197][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.816922][ T5956] usb 2-1: config 0 descriptor?? [ 251.822789][ T5940] block nbd8: Connection timed out, retrying (0/1 alive) [ 251.829949][ T5940] block nbd8: Connection timed out, retrying (0/1 alive) [ 251.837458][ T57] block nbd8: Dead connection, failed to find a fallback [ 251.844720][ T5940] block nbd8: Connection timed out, retrying (0/1 alive) [ 251.852095][ T57] block nbd8: shutting down sockets [ 251.857393][ T57] blk_print_req_error: 286 callbacks suppressed [ 251.857407][ T57] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.873137][ T5940] block nbd8: Connection timed out, retrying (0/1 alive) [ 251.880309][ T57] buffer_io_error: 286 callbacks suppressed [ 251.880323][ T57] Buffer I/O error on dev nbd8, logical block 0, async page read [ 251.894804][ T57] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.903959][ T57] Buffer I/O error on dev nbd8, logical block 3, async page read [ 251.911885][ T57] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.921219][ T57] Buffer I/O error on dev nbd8, logical block 2, async page read [ 251.929286][ T57] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.938427][ T57] Buffer I/O error on dev nbd8, logical block 1, async page read [ 251.946350][ T6807] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.968733][ T6807] Buffer I/O error on dev nbd8, logical block 0, async page read [ 251.976798][ T6807] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.987273][ T6807] Buffer I/O error on dev nbd8, logical block 1, async page read [ 251.995848][ T6807] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.006004][ T6807] Buffer I/O error on dev nbd8, logical block 2, async page read [ 252.014304][ T6807] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.025563][ T6807] Buffer I/O error on dev nbd8, logical block 3, async page read [ 252.037874][ T6807] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.087909][ T6807] Buffer I/O error on dev nbd8, logical block 0, async page read [ 252.116184][ T6807] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.125324][ T6807] Buffer I/O error on dev nbd8, logical block 1, async page read [ 252.136931][ T6807] ldm_validate_partition_table(): Disk read failed. [ 252.146091][ T6807] Dev nbd8: unable to read RDB block 0 [ 252.154289][ T6807] nbd8: unable to read partition table [ 253.383424][ T6807] ldm_validate_partition_table(): Disk read failed. [ 253.402884][ T5956] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 253.411622][ T6807] Dev nbd8: unable to read RDB block 0 [ 253.418817][ T6807] nbd8: unable to read partition table [ 253.425336][ T8307] vivid-007: reconnect [ 253.439610][ T5956] [drm:udl_init] *ERROR* Selecting channel failed [ 253.504241][ T5956] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 253.570881][ T5956] [drm] Initialized udl on minor 2 [ 253.590692][ T5956] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 253.632249][ T5956] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 253.727515][ T6500] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 253.740016][ T5956] usb 2-1: USB disconnect, device number 8 [ 253.749561][ T6500] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 254.200115][ T8341] overlayfs: missing 'lowerdir' [ 255.482379][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.875862][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.781991][ T8366] vivid-007: disconnect [ 256.789902][ T8366] loop7: detected capacity change from 0 to 7 [ 256.796983][ T8366] Dev loop7: unable to read RDB block 7 [ 256.807663][ T8366] loop7: AHDI p1 p2 [ 256.832339][ T8366] loop7: partition table partially beyond EOD, truncated [ 256.872485][ T8366] loop7: p1 start 1702000233 is beyond EOD, truncated [ 257.111179][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 257.301873][ T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 257.314196][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.356206][ T10] usb 1-1: config 0 descriptor?? [ 257.583614][ T8375] ip6t_REJECT: ECHOREPLY is not supported [ 257.651529][ T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 257.914746][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 257.960938][ T10] [drm] Initialized udl on minor 2 [ 258.062017][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 258.080729][ T8365] vivid-007: reconnect [ 258.128068][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 258.144520][ T187] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 258.162008][ T8378] loop7: detected capacity change from 0 to 7 [ 258.196879][ T8378] Dev loop7: unable to read RDB block 7 [ 258.198742][ T187] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 258.213098][ T10] usb 1-1: USB disconnect, device number 7 [ 258.241728][ T8378] loop7: unable to read partition table [ 258.535659][ T8378] loop7: partition table beyond EOD, truncated [ 258.610708][ T8384] vivid-007: disconnect [ 258.639696][ T8378] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 258.693129][ T187] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 258.712724][ T8384] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 258.963450][ T49] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 259.253315][ T49] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 259.283584][ T8397] overlayfs: missing 'lowerdir' [ 259.311831][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.652858][ T49] usb 4-1: config 0 descriptor?? [ 260.771620][ T49] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 260.817292][ T8382] vivid-007: reconnect [ 260.908901][ T49] [drm:udl_init] *ERROR* Selecting channel failed [ 261.027049][ T49] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 261.064888][ T49] [drm] Initialized udl on minor 2 [ 261.120715][ T49] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 261.171418][ T49] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 261.181966][ T5927] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 261.189966][ T5927] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 261.240460][ T49] usb 4-1: USB disconnect, device number 7 [ 261.288751][ T8412] syzkaller0: entered promiscuous mode [ 261.307159][ T8412] syzkaller0: entered allmulticast mode [ 261.759023][ T8417] ip6t_REJECT: ECHOREPLY is not supported [ 263.210994][ T8428] nbd9: detected capacity change from 0 to 127 [ 263.231236][ T8431] netlink: 64 bytes leftover after parsing attributes in process `syz.2.639'. [ 263.272065][ T8431] block nbd0: reconnected socket [ 263.299177][ T5137] block nbd9: Receive control failed (result -104) [ 263.308764][ T5828] block nbd0: Receive control failed (result -32) [ 264.620403][ T8440] hub 6-0:1.0: USB hub found [ 264.625332][ T8440] hub 6-0:1.0: 1 port detected [ 266.368966][ T8456] process 'syz.2.646' launched './file1' with NULL argv: empty string added [ 266.416142][ T30] audit: type=1400 audit(1765102634.679:631): avc: denied { execute_no_trans } for pid=8452 comm="syz.2.646" path="/137/file1" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 266.683774][ T5950] block nbd9: Connection timed out, retrying (0/1 alive) [ 266.691652][ T5950] block nbd9: Connection timed out, retrying (0/1 alive) [ 266.699100][ T5950] block nbd9: Connection timed out, retrying (0/1 alive) [ 266.706407][ T6870] block nbd9: Dead connection, failed to find a fallback [ 266.714057][ T5950] block nbd9: Connection timed out, retrying (0/1 alive) [ 266.721400][ T6870] block nbd9: shutting down sockets [ 266.726707][ T6870] blk_print_req_error: 138 callbacks suppressed [ 266.726721][ T6870] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.742803][ T6870] buffer_io_error: 138 callbacks suppressed [ 266.742817][ T6870] Buffer I/O error on dev nbd9, logical block 1, async page read [ 266.756550][ T6870] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.765726][ T6870] Buffer I/O error on dev nbd9, logical block 0, async page read [ 266.773545][ T6870] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.783242][ T6870] Buffer I/O error on dev nbd9, logical block 3, async page read [ 266.791114][ T6870] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.800146][ T6870] Buffer I/O error on dev nbd9, logical block 2, async page read [ 266.807977][ T6807] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.821432][ T6807] Buffer I/O error on dev nbd9, logical block 0, async page read [ 266.829392][ T6807] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.838782][ T6807] Buffer I/O error on dev nbd9, logical block 1, async page read [ 267.072684][ T6807] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.096747][ T6807] Buffer I/O error on dev nbd9, logical block 2, async page read [ 267.116200][ T6807] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.237783][ T6807] Buffer I/O error on dev nbd9, logical block 3, async page read [ 267.254434][ T6807] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.280102][ T6807] Buffer I/O error on dev nbd9, logical block 0, async page read [ 267.288146][ T6807] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.297387][ T6807] Buffer I/O error on dev nbd9, logical block 1, async page read [ 267.319462][ T6807] ldm_validate_partition_table(): Disk read failed. [ 267.338195][ T6807] Dev nbd9: unable to read RDB block 0 [ 267.800310][ T6807] nbd9: unable to read partition table [ 267.833004][ T6807] ldm_validate_partition_table(): Disk read failed. [ 267.846551][ T6807] Dev nbd9: unable to read RDB block 0 [ 267.863149][ T6807] nbd9: unable to read partition table [ 268.090900][ T6003] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 268.240993][ T6003] usb 4-1: Using ep0 maxpacket: 32 [ 268.673996][ T6003] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 268.690599][ T6003] usb 4-1: config 0 has no interface number 0 [ 268.711213][ T6003] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 268.720319][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.728392][ T6003] usb 4-1: Product: syz [ 268.732636][ T6003] usb 4-1: Manufacturer: syz [ 268.737883][ T6003] usb 4-1: SerialNumber: syz [ 268.748406][ T6003] usb 4-1: config 0 descriptor?? [ 268.759121][ T6003] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 268.969689][ T6003] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 269.009228][ T6003] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 269.181569][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.458759][ T8493] xt_hashlimit: max too large, truncated to 1048576 [ 269.465605][ T8493] xt_limit: Overflow, try lower: 0/0 [ 269.494727][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.826911][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 269.838501][ T187] usb 4-1: USB disconnect, device number 8 [ 269.914662][ T187] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 269.959978][ T187] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 270.133348][ T187] quatech2 4-1:0.51: device disconnected [ 270.361216][ T8469] syzkaller0: entered promiscuous mode [ 270.367075][ T8469] syzkaller0: entered allmulticast mode [ 270.913470][ T8507] vivid-007: disconnect [ 271.514606][ T8507] loop7: detected capacity change from 0 to 7 [ 271.541837][ T8507] Dev loop7: unable to read RDB block 7 [ 271.638312][ T8507] loop7: unable to read partition table [ 271.658848][ T8507] loop7: partition table beyond EOD, truncated [ 271.677309][ T8507] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 271.694193][ T8506] vivid-007: reconnect [ 271.843798][ T8518] ip6t_REJECT: ECHOREPLY is not supported [ 272.379178][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 272.403100][ T8525] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 274.038939][ T8546] syzkaller0: entered promiscuous mode [ 274.044719][ T8546] syzkaller0: entered allmulticast mode [ 274.150964][ T187] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 274.730927][ T187] usb 6-1: Using ep0 maxpacket: 32 [ 274.749888][ T187] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 274.792488][ T187] usb 6-1: config 0 has no interface number 0 [ 274.812245][ T187] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 275.001999][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.020960][ T187] usb 6-1: Product: syz [ 275.029454][ T187] usb 6-1: Manufacturer: syz [ 275.960912][ T187] usb 6-1: SerialNumber: syz [ 276.325478][ T187] usb 6-1: config 0 descriptor?? [ 276.372034][ T187] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 276.940318][ T187] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 276.953665][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.966950][ T8561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.675'. [ 276.994066][ T187] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 277.003737][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.114193][ T30] audit: type=1400 audit(1765102645.379:632): avc: denied { lock } for pid=8569 comm="syz.0.676" path="socket:[20341]" dev="sockfs" ino=20341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 277.500947][ T6500] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 277.532608][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 277.536614][ T49] usb 6-1: USB disconnect, device number 7 [ 277.731603][ T49] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 277.799462][ T49] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 277.810889][ T6500] usb 3-1: Using ep0 maxpacket: 8 [ 277.817390][ T6500] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 277.827649][ T49] quatech2 6-1:0.51: device disconnected [ 277.835505][ T8588] ip6t_REJECT: ECHOREPLY is not supported [ 277.841915][ T6500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.851690][ T30] audit: type=1400 audit(1765102646.109:633): avc: denied { create } for pid=8582 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 277.999996][ T6500] pvrusb2: Hardware description: Terratec Grabster AV400 [ 279.784563][ T6500] pvrusb2: ********** [ 279.788545][ T6500] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 279.805191][ T6500] pvrusb2: Important functionality might not be entirely working. [ 279.814270][ T6500] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 279.829724][ T6500] pvrusb2: ********** [ 279.891944][ T30] audit: type=1326 audit(1765102648.159:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.2.678" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d82f8f749 code=0x0 [ 280.796978][ T2341] pvrusb2: Invalid write control endpoint [ 280.851192][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.897781][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.940912][ T2341] pvrusb2: Invalid write control endpoint [ 280.949314][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 280.969490][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 280.977767][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 281.155469][ T2341] pvrusb2: Device being rendered inoperable [ 281.161673][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 281.168740][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 281.179500][ T2341] pvrusb2: Attached sub-driver cx25840 [ 281.185207][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 281.195500][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 281.419693][ T6500] usb 3-1: USB disconnect, device number 8 [ 284.493305][ T30] audit: type=1400 audit(1765102652.729:635): avc: denied { read write } for pid=8624 comm="syz.2.690" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 284.828109][ T30] audit: type=1400 audit(1765102652.729:636): avc: denied { open } for pid=8624 comm="syz.2.690" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 286.052734][ T8650] ip6t_REJECT: ECHOREPLY is not supported [ 287.648024][ T8661] atomic_op ffff888034e4f198 conn xmit_atomic 0000000000000000 [ 287.658464][ T30] audit: type=1400 audit(1765102655.899:637): avc: denied { ioctl } for pid=8655 comm="syz.5.697" path="socket:[21457]" dev="sockfs" ino=21457 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 287.966417][ T30] audit: type=1400 audit(1765102655.899:638): avc: denied { bind } for pid=8655 comm="syz.5.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 288.010935][ T30] audit: type=1400 audit(1765102655.909:639): avc: denied { write } for pid=8655 comm="syz.5.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 288.347600][ T8668] syzkaller0: entered promiscuous mode [ 288.378201][ T8668] syzkaller0: entered allmulticast mode [ 290.008709][ T8698] binder: 8697:8698 ioctl 4018620d 0 returned -22 [ 290.823651][ T8701] hub 6-0:1.0: USB hub found [ 290.828785][ T8701] hub 6-0:1.0: 1 port detected [ 291.260966][ T8705] ip6t_REJECT: ECHOREPLY is not supported [ 293.181931][ T8723] can: request_module (can-proto-3) failed. [ 296.085753][ T8757] binder: 8756:8757 ioctl 4018620d 0 returned -22 [ 296.950880][ T8759] hub 6-0:1.0: USB hub found [ 296.959881][ T8759] hub 6-0:1.0: 1 port detected [ 297.976349][ T8771] vivid-007: disconnect [ 298.071888][ T8773] binder: 8772:8773 ioctl 80089418 2000000000c0 returned -22 [ 298.100078][ T8773] binder: 8772:8773 ioctl 81f8943c 2000000003c0 returned -22 [ 298.108524][ T8774] loop7: detected capacity change from 0 to 7 [ 298.120399][ T8774] Dev loop7: unable to read RDB block 7 [ 298.137222][ T8774] loop7: unable to read partition table [ 298.137293][ T8773] binder: 8772:8773 ioctl c0c89425 2000000005c0 returned -22 [ 298.169753][ T8774] loop7: partition table beyond EOD, truncated [ 298.199274][ T8774] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 298.233596][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 298.242449][ T30] audit: type=1326 audit(1765102666.489:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8772 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 298.337940][ T30] audit: type=1326 audit(1765102666.489:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8772 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 298.421060][ T187] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 298.451912][ T30] audit: type=1326 audit(1765102666.489:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8772 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 298.515246][ T30] audit: type=1326 audit(1765102666.489:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8772 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 298.588546][ T187] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 298.708083][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.761179][ T30] audit: type=1326 audit(1765102666.489:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8772 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 298.909565][ T187] usb 6-1: config 0 descriptor?? [ 299.152022][ T30] audit: type=1326 audit(1765102666.489:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8772 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d82f8df90 code=0x7ffc0000 [ 299.186975][ T187] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 299.196303][ T30] audit: type=1326 audit(1765102666.499:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8772 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1d82f90f77 code=0x7ffc0000 [ 299.223302][ T30] audit: type=1326 audit(1765102666.499:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8772 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 299.414943][ T30] audit: type=1326 audit(1765102666.499:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8772 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1d82f90f77 code=0x7ffc0000 [ 299.447673][ T187] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 299.458797][ T187] [drm] Initialized udl on minor 2 [ 300.026793][ T187] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 300.036055][ T187] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 300.045089][ T7775] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 300.055086][ T187] usb 6-1: USB disconnect, device number 8 [ 300.061223][ T30] audit: type=1326 audit(1765102666.499:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8772 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1d82f8e3aa code=0x7ffc0000 [ 300.061928][ T8770] vivid-007: reconnect [ 300.119191][ T7775] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 300.379414][ T8801] vivid-007: disconnect [ 300.392201][ T8801] loop7: detected capacity change from 0 to 7 [ 300.398866][ T8801] Dev loop7: unable to read RDB block 7 [ 300.404736][ T8801] loop7: unable to read partition table [ 300.410449][ T8801] loop7: partition table beyond EOD, truncated [ 300.429344][ T8801] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 300.573705][ T8800] vivid-007: reconnect [ 303.434302][ T8829] binder: 8828:8829 ioctl 80089418 2000000000c0 returned -22 [ 303.448751][ T8829] binder: 8828:8829 ioctl 81f8943c 2000000003c0 returned -22 [ 303.479816][ T8829] binder: 8828:8829 ioctl c0c89425 2000000005c0 returned -22 [ 303.569834][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 303.569846][ T30] audit: type=1326 audit(1765102671.829:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 303.633860][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 304.449983][ T30] audit: type=1326 audit(1765102671.849:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 304.473994][ T30] audit: type=1326 audit(1765102671.849:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 304.498455][ T30] audit: type=1326 audit(1765102671.869:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f139a98df90 code=0x7ffc0000 [ 304.524438][ T30] audit: type=1326 audit(1765102671.879:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f139a990f77 code=0x7ffc0000 [ 304.547942][ T30] audit: type=1326 audit(1765102671.879:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 304.571200][ T30] audit: type=1326 audit(1765102671.879:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f139a990f77 code=0x7ffc0000 [ 304.594538][ T30] audit: type=1326 audit(1765102671.879:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f139a98e3aa code=0x7ffc0000 [ 304.617740][ T30] audit: type=1326 audit(1765102671.889:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 304.673382][ T30] audit: type=1326 audit(1765102671.889:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139a98f749 code=0x7ffc0000 [ 305.506581][ T8834] infiniband syz2: set down [ 305.511469][ T8834] infiniband syz2: added ipvlan0 [ 305.523561][ T8834] infiniband syz2: Couldn't open port 1 [ 305.535332][ T8834] RDS/IB: syz2: added [ 305.539515][ T8834] smc: adding ib device syz2 with port count 1 [ 305.545775][ T8834] smc: ib device syz2 port 1 has no pnetid [ 310.461128][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 310.461169][ T30] audit: type=1400 audit(1765102678.629:705): avc: denied { write } for pid=8891 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 312.955608][ T8944] netlink: 80 bytes leftover after parsing attributes in process `syz.2.763'. [ 317.019175][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.036495][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.042995][ T30] audit: type=1326 audit(1765102685.149:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 317.246551][ T30] audit: type=1326 audit(1765102685.149:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 317.310037][ T30] audit: type=1326 audit(1765102685.149:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 317.361006][ T30] audit: type=1326 audit(1765102685.149:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 317.385194][ T30] audit: type=1326 audit(1765102685.149:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 317.478843][ T30] audit: type=1326 audit(1765102685.149:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 317.509987][ T9002] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 317.991334][ T30] audit: type=1326 audit(1765102685.149:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 318.052833][ T5186] block nbd0: Dead connection, failed to find a fallback [ 318.060458][ T5186] block nbd0: shutting down sockets [ 318.068575][ T30] audit: type=1326 audit(1765102685.149:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 318.092095][ T5186] blk_print_req_error: 138 callbacks suppressed [ 318.092111][ T5186] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.108632][ T5186] buffer_io_error: 138 callbacks suppressed [ 318.108646][ T5186] Buffer I/O error on dev nbd0, logical block 0, async page read [ 318.245491][ T5186] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.254719][ T5186] Buffer I/O error on dev nbd0, logical block 1, async page read [ 318.262678][ T5186] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.271865][ T5186] Buffer I/O error on dev nbd0, logical block 2, async page read [ 318.307978][ T5186] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.321991][ T5186] Buffer I/O error on dev nbd0, logical block 3, async page read [ 318.427342][ T5186] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.436808][ T5186] Buffer I/O error on dev nbd0, logical block 0, async page read [ 318.471800][ T5186] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.481241][ T5186] Buffer I/O error on dev nbd0, logical block 1, async page read [ 318.491123][ T30] audit: type=1326 audit(1765102685.149:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 318.501088][ T5186] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.577084][ T9015] atomic_op ffff88804f2a9998 conn xmit_atomic 0000000000000000 [ 318.993286][ T5186] Buffer I/O error on dev nbd0, logical block 2, async page read [ 319.002387][ T5186] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.012458][ T5186] Buffer I/O error on dev nbd0, logical block 3, async page read [ 319.052889][ T5186] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.062079][ T30] audit: type=1326 audit(1765102685.149:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298838f749 code=0x7ffc0000 [ 319.075251][ T5186] Buffer I/O error on dev nbd0, logical block 0, async page read [ 319.238641][ T5186] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.340275][ T9020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.780'. [ 319.757240][ T5186] Buffer I/O error on dev nbd0, logical block 1, async page read [ 319.970561][ T5186] ldm_validate_partition_table(): Disk read failed. [ 319.982734][ T5186] Dev nbd0: unable to read RDB block 0 [ 319.993804][ T5186] nbd0: unable to read partition table [ 320.172111][ T6807] ldm_validate_partition_table(): Disk read failed. [ 320.179646][ T6807] Dev nbd0: unable to read RDB block 0 [ 320.650123][ T6807] nbd0: unable to read partition table [ 320.715937][ T6807] ldm_validate_partition_table(): Disk read failed. [ 320.757216][ T6807] Dev nbd0: unable to read RDB block 0 [ 320.792687][ T6807] nbd0: unable to read partition table [ 324.110910][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 324.110929][ T30] audit: type=1326 audit(1765102692.039:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 324.287825][ T30] audit: type=1326 audit(1765102692.039:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 324.361328][ T30] audit: type=1326 audit(1765102692.039:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 324.410166][ T30] audit: type=1326 audit(1765102692.039:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 324.472148][ T30] audit: type=1326 audit(1765102692.039:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 324.505749][ T30] audit: type=1326 audit(1765102692.039:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 324.663339][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 324.680952][ T30] audit: type=1326 audit(1765102692.039:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 325.282061][ T30] audit: type=1326 audit(1765102692.039:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 325.580977][ T30] audit: type=1326 audit(1765102692.039:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 325.581252][ T9063] netlink: 'syz.1.790': attribute type 10 has an invalid length. [ 325.648881][ T30] audit: type=1326 audit(1765102692.039:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d82f8f749 code=0x7ffc0000 [ 325.950953][ T6003] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 327.102160][ C0] ------------[ cut here ]------------ [ 327.107862][ C0] ODEBUG: free active (active state 0) object: ffff88805c0ff490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 327.120859][ C0] WARNING: lib/debugobjects.c:612 at 0x0, CPU#0: syz-executor/6793 [ 327.128839][ C0] Modules linked in: [ 327.133103][ C0] CPU: 0 UID: 0 PID: 6793 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 327.142702][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.152901][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 327.158875][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 85 dd 0b 41 56 48 8b 14 dd e0 4b f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 fc 3d d4 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 327.178675][ C0] RSP: 0018:ffffc90000007a08 EFLAGS: 00010246 [ 327.184934][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 327.193043][ C0] RDX: ffffffff8bf24b20 RSI: ffffffff8bf24700 RDI: ffffffff909173d0 [ 327.201159][ C0] RBP: 0000000000000001 R08: ffff88805c0ff490 R09: ffffffff8b906bc0 [ 327.209337][ C0] R10: ffffffff9087fbd7 R11: ffff888026652ff0 R12: ffffffff8bf24700 [ 327.217393][ C0] R13: ffffffff8b906c00 R14: ffffffff8a626f20 R15: ffffc90000007b08 [ 327.225554][ C0] FS: 000055555d99b500(0000) GS:ffff888124909000(0000) knlGS:0000000000000000 [ 327.234625][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.241374][ C0] CR2: 00007f27d9de7dac CR3: 0000000057b5e000 CR4: 00000000003526f0 [ 327.249490][ C0] Call Trace: [ 327.252815][ C0] [ 327.255712][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 327.261554][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 327.267513][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 327.273159][ C0] ? save_trace+0x4e/0x380 [ 327.277838][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 327.284080][ C0] ? __lock_acquire+0x12c2/0x2890 [ 327.289231][ C0] kfree+0x2d1/0x6e0 [ 327.293437][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 327.298952][ C0] ? rose_timer_expiry+0x53f/0x630 [ 327.304253][ C0] ? rose_timer_expiry+0x53f/0x630 [ 327.309495][ C0] rose_timer_expiry+0x53f/0x630 [ 327.314884][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 327.320532][ C0] call_timer_fn+0x19a/0x5a0 [ 327.325208][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 327.330471][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 327.336069][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 327.341641][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 327.347145][ C0] ? rcu_is_watching+0x12/0xc0 [ 327.352117][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 327.357671][ C0] __run_timers+0x74a/0xae0 [ 327.362451][ C0] ? __pfx___run_timers+0x10/0x10 [ 327.367579][ C0] run_timer_base+0x114/0x190 [ 327.372686][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 327.378043][ C0] ? rcu_is_watching+0x12/0xc0 [ 327.382883][ C0] run_timer_softirq+0x1a/0x40 [ 327.388373][ C0] handle_softirqs+0x219/0x950 [ 327.393342][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 327.398833][ C0] __irq_exit_rcu+0x109/0x170 [ 327.403606][ C0] irq_exit_rcu+0x9/0x30 [ 327.407996][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 327.413797][ C0] [ 327.416751][ C0] [ 327.419778][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 327.426115][ C0] RIP: 0010:finish_task_switch.isra.0+0x210/0xbd0 [ 327.432631][ C0] Code: ac 08 00 00 44 8b 05 b3 10 fd 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 ae f6 ff ff e8 39 eb 3b 00 fb 65 48 8b 1d 38 54 26 12 <48> 8d bb 48 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 327.452437][ C0] RSP: 0018:ffffc90021bffa88 EFLAGS: 00000202 [ 327.458630][ C0] RAX: 00000000000e6efb RBX: ffff8880266524c0 RCX: ffffffff81c7061f [ 327.466695][ C0] RDX: 0000000000000000 RSI: ffffffff8dac1f05 RDI: ffffffff8bf23a80 [ 327.474798][ C0] RBP: ffffc90021bffad0 R08: 0000000000000001 R09: 0000000000000001 [ 327.482847][ C0] R10: ffffffff9087fbd7 R11: ffff888026652ff0 R12: ffff8880b843ac80 [ 327.490963][ C0] R13: ffff88802b294980 R14: ffff888028d6c980 R15: ffff8880b843bab0 [ 327.499075][ C0] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 327.505151][ C0] ? finish_task_switch.isra.0+0x207/0xbd0 [ 327.511280][ C0] ? __switch_to+0x7af/0x10d0 [ 327.516080][ C0] ? __schedule+0x10b9/0x6150 [ 327.520964][ C0] __schedule+0x1141/0x6150 [ 327.525612][ C0] ? __lock_acquire+0x436/0x2890 [ 327.530733][ C0] ? __pfx___schedule+0x10/0x10 [ 327.535715][ C0] ? find_held_lock+0x2b/0x80 [ 327.540532][ C0] ? schedule+0x2d7/0x3a0 [ 327.544970][ C0] schedule+0xe7/0x3a0 [ 327.549258][ C0] do_nanosleep+0x219/0x580 [ 327.554242][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 327.559481][ C0] ? __asan_memset+0x23/0x50 [ 327.564344][ C0] ? __hrtimer_setup+0x176/0x280 [ 327.569554][ C0] hrtimer_nanosleep+0x155/0x380 [ 327.574672][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 327.580233][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 327.585690][ C0] ? get_timespec64+0x147/0x240 [ 327.590698][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 327.596193][ C0] common_nsleep+0xa1/0xd0 [ 327.600731][ C0] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 327.606536][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 327.612814][ C0] do_syscall_64+0xcd/0xf80 [ 327.617498][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.623583][ C0] RIP: 0033:0x7f139a9c2005 [ 327.628187][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 327.648016][ C0] RSP: 002b:00007ffe29b98ec0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 327.656778][ C0] RAX: ffffffffffffffda RBX: 000000000000013d RCX: 00007f139a9c2005 [ 327.664869][ C0] RDX: 00007ffe29b98f00 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.673154][ C0] RBP: 00007ffe29b98f6c R08: 0000000000000000 R09: 0000000000000000 [ 327.681267][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 327.689360][ C0] R13: 00000000000927c0 R14: 000000000004fd7f R15: 00007ffe29b98fc0 [ 327.697475][ C0] [ 327.700650][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 327.707927][ C0] CPU: 0 UID: 0 PID: 6793 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 327.717388][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.727444][ C0] Call Trace: [ 327.730719][ C0] [ 327.733561][ C0] dump_stack_lvl+0x3d/0x1f0 [ 327.738173][ C0] vpanic+0x640/0x6f0 [ 327.742167][ C0] panic+0xca/0xd0 [ 327.745899][ C0] ? __pfx_panic+0x10/0x10 [ 327.750339][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 327.755472][ C0] check_panic_on_warn+0xab/0xb0 [ 327.760424][ C0] __warn+0x108/0x3c0 [ 327.764420][ C0] __report_bug+0x2a0/0x520 [ 327.768946][ C0] ? __pfx___report_bug+0x10/0x10 [ 327.774006][ C0] report_bug_entry+0xb2/0x220 [ 327.778781][ C0] ? debug_print_object+0x19b/0x2a0 [ 327.783999][ C0] handle_bug+0x18a/0x260 [ 327.788343][ C0] exc_invalid_op+0x17/0x50 [ 327.792855][ C0] asm_exc_invalid_op+0x1a/0x20 [ 327.797712][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 327.803536][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 85 dd 0b 41 56 48 8b 14 dd e0 4b f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 fc 3d d4 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 327.823149][ C0] RSP: 0018:ffffc90000007a08 EFLAGS: 00010246 [ 327.829220][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 327.837189][ C0] RDX: ffffffff8bf24b20 RSI: ffffffff8bf24700 RDI: ffffffff909173d0 [ 327.845162][ C0] RBP: 0000000000000001 R08: ffff88805c0ff490 R09: ffffffff8b906bc0 [ 327.853131][ C0] R10: ffffffff9087fbd7 R11: ffff888026652ff0 R12: ffffffff8bf24700 [ 327.861107][ C0] R13: ffffffff8b906c00 R14: ffffffff8a626f20 R15: ffffc90000007b08 [ 327.869086][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 327.874745][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 327.880388][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 327.886215][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 327.891872][ C0] ? save_trace+0x4e/0x380 [ 327.896303][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 327.902402][ C0] ? __lock_acquire+0x12c2/0x2890 [ 327.907450][ C0] kfree+0x2d1/0x6e0 [ 327.911366][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 327.916752][ C0] ? rose_timer_expiry+0x53f/0x630 [ 327.921882][ C0] ? rose_timer_expiry+0x53f/0x630 [ 327.927002][ C0] rose_timer_expiry+0x53f/0x630 [ 327.931949][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 327.937417][ C0] call_timer_fn+0x19a/0x5a0 [ 327.942016][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 327.947140][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 327.952612][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 327.958080][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 327.963551][ C0] ? rcu_is_watching+0x12/0xc0 [ 327.968322][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 327.973794][ C0] __run_timers+0x74a/0xae0 [ 327.978316][ C0] ? __pfx___run_timers+0x10/0x10 [ 327.983373][ C0] run_timer_base+0x114/0x190 [ 327.988060][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 327.993294][ C0] ? rcu_is_watching+0x12/0xc0 [ 327.998061][ C0] run_timer_softirq+0x1a/0x40 [ 328.002832][ C0] handle_softirqs+0x219/0x950 [ 328.007619][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 328.012927][ C0] __irq_exit_rcu+0x109/0x170 [ 328.017619][ C0] irq_exit_rcu+0x9/0x30 [ 328.021875][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 328.027523][ C0] [ 328.030449][ C0] [ 328.033375][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 328.039361][ C0] RIP: 0010:finish_task_switch.isra.0+0x210/0xbd0 [ 328.045799][ C0] Code: ac 08 00 00 44 8b 05 b3 10 fd 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 ae f6 ff ff e8 39 eb 3b 00 fb 65 48 8b 1d 38 54 26 12 <48> 8d bb 48 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 328.065414][ C0] RSP: 0018:ffffc90021bffa88 EFLAGS: 00000202 [ 328.071482][ C0] RAX: 00000000000e6efb RBX: ffff8880266524c0 RCX: ffffffff81c7061f [ 328.079441][ C0] RDX: 0000000000000000 RSI: ffffffff8dac1f05 RDI: ffffffff8bf23a80 [ 328.087398][ C0] RBP: ffffc90021bffad0 R08: 0000000000000001 R09: 0000000000000001 [ 328.095356][ C0] R10: ffffffff9087fbd7 R11: ffff888026652ff0 R12: ffff8880b843ac80 [ 328.103316][ C0] R13: ffff88802b294980 R14: ffff888028d6c980 R15: ffff8880b843bab0 [ 328.111289][ C0] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 328.117278][ C0] ? finish_task_switch.isra.0+0x207/0xbd0 [ 328.123091][ C0] ? __switch_to+0x7af/0x10d0 [ 328.127769][ C0] ? __schedule+0x10b9/0x6150 [ 328.132447][ C0] __schedule+0x1141/0x6150 [ 328.136951][ C0] ? __lock_acquire+0x436/0x2890 [ 328.141900][ C0] ? __pfx___schedule+0x10/0x10 [ 328.146751][ C0] ? find_held_lock+0x2b/0x80 [ 328.151432][ C0] ? schedule+0x2d7/0x3a0 [ 328.155766][ C0] schedule+0xe7/0x3a0 [ 328.159834][ C0] do_nanosleep+0x219/0x580 [ 328.164339][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 328.169362][ C0] ? __asan_memset+0x23/0x50 [ 328.173943][ C0] ? __hrtimer_setup+0x176/0x280 [ 328.178887][ C0] hrtimer_nanosleep+0x155/0x380 [ 328.183815][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 328.189268][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 328.194475][ C0] ? get_timespec64+0x147/0x240 [ 328.199330][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 328.204531][ C0] common_nsleep+0xa1/0xd0 [ 328.208950][ C0] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 328.214578][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 328.220733][ C0] do_syscall_64+0xcd/0xf80 [ 328.225245][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.231133][ C0] RIP: 0033:0x7f139a9c2005 [ 328.235534][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 328.255131][ C0] RSP: 002b:00007ffe29b98ec0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 328.263541][ C0] RAX: ffffffffffffffda RBX: 000000000000013d RCX: 00007f139a9c2005 [ 328.271502][ C0] RDX: 00007ffe29b98f00 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.279462][ C0] RBP: 00007ffe29b98f6c R08: 0000000000000000 R09: 0000000000000000 [ 328.287418][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 328.295375][ C0] R13: 00000000000927c0 R14: 000000000004fd7f R15: 00007ffe29b98fc0 [ 328.303350][ C0] [ 328.306647][ C0] Kernel Offset: disabled [ 328.310949][ C0] Rebooting in 86400 seconds..