last executing test programs: 13.002350688s ago: executing program 1 (id=407): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x2009, 0xffff, 0x3, 0x3, "8003e3ffff072000"}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x640, 0x40400) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f00000000c0)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7ffd, 0x16, "08bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r0, 0x200) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = dup3(r2, r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) read(r4, &(0x7f00000001c0)=""/44, 0x2c) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f000064a000/0x3000)=nil}) r7 = syz_usb_connect$uac3(0x1, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r7, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="200f000000003915c5dc1772400977c95a8c7addb3d05f83267f07c114ef5245ecde0d91ff0f248b211c16a5448043b2fe53210639fc159fc187fabddd7e4c59abec8cace5d356a00e12ceb455381389247379ae8ca9070000000000f1ffe7e0e579b157127f03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r7, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r7, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000dd19e3d82fceea88929bb7c94b216cc090a516e4f0251d3d5d4e96f8604db02e36cac89aed28ff983c1c739e24050c43569020a57fe8fd7019ecc06b0356debdaf9f4e61ef99c25de6e1e5f79b1f4b15e72a86e5dc9923272edeac31d15bbf3d34f507d45e9175b10ce69963882d365bf3c64d5f7653cddb635b585ad00ab0984d46d428d3f435c0c8d9f4b0508ab8ef0c449b22de00d1c93ceb9a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.843909479s ago: executing program 1 (id=422): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$notify(r0, 0x402, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000010800000004fcffffff00004c00", @ANYRES32=0x0, @ANYBLOB="e9040200d205000008001b000000000005001000050000000800280029450000"], 0x38}, 0x1, 0xffffa888}, 0x20000880) syz_open_dev$video(&(0x7f0000000440), 0x800000000007, 0x82900) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0xd, 0x1}) 7.967853426s ago: executing program 2 (id=428): r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) sendmmsg$inet(r2, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30008001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r1) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r3, 0x0, 0xf8, 0x8, 0x7ff, 0x3, {0x4, 0x8, 0x0, 0x5, 0x3, 0x2, 0x2, 0x1, 0x0, 0xffff, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719f713df939332292cc81f89f07580"}}) read$FUSE(r0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x80, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f00000040c0), 0x87, 0x3, 0x0, 0x0, 0x2) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f00000001c0)=0x5, 0xb6d, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x29e, &(0x7f0000000500)={@local, @dev, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "2a34b9", 0x264, 0x21, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x73, 0x28, '\x00', [@generic={0x2, 0xcd, "f4481d76b80f13ae51d06f5ddd0bfd2b540af95ad670dfcd08da2bf8881dd70db4c2cd0dd706c6ec45bce5f388b16b3333c8ef3a19af39cf395e5c4c4b414c415767f01d1f176cdf1a5a89b0f03b4039c7802d1c4a632e6ebd974edad8fa7ce5760edc493170bd8f5f1db8119ee24885cd7ee04dbbc3ceb9172b9415d57801248849dd7eed523f00eaebea823d40cc72b021b0ef87bbcdf8ea4c9c1080c49d4286ab75d8f2e6718ff25c906bfa350f8337939f68e2e24b5c6bd9fc8cca33162c60012c3931b559fb7a347a67dc"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0xbf8f, [0x0, 0xffffffffffffffff, 0x10000, 0x6, 0x5]}}, @calipso={0x7, 0x8, {0x1, 0x0, 0x9}}, @ra={0x5, 0x2, 0xf7dd}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0xe, 0xa, [0xd285, 0xa20]}}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x1ff}]}, @fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x3, 0x66}, @hopopts={0x5e, 0xa, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xdbb4}, @calipso={0x7, 0x48, {0x0, 0x10, 0x8, 0x7e65, [0x325, 0xd, 0x9, 0xffffffffffffffff, 0x4, 0x7, 0x7, 0x9]}}]}, @dstopts={0x3b, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0xa}, @calipso={0x7, 0x10, {0x0, 0x2, 0xd, 0x7, [0x5]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x7, [0x1000]}}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}, @ra={0x5, 0x2, 0x400}, @pad1]}, @srh={0x88, 0x2, 0x4, 0x1, 0x8, 0x20, 0x5, [@dev={0xfe, 0x80, '\x00', 0x38}]}], {{0x4e20, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0x5, 0x1, "ea33be", 0xff, "06934c"}, "1c138a32aad52c7f8863b5061382fcd2a11d8fa1785cca991e8d2e2d19ca09c9b1bfb17a10b977be3f34c2b42ca85a77f94df4ad"}}}}}}, 0x0) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x1000000c, 0x12, 0x10003, 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r7, 0x20, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/37, 0x25}}, 0x10) sendmmsg$inet6(r5, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x87, "5a7ba55f09ffe3eb9e2abc05719963b3d448d11fd1320a7d20cc24296d39870277e450a79af13a85835ec246722c10abc9c6fd2caa54dc08ef589b6e4aa8492011cba302ed84fdfa16e5161f1679b60a84a6f027de5e072ca0577bd4bd845f3e794a77832566de24a602a902d7fb8453b92db58ea641b35f9979261e5a1532b3182fc0297ad273"}, &(0x7f0000000100)=0x8f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) 7.910566161s ago: executing program 1 (id=429): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfa682000) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000009000000050000000000000d0200"], 0x0, 0x3d, 0x0, 0x1}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04451d56c800c9bf"], 0x8) r1 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0xa, 0x2600) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f00000001c0)=0x9) 7.738970949s ago: executing program 2 (id=430): pipe2(0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080)=0x80, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0x5, 0xa) 7.580261919s ago: executing program 2 (id=431): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) dup(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_vhci(0x0, 0xa) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x824ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000047f17fd80000000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6689fc77e00020000000900000073797a30020000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40881) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000000000200000ed0a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a3200000000140000001100"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r1) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000083}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0xc0044dff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 6.299012787s ago: executing program 2 (id=434): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r0, &(0x7f0000000640)="05", 0x1, 0xc855, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) r4 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="000000020200"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x4) syz_usb_control_io(r4, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x28100, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6, 0x5c}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x43, {0x43, 0x10, "17cca4c3fde77e8b051af78a6436e6e722ba6aa0a273b46d600523d813edc54bac18b96fb79799aeb38a0884307ffe3e477a47c8f72d05263a0f64fbd6eaad8688"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "ebd8f9244fc265a2650c3077868db33c78ebcc98aafa9105aae6"}}, &(0x7f0000000100)={0x0, 0xf, 0x158, {0x5, 0xf, 0x158, 0x3, [@generic={0x93, 0x10, 0xb, "c26491f4af7206930f1ac4e4fee6abaef31bf259b2a93a0b59716bce17fbc1e360de7be8ba0f4256b262d38be0d322f26c3dc9acf5017719fc074bdee73e3ab7d029713aa70638ae9e0360344cf3aa987794b6c09c9f4044f8507cabc6fa56b8848af2fbbe78ad021b590b84310b6cf4b5919c3c6792b17c570ada85ac54f920c81082e4e4165b5bc7d0f7481cf61743"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "10d5b0b58dd737ed1da749eabcaa30fe"}, @generic={0xac, 0x10, 0x1, "563a7f0f27efb92d4ae9bf81256c22d930c2f2c7fcabf00d437ce97269067e5a28da7af33a05d6137e2e46155b7614b6e86de8f5be68450213b1cbee5d64e0048b0a0bed43862ec61747bbaba46363b96fd0a2350bf9cfb6157cf470c1c31b57fb8e373391e2517e7c8cf3ba570baa7a0e24614bb3b722d9cff84834b426e4470574cae74749939d5d1ff84a11c3f055deb44dfb92c6daee288ed41cfe41c58e4d484dc900b771fc09"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x3, 0x7, "3699d057", "991cd548"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6b, 0x1, 0x49, 0x5, 0x8, 0xfff0, 0x5}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000340)={0x20, 0x6, 0xd8, "004ebcbc2d925fb540e1153e35ebfc0954234aa523c8a93e626899636a8a38c57ed18e007b6dcbb6985bfa661837cf7fc35b083aa9146169023060a9241d55b013705ae655ccd534e9c610984a79637fd88fef40f1d466409966baba6f180569879183bd6880b7128925cd138d1f744d23dc2c0e3571d85c994673baf8e1921b0f76e40e0fd13b4f6c696aa8340dae4b33096a172ff477c1192b115c7035dd5c9a4f6fb9f8e1ea425f2bd9a7557c271a88f2de3cfd3c064a8117cda73e17a76b154db77c04ee0003fa55fc2d6c1c10b3161515b911ab8daf"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x4, 0x80}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "e6bf"}, &(0x7f0000000600)={0x40, 0xf, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x17, 0x6, @random="8e8f5472e492"}, &(0x7f0000000740)={0x40, 0x19, 0x2, 'SB'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x6b, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.22433022s ago: executing program 1 (id=435): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36", 0xb7}, {0x0}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d2", 0x61}, {0x0}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc", 0xe5}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x40010, r1, 0x1abee000) socket(0x2, 0x80805, 0x0) close(r0) 5.806503024s ago: executing program 3 (id=437): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) (async) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 5.798883366s ago: executing program 1 (id=438): io_setup(0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 5.227705644s ago: executing program 4 (id=442): r0 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x44, 0x1, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) exit(0x1f52b4ba) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x2}, 0x6) 5.072594929s ago: executing program 3 (id=443): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.268198038s ago: executing program 4 (id=444): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026, r0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x2000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e2fa29c79"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x1001f0, 0xdddd1000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x3000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x0, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) 4.19696941s ago: executing program 0 (id=445): ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000000001ff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x14, &(0x7f0000000040)={@local, @dev, @void, {@generic={0x8863, "d0a70ca9c1aa"}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r2, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x20044054) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r6) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000006c0)={&(0x7f0000000300)=[{0x5, 0xc001, 0x0, 0x0}], 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xfff, @empty, 0x26b0}], 0x1c) 4.032311254s ago: executing program 4 (id=446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$rds(0x15, 0x5, 0x0) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/55, 0x37) fcntl$setpipe(r0, 0x407, 0x206) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(0xffffffffffffffff, 0x1, 0x0) getsockopt(r2, 0x1, 0x7, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x44, 0x1, 0x9, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x44}}, 0x8000) 2.854736895s ago: executing program 4 (id=447): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendfile(r0, r1, 0x0, 0x106f) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 2.748978872s ago: executing program 4 (id=448): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fsopen(0x0, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0xa, 0x2001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@ll={0x11, 0xd, 0x0, 0x1, 0xe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, {&(0x7f0000000500)=""/183, 0xb7}, &(0x7f00000005c0)}, 0xa0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000030000000180001801400020076657468"], 0x2c}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) setpriority(0x1, r1, 0x5) setns(0xffffffffffffffff, 0x24020000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x10000000010, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8, @loopback, 0xffffff80}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4624, 0x40003, @mcast1}, {0x2, 0x4e22, 0xe0100000, @remote, 0xffffffff}, r5, 0x9dffffff}}, 0x48) 2.05220592s ago: executing program 4 (id=449): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000200)={{0x2, 0x4, 0xb, 0xd, 0x8, 0x9, 0x6, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0xdddd0000, 0x8000000, 0xa, 0xe, 0x5, 0x7, 0x4, 0x14, 0x3, 0x5, 0x0, 0x2}, {0xf000, 0x8000000, 0xb, 0x8, 0x4, 0x9, 0x81, 0x3, 0x10, 0xfe, 0x1, 0x70}, {0x5000, 0x10000, 0x0, 0xfe, 0x6, 0xaa, 0x1, 0x0, 0x0, 0x4, 0x84, 0xe}, {0xf000, 0x3000, 0xc, 0xff, 0x1, 0xb, 0x46, 0x7, 0x4, 0x6, 0x8, 0x7}, {0xd000, 0x3000, 0x9, 0xb9, 0x9, 0x5, 0x4, 0x4, 0x64, 0x1, 0x27, 0x1}, {0x8000000, 0x0, 0x0, 0x1, 0xc, 0x40, 0x4, 0x64, 0xe4, 0x1, 0x14, 0xe}, {0xffff1000, 0xdddcc004, 0xa, 0x21, 0x5, 0x8, 0x8, 0xc7, 0x7, 0x8, 0x43, 0x3}, {0xd000, 0x5}, {0x1, 0x7}, 0x40000000, 0x0, 0x6000, 0x40738, 0x8, 0xa801, 0xeeee0c00, [0x3, 0x5, 0x4, 0xc]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000740)={"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"}) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r5 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000140)={'nat\x00', 0x0, [0x800e2fa, 0x4de, 0x7, 0x4, 0x4]}, &(0x7f0000000280)=0x54) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000340)) 1.966381879s ago: executing program 0 (id=450): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) dup(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_vhci(0x0, 0xa) syz_open_dev$dvb_dvr(0x0, 0x0, 0x824ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40881) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000083}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0xc0044dff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{}, 0x0, 0x0}, 0x20) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x80) io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x8289c7cb1c3f95f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 1.947667394s ago: executing program 3 (id=451): add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="c80cb6dc71bbb6e6fe7389565b0fe703b37fdce8173e60d636428eb484f585a7d271efae1ae456f0eae7563e3395048b86bf2b7710fc479fdf819a189ae21d8abf7810af17895b560c02731c41df02", 0x4f, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) gettid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) unshare(0x2a020400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000080000000000000800010000009508000000000000"], &(0x7f0000000300)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) readv(r1, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) unshare(0x28060400) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x4, 0xe, 0x200, 0x9, 0xffc7}, 0x0, 0x0, 0x0) 1.355977992s ago: executing program 1 (id=452): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) read$dsp(r0, &(0x7f0000000300)=""/136, 0x88) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x90) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) 1.302467477s ago: executing program 0 (id=453): r0 = syz_open_dev$video4linux(&(0x7f0000001600), 0x5, 0xe0c61) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f00000002c0)={0x1, 0x1000000, 0x103, 0x3, {0xbffffffa, 0x8, 0x7, 0x3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0xf, 0xffffffff90a4fdce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a000000400007012bbd700000000000017c0000040001800c00028005001780b0000000d31a8554928225ac036f2e22ba12b2dd4ed786ce0a9f977a3c90823f9d96bd4fd67c64e58aede0ac6a1819fb7ac1a1cf"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)={0x3e0, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x3b0, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x360, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x31c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r8 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r8, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$kcm(0x29, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmmsg$inet(r3, &(0x7f0000000280), 0x0, 0x20000000) timer_create(0x0, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) 970.519667ms ago: executing program 2 (id=454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$rds(0x15, 0x5, 0x0) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(0xffffffffffffffff, 0x1, 0x0) getsockopt(r2, 0x1, 0x7, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x44, 0x1, 0x9, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x44}}, 0x8000) (fail_nth: 5) 408.115746ms ago: executing program 3 (id=455): socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x80c42, 0x1d0) syz_emit_ethernet(0x6e, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 366.37588ms ago: executing program 0 (id=456): pipe2(0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080)=0x80, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0x5, 0xa) 311.837827ms ago: executing program 3 (id=457): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x600, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) 293.943056ms ago: executing program 0 (id=458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ipvlan1\x00', 0x0}) 240.937338ms ago: executing program 0 (id=459): socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1d, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000b00410004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffe, "a1e96e2678b0afa605953ab4536f70c05f8f3c96fc304c0472ec0a7f01a413b4", 0x1, 0x848, 0xff, 0x10001}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0xfffff679, 0x6, 0x5, 0x1, 0x6, "b0cfc518474653f921e31ed71453439c21edd0", 0xfffffffa, 0xc}) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x9, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b40011", 0x29}], 0x1}, 0x884) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x6, 0xd00}]}]}}, &(0x7f0000000280)=""/265, 0x32, 0x109, 0x1}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newlink={0x4c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x5, 0xa75, 0x2}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x138, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xd, 0xc, "bd19e459749a73ca5b"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_USERDATA={0xec, 0xc, "deccae22ef5ae0730bdeeba8f783ee1a82b46ff97de652013a54806d4d3582871a970a835c2fe2e36285a4077d8ac64752caadedaede4ed35265a5ee7e4879a63df337304678e95d2d161a9fa688c1ad708be967c21569e0c61ba7a161f6d947f694973dd292e9cc4e3c23a9efbc8c56ae277f6f0d165a2a6bf96e3fc046abb11bf69c2d2257b21550d86cfa0fcff0316808265bc7d59247959e4754c47bfa4baea4be3141d08b50f06881af7072d8c0697783d8bbfbca6c9e0c26ce6643e5993bfc9fc95aa114a64630c6a6b71fcc783d8bc8583057c0ef59d67ad48198a362f9859dc25ed315c1"}]}, @NFT_MSG_NEWTABLE={0x68, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x15c, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x58, 0x6, "f772fd7b397b4d7e1e14790a236282a9776a21e9fe64bbd92c1e244d3f40843f99dbed425072cc6582bfb215d9ed0d0d67a8d39e9ac3535f0875e8161201146e5c1450fec952fe3cdc8b33b8e289720b1950c593"}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "1e42ccf58f311837fb3fbab3052baeb907b65958ddd2d5e33e89200b66a898e0f1797fa3945fe54cc114"}, @NFTA_TABLE_USERDATA={0xab, 0x6, "50ed890d5502148443e176e8eee9925a59d1558f60e403615d41a6ce30b72abd6558fe5188aa39f5b8871dc553d26b357e195546760336f1a7448936c0c944d5cc67cf64bc8e26c289e360016771af19b91565182cf830b75078b2d3dbb2da56fea474db3356d518727bb94dd7d853f68e6d2bccbbec657f4cb175f007ca2d291cd3882179dd127bffcbe214c7bc01099e58fc1684f334075b1537d41a855cd4fc1505d73914e2"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x32ac, 0xe, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1258, 0x3, 0x0, 0x1, [{0x105c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1058, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x134, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "dae08a2520f1778605be66ea99e1e269bb5c34417e4d731f549fecc5aa67e217115935a6a2a9643d3115a4e0bce7711fd3f0214bf627a440a6543956eea2d2c9394fdef9209aaeafa950488405c814310554de9d7c71fc0017ca49ad72a4d1f8fcdedb6235c178dba050a17c01147946b3af38ed29ba56dd65f1a66fe77e2d8aa0886de7aa2a3025ce08b2092e0d3d0f7fbc4905c7e05bc814eae637bfdc5f2120347ab6a9ab7db46e9b5b04daecc6c5ba2499c57ec031ab141ee3d07b1543811800def21069d6e185383d5ab43c15727b3004d299ba0e22bccbc65061147e4d344f346a"}, @NFTA_DATA_VALUE={0x47, 0x1, "a944ff2087faca00de4399d0b1e880c093a568b639ced20081fa25ebc458efe5aef71656b21dd08c6dad4cd9ea0dfbf73fd11949b8e0491b192b1b512fe419801c5aa8"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_DATA={0x60, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x18, 0x1, "652d1420d5ec11be9cc8b723b3e83294ba747a0c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1ffc, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x82, 0x1, "f9aa895dc5a1e9fed72a9feb148159b94590e15af4a632dcb4e74462d83c29d62e55a0c519ce5d8d4911faed67dddde33ec6e3a6a62b281f32f971996f936e480c665e898e628a950043eeef1a1db6d1c3aca73db0ad5b12c61e16cb0f9fc7ec6eb57e308bae4c481c3b4a99285897921eda430e7023239cb29156bb6cd8"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x21, 0x1, "a26eeb594695f5a37c400ccd488abaac39a10a0e0331b89d3fa963aa47"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x174, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x118, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xcbe00e834e98537c}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_KEY={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}, {0x248, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x244, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "48b782ac1ccc360d009d16fe34a5ddfb4c5ce976a080666794f91a399dc625949394da3a398f055d945d6de4e563774e1e9b043d007ecc1e5922b22efe4a8ad16b5f8d2d673408c24bbce61fe0609e22bec4bf70b1b1d48a0baa622c8efc283f41e9338db781781a76e85e6592c62e2a4be13906885cc004bafb0b7d26c920fe2a56720051751887edfecb6695fa97aef3c874652234c4da29733512c8cc9ad3d46d417ff6573fa1249b83f80901e4ebc7e54d1927d13e365c62373be86075a457f6ae69daa6c19d7bcab745ad0e2d2a2e3b8707a49a098433a378bedd"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x71, 0x1, "b00d1a7fb57e90996e4f48250377cb80871a517311e3be7240195c936a362451c8c719a304bd61f642a1e89dc5904861c8ea50f2fde113f4796dcf09e095516b3b95b711e5f53e4ee4eb795e9b44cb9d54d8da97363864cf905a96b3fc341bfc717910833c229fe28bd7c33db0"}]}]}, {0x154, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x93, 0x6, 0x1, 0x0, "9abfc461acf17696e71d15e92204ab32d8634e216e94aa59649093b477d92aa37539f8283fea2ccb5ad2ec34ddc5c7610da03e0d403df889a723f62cb63cecedb8bf923bfc160f82e202e708c16574ecd635f59f3730d793ba4e76a82d6e1a222b9186bb33d22eb358063ea13bca4222e2fa16a170e0523649603b64e0a6c391004d82d42a0e366911bd9a41a4e965"}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}]}, {0x258, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbe, 0x6, 0x1, 0x0, "42d4de6e7af43c9b94c608ec93bca0cbfe0f707372d8781a40071e2a6c4c2e84404661471a02b28e5b025a5f5981c2fd1295553af3edc90b38fe20e2d886b39a0ed3efe5a2942dfb43706af7fc03aafdb6a9c10b98a8c7a118dd1848a06f99304479aac2a75b81a8301f0ed242482ae3380c1b12219e53b878fb00497079dfdc0cc4b32aebb94eb0a019252e8b05a54c027deee75fb6f32311e84b1939f0c7aaa997c1a2acab47d65a3c00e495b2c797979d3475f8eb7fd8b506"}, @NFTA_SET_ELEM_EXPRESSIONS={0x164, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x74, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x48, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xf0}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x91}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BYTEORDER_DREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7232}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x410, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x40c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xed, 0x1, "938014d6768f5aeebf3220a02e6cb92f1f12d341421657a235b2697fed44aabb6a606b99c6d4bceab60eadb062c4ce17d18c79995bda42b805304b00c4484114817ac57cb1ea94c9255b99187507b00cdfd8e3b5536fd97033a14aae4ca56770ccc015c20221df950ea3fbc1f50ba8b78425d4e4e82a68203920267753f14f77127451fc0a1c55004b988e7e50f11c3d2f45286be2d5235059916bf0343c36c6a104e59f91a05bd0aaa682fb22fb67a5b7411b6874449e5659f6cc32130056f46244eb1696e7ad60945cbe65abc15d5ae26fb52597bd8868eb2c06a386e19a20adbb794f5df90f6a5c"}, @NFTA_DATA_VALUE={0x9c, 0x1, "b1453d79b8e71c7c0fbb0010092782d0f161937506452577858995439a71c237626f5ecba54eb525cd197dfa7beed7e6080fe05e33f1173575304329a64d809ab67a48cf8e08379eda50d1b82709b3d1ead4426220508545874e90055eea7b051604189c1f996f17f104ebb0d691e7e2e7be8404ad849b7e399a02663018f212b04cbf3681b23f0e19058172c1d3152d4626bc67931af97c"}, @NFTA_DATA_VALUE={0xbf, 0x1, "7e36c0f832b5d3a5d808954f964a5e3c4e87f0c1d32d930524ad1d614bca218aa5c4605feb121afd5c4d02de0c7f96e5bb2ed808ad0cad4165610cf67e66755852b174fc5abaa4bc4b10dd2c8fce4a74c8e0991e7647bebb4f162d00286c6956c36d527ff95214b5e3b3c127c7bea03edcdae01e9fb118f45c3e95264b8923f6eb990b32695d06f97ba5dd71603e2f910e93a7d749c539d22cce7efded1ec637ca6a061862b8bc1a73350eded2a8b655cae84773896061a8b84b26"}, @NFTA_DATA_VALUE={0x6e, 0x1, "eec821705761b424c157d814c361f9493125ebbf3725fdb10eadbec511404b9186d60497ec4207dad775ed54d763986a3252fa49dfafba7b282aa602c95ab00d6914e658ef9c60fa611f165e024632ac432ef16969caccf8a0130057936ea9522562e3ba236f91dd7331"}, @NFTA_DATA_VALUE={0x70, 0x1, "748592dfd6dc9ac2699eeb728d936c5b4b88c6c7df2c4e6fd11b3c169039b69a680816320c2424a98fbb9996f03ae33b9d9c84d485f56f1d14e444d2b5e602b29db00a85299e14792cf4d6a941831defc66faa43fb4b306a64eea105236cd84a5b727b660ba7b545200c4d3d"}, @NFTA_DATA_VALUE={0xaa, 0x1, "8846131feb3571f218f4bbe394601ffd8de9589690cf25167ae31ef0d6385eb624773d2588877838c7c61e1f835d655da5e7dd50639b4bcc5e4d0f77693093b06dd6c02cbb964b4db5a2659120e671fcf3d2d0d2f11053f404f82b8b739ccb95914bba5e33248bb7b6a96e4b98e8cc5cbc1c9de319d39ac88d8f0af1cd9600499ad911e7f3b3a67f98b3d0139bab8d343187f8dcd0ced67b26167bc7ed5e5694141325dc7b2e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x12b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x12ac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "6763d55adfb7c24011197a01c252e960f81d7919a9008ae98cf69666b92020ad765275062da8c0d6252d5e8eb9741ada2d6a4f98c2792f52dfb28fa69d15663c868489727e7f47cbf17dd184f540e7dcfc3fc41a7b9590a553994e67f21fb954cc4231914700693459a13b760a3d11648ebd0a121b6f2fbdb28b1ff8930c91a80b2c86dc9a9975cdb10d0848e037887af4d8d40e4cb7ed5a613bcb05b1fd2c3fdf51e3f52c896b2c5f70"}, @NFTA_DATA_VALUE={0x3e, 0x1, "762f0ff43f8bc712fd9b1da027fb627c0a01553f273f4bc8cf1db7f13db092765b6c087b7bbe89bf57cc360bc7f3c6234d9c1c88951dd22d4ee9"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "164c1e8dd0b2edf850ca51cd737b7780fb3df7c7d2585ca9aab79432c1d6bcd038e6ef9eaa64713c3ef713c6ee87e61aa82caa29b9001205ed8d6276c66913f14e56608ce29b3bd552e96e10ec61d433391a013eb410032513c4c6b69113d07364a42e6712915471ddd9864039f18e7d7de5148751e2946daa85a281b8fc6bcfb30e34bc4f0ef6e18ca8028ab40afca5a9db99a89053da1b40f8fb1b4ccaa496d1aa9e403f36e5519e7fafcd0f199321fa688d4ec60f065f55ac004da4dd72f93aea6400687d8ee9ac828ad38f96fce33fac82adb371fd41"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xb4, 0x1, "ed54afc8a1763dab2b6dcec0f44a59cfe6522c6b0ee9dd6c0f0337dc015528ca37e0ebd56312457a6e1e53a547ea3cd851d14f467c416feb14b15a1bd5978200370fe1c54409f4428c0e28a7e9cedff2ff0bbcd7920ca7b15e6d27d527af89e764898fc3501b5592b65bab420bad9f0f23bf91f93493164a6d07129d6e375b62d8b7a2f7e0227b9aec61efd6758619ab10fc81e8cf773b252cb5d889c3cbb5f2156df4b0715ab892ddea52b8fee705e7"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3660}, 0x1, 0x0, 0x0, 0x8880}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x4000000) syz_emit_ethernet(0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="e0000000008b4fb486d5c29908"], 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x498600, 0x82, 0x1a}, 0x18) r8 = add_key$fscrypt_provisioning(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000600)=ANY=[@ANYBLOB="030000000000000061626c6d6e6f707172737475767778797a303932333435360c8d6537b40cfb58dde4577336f0cdd402ab293b431a640a9ad04127b27322ad081651a053c155330bd24e6f5583c6240f7b96cf0e54ee8109b60921895ccd24e3638e2bc89a742cb0240bb976220d2179facbe7f718afe82d9decb9103127a4ee04849318b331125ddbaaf4976373580faae0080042dfabea4672164c487251868e2f2332ec16739e860068a8d1a0942d8f6178422057b7581a7775bda0a340671ddd680a6c73d3220a4a789ae2c71ae83d46b51ac19dd7c7a6f2890040fcf91c6c2c7f56138aeabead9315a1f7a4c4f3f4f406377eafe789f10ab6496ef1fe2ab035f6dc5ef902a77f6b2121669cfb2a52bf231878bf4662f132eaab94d981e1ddeefb3168def1e8c4c10fa9b897afa881670b7450c65e9f3f623e897911ff2ccacc222e2d14c389c23474f97f2c49"], 0x29, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, r8, 0x4, 0xa, r9) 181.319939ms ago: executing program 3 (id=460): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fsopen(0x0, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0xa, 0x2001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@ll={0x11, 0xd, 0x0, 0x1, 0xe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, {&(0x7f0000000500)=""/183, 0xb7}, &(0x7f00000005c0)}, 0xa0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000030000000180001801400020076657468"], 0x2c}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) setpriority(0x1, r1, 0x5) setns(0xffffffffffffffff, 0x24020000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x10000000010, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8, @loopback, 0xffffff80}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4624, 0x40003, @mcast1}, {0x2, 0x4e22, 0xe0100000, @remote, 0xffffffff}, r5, 0x9dffffff}}, 0x48) 0s ago: executing program 2 (id=461): ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000000001ff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x14, &(0x7f0000000040)={@local, @dev, @void, {@generic={0x8863, "d0a70ca9c1aa"}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r2, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x20044054) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r6) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000006c0)={&(0x7f0000000300)=[{0x5, 0xc001, 0x0, 0x0}], 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xfff, @empty, 0x26b0}], 0x1c) kernel console output (not intermixed with test programs): t read configurations, error -71 [ 87.983751][ T5870] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 88.145824][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.181545][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 88.195676][ T5899] usb 2-1: cp210x converter now attached to ttyUSB0 [ 88.232539][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 88.280142][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 88.322227][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.529699][ T5899] usb 2-1: USB disconnect, device number 3 [ 88.554109][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 88.684346][ T5870] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 88.714584][ T5899] cp210x 2-1:0.0: device disconnected [ 88.727786][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.759393][ T5870] usb 1-1: Product: syz [ 88.777031][ T5870] usb 1-1: Manufacturer: syz [ 88.785618][ T5870] usb 1-1: SerialNumber: syz [ 88.792611][ T5870] usb 1-1: config 0 descriptor?? [ 88.799997][ T6164] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 88.852212][ T6178] Zero length message leads to an empty skb [ 88.913351][ T5870] rc_core: IR keymap rc-xbox-dvd not found [ 88.929072][ T5870] Registered IR keymap rc-empty [ 88.951984][ T5870] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 88.998800][ T5870] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 89.313329][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 89.430493][ T6187] bridge0: port 3(geneve1) entered blocking state [ 89.437892][ T6187] bridge0: port 3(geneve1) entered disabled state [ 89.446883][ T6187] geneve1: entered allmulticast mode [ 89.463658][ T6187] geneve1: entered promiscuous mode [ 89.472040][ T6187] bridge0: port 3(geneve1) entered blocking state [ 89.479143][ T6187] bridge0: port 3(geneve1) entered forwarding state [ 89.517267][ T6187] netlink: 'syz.1.67': attribute type 10 has an invalid length. [ 89.526799][ T6187] bridge0: port 3(geneve1) entered disabled state [ 89.534090][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.541761][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.574571][ T6187] bridge0: port 3(geneve1) entered blocking state [ 89.581110][ T6187] bridge0: port 3(geneve1) entered forwarding state [ 89.587997][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.595158][ T6187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.602595][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.609774][ T6187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.635060][ T6187] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 89.940662][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 89.940673][ T30] audit: type=1400 audit(1776478810.072:230): avc: denied { name_bind } for pid=6189 comm="syz.2.68" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.036111][ T6190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.046214][ T5870] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.181594][ T6188] netlink: 'syz.0.61': attribute type 10 has an invalid length. [ 90.213892][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 90.232370][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.261478][ T5870] usb 2-1: config 4 interface 0 has no altsetting 0 [ 90.278280][ T5870] usb 2-1: string descriptor 0 read error: -22 [ 90.289850][ T5870] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 90.319587][ T5870] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 90.395479][ T5870] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 90.475368][ T5870] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 90.523188][ T5870] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 90.557963][ T5870] usb 2-1: media controller created [ 90.664858][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.812299][ T30] audit: type=1400 audit(1776478810.942:231): avc: denied { create } for pid=6196 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.074691][ T6164] ISOFS: Unable to identify CD-ROM format. [ 91.257671][ T6200] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 91.282098][ T6188] team0: Device ipvlan1 failed to register rx_handler [ 91.299933][ T6200] qnx6: wrong signature (magic) in superblock #1. [ 91.306648][ T6200] qnx6: unable to read the first superblock [ 91.445428][ T5822] usb 1-1: USB disconnect, device number 4 [ 91.445542][ C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 91.462465][ T30] audit: type=1400 audit(1776478811.592:232): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.886269][ T5870] zl10353_read_register: readreg error (reg=127, ret==0) [ 92.008531][ T30] audit: type=1400 audit(1776478812.052:233): avc: denied { create } for pid=6204 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 92.245299][ T30] audit: type=1400 audit(1776478812.052:234): avc: denied { write } for pid=6204 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 92.270858][ T30] audit: type=1400 audit(1776478812.242:235): avc: denied { create } for pid=6204 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.313368][ T5870] usb 2-1: USB disconnect, device number 4 [ 92.487893][ T5823] Bluetooth: hci0: failed to read key size for handle 201 [ 93.131381][ T30] audit: type=1400 audit(1776478813.182:236): avc: denied { create } for pid=6213 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.231487][ T5823] Bluetooth: hci0: failed to read key size for handle 201 [ 93.395475][ T6226] ======================================================= [ 93.395475][ T6226] WARNING: The mand mount option has been deprecated and [ 93.395475][ T6226] and is ignored by this kernel. Remove the mand [ 93.395475][ T6226] option from the mount to silence this warning. [ 93.395475][ T6226] ======================================================= [ 93.450251][ T6226] overlayfs: missing 'lowerdir' [ 93.776804][ T30] audit: type=1400 audit(1776478813.562:237): avc: denied { mount } for pid=6220 comm="syz.3.76" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 94.120882][ T30] audit: type=1400 audit(1776478813.572:238): avc: denied { mounton } for pid=6220 comm="syz.3.76" path="/17/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 94.164730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.327743][ T30] audit: type=1400 audit(1776478814.462:239): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 94.583368][ T5822] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.967263][ T5822] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.976224][ T30] audit: type=1400 audit(1776478815.112:240): avc: denied { read } for pid=6236 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.003689][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.018327][ T5822] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 95.111494][ T5822] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 95.126067][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.146730][ T5822] usb 1-1: Product: syz [ 95.153592][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.162752][ T5822] usb 1-1: Manufacturer: syz [ 95.181701][ T5822] usb 1-1: SerialNumber: syz [ 95.323941][ T30] audit: type=1400 audit(1776478815.452:241): avc: denied { write } for pid=6243 comm="syz.2.82" name="route" dev="proc" ino=4026533135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 95.349062][ T6247] syz.2.82 uses obsolete (PF_INET,SOCK_PACKET) [ 95.355362][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 95.369211][ T9] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 95.395308][ T9] usb 5-1: config 0 has no interface number 0 [ 95.409463][ T9] usb 5-1: config 0 interface 255 has no altsetting 0 [ 95.435723][ T6247] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 95.455723][ T9] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 95.477582][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.544612][ T9] usb 5-1: config 0 descriptor?? [ 95.555652][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 95.614946][ T5936] usb 1-1: USB disconnect, device number 5 [ 96.376309][ T6259] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 97.110945][ T30] audit: type=1400 audit(1776478817.242:242): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.142852][ T6265] netlink: 'syz.0.86': attribute type 11 has an invalid length. [ 97.317220][ T30] audit: type=1400 audit(1776478817.242:243): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.293154][ T9] gspca_vc032x: reg_w err -110 [ 98.300084][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.305486][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.310767][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.316072][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.321368][ T30] audit: type=1400 audit(1776478817.242:244): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.211595][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.217427][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.229550][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.236038][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.241402][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.246749][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.252196][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.261326][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.266681][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.267078][ T30] audit: type=1400 audit(1776478819.392:245): avc: denied { setopt } for pid=6268 comm="syz.2.88" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.271959][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.271969][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.271976][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.271984][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.271991][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.271999][ T9] gspca_vc032x: Unknown sensor... [ 99.272056][ T9] vc032x 5-1:0.255: probe with driver vc032x failed with error -22 [ 99.479072][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 99.503904][ T5936] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.529395][ T30] audit: type=1400 audit(1776478819.662:246): avc: denied { create } for pid=6282 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.653011][ T30] audit: type=1400 audit(1776478819.692:247): avc: denied { setopt } for pid=6282 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.773981][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 99.947022][ T30] audit: type=1400 audit(1776478819.692:248): avc: denied { append } for pid=6282 comm="syz.0.89" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.027434][ T5899] usb 5-1: USB disconnect, device number 3 [ 100.039207][ T30] audit: type=1400 audit(1776478819.932:249): avc: denied { firmware_load } for pid=6284 comm="syz.2.90" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 100.104170][ T5936] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 100.115240][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.126317][ T5936] usb 2-1: Product: syz [ 100.136640][ T5936] usb 2-1: Manufacturer: syz [ 100.146498][ T5936] usb 2-1: SerialNumber: syz [ 100.175791][ T5936] usb 2-1: config 0 descriptor?? [ 100.882280][ T5936] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 100.904086][ T5936] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 100.947070][ T5936] usb 2-1: USB disconnect, device number 5 [ 100.990607][ T30] audit: type=1400 audit(1776478821.122:250): avc: denied { setopt } for pid=6303 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.017882][ T5899] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.039214][ T30] audit: type=1400 audit(1776478821.152:251): avc: denied { create } for pid=6284 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.223922][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 101.553880][ T30] audit: type=1400 audit(1776478821.152:252): avc: denied { create } for pid=6303 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.582997][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 101.600618][ T30] audit: type=1400 audit(1776478821.152:253): avc: denied { connect } for pid=6303 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.646286][ T6311] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 101.679003][ T30] audit: type=1400 audit(1776478821.172:254): avc: denied { listen } for pid=6303 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.708742][ T5899] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 101.735845][ T6287] syz.2.90 (6287) used greatest stack depth: 17512 bytes left [ 101.752765][ T5899] usb 5-1: config 1 has no interface number 0 [ 101.756733][ T30] audit: type=1400 audit(1776478821.172:255): avc: denied { accept } for pid=6303 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.825303][ T5899] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 101.909878][ T5899] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 101.943829][ T30] audit: type=1400 audit(1776478821.252:256): avc: denied { create } for pid=6305 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.007512][ T5899] usb 5-1: config 1 interface 105 has no altsetting 0 [ 102.008219][ T30] audit: type=1400 audit(1776478821.362:257): avc: denied { write } for pid=6305 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.034720][ T30] audit: type=1400 audit(1776478821.362:258): avc: denied { nlmsg_write } for pid=6305 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.148343][ T5899] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 102.598845][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 102.637364][ T5899] usb 5-1: Product: syz [ 102.654863][ T5899] usb 5-1: Manufacturer: syz [ 102.682084][ T5899] usb 5-1: SerialNumber: syz [ 102.714650][ T6296] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 102.733936][ T6296] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 102.785041][ T6332] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 102.934752][ T6332] veth0_vlan: left promiscuous mode [ 103.027150][ T6332] veth0_vlan: entered promiscuous mode [ 103.080931][ T6332] team0: Device veth0_vlan failed to register rx_handler [ 103.202916][ T6296] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 103.238700][ T6296] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 103.457538][ T6343] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 103.848689][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.880777][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.120950][ T5899] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 104.144079][ T5899] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 104.181464][ T5899] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b6:b3:80:c4:4b:b8 [ 104.219548][ T5899] usb 5-1: USB disconnect, device number 4 [ 104.257186][ T5899] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 104.384174][ T24] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 104.417161][ T5899] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 104.446112][ T5899] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 104.468047][ T5899] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 104.555231][ T24] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 104.623559][ T5822] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.685947][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.707862][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.744917][ T24] usb 3-1: config 0 has no interface number 0 [ 104.782022][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 104.784690][ T5822] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 104.821883][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.840733][ T5822] usb 4-1: config 0 descriptor?? [ 104.851517][ T5822] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 104.860508][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.879368][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.890998][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.897467][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.935468][ T10] usb 2-1: config 0 descriptor?? [ 104.955296][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 104.962962][ T24] usb 3-1: Product: syz [ 104.978472][ T24] usb 3-1: Manufacturer: syz [ 104.991040][ T24] usb 3-1: SerialNumber: syz [ 105.021337][ T24] usb 3-1: config 0 descriptor?? [ 105.040790][ T24] hub 3-1:0.31: bad descriptor, ignoring hub [ 105.053486][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.094271][ T24] hub 3-1:0.31: probe with driver hub failed with error -5 [ 105.137534][ T24] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 105.158864][ T24] uvcvideo 3-1:0.31: No valid video chain found. [ 105.189091][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.227783][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 105.227800][ T30] audit: type=1400 audit(1776478825.362:293): avc: denied { lock } for pid=6385 comm="syz.0.114" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 105.258424][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 105.267887][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.287889][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.304905][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.345462][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.361620][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.377292][ T9] usb 5-1: Product: syz [ 105.387421][ T9] usb 5-1: Manufacturer: syz [ 105.402368][ T9] usb 5-1: SerialNumber: syz [ 105.433391][ T9] usb 5-1: config 0 descriptor?? [ 105.442747][ T30] audit: type=1400 audit(1776478825.572:294): avc: denied { watch } for pid=6350 comm="syz.2.109" path="/26" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 105.580470][ T6392] EXT4-fs (nbd2): unable to read superblock [ 105.773233][ T5870] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.873110][ T6393] kAFS: unable to lookup cell 'ÿ' [ 105.886036][ T5822] gspca_cpia1: usb_control_msg 05, error -110 [ 105.892449][ T5822] gspca_cpia1: usb_control_msg 01, error -32 [ 105.899074][ T5822] gspca_cpia1: usb_control_msg 01, error -32 [ 105.907265][ T5822] gspca_cpia1: usb_control_msg 01, error -32 [ 105.917813][ T5822] gspca_cpia1: usb_control_msg 01, error -32 [ 105.924588][ T5822] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 105.933167][ T30] audit: type=1400 audit(1776478826.062:295): avc: denied { bind } for pid=6359 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.943358][ T5822] usb 4-1: USB disconnect, device number 5 [ 105.976762][ T5877] usb 3-1: USB disconnect, device number 3 [ 105.994791][ T5870] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.030519][ T5870] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 106.047824][ T5870] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.071874][ T5870] usb 1-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 106.089891][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.099081][ T5870] usb 1-1: Product: syz [ 106.104266][ T5870] usb 1-1: Manufacturer: syz [ 106.109092][ T5870] usb 1-1: SerialNumber: syz [ 106.796182][ T5823] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 106.816864][ T5823] Bluetooth: hci2: Injecting HCI hardware error event [ 106.826009][ T5823] Bluetooth: hci2: hardware error 0x00 [ 106.855950][ T5870] usb 1-1: USB disconnect, device number 6 [ 106.946396][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.134692][ T6410] sctp: [Deprecated]: syz.0.118 (pid 6410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.134692][ T6410] Use struct sctp_sack_info instead [ 107.380957][ T30] audit: type=1400 audit(1776478827.512:296): avc: denied { name_connect } for pid=6414 comm="syz.0.120" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 107.675849][ T30] audit: type=1400 audit(1776478827.812:297): avc: denied { getopt } for pid=6420 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.038312][ T30] audit: type=1400 audit(1776478828.152:298): avc: denied { write } for pid=6421 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 108.084901][ T30] audit: type=1400 audit(1776478828.212:299): avc: denied { setcurrent } for pid=6421 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 108.131123][ T10] pwc: send_video_command error -71 [ 108.161079][ T30] audit: type=1326 audit(1776478828.292:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6427 comm="syz.3.123" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe25bf9c819 code=0x0 [ 108.201646][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 108.209987][ T10] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 108.232047][ T6432] FAULT_INJECTION: forcing a failure. [ 108.232047][ T6432] name failslab, interval 1, probability 0, space 0, times 1 [ 108.251210][ T10] usb 2-1: USB disconnect, device number 6 [ 108.271869][ T6432] CPU: 0 UID: 0 PID: 6432 Comm: syz.1.124 Not tainted syzkaller #0 PREEMPT(full) [ 108.271891][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 108.271901][ T6432] Call Trace: [ 108.271907][ T6432] [ 108.271913][ T6432] dump_stack_lvl+0x100/0x190 [ 108.271938][ T6432] should_fail_ex.cold+0x5/0xa [ 108.271962][ T6432] should_failslab+0xc2/0x120 [ 108.271989][ T6432] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 108.272011][ T6432] ? __break_lease+0x129/0x1970 [ 108.272030][ T6432] ? __pfx_avc_has_perm+0x10/0x10 [ 108.272051][ T6432] __break_lease+0x129/0x1970 [ 108.272073][ T6432] ? evm_verify_current_integrity+0x85/0xe0 [ 108.272105][ T6432] ? __pfx___break_lease+0x10/0x10 [ 108.272125][ T6432] ? __pfx_evm_inode_set_acl+0x10/0x10 [ 108.272154][ T6432] ? down_write+0x146/0x1f0 [ 108.272176][ T6432] ? __pfx_down_write+0x10/0x10 [ 108.272203][ T6432] vfs_remove_acl+0x3c2/0x700 [ 108.272226][ T6432] path_removexattrat+0x55f/0x5f0 [ 108.272246][ T6432] ? __pfx_path_removexattrat+0x10/0x10 [ 108.272285][ T6432] ? ksys_write+0x1ac/0x250 [ 108.272310][ T6432] ? __pfx_ksys_write+0x10/0x10 [ 108.272341][ T6432] __x64_sys_fremovexattr+0x5a/0x80 [ 108.272363][ T6432] do_syscall_64+0x10b/0xf80 [ 108.272382][ T6432] ? clear_bhb_loop+0x40/0x90 [ 108.272403][ T6432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.272420][ T6432] RIP: 0033:0x7f182c79c819 [ 108.272434][ T6432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.272454][ T6432] RSP: 002b:00007f182d57d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 108.272470][ T6432] RAX: ffffffffffffffda RBX: 00007f182ca15fa0 RCX: 00007f182c79c819 [ 108.272480][ T6432] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 108.272490][ T6432] RBP: 00007f182d57d090 R08: 0000000000000000 R09: 0000000000000000 [ 108.272500][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.272509][ T6432] R13: 00007f182ca16038 R14: 00007f182ca15fa0 R15: 00007ffda2d7d7b8 [ 108.272532][ T6432] [ 108.544986][ T5822] usb 5-1: USB disconnect, device number 5 [ 108.557758][ T30] audit: type=1400 audit(1776478828.652:301): avc: denied { write } for pid=6427 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.594699][ T30] audit: type=1400 audit(1776478828.662:302): avc: denied { read } for pid=6427 comm="syz.3.123" path="socket:[10860]" dev="sockfs" ino=10860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.783365][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.924136][ T5823] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 108.936227][ T6434] dlm: plock device version mismatch: kernel (1.2.0), user (51380498.1073991450.656419) [ 108.948024][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.960653][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 108.968470][ T24] usb 3-1: can't read configurations, error -71 [ 109.133930][ T5870] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 109.332415][ T5870] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 109.411423][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.440837][ T5870] usb 2-1: config 0 descriptor?? [ 109.470226][ T5870] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 110.400328][ T5870] gspca_cpia1: usb_control_msg 05, error -71 [ 110.430412][ T5870] gspca_cpia1: usb_control_msg 01, error -71 [ 110.458903][ T5870] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 110.498270][ T5870] usb 2-1: USB disconnect, device number 7 [ 110.829355][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 110.839800][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 110.848819][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 110.858560][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 111.072633][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 111.072645][ T30] audit: type=1400 audit(1776478831.202:308): avc: denied { ioctl } for pid=6484 comm="syz.3.140" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 111.144428][ T30] audit: type=1400 audit(1776478831.242:309): avc: denied { set_context_mgr } for pid=6484 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 111.203365][ T30] audit: type=1400 audit(1776478831.272:310): avc: denied { write } for pid=6484 comm="syz.3.140" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 111.278005][ T30] audit: type=1400 audit(1776478831.272:311): avc: denied { open } for pid=6484 comm="syz.3.140" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 111.359221][ T30] audit: type=1400 audit(1776478831.462:312): avc: denied { execute } for pid=6486 comm="syz.2.141" path="/32/cpu.stat" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.433335][ T5822] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.581422][ T30] audit: type=1400 audit(1776478831.712:313): avc: denied { create } for pid=6490 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 111.600941][ T5822] usb 4-1: Using ep0 maxpacket: 16 [ 111.621311][ T6491] netlink: 'syz.0.142': attribute type 33 has an invalid length. [ 111.621311][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.649710][ T30] audit: type=1400 audit(1776478831.782:314): avc: denied { write } for pid=6490 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 111.685547][ T5822] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 111.694840][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.713331][ T5822] usb 4-1: Product: syz [ 111.719090][ T5822] usb 4-1: Manufacturer: syz [ 111.729419][ T5822] usb 4-1: SerialNumber: syz [ 111.748417][ T5822] usb 4-1: config 0 descriptor?? [ 111.764025][ T5822] asix 4-1:0.0: probe with driver asix failed with error -22 [ 111.969668][ T30] audit: type=1400 audit(1776478832.102:315): avc: denied { map } for pid=6484 comm="syz.3.140" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 112.026166][ T30] audit: type=1400 audit(1776478832.162:316): avc: denied { ioctl } for pid=6484 comm="syz.3.140" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x661a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 113.262109][ T6503] FAULT_INJECTION: forcing a failure. [ 113.262109][ T6503] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.275548][ T6503] CPU: 0 UID: 0 PID: 6503 Comm: syz.4.145 Not tainted syzkaller #0 PREEMPT(full) [ 113.275571][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 113.275580][ T6503] Call Trace: [ 113.275586][ T6503] [ 113.275592][ T6503] dump_stack_lvl+0x100/0x190 [ 113.275617][ T6503] should_fail_ex.cold+0x5/0xa [ 113.275641][ T6503] _copy_to_user+0x32/0xd0 [ 113.275670][ T6503] drm_ioctl+0x608/0xc60 [ 113.275708][ T6503] ? __pfx_drm_mode_getresources+0x10/0x10 [ 113.275726][ T6503] ? __pfx_drm_ioctl+0x10/0x10 [ 113.275756][ T6503] ? selinux_file_ioctl+0x13b/0x290 [ 113.275780][ T6503] ? selinux_file_ioctl+0xb6/0x290 [ 113.275805][ T6503] ? __pfx_drm_ioctl+0x10/0x10 [ 113.275829][ T6503] __x64_sys_ioctl+0x18e/0x210 [ 113.275856][ T6503] do_syscall_64+0x10b/0xf80 [ 113.275875][ T6503] ? clear_bhb_loop+0x40/0x90 [ 113.275896][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.275914][ T6503] RIP: 0033:0x7f437039c819 [ 113.275928][ T6503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.275944][ T6503] RSP: 002b:00007f437118e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.275960][ T6503] RAX: ffffffffffffffda RBX: 00007f4370616090 RCX: 00007f437039c819 [ 113.275970][ T6503] RDX: 0000200000000180 RSI: 00000000c04064a0 RDI: 0000000000000006 [ 113.275980][ T6503] RBP: 00007f437118e090 R08: 0000000000000000 R09: 0000000000000000 [ 113.275989][ T6503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.275998][ T6503] R13: 00007f4370616128 R14: 00007f4370616090 R15: 00007ffd34f7cab8 [ 113.276021][ T6503] [ 113.500141][ T6503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.145'. [ 114.245669][ T5822] usb 4-1: USB disconnect, device number 6 [ 114.308256][ T6508] netlink: 260 bytes leftover after parsing attributes in process `syz.1.147'. [ 114.332595][ T30] audit: type=1400 audit(1776478834.462:317): avc: denied { write } for pid=6511 comm="syz.0.150" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.526939][ T6511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.746367][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 116.746382][ T30] audit: type=1400 audit(1776478836.882:320): avc: denied { write } for pid=6565 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.960523][ T6572] Bluetooth: MGMT ver 1.23 [ 117.401083][ T6581] netlink: 'syz.1.161': attribute type 1 has an invalid length. [ 117.596721][ T5936] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.796477][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.807239][ T5936] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 117.816685][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.832293][ T5936] usb 3-1: config 0 descriptor?? [ 117.895449][ T6591] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 118.000228][ T5870] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.420555][ T5877] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.638017][ T5877] usb 5-1: config 3 has an invalid interface number: 157 but max is 2 [ 118.731409][ T5877] usb 5-1: config 3 has an invalid interface number: 160 but max is 2 [ 118.750423][ T5877] usb 5-1: config 3 has an invalid interface number: 185 but max is 2 [ 118.769947][ T6598] netlink: 'syz.3.166': attribute type 2 has an invalid length. [ 118.778598][ T5877] usb 5-1: config 3 has an invalid interface number: 59 but max is 2 [ 118.794746][ T5877] usb 5-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 118.809218][ T5936] (null): keene_cmd_main failed (-110) [ 118.829294][ T5877] usb 5-1: config 3 has no interface number 0 [ 118.834886][ T5936] video4linux radio48: keene_cmd_main failed (-32) [ 118.855187][ T5936] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 118.866513][ T5870] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.880733][ T5877] usb 5-1: config 3 has no interface number 1 [ 118.887057][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.902878][ T5870] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 118.946790][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.947059][ T5877] usb 5-1: config 3 has no interface number 2 [ 118.971870][ T5870] usb 1-1: Product: syz [ 118.987874][ T30] audit: type=1400 audit(1776478839.122:321): avc: denied { getopt } for pid=6600 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.012470][ T5877] usb 5-1: config 3 has no interface number 3 [ 119.016283][ T5870] usb 1-1: Manufacturer: syz [ 119.032867][ T5870] usb 1-1: SerialNumber: syz [ 119.160437][ T30] audit: type=1400 audit(1776478839.122:322): avc: denied { write } for pid=6605 comm="syz.3.168" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 119.161728][ T5877] usb 5-1: config 3 interface 157 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 119.190976][ T5870] usb 1-1: 0:1 : does not exist [ 119.291583][ T30] audit: type=1400 audit(1776478839.172:323): avc: denied { bind } for pid=6605 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.450576][ T5877] usb 5-1: config 3 interface 157 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 119.471161][ T5877] usb 5-1: config 3 interface 157 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 119.473831][ T5870] usb 1-1: 3:0: failed to get current value for ch 0 (-32) [ 119.481615][ T5877] usb 5-1: config 3 interface 157 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 119.499279][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 119.500326][ T30] audit: type=1400 audit(1776478839.172:324): avc: denied { ioctl } for pid=6605 comm="syz.3.168" path="socket:[11697]" dev="sockfs" ino=11697 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.523345][ T5877] usb 5-1: config 3 interface 157 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 119.558392][ T5870] usb 1-1: unit 0 not found! [ 119.593093][ T5877] usb 5-1: config 3 interface 157 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 11 [ 119.614058][ T30] audit: type=1400 audit(1776478839.252:325): avc: denied { ioctl } for pid=6600 comm="syz.1.167" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 119.628786][ T5877] usb 5-1: too many endpoints for config 3 interface 160 altsetting 56: 195, using maximum allowed: 30 [ 119.666572][ T5877] usb 5-1: config 3 interface 160 altsetting 56 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 119.667111][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 119.690107][ T9] usb 4-1: config 0 has no interface number 0 [ 119.690910][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.160'. [ 119.705541][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 119.712416][ T5877] usb 5-1: config 3 interface 160 altsetting 56 has a duplicate endpoint with address 0xA, skipping [ 119.728611][ T6573] ubi0: attaching mtd0 [ 119.736304][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 119.745892][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.763130][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.773041][ T9] usb 4-1: Product: syz [ 119.785320][ T5877] usb 5-1: config 3 interface 160 altsetting 56 endpoint 0x5 has an invalid bInterval 174, changing to 7 [ 119.798037][ T9] usb 4-1: Manufacturer: syz [ 119.805158][ T6573] ubi0: scanning is finished [ 119.811584][ T9] usb 4-1: SerialNumber: syz [ 119.817481][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.825462][ T6573] ubi0: empty MTD device detected [ 119.831311][ T5877] usb 5-1: config 3 interface 160 altsetting 56 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 119.842885][ T9] usb 4-1: config 0 descriptor?? [ 119.865670][ T5877] usb 5-1: config 3 interface 160 altsetting 56 has a duplicate endpoint with address 0x9, skipping [ 119.881157][ T10] usb 1-1: USB disconnect, device number 7 [ 119.951830][ T5877] usb 5-1: config 3 interface 160 altsetting 56 has 5 endpoint descriptors, different from the interface descriptor's value: 195 [ 119.996050][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.012449][ T5877] usb 5-1: config 3 interface 185 altsetting 199 has a duplicate endpoint with address 0x2, skipping [ 120.046440][ T5877] usb 5-1: config 3 interface 185 altsetting 199 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 120.062177][ T5877] usb 5-1: config 3 interface 185 altsetting 199 has a duplicate endpoint with address 0x9, skipping [ 120.099910][ T6573] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 120.115894][ T5877] usb 5-1: config 3 interface 185 altsetting 199 has a duplicate endpoint with address 0x5, skipping [ 120.133802][ T6573] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 120.143553][ T5877] usb 5-1: config 3 interface 185 altsetting 199 has a duplicate endpoint with address 0x2, skipping [ 120.163558][ T6573] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 120.170754][ T5877] usb 5-1: config 3 interface 59 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 120.193941][ T5877] usb 5-1: config 3 interface 59 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 120.197051][ T6573] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 120.223828][ T5877] usb 5-1: config 3 interface 59 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 120.239602][ T6626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.263522][ T5877] usb 5-1: config 3 interface 59 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 120.271497][ T6573] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 120.297995][ T5877] usb 5-1: config 3 interface 160 has no altsetting 0 [ 120.311231][ T6573] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 120.320481][ T5877] usb 5-1: config 3 interface 185 has no altsetting 0 [ 120.341537][ T6573] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2087671906 [ 120.343216][ T5877] usb 5-1: Dual-Role OTG device on HNP port [ 120.377521][ T6620] kvm: pic: non byte write [ 120.381112][ T6573] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 120.383444][ T5877] usb 5-1: New USB device found, idVendor=19d2, idProduct=1064, bcdDevice=ff.af [ 120.419813][ T6624] ubi0: background thread "ubi_bgt0d" started, PID 6624 [ 120.421577][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.453367][ T5877] usb 5-1: Product: 쟲䘋 [ 120.472043][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32 [ 120.502048][ T5877] usb 5-1: Manufacturer: Ñ [ 120.524208][ T5877] usb 5-1: SerialNumber: ㉶â¾ä‹šè´–⚥è•à¢®êž¢å‰˜ëº‘ïž—ê—á«Šä©á¸‰î•æ¿²Ö½ã‘žëŸÂ¥ê±æ€‹è–Šã“¤ä¥´ã¿‡á›«á‚¤ç‹¤ä°…ã œâ¦ïŸ‡á›µã¾¦Õ€æ±žCམℊî°éŒ°é·¼á¾ê Žæ¼™ç–‡ãªëµç·¯ä‘Ὸᤰⳳ膪奣艳楆䗡럷匱饿塇çŒÛ¢å²á­­ä¦Šê³â°„æ«éŒ¶î²ë ‘꼘ì«æ˜ˆê¯™ã¯´ï¹ì•½æ§§å¦€ä—¨ä«¹ë¦œê†¸èŒ‹ï²±Ô·ã³ã€Žç‡šé´¢í‚¨ï£‹ä¼éž¡Ôµé¯¢é«„î•«ìƒáº‰ï‰ï®‰á “ [ 120.536477][ T6631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.557659][ T30] audit: type=1400 audit(1776478840.662:326): avc: denied { bind } for pid=6605 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.608658][ T6631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.618394][ T6585] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 120.641819][ T30] audit: type=1400 audit(1776478840.772:327): avc: denied { create } for pid=6605 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.672556][ T30] audit: type=1400 audit(1776478840.802:328): avc: denied { getopt } for pid=6605 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.778827][ T5870] usb 4-1: USB disconnect, device number 7 [ 120.807454][ T5823] Bluetooth: hci1: failed to read key size for handle 201 [ 120.821919][ T5877] option 5-1:3.157: GSM modem (1-port) converter detected [ 121.339833][ T5877] usb 5-1: USB disconnect, device number 6 [ 121.860261][ T30] audit: type=1400 audit(1776478841.992:329): avc: denied { shutdown } for pid=6639 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.885793][ T5877] option 5-1:3.157: device disconnected [ 121.896189][ T5870] usb 3-1: USB disconnect, device number 6 [ 121.953193][ T30] audit: type=1400 audit(1776478842.022:330): avc: denied { read } for pid=6639 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.448051][ T5823] Bluetooth: hci1: failed to read key size for handle 201 [ 122.733530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 123.454904][ T30] audit: type=1400 audit(1776478843.592:331): avc: denied { accept } for pid=6659 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.508070][ T5823] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 123.519059][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 123.519084][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.519095][ T5823] Workqueue: hci0 hci_rx_work [ 123.519122][ T5823] Call Trace: [ 123.519129][ T5823] [ 123.519136][ T5823] dump_stack_lvl+0x100/0x190 [ 123.519153][ T5823] sysfs_warn_dup.cold+0x1c/0x28 [ 123.519172][ T5823] sysfs_create_dir_ns+0x24b/0x2b0 [ 123.519191][ T5823] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 123.519209][ T5823] ? find_held_lock+0x2b/0x80 [ 123.519226][ T5823] ? kobject_add_internal+0x25f/0x930 [ 123.519241][ T5823] ? kobject_add_internal+0x25f/0x930 [ 123.519258][ T5823] ? do_raw_spin_unlock+0x145/0x1e0 [ 123.519275][ T5823] kobject_add_internal+0x2c8/0x930 [ 123.519292][ T5823] kobject_add+0x16a/0x1e0 [ 123.519307][ T5823] ? __pfx_kobject_add+0x10/0x10 [ 123.519327][ T5823] ? class_to_subsys+0x10f/0x150 [ 123.519345][ T5823] ? kobject_put+0xb9/0x640 [ 123.519366][ T5823] ? _raw_spin_unlock+0x28/0x50 [ 123.519384][ T5823] device_add+0x294/0x1920 [ 123.519398][ T5823] ? __pfx_dev_set_name+0x10/0x10 [ 123.519416][ T5823] ? __pfx_device_add+0x10/0x10 [ 123.519429][ T5823] ? mgmt_send_event_skb+0x2fb/0x460 [ 123.519448][ T5823] hci_conn_add_sysfs+0x1a3/0x260 [ 123.519464][ T5823] le_conn_complete_evt+0x11eb/0x1f60 [ 123.519482][ T5823] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 123.519498][ T5823] hci_le_conn_complete_evt+0x23c/0x3a0 [ 123.519511][ T5823] ? skb_pull_data+0x15f/0x1e0 [ 123.519529][ T5823] hci_le_meta_evt+0x34a/0x5f0 [ 123.519544][ T5823] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 123.519558][ T5823] hci_event_packet+0x51c/0xcd0 [ 123.519572][ T5823] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 123.519586][ T5823] ? __pfx_hci_event_packet+0x10/0x10 [ 123.519600][ T5823] ? kcov_remote_start+0x374/0x660 [ 123.519611][ T5823] ? lockdep_hardirqs_on+0x78/0x100 [ 123.519627][ T5823] hci_rx_work+0x451/0xfc0 [ 123.519642][ T5823] process_one_work+0xa0e/0x1980 [ 123.519662][ T5823] ? __pfx_process_one_work+0x10/0x10 [ 123.519679][ T5823] ? __pfx_hci_rx_work+0x10/0x10 [ 123.519693][ T5823] worker_thread+0x5ef/0xe50 [ 123.519712][ T5823] ? kthread+0x13a/0x450 [ 123.519722][ T5823] ? __pfx_worker_thread+0x10/0x10 [ 123.519734][ T5823] kthread+0x370/0x450 [ 123.519746][ T5823] ? __pfx_kthread+0x10/0x10 [ 123.519758][ T5823] ret_from_fork+0x72b/0xd50 [ 123.519772][ T5823] ? __pfx_ret_from_fork+0x10/0x10 [ 123.519787][ T5823] ? __switch_to+0x800/0x1100 [ 123.519802][ T5823] ? __pfx_kthread+0x10/0x10 [ 123.519815][ T5823] ret_from_fork_asm+0x1a/0x30 [ 123.519837][ T5823] [ 123.519924][ T5823] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 123.794480][ T5823] Bluetooth: hci0: failed to register connection device [ 123.909825][ T30] audit: type=1326 audit(1776478844.042:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182c79c819 code=0x7ffc0000 [ 124.016876][ T30] audit: type=1326 audit(1776478844.042:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182c79c819 code=0x7ffc0000 [ 124.093717][ T30] audit: type=1326 audit(1776478844.062:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f182c79c819 code=0x7ffc0000 [ 124.117596][ T30] audit: type=1326 audit(1776478844.072:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182c79c819 code=0x7ffc0000 [ 124.142249][ T30] audit: type=1326 audit(1776478844.072:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182c79c819 code=0x7ffc0000 [ 124.166225][ T30] audit: type=1326 audit(1776478844.072:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f182c79c819 code=0x7ffc0000 [ 124.198288][ T30] audit: type=1326 audit(1776478844.072:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182c79c819 code=0x7ffc0000 [ 125.036974][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.397208][ T6677] bridge_slave_0 (unregistering): left allmulticast mode [ 125.406881][ T6677] bridge_slave_0 (unregistering): left promiscuous mode [ 125.417020][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.119931][ T6699] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.016542][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 127.016559][ T30] audit: type=1400 audit(1776478847.152:347): avc: denied { wake_alarm } for pid=6706 comm="syz.3.193" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.058075][ T30] audit: type=1400 audit(1776478847.192:348): avc: denied { connect } for pid=6708 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.303480][ T5884] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.383335][ T5936] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.403143][ T6714] netlink: 32 bytes leftover after parsing attributes in process `syz.2.195'. [ 127.466025][ T5884] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.480313][ T5884] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 127.493427][ T5884] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 127.523468][ T5884] usb 2-1: Manufacturer: syz [ 127.776915][ T5884] usb 2-1: SerialNumber: syz [ 127.784675][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.811167][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.834825][ T5936] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 127.848292][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.858336][ T30] audit: type=1400 audit(1776478847.982:349): avc: denied { append } for pid=6725 comm="syz.2.199" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.888791][ T5936] usb 4-1: config 0 descriptor?? [ 127.913418][ T30] audit: type=1400 audit(1776478848.032:350): avc: denied { mounton } for pid=6725 comm="syz.2.199" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 128.342069][ T5884] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 128.403375][ T5884] usb 2-1: USB disconnect, device number 8 [ 129.113150][ T5936] usbhid 4-1:0.0: can't add hid device: -32 [ 129.129535][ T5936] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 129.170411][ T5936] usb 4-1: USB disconnect, device number 8 [ 129.689745][ T30] audit: type=1400 audit(1776478849.792:351): avc: denied { bind } for pid=6758 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.966093][ T6740] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.973045][ T6740] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 129.982838][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 130.009276][ T6740] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.015267][ T6740] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 130.033477][ T6740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.039412][ T6740] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 130.075426][ T6740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.081459][ T6740] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 130.460259][ T6770] netlink: 'syz.1.209': attribute type 4 has an invalid length. [ 130.481372][ T6770] netlink: 220 bytes leftover after parsing attributes in process `syz.1.209'. [ 130.491750][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'. [ 130.684153][ T5884] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.998455][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 131.051767][ T6790] netlink: 80 bytes leftover after parsing attributes in process `syz.4.214'. [ 131.104830][ T6790] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 131.165064][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.169026][ T6792] loop7: detected capacity change from 0 to 7 [ 131.177874][ T30] audit: type=1400 audit(1776478851.262:352): avc: denied { create } for pid=6791 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 131.201909][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.215474][ T5884] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 131.253620][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.253639][ T6792] Dev loop7: unable to read RDB block 7 [ 131.279030][ T6792] loop7: unable to read partition table [ 131.293550][ T5884] usb 4-1: config 0 descriptor?? [ 131.312566][ T6792] loop7: partition table beyond EOD, truncated [ 131.337722][ T6792] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà0–š<¨â·û) failed (rc=-5) [ 131.352554][ T6800] fuse: Bad value for 'fd' [ 131.386067][ T30] audit: type=1326 audit(1776478851.522:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437039c819 code=0x7ffc0000 [ 131.492169][ T30] audit: type=1326 audit(1776478851.522:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437039c819 code=0x7ffc0000 [ 131.597828][ T30] audit: type=1326 audit(1776478851.522:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437039c819 code=0x7ffc0000 [ 131.652678][ T30] audit: type=1326 audit(1776478851.522:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437039c819 code=0x7ffc0000 [ 131.737710][ T5884] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 131.773330][ T5884] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 131.816909][ T6810] delete_channel: no stack [ 131.821803][ T6810] delete_channel: no stack [ 132.256327][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 132.256343][ T30] audit: type=1400 audit(1776478852.392:448): avc: denied { module_request } for pid=6822 comm="syz.4.221" kmod="net-pf-35-proto-67108864" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 132.319551][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.369393][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.376673][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.416836][ T30] audit: type=1400 audit(1776478852.552:449): avc: denied { read } for pid=6822 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.441778][ T6817] bridge_slave_0 (unregistering): left allmulticast mode [ 132.466848][ T6817] bridge_slave_0 (unregistering): left promiscuous mode [ 132.480871][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.514477][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'. [ 132.530956][ T5884] ft260 0003:0403:6030.0001: failed to retrieve chip version [ 132.541904][ T6777] mkiss: ax0: crc mode is auto. [ 132.560989][ T5884] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -71 [ 132.621319][ T5884] usb 4-1: USB disconnect, device number 9 [ 132.990865][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 133.843558][ T5884] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.113866][ T5884] usb 4-1: device descriptor read/64, error -71 [ 134.624835][ T5884] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 134.869688][ T5884] usb 4-1: device descriptor read/64, error -71 [ 134.989150][ T6891] delete_channel: no stack [ 134.994935][ T6891] delete_channel: no stack [ 135.168355][ T5884] usb usb4-port1: attempt power cycle [ 135.181610][ T6731] Set syz1 is full, maxelem 65536 reached [ 135.317656][ T30] audit: type=1400 audit(1776478855.452:450): avc: denied { ioctl } for pid=6888 comm="syz.2.231" path="/dev/sg0" dev="devtmpfs" ino=738 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.993461][ T5884] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 136.023902][ T5884] usb 4-1: device descriptor read/8, error -71 [ 136.738159][ T5884] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 136.820198][ T30] audit: type=1400 audit(1776478856.952:451): avc: denied { mount } for pid=6916 comm="syz.1.237" name="/" dev="ramfs" ino=13967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 136.895474][ T30] audit: type=1400 audit(1776478857.032:452): avc: denied { call } for pid=6922 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 136.982964][ T30] audit: type=1400 audit(1776478857.052:453): avc: denied { bind } for pid=6922 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.019016][ T5884] usb 4-1: device not accepting address 13, error -71 [ 137.034927][ T5884] usb usb4-port1: unable to enumerate USB device [ 137.088760][ T6929] syz_tun: entered allmulticast mode [ 137.135927][ T6928] syz_tun: left allmulticast mode [ 137.286150][ T5877] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.863669][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 137.870763][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.882806][ T5877] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 137.901356][ T5877] usb 1-1: config 0 has no interface number 0 [ 137.923552][ T5877] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 137.951542][ T5877] usb 1-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 137.980727][ T5877] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 138.015518][ T5877] usb 1-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 138.042091][ T5877] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 138.053083][ T30] audit: type=1400 audit(1776478858.172:454): avc: denied { ioctl } for pid=6945 comm="syz.4.244" path="socket:[12838]" dev="sockfs" ino=12838 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.087882][ T5877] usb 1-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 138.113014][ T5877] usb 1-1: config 0 interface 122 has no altsetting 0 [ 138.130345][ T5877] usb 1-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 138.174789][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.198083][ T5877] usb 1-1: Product: syz [ 138.210672][ T5877] usb 1-1: Manufacturer: syz [ 138.225385][ T5877] usb 1-1: SerialNumber: syz [ 138.253027][ T5877] usb 1-1: config 0 descriptor?? [ 138.276956][ T6925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.284326][ T6925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.476229][ T30] audit: type=1400 audit(1776478858.612:455): avc: denied { connect } for pid=6951 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.629744][ T6954] capability: warning: `syz.4.248' uses deprecated v2 capabilities in a way that may be insecure [ 138.666710][ T6954] lo speed is unknown, defaulting to 1000 [ 138.672588][ T6954] lo speed is unknown, defaulting to 1000 [ 138.680805][ T6954] lo speed is unknown, defaulting to 1000 [ 138.687744][ T6954] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 138.702101][ T6954] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 138.719469][ T6954] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 138.731739][ T6954] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 138.745427][ T6954] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 138.772280][ T6954] lo speed is unknown, defaulting to 1000 [ 138.779948][ T6954] lo speed is unknown, defaulting to 1000 [ 138.786855][ T6954] lo speed is unknown, defaulting to 1000 [ 138.793949][ T6954] lo speed is unknown, defaulting to 1000 [ 138.800523][ T6954] lo speed is unknown, defaulting to 1000 [ 138.893349][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.044054][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 139.055651][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.077587][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.107547][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 139.121539][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 139.131034][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.144780][ T9] usb 4-1: config 0 descriptor?? [ 139.423329][ T5870] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.586679][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0002/input/input8 [ 139.606251][ T5870] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 139.626971][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.646543][ T30] audit: type=1400 audit(1776478859.772:456): avc: denied { read } for pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=2910 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.651384][ T5870] usb 3-1: config 0 has no interfaces? [ 139.676089][ T30] audit: type=1400 audit(1776478859.772:457): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2910 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.719119][ T30] audit: type=1400 audit(1776478859.852:458): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2910 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.720121][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.786231][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0002/input/input9 [ 139.855096][ T5877] pl2303 1-1:0.122: pl2303 converter detected [ 139.869254][ T5877] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 139.896230][ T5877] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 139.929887][ T5870] usb 3-1: config 0 has no interfaces? [ 139.939256][ T5877] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 139.977323][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.977639][ T5877] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 140.009287][ T9] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 140.028631][ T5870] usb 3-1: config 0 has no interfaces? [ 140.061255][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.153635][ T5877] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 140.166690][ T5877] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 140.175295][ T5877] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 140.184623][ T5877] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 140.623339][ T5870] usb 3-1: config 0 has no interfaces? [ 140.635892][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.647088][ T5870] usb 3-1: config 0 has no interfaces? [ 140.658688][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.669920][ T5870] usb 3-1: config 0 has no interfaces? [ 140.678734][ T5877] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 140.679852][ T24] usb 4-1: USB disconnect, device number 14 [ 140.688361][ T5877] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 140.707107][ T5877] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 140.720554][ T6957] tmpfs: Unknown parameter 'g' [ 140.737938][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.773298][ T5870] usb 3-1: config 0 has no interfaces? [ 140.798833][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.814822][ T5870] usb 3-1: config 0 has no interfaces? [ 140.859224][ T6975] fido_id[6975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 140.879948][ T5877] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 140.914931][ T5870] usb 3-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 140.926643][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.935995][ T5870] usb 3-1: Product: syz [ 140.940237][ T5870] usb 3-1: Manufacturer: syz [ 140.945029][ T5870] usb 3-1: SerialNumber: syz [ 140.952021][ T5870] usb 3-1: config 0 descriptor?? [ 141.006608][ T5877] usb 1-1: USB disconnect, device number 8 [ 141.092429][ T5877] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 141.095151][ T6988] Unsupported ieee802154 address type: 0 [ 141.100520][ T30] audit: type=1400 audit(1776478861.222:459): avc: denied { bind } for pid=6986 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 141.127473][ T5877] pl2303 1-1:0.122: device disconnected [ 141.378535][ T5884] usb 3-1: USB disconnect, device number 7 [ 141.577817][ T30] audit: type=1400 audit(1776478861.712:460): avc: denied { bind } for pid=6992 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.599808][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 141.610759][ T6993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.258'. [ 141.641719][ T6993] netlink: 'syz.4.258': attribute type 1 has an invalid length. [ 141.688979][ T6993] ip6t_REJECT: ECHOREPLY is not supported [ 141.776088][ T30] audit: type=1400 audit(1776478861.912:461): avc: denied { read append } for pid=6998 comm="syz.1.261" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 141.816257][ T6993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6993 comm=syz.4.258 [ 141.845229][ T30] audit: type=1400 audit(1776478861.912:462): avc: denied { open } for pid=6998 comm="syz.1.261" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 142.552117][ T7017] ucma_write: process 177 (syz.3.266) changed security contexts after opening file descriptor, this is not allowed. [ 142.628714][ T7015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.834408][ T5870] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 142.929420][ T30] audit: type=1400 audit(1776478863.062:463): avc: denied { getopt } for pid=7020 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.015519][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.035645][ T5870] usb 2-1: not running at top speed; connect to a high speed hub [ 143.060642][ T30] audit: type=1400 audit(1776478863.192:464): avc: denied { execute_no_trans } for pid=7020 comm="syz.2.269" path="/55/file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.061733][ T5870] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 143.158012][ T5870] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 143.190494][ T5870] usb 2-1: string descriptor 0 read error: -22 [ 143.197917][ T5870] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 143.212466][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.465662][ T30] audit: type=1400 audit(1776478863.602:465): avc: denied { write } for pid=7018 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.587322][ T30] audit: type=1400 audit(1776478863.722:466): avc: denied { map } for pid=7034 comm="syz.3.272" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.963974][ T5870] usb 2-1: USB disconnect, device number 9 [ 144.126771][ T30] audit: type=1400 audit(1776478864.252:467): avc: denied { listen } for pid=7044 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 144.760028][ T30] audit: type=1400 audit(1776478864.502:468): avc: denied { watch } for pid=7047 comm="syz.4.275" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.882243][ T7057] netlink: 'syz.1.278': attribute type 3 has an invalid length. [ 145.165967][ T30] audit: type=1400 audit(1776478865.162:469): avc: denied { write } for pid=7056 comm="syz.1.278" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 145.190216][ T30] audit: type=1400 audit(1776478865.302:470): avc: denied { map } for pid=7056 comm="syz.1.278" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 145.373680][ T7063] pipefs: Unknown parameter 'usrquota' [ 145.772275][ T30] audit: type=1400 audit(1776478865.902:471): avc: denied { write } for pid=7066 comm="syz.0.280" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 148.395230][ T7083] Illegal XDP return value 3247902772 on prog (id 33) dev N/A, expect packet loss! [ 148.492425][ T7080] netlink: 48 bytes leftover after parsing attributes in process `syz.4.283'. [ 148.542780][ T30] audit: type=1400 audit(1776478868.672:472): avc: denied { create } for pid=7088 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 148.599471][ T30] audit: type=1400 audit(1776478868.702:473): avc: denied { sys_admin } for pid=7088 comm="syz.2.286" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 148.690557][ T7093] overlayfs: failed to clone lowerpath [ 148.713377][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.729597][ T30] audit: type=1400 audit(1776478868.862:474): avc: denied { write } for pid=7096 comm="syz.0.288" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 148.881730][ T7104] lo speed is unknown, defaulting to 1000 [ 148.892549][ T7102] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.288'. [ 148.902462][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 148.912826][ T30] audit: type=1400 audit(1776478869.042:475): avc: denied { getopt } for pid=7103 comm="syz.4.292" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.926990][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 148.953417][ T5870] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 148.973526][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.983891][ T24] usb 2-1: Product: syz [ 148.993526][ T24] usb 2-1: Manufacturer: syz [ 149.000692][ T24] usb 2-1: SerialNumber: syz [ 149.091867][ T24] usb 2-1: config 0 descriptor?? [ 149.106336][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 149.123364][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 149.123364][ T24] [ 149.136681][ T5870] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.235436][ T7114] overlayfs: failed to clone upperpath [ 149.314663][ T30] audit: type=1400 audit(1776478869.442:476): avc: denied { remount } for pid=7103 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.039181][ T7096] delete_channel: no stack [ 150.093935][ T24] usb 2-1: selecting invalid altsetting 3 [ 150.102051][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 150.102051][ T24] [ 150.113107][ T5870] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 150.124403][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 150.137964][ T5870] usb 4-1: string descriptor 0 read error: -22 [ 150.144246][ T5870] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=58.89 [ 150.498025][ T30] audit: type=1400 audit(1776478870.632:477): avc: denied { map } for pid=7122 comm="syz.0.294" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 150.585952][ T7084] ALSA: mixer_oss: invalid OSS volume 'u' [ 150.591832][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.609354][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.619669][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 150.630113][ T24] usb 2-1: media controller created [ 150.636774][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 150.643983][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 150.655061][ T24] dvb-usb: MAC address reading failed. [ 150.664954][ T5870] ldusb 4-1:8.0: Interrupt in endpoint not found [ 150.683104][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.768157][ T24] DVB: Unable to find symbol stb0899_attach() [ 150.782237][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 150.973325][ T24] rc_core: IR keymap rc-tt-1500 not found [ 150.979168][ T24] Registered IR keymap rc-empty [ 150.986174][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 151.016112][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input10 [ 151.451860][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 151.458524][ T30] audit: type=1400 audit(1776478871.592:478): avc: denied { read } for pid=7094 comm="syz.3.289" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 151.459234][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 151.459234][ T24] [ 151.511169][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 151.570800][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 151.592605][ T24] usb 2-1: USB disconnect, device number 10 [ 151.620582][ T29] dvb-usb: error -22 while querying for an remote control event. [ 151.867062][ T7153] random: crng reseeded on system resumption [ 152.210450][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 152.624977][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.673531][ T5884] usb 4-1: USB disconnect, device number 15 [ 152.788403][ T30] audit: type=1400 audit(1776478872.922:479): avc: denied { append } for pid=7165 comm="syz.3.304" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 152.971268][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 152.986399][ T24] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 153.001544][ T24] usb 2-1: config 0 has no interface number 0 [ 153.020827][ T24] usb 2-1: config 0 interface 12 has no altsetting 0 [ 153.579329][ T30] audit: type=1400 audit(1776478873.662:480): avc: denied { ioctl } for pid=7168 comm="syz.0.305" path="socket:[15569]" dev="sockfs" ino=15569 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 153.809245][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 153.819069][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.827687][ T24] usb 2-1: Product: syz [ 153.832118][ T24] usb 2-1: Manufacturer: syz [ 153.836767][ T24] usb 2-1: SerialNumber: syz [ 153.859487][ T24] usb 2-1: config 0 descriptor?? [ 154.282331][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 154.357565][ T7182] bridge0: entered promiscuous mode [ 154.365183][ T7182] bridge0: port 3(vlan2) entered blocking state [ 154.371486][ T7182] bridge0: port 3(vlan2) entered disabled state [ 154.377896][ T7182] vlan2: entered allmulticast mode [ 154.383021][ T7182] bridge0: entered allmulticast mode [ 154.391977][ T7182] vlan2: left allmulticast mode [ 154.396947][ T7182] bridge0: left allmulticast mode [ 154.403928][ T7182] bridge0: left promiscuous mode [ 154.484846][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 154.516986][ T24] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 154.543744][ T24] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 154.572312][ T24] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 154.595326][ T29] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.612618][ T24] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 154.668744][ T24] usb 2-1: USB disconnect, device number 11 [ 154.863496][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 154.993733][ T29] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 155.007845][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.016249][ T29] usb 3-1: Product: syz [ 155.022155][ T29] usb 3-1: Manufacturer: syz [ 155.028476][ T29] usb 3-1: SerialNumber: syz [ 155.040439][ T29] usb 3-1: config 0 descriptor?? [ 155.065058][ T29] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 155.092141][ T29] pctv452e: pctv452e_power_ctrl: 1 [ 155.092141][ T29] [ 155.121795][ T29] usb 3-1: selecting invalid altsetting 3 [ 155.145704][ T29] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 155.145704][ T29] [ 155.179043][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 155.216948][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.259487][ T29] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 155.289314][ T29] usb 3-1: media controller created [ 155.295274][ T7188] dvb-usb: bulk message failed: -22 (7/0) [ 155.301546][ T7188] pctv452e: I2C error -22; AA 01 0A 00 00 -> aa 01 31 03 0a 00 00 [ 155.312500][ T29] dvb-usb: bulk message failed: -22 (8/0) [ 155.326302][ T29] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 155.339395][ T7186] ALSA: mixer_oss: invalid OSS volume 'u' [ 155.345679][ T29] dvb-usb: MAC address reading failed. [ 155.354738][ T30] audit: type=1400 audit(1776478875.492:481): avc: denied { write } for pid=7201 comm="syz.3.316" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 155.359558][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.426267][ T30] audit: type=1400 audit(1776478875.492:482): avc: denied { open } for pid=7201 comm="syz.3.316" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 155.460065][ T29] DVB: Unable to find symbol stb0899_attach() [ 155.476524][ T29] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 155.520887][ T5884] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 155.553477][ T24] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 155.864544][ T29] rc_core: IR keymap rc-tt-1500 not found [ 155.870362][ T29] Registered IR keymap rc-empty [ 155.879864][ T29] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 155.893304][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 155.989190][ T29] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11 [ 156.000843][ T7216] fuse: Bad value for 'fd' [ 156.009858][ T29] dvb-usb: schedule remote query interval to 100 msecs. [ 156.017064][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 156.017456][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.025118][ T29] pctv452e: pctv452e_power_ctrl: 0 [ 156.025118][ T29] [ 156.042686][ T5884] usb 1-1: config 0 has no interfaces? [ 156.043186][ T29] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 156.059072][ T24] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 156.071062][ T5884] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 156.080666][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.083720][ T24] usb 2-1: string descriptor 0 read error: -22 [ 156.097078][ T5884] usb 1-1: Product: syz [ 156.100321][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=58.89 [ 156.105382][ T5884] usb 1-1: Manufacturer: syz [ 156.125323][ T5884] usb 1-1: SerialNumber: syz [ 156.134132][ T5936] dvb-usb: bulk message failed: -22 (4/0) [ 156.141647][ T5936] dvb-usb: error -22 while querying for an remote control event. [ 156.149985][ T29] usb 3-1: USB disconnect, device number 8 [ 156.151581][ T5884] usb 1-1: config 0 descriptor?? [ 156.175870][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.207941][ T24] ldusb 2-1:8.0: Interrupt in endpoint not found [ 156.286032][ T29] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 156.430061][ T24] usb 2-1: USB disconnect, device number 12 [ 156.532591][ T5870] usb 1-1: USB disconnect, device number 9 [ 156.594849][ T29] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.758011][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 156.769730][ T29] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 156.787424][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.807003][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.818734][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.827044][ T29] usb 3-1: Product: syz [ 156.833757][ T29] usb 3-1: Manufacturer: syz [ 156.838563][ T29] usb 3-1: SerialNumber: syz [ 156.853092][ T29] usb 3-1: config 0 descriptor?? [ 156.864581][ T29] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.877725][ T29] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 157.128202][ T7230] delete_channel: no stack [ 157.132785][ T7230] delete_channel: no stack [ 157.408688][ T7232] nftables ruleset with unbound set [ 157.421668][ T30] audit: type=1400 audit(1776478877.552:483): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 157.505163][ T29] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 157.605855][ T29] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 157.638379][ T29] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 157.794020][ T30] audit: type=1400 audit(1776478877.852:484): avc: denied { bind } for pid=7237 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.011507][ T30] audit: type=1400 audit(1776478877.852:485): avc: denied { write } for pid=7237 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.036670][ T29] em28xx 3-1:0.0: No AC97 audio processor [ 158.056932][ T29] usb 3-1: USB disconnect, device number 9 [ 158.069591][ T29] em28xx 3-1:0.0: Disconnecting em28xx [ 158.130648][ T29] em28xx 3-1:0.0: Freeing device [ 158.383972][ T5884] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 159.014884][ T5884] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.085931][ T5884] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 159.106968][ T5884] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.121465][ T5884] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.133442][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 159.141990][ T5884] usb 4-1: SerialNumber: syz [ 159.621391][ T7249] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.817816][ T5884] hub 4-1:1.0: bad descriptor, ignoring hub [ 159.839974][ T5884] hub 4-1:1.0: probe with driver hub failed with error -5 [ 159.944122][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 160.180680][ T7267] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 160.430267][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 160.457230][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 160.467347][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.475797][ T24] usb 1-1: Product: syz [ 160.832007][ T24] usb 1-1: Manufacturer: syz [ 160.853699][ T24] usb 1-1: SerialNumber: syz [ 160.879773][ T24] usb 1-1: config 0 descriptor?? [ 160.901507][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 160.931201][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 160.931201][ T24] [ 160.940528][ T24] usb 1-1: selecting invalid altsetting 3 [ 160.956168][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 160.956168][ T24] [ 160.967341][ T7287] netlink: 424 bytes leftover after parsing attributes in process `syz.4.340'. [ 160.976857][ T30] audit: type=1400 audit(1776478881.112:486): avc: denied { append } for pid=7286 comm="syz.2.341" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.999486][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 160.999588][ T7287] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 161.006652][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.024297][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 161.041767][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.050523][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.063346][ T5884] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 161.095937][ T5884] usb 4-1: USB disconnect, device number 16 [ 161.096398][ T24] usb 1-1: media controller created [ 161.112813][ T7259] dvb-usb: bulk message failed: -22 (7/0) [ 161.118627][ T7259] pctv452e: I2C error -22; AA 01 0A 00 00 -> aa 01 31 03 0a 00 00 [ 161.139011][ T7258] ALSA: mixer_oss: invalid OSS volume 'u' [ 161.146346][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 161.157840][ T24] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 161.264389][ T24] dvb-usb: MAC address reading failed. [ 161.291836][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.335846][ T24] DVB: Unable to find symbol stb0899_attach() [ 161.349394][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 161.855516][ T24] rc_core: IR keymap rc-tt-1500 not found [ 161.864096][ T24] Registered IR keymap rc-empty [ 161.922773][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 161.955543][ T5936] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 162.205959][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input12 [ 162.255955][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 162.282382][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 162.282382][ T24] [ 162.299856][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.324557][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 162.336853][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.352774][ T24] usb 1-1: USB disconnect, device number 10 [ 162.726214][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 162.806321][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 162.896550][ T30] audit: type=1400 audit(1776478883.032:487): avc: denied { getopt } for pid=7295 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.030697][ T30] audit: type=1400 audit(1776478883.162:488): avc: denied { getopt } for pid=7322 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 163.194094][ T7326] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20001 [ 163.556723][ T30] audit: type=1326 audit(1776478883.692:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.4.353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f437039c819 code=0x0 [ 164.433261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 164.503252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 164.648491][ T30] audit: type=1400 audit(1776478884.782:490): avc: denied { ioctl } for pid=7332 comm="syz.0.354" path="socket:[15117]" dev="sockfs" ino=15117 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.866362][ T30] audit: type=1400 audit(1776478885.002:491): avc: denied { ioctl } for pid=7336 comm="syz.2.356" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 164.895715][ T7337] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 165.044913][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.070542][ T5936] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 165.114145][ T5936] usb 2-1: can't read configurations, error -71 [ 165.347429][ T30] audit: type=1400 audit(1776478885.482:492): avc: denied { read } for pid=7336 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.884283][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 165.903586][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 165.969795][ T30] audit: type=1400 audit(1776478886.102:493): avc: denied { write } for pid=7351 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 166.013840][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 166.136938][ T30] audit: type=1400 audit(1776478886.272:494): avc: denied { read } for pid=7370 comm="syz.0.367" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 167.004704][ T7386] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 167.019210][ T7386] netlink: 188 bytes leftover after parsing attributes in process `syz.1.372'. [ 167.036241][ T30] audit: type=1400 audit(1776478887.172:495): avc: denied { read } for pid=7384 comm="syz.1.372" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 167.098028][ T7387] FAULT_INJECTION: forcing a failure. [ 167.098028][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 167.131692][ T7387] CPU: 1 UID: 0 PID: 7387 Comm: syz.0.373 Not tainted syzkaller #0 PREEMPT(full) [ 167.131717][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.131726][ T7387] Call Trace: [ 167.131731][ T7387] [ 167.131738][ T7387] dump_stack_lvl+0x100/0x190 [ 167.131762][ T7387] should_fail_ex.cold+0x5/0xa [ 167.131785][ T7387] ? __pfx_fuse_inode_eq+0x10/0x10 [ 167.131803][ T7387] should_failslab+0xc2/0x120 [ 167.131830][ T7387] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 167.131853][ T7387] ? fuse_alloc_inode+0x2c/0x1e0 [ 167.131876][ T7387] ? __pfx_fuse_inode_eq+0x10/0x10 [ 167.131891][ T7387] ? __pfx_fuse_inode_set+0x10/0x10 [ 167.131906][ T7387] fuse_alloc_inode+0x2c/0x1e0 [ 167.131921][ T7387] ? kasan_quarantine_put+0x104/0x240 [ 167.131941][ T7387] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 167.131956][ T7387] alloc_inode+0x68/0x250 [ 167.131973][ T7387] iget5_locked+0x5f/0xa0 [ 167.131989][ T7387] fuse_iget+0x200/0x930 [ 167.132005][ T7387] ? __pfx_fuse_iget+0x10/0x10 [ 167.132018][ T7387] ? __fuse_simple_request+0x58e/0xf00 [ 167.132035][ T7387] ? __asan_memset+0x23/0x50 [ 167.132052][ T7387] fuse_lookup_name+0x481/0x760 [ 167.132073][ T7387] ? __pfx_fuse_lookup_name+0x10/0x10 [ 167.132092][ T7387] ? __pfx___mutex_lock+0x10/0x10 [ 167.132129][ T7387] fuse_lookup+0x209/0x550 [ 167.132142][ T7387] ? __pfx_fuse_lookup+0x10/0x10 [ 167.132162][ T7387] ? do_raw_spin_unlock+0x145/0x1e0 [ 167.132178][ T7387] ? _raw_spin_unlock+0x28/0x50 [ 167.132190][ T7387] lookup_one_qstr_excl+0x1cd/0x250 [ 167.132205][ T7387] ? mnt_want_write+0x161/0x450 [ 167.132222][ T7387] filename_rmdir+0x26b/0x5c0 [ 167.132236][ T7387] ? __pfx_filename_rmdir+0x10/0x10 [ 167.132253][ T7387] ? do_getname+0x191/0x390 [ 167.132268][ T7387] __x64_sys_unlinkat+0xf5/0x130 [ 167.132282][ T7387] do_syscall_64+0x10b/0xf80 [ 167.132293][ T7387] ? clear_bhb_loop+0x40/0x90 [ 167.132307][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.132318][ T7387] RIP: 0033:0x7fda1299c819 [ 167.132329][ T7387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.132340][ T7387] RSP: 002b:00007fda137bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 167.132351][ T7387] RAX: ffffffffffffffda RBX: 00007fda12c16090 RCX: 00007fda1299c819 [ 167.132358][ T7387] RDX: 0000000000000200 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 167.132365][ T7387] RBP: 00007fda137bc090 R08: 0000000000000000 R09: 0000000000000000 [ 167.132372][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.132379][ T7387] R13: 00007fda12c16128 R14: 00007fda12c16090 R15: 00007ffd491b4238 [ 167.132393][ T7387] [ 167.662311][ T7382] ceph: No mds server is up or the cluster is laggy [ 167.669819][ T30] audit: type=1400 audit(1776478887.802:496): avc: denied { bind } for pid=7393 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.694764][ T30] audit: type=1400 audit(1776478887.802:497): avc: denied { node_bind } for pid=7393 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 167.831135][ T7382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.045017][ T5936] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 168.221287][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.270879][ T7399] bridge_slave_0 (unregistering): left allmulticast mode [ 168.278835][ T7399] bridge_slave_0 (unregistering): left promiscuous mode [ 168.286214][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.322110][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 168.347837][ T5936] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 168.371528][ T5936] usb 2-1: config 0 has no interface number 0 [ 168.385298][ T30] audit: type=1400 audit(1776478888.502:498): avc: denied { setopt } for pid=7410 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.429530][ T5936] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 168.451775][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.467390][ T30] audit: type=1400 audit(1776478888.502:499): avc: denied { write } for pid=7410 comm="syz.0.382" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 168.492205][ T5936] usb 2-1: Product: syz [ 168.501393][ T5936] usb 2-1: Manufacturer: syz [ 168.509703][ T5936] usb 2-1: SerialNumber: syz [ 168.535208][ T5936] usb 2-1: config 0 descriptor?? [ 168.546851][ T5936] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 169.066340][ T5936] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 169.146590][ T5936] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 169.574317][ T30] audit: type=1400 audit(1776478889.712:500): avc: denied { mounton } for pid=7426 comm="syz.4.385" path="/83/file0" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 169.574536][ T7427] fuse: Bad value for 'fd' [ 169.769611][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 169.781545][ T5884] usb 2-1: USB disconnect, device number 15 [ 169.782401][ T30] audit: type=1400 audit(1776478889.742:501): avc: denied { mounton } for pid=7417 comm="syz.3.383" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 169.818719][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 169.838601][ T7427] 9p: Bad value for 'rfdno' [ 169.894156][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 169.906114][ T5884] quatech2 2-1:0.51: device disconnected [ 170.329594][ T30] audit: type=1400 audit(1776478890.462:502): avc: denied { block_suspend } for pid=7429 comm="syz.2.386" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 172.810641][ T7446] overlayfs: failed to clone upperpath [ 175.493339][ T5884] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 175.554916][ T7484] FAULT_INJECTION: forcing a failure. [ 175.554916][ T7484] name failslab, interval 1, probability 0, space 0, times 0 [ 175.585091][ T7484] CPU: 0 UID: 0 PID: 7484 Comm: syz.1.399 Not tainted syzkaller #0 PREEMPT(full) [ 175.585122][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 175.585133][ T7484] Call Trace: [ 175.585139][ T7484] [ 175.585145][ T7484] dump_stack_lvl+0x100/0x190 [ 175.585171][ T7484] should_fail_ex.cold+0x5/0xa [ 175.585195][ T7484] ? tomoyo_realpath_from_path+0xb6/0x690 [ 175.585222][ T7484] should_failslab+0xc2/0x120 [ 175.585249][ T7484] __kmalloc_noprof+0xe0/0x850 [ 175.585272][ T7484] ? kfree+0x1dd/0x6c0 [ 175.585294][ T7484] tomoyo_realpath_from_path+0xb6/0x690 [ 175.585327][ T7484] tomoyo_path_number_perm+0x23c/0x580 [ 175.585348][ T7484] ? tomoyo_path_number_perm+0x22e/0x580 [ 175.585372][ T7484] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.585417][ T7484] ? find_held_lock+0x2b/0x80 [ 175.585443][ T7484] ? __fget_files+0x215/0x3d0 [ 175.585459][ T7484] ? hook_file_ioctl_common+0x149/0x410 [ 175.585477][ T7484] ? __fget_files+0x215/0x3d0 [ 175.585498][ T7484] ? __fget_files+0x21f/0x3d0 [ 175.585519][ T7484] security_file_ioctl+0xd3/0x230 [ 175.585545][ T7484] __x64_sys_ioctl+0xb7/0x210 [ 175.585572][ T7484] do_syscall_64+0x10b/0xf80 [ 175.585592][ T7484] ? clear_bhb_loop+0x40/0x90 [ 175.585614][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.585632][ T7484] RIP: 0033:0x7f182c79c819 [ 175.585647][ T7484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.585662][ T7484] RSP: 002b:00007f182d57d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.585679][ T7484] RAX: ffffffffffffffda RBX: 00007f182ca15fa0 RCX: 00007f182c79c819 [ 175.585689][ T7484] RDX: 0000200000000500 RSI: 0000000000004601 RDI: 0000000000000003 [ 175.585699][ T7484] RBP: 00007f182d57d090 R08: 0000000000000000 R09: 0000000000000000 [ 175.585709][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.585719][ T7484] R13: 00007f182ca16038 R14: 00007f182ca15fa0 R15: 00007ffda2d7d7b8 [ 175.585743][ T7484] [ 175.585749][ T7484] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.589465][ T5899] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 176.603819][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 176.614987][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.629076][ T5884] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 176.659188][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.677745][ T5884] usb 3-1: Product: syz [ 176.747719][ T5884] usb 3-1: Manufacturer: syz [ 176.752366][ T5884] usb 3-1: SerialNumber: syz [ 176.900629][ T5884] usb 3-1: config 0 descriptor?? [ 177.034498][ T5884] sr9700 3-1:0.0: probe with driver sr9700 failed with error -22 [ 177.461472][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.488538][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.501579][ T5884] usb 3-1: USB disconnect, device number 10 [ 177.758674][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.770672][ T5899] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 177.785177][ T5899] usb 1-1: can't read configurations, error -71 [ 177.899548][ T30] audit: type=1400 audit(1776478898.032:503): avc: denied { create } for pid=7505 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 177.953375][ T5936] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 178.045464][ T5884] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 178.118504][ T5936] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 178.127767][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.135967][ T5936] usb 4-1: Product: syz [ 178.140286][ T5936] usb 4-1: Manufacturer: syz [ 178.145208][ T5936] usb 4-1: SerialNumber: syz [ 178.160166][ T5936] usb 4-1: config 0 descriptor?? [ 178.203781][ T5884] usb 2-1: Invalid ep0 maxpacket: 64 [ 178.333349][ T5884] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 178.379321][ T5936] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 178.483642][ T5884] usb 2-1: Invalid ep0 maxpacket: 64 [ 178.489408][ T5884] usb usb2-port1: attempt power cycle [ 178.833342][ T5884] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 178.863706][ T5884] usb 2-1: Invalid ep0 maxpacket: 64 [ 178.876574][ T7517] netlink: 'syz.0.413': attribute type 10 has an invalid length. [ 179.003382][ T5884] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 179.034075][ T5884] usb 2-1: Invalid ep0 maxpacket: 64 [ 179.040211][ T5884] usb usb2-port1: unable to enumerate USB device [ 179.143373][ T5899] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 179.294609][ T5899] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 179.304941][ T5899] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.316029][ T5899] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.329035][ T5899] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.338149][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.346233][ T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 179.360994][ T5899] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.375456][ T5899] usb 1-1: invalid MIDI out EP 0 [ 179.485694][ T29] usb 3-1: device descriptor read/64, error -71 [ 179.501904][ T5899] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 179.564228][ T7517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.574900][ T7517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.599394][ T5899] usb 1-1: USB disconnect, device number 13 [ 179.733423][ T29] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.791442][ T5936] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 179.805880][ T5936] usb 4-1: USB disconnect, device number 17 [ 179.873325][ T29] usb 3-1: device descriptor read/64, error -71 [ 180.001291][ T29] usb usb3-port1: attempt power cycle [ 180.353966][ T29] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 180.384178][ T29] usb 3-1: device descriptor read/8, error -71 [ 180.403935][ T5936] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 180.573320][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 180.580190][ T5936] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 180.592080][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.604877][ T5936] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.614031][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.622070][ T5936] usb 1-1: Product: syz [ 180.626353][ T5936] usb 1-1: Manufacturer: syz [ 180.630989][ T5936] usb 1-1: SerialNumber: syz [ 180.635753][ T29] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 180.644999][ T5936] usb 1-1: config 0 descriptor?? [ 180.655676][ T5936] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 180.665096][ T5936] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 180.672601][ T29] usb 3-1: device descriptor read/8, error -71 [ 180.783579][ T29] usb usb3-port1: unable to enumerate USB device [ 180.809665][ T30] audit: type=1400 audit(1776478900.942:504): avc: denied { read write } for pid=7542 comm="syz.1.422" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 180.836489][ T30] audit: type=1400 audit(1776478900.942:505): avc: denied { open } for pid=7542 comm="syz.1.422" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 181.060582][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.156406][ T7547] bridge0: port 3(geneve1) entered disabled state [ 181.355655][ T5936] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 181.398634][ T5936] em28xx 1-1:0.0: Config register raw data: 0x41 [ 182.395766][ T30] audit: type=1400 audit(1776478902.532:506): avc: denied { setopt } for pid=7556 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.543711][ T5822] IPVS: starting estimator thread 0... [ 182.557514][ T7561] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 182.643411][ T7562] IPVS: using max 46 ests per chain, 110400 per kthread [ 183.843055][ T5899] usb 1-1: USB disconnect, device number 14 [ 183.879298][ T5899] em28xx 1-1:0.0: Disconnecting em28xx [ 183.905334][ T5899] em28xx 1-1:0.0: Freeing device [ 184.001267][ T30] audit: type=1400 audit(1776478904.132:507): avc: denied { read } for pid=7574 comm="syz.4.432" path="socket:[16668]" dev="sockfs" ino=16668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 185.381782][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.743359][ T5884] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 185.883942][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 185.906635][ T5884] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 185.925791][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.945036][ T5884] usb 3-1: Product: syz [ 185.955651][ T5884] usb 3-1: Manufacturer: syz [ 185.968983][ T5884] usb 3-1: SerialNumber: syz [ 186.053385][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 186.066067][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 186.093853][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.122030][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.140132][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.157986][ T9] usb 4-1: Product: syz [ 186.168401][ T9] usb 4-1: Manufacturer: syz [ 186.180425][ T9] usb 4-1: SerialNumber: syz [ 186.207172][ T9] usb 4-1: config 0 descriptor?? [ 186.224770][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 186.234472][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 186.392628][ T5884] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 186.435599][ T5884] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 186.522186][ T7613] smbdirect: ib_dev[syz2] removed [ 186.873305][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 186.892016][ T30] audit: type=1400 audit(1776478907.022:508): avc: denied { getopt } for pid=7618 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.014266][ T9] em28xx 4-1:0.0: Config register raw data: 0x41 [ 187.115184][ T7622] netlink: 'syz.4.446': attribute type 1 has an invalid length. [ 187.583368][ T5822] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 187.733309][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 187.779480][ T5822] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 187.793570][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.801624][ T5822] usb 1-1: Product: syz [ 187.809393][ T5822] usb 1-1: Manufacturer: syz [ 187.815942][ T5822] usb 1-1: SerialNumber: syz [ 187.836430][ T5822] usb 1-1: config 0 descriptor?? [ 187.852048][ T5822] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 187.860657][ T5822] pctv452e: pctv452e_power_ctrl: 1 [ 187.860657][ T5822] [ 187.872860][ T5822] usb 1-1: selecting invalid altsetting 3 [ 187.879550][ T5822] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 187.879550][ T5822] [ 187.896044][ T5822] dvb-usb: bulk message failed: -22 (5/0) [ 187.906445][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.918948][ T5822] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 187.928593][ T5822] usb 1-1: media controller created [ 187.934034][ T5822] dvb-usb: bulk message failed: -22 (8/0) [ 187.946764][ T5822] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 187.958455][ T5822] dvb-usb: MAC address reading failed. [ 187.984031][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.045842][ T5822] DVB: Unable to find symbol stb0899_attach() [ 188.055640][ T7615] dvb-usb: bulk message failed: -22 (7/0) [ 188.062579][ T7615] pctv452e: I2C error -22; AA 02 0A 00 00 -> aa 02 31 03 0a 00 00 [ 188.075776][ T7614] ALSA: mixer_oss: invalid OSS volume 'u' [ 188.083619][ T5822] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 188.154991][ T5822] rc_core: IR keymap rc-tt-1500 not found [ 188.173460][ T5822] Registered IR keymap rc-empty [ 188.179891][ T5822] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 188.205109][ T5822] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input13 [ 188.226312][ T5822] dvb-usb: schedule remote query interval to 100 msecs. [ 188.234739][ T5822] pctv452e: pctv452e_power_ctrl: 0 [ 188.234739][ T5822] [ 188.242064][ T5822] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 188.272589][ T5822] usb 1-1: USB disconnect, device number 15 [ 188.338520][ T5822] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 188.668060][ T5822] usb 4-1: USB disconnect, device number 18 [ 188.702033][ T5822] em28xx 4-1:0.0: Disconnecting em28xx [ 188.739219][ T5822] em28xx 4-1:0.0: Freeing device [ 189.070193][ T5884] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 189.112074][ T5884] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 189.195929][ T5884] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 189.228493][ T5884] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 189.274624][ T5884] usb 3-1: USB disconnect, device number 15 [ 189.898095][ T7651] FAULT_INJECTION: forcing a failure. [ 189.898095][ T7651] name failslab, interval 1, probability 0, space 0, times 0 [ 189.910815][ T7651] CPU: 1 UID: 0 PID: 7651 Comm: syz.2.454 Not tainted syzkaller #0 PREEMPT(full) [ 189.910837][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 189.910847][ T7651] Call Trace: [ 189.910854][ T7651] [ 189.910861][ T7651] dump_stack_lvl+0x100/0x190 [ 189.910885][ T7651] should_fail_ex.cold+0x5/0xa [ 189.910910][ T7651] should_failslab+0xc2/0x120 [ 189.910938][ T7651] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 189.910961][ T7651] ? skb_clone+0x190/0x400 [ 189.910987][ T7651] skb_clone+0x190/0x400 [ 189.911010][ T7651] netlink_deliver_tap+0xaed/0xcc0 [ 189.911043][ T7651] netlink_unicast+0x62b/0x850 [ 189.911077][ T7651] ? __pfx_netlink_unicast+0x10/0x10 [ 189.911104][ T7651] ? security_netlink_send+0x13/0x210 [ 189.911130][ T7651] netlink_sendmsg+0x8b0/0xda0 [ 189.911160][ T7651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.911196][ T7651] ____sys_sendmsg+0x9e1/0xb70 [ 189.911221][ T7651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.911250][ T7651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.911287][ T7651] ___sys_sendmsg+0x190/0x1e0 [ 189.911305][ T7651] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.911320][ T7651] ? find_held_lock+0x2b/0x80 [ 189.911344][ T7651] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 189.911395][ T7651] __sys_sendmsg+0x170/0x220 [ 189.911417][ T7651] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.911447][ T7651] ? rcu_is_watching+0x12/0xc0 [ 189.911470][ T7651] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 189.911492][ T7651] ? rcu_is_watching+0x12/0xc0 [ 189.911519][ T7651] do_syscall_64+0x10b/0xf80 [ 189.911538][ T7651] ? clear_bhb_loop+0x40/0x90 [ 189.911559][ T7651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.911577][ T7651] RIP: 0033:0x7fd3a3b9c819 [ 189.911591][ T7651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.911608][ T7651] RSP: 002b:00007fd3a1db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.911625][ T7651] RAX: ffffffffffffffda RBX: 00007fd3a3e16180 RCX: 00007fd3a3b9c819 [ 189.911636][ T7651] RDX: 0000000000008000 RSI: 0000200000001400 RDI: 0000000000000003 [ 189.911646][ T7651] RBP: 00007fd3a1db4090 R08: 0000000000000000 R09: 0000000000000000 [ 189.911656][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.911666][ T7651] R13: 00007fd3a3e16218 R14: 00007fd3a3e16180 R15: 00007ffe2ca458a8 [ 189.911690][ T7651] [ 189.911798][ T7651] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 190.326203][ T7657] hsr0: entered promiscuous mode [ 190.333673][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 190.346350][ T7657] hsr_slave_0: left promiscuous mode [ 190.353973][ T7657] hsr_slave_1: left promiscuous mode [ 190.369816][ T7657] hsr0 (unregistering): left promiscuous mode [ 190.643320][ T5936] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 191.023291][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 191.032655][ T5936] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 191.041924][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.050035][ T5936] usb 1-1: Product: syz [ 191.054440][ T5936] usb 1-1: Manufacturer: syz [ 191.059120][ T5936] usb 1-1: SerialNumber: syz [ 191.074389][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 191.233299][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 191.241704][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 191.251041][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.259113][ T9] usb 3-1: Product: syz [ 191.263428][ T9] usb 3-1: Manufacturer: syz [ 191.268143][ T9] usb 3-1: SerialNumber: syz [ 191.276023][ T9] usb 3-1: config 0 descriptor?? [ 191.284976][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 191.290497][ T5936] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 191.292995][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 191.292995][ T9] [ 191.305681][ T5936] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 191.309902][ T9] usb 3-1: selecting invalid altsetting 3 [ 191.320373][ T5936] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 191.335232][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 191.335232][ T9] [ 191.335255][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 191.351812][ T5936] usb 1-1: media controller created [ 191.354929][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.364946][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.380730][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 191.389593][ T9] usb 3-1: media controller created [ 191.395028][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 191.400911][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 191.409204][ T9] dvb-usb: MAC address reading failed. [ 191.421881][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.458153][ T9] DVB: Unable to find symbol stb0899_attach() [ 191.464314][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 191.490430][ T7661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.459'. [ 191.523352][ T9] rc_core: IR keymap rc-tt-1500 not found [ 191.529101][ T9] Registered IR keymap rc-empty [ 191.535271][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 191.547093][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input14 [ 191.561887][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 191.569231][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 191.569231][ T9] [ 191.577039][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 191.594586][ T7666] ------------[ cut here ]------------ [ 191.601047][ T7666] usb 1-1: BOGUS control dir, pipe 80001080 doesn't match bRequestType c0 [ 191.609590][ T7666] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#1: syz.2.461/7666 [ 191.619796][ T7666] Modules linked in: [ 191.625289][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.2.461 Not tainted syzkaller #0 PREEMPT(full) [ 191.634582][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.644694][ T7666] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 191.650328][ T7666] Code: d2 74 5d 48 89 54 24 40 e8 8f 45 b4 fa 4c 89 ef e8 37 63 de fe 48 89 c6 48 8d 3d 7d 0c 94 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 63 45 b4 fa 89 ee bf ff 00 00 00 [ 191.670011][ T7666] RSP: 0018:ffffc9000f197918 EFLAGS: 00010287 [ 191.676291][ T7666] RAX: ffffffff8c826e40 RBX: ffff888037415100 RCX: 0000000080001080 [ 191.684279][ T7666] RDX: ffff888055ca8960 RSI: ffffffff8c826e40 RDI: ffffffff90e889c0 [ 191.692239][ T7666] RBP: ffff88802c430058 R08: 00000000000000c0 R09: 0000000000000000 [ 191.700330][ T7666] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888057438540 [ 191.708311][ T7666] R13: ffff88802c4300b0 R14: 0000000080001080 R15: 00000000000000c0 [ 191.716347][ T7666] FS: 00007fd3a1df66c0(0000) GS:ffff8881243f2000(0000) knlGS:0000000000000000 [ 191.725301][ T7666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.731886][ T7666] CR2: 0000001b2fe04ff8 CR3: 000000007d377000 CR4: 00000000003526f0 [ 191.739864][ T7666] Call Trace: [ 191.743130][ T7666] [ 191.746085][ T7666] ? __init_swait_queue_head+0xca/0x150 [ 191.751637][ T7666] usb_start_wait_urb+0x10e/0x580 [ 191.756666][ T7666] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 191.762213][ T7666] ? __asan_memset+0x23/0x50 [ 191.766815][ T7666] usb_control_msg+0x328/0x4b0 [ 191.771575][ T7666] ? __pfx_usb_control_msg+0x10/0x10 [ 191.776866][ T7666] ? rt_mutex_slowlock_block.constprop.0+0x382/0x7c0 [ 191.783556][ T7666] ? rt_mutex_slowlock_block.constprop.0+0x59/0x7c0 [ 191.790135][ T7666] gl861_ctrl_msg+0x1a5/0x4a0 [ 191.794811][ T7666] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 191.799999][ T7666] gl861_i2c_master_xfer+0x545/0x690 [ 191.805300][ T7666] ? mark_held_locks+0x40/0x70 [ 191.810164][ T7666] __i2c_transfer+0x5e9/0x1780 [ 191.814937][ T7666] ? rt_mutex_slowlock.constprop.0+0x77/0x120 [ 191.821025][ T7666] ? __pfx___i2c_transfer+0x10/0x10 [ 191.826242][ T7666] i2c_transfer+0x15f/0x380 [ 191.830743][ T7666] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 191.835730][ T7666] i2cdev_ioctl+0x19d/0x830 [ 191.840241][ T7666] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 191.845339][ T7666] ? selinux_file_ioctl+0x13b/0x290 [ 191.850582][ T7666] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 191.855653][ T7666] __x64_sys_ioctl+0x18e/0x210 [ 191.860435][ T7666] do_syscall_64+0x10b/0xf80 [ 191.865055][ T7666] ? clear_bhb_loop+0x40/0x90 [ 191.869728][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.875665][ T7666] RIP: 0033:0x7fd3a3b9c819 [ 191.880094][ T7666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.899750][ T7666] RSP: 002b:00007fd3a1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.908178][ T7666] RAX: ffffffffffffffda RBX: 00007fd3a3e15fa0 RCX: 00007fd3a3b9c819 [ 191.916147][ T7666] RDX: 00002000000006c0 RSI: 0000000000000707 RDI: 0000000000000009 [ 191.924198][ T7666] RBP: 00007fd3a3c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 191.932153][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.940157][ T7666] R13: 00007fd3a3e16038 R14: 00007fd3a3e15fa0 R15: 00007ffe2ca458a8 [ 191.948149][ T7666] [ 191.951172][ T7666] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.958431][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.2.461 Not tainted syzkaller #0 PREEMPT(full) [ 191.967700][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.977747][ T7666] Call Trace: [ 191.981043][ T7666] [ 191.983968][ T7666] dump_stack_lvl+0x100/0x190 [ 191.988646][ T7666] vpanic+0x552/0x970 [ 191.992621][ T7666] ? __pfx_vpanic+0x10/0x10 [ 191.997113][ T7666] panic+0xd1/0xe0 [ 192.000813][ T7666] ? __pfx_panic+0x10/0x10 [ 192.005214][ T7666] check_panic_on_warn.cold+0x19/0x34 [ 192.010561][ T7666] ? usb_submit_urb+0x1573/0x1910 [ 192.015655][ T7666] __warn.cold+0x191/0x328 [ 192.020067][ T7666] __report_bug+0x296/0x3d0 [ 192.024547][ T7666] ? usb_submit_urb+0x1573/0x1910 [ 192.029643][ T7666] ? __pfx___report_bug+0x10/0x10 [ 192.034645][ T7666] ? mark_held_locks+0x40/0x70 [ 192.039416][ T7666] ? stack_depot_save_flags+0x479/0x9d0 [ 192.044959][ T7666] report_bug_entry+0xe1/0x290 [ 192.049708][ T7666] ? usb_submit_urb+0x157e/0x1910 [ 192.054712][ T7666] handle_bug+0x1cd/0x2a0 [ 192.059033][ T7666] exc_invalid_op+0x17/0x50 [ 192.063527][ T7666] asm_exc_invalid_op+0x1a/0x20 [ 192.068357][ T7666] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 192.073971][ T7666] Code: d2 74 5d 48 89 54 24 40 e8 8f 45 b4 fa 4c 89 ef e8 37 63 de fe 48 89 c6 48 8d 3d 7d 0c 94 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 63 45 b4 fa 89 ee bf ff 00 00 00 [ 192.093553][ T7666] RSP: 0018:ffffc9000f197918 EFLAGS: 00010287 [ 192.099596][ T7666] RAX: ffffffff8c826e40 RBX: ffff888037415100 RCX: 0000000080001080 [ 192.107568][ T7666] RDX: ffff888055ca8960 RSI: ffffffff8c826e40 RDI: ffffffff90e889c0 [ 192.115624][ T7666] RBP: ffff88802c430058 R08: 00000000000000c0 R09: 0000000000000000 [ 192.123592][ T7666] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888057438540 [ 192.131542][ T7666] R13: ffff88802c4300b0 R14: 0000000080001080 R15: 00000000000000c0 [ 192.139505][ T7666] ? usb_submit_urb+0x1569/0x1910 [ 192.144531][ T7666] ? __init_swait_queue_head+0xca/0x150 [ 192.150089][ T7666] usb_start_wait_urb+0x10e/0x580 [ 192.155102][ T7666] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 192.160647][ T7666] ? __asan_memset+0x23/0x50 [ 192.165238][ T7666] usb_control_msg+0x328/0x4b0 [ 192.169993][ T7666] ? __pfx_usb_control_msg+0x10/0x10 [ 192.175269][ T7666] ? rt_mutex_slowlock_block.constprop.0+0x382/0x7c0 [ 192.181943][ T7666] ? rt_mutex_slowlock_block.constprop.0+0x59/0x7c0 [ 192.188549][ T7666] gl861_ctrl_msg+0x1a5/0x4a0 [ 192.193222][ T7666] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 192.198425][ T7666] gl861_i2c_master_xfer+0x545/0x690 [ 192.203698][ T7666] ? mark_held_locks+0x40/0x70 [ 192.208446][ T7666] __i2c_transfer+0x5e9/0x1780 [ 192.213204][ T7666] ? rt_mutex_slowlock.constprop.0+0x77/0x120 [ 192.219291][ T7666] ? __pfx___i2c_transfer+0x10/0x10 [ 192.224481][ T7666] i2c_transfer+0x15f/0x380 [ 192.228969][ T7666] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 192.233902][ T7666] i2cdev_ioctl+0x19d/0x830 [ 192.238395][ T7666] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 192.243420][ T7666] ? selinux_file_ioctl+0x13b/0x290 [ 192.248609][ T7666] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 192.253621][ T7666] __x64_sys_ioctl+0x18e/0x210 [ 192.258380][ T7666] do_syscall_64+0x10b/0xf80 [ 192.263121][ T7666] ? clear_bhb_loop+0x40/0x90 [ 192.267776][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.273650][ T7666] RIP: 0033:0x7fd3a3b9c819 [ 192.278056][ T7666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.297644][ T7666] RSP: 002b:00007fd3a1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.306034][ T7666] RAX: ffffffffffffffda RBX: 00007fd3a3e15fa0 RCX: 00007fd3a3b9c819 [ 192.313990][ T7666] RDX: 00002000000006c0 RSI: 0000000000000707 RDI: 0000000000000009 [ 192.321948][ T7666] RBP: 00007fd3a3c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 192.329996][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.337952][ T7666] R13: 00007fd3a3e16038 R14: 00007fd3a3e15fa0 R15: 00007ffe2ca458a8 [ 192.345916][ T7666] [ 192.349195][ T7666] Kernel Offset: disabled [ 192.353502][ T7666] Rebooting in 86400 seconds..