last executing test programs: 6m17.501648793s ago: executing program 2 (id=1318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x2000000000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m17.400505187s ago: executing program 2 (id=1320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x47, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0xfffffff9}, &(0x7f0000000400)=0x8) 6m17.000988898s ago: executing program 2 (id=1324): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000192c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0xffffffff, 0xfffffffd, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000, 0xffffffff}}}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x3, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xd0, 0xf7, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe5, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x8, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x8, 0x4}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0x3, 0x9, 0x20, 0x7f}, 0x51, &(0x7f0000000140)={0x5, 0xf, 0x51, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x9, 0x9, 0xff2e, 0x1}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "a4b3cfb42a8e223dedcbbac28ebd7e2d"}, @ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0x4, 0xf000, 0x5, [0xff0000, 0x30, 0xf, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x7, 0x9, 0x5f, 0x52}, @ptm_cap={0x3}]}, 0x5, [{0xe3, &(0x7f0000000200)=@string={0xe3, 0x3, "8c9c64d48c043c441983429f37d04ac51ebb278830e7760713801b406355fd7e44610018df6561819176856365d4521644104cc5396e9278f4bc5e55e3d329a1a01f50f4a8bcc5012e6374110a3dcf0c56f2eca6ddf4ab05ee1c381ce4fff9d18ac6a5243657e3b3dd96615f15e9eb7640115e25f5b657ecbaea0265bb0906105856fd16c84f92967005abd5816d58138460d2916816d002bb69f6e530eff8b313f63a35c9ccee852b7ebc39230bba313a6f89f5b8a66c1a299ca40edd4df085a1a9281ae240ec1ca0b99fb8fdfe26b3cecc925f92b00b66a5897ddb1e4b3fa251"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2809}}, {0x93, &(0x7f0000000340)=@string={0x93, 0x3, "7fe8631ee7fd051e3dc64405364ede9465764fc2ace144caccb04fc2081cfd736166d7df4ee445cad0be9569ba0ccf4a179fe335721320865fc78b0bc7b7a30acc510bc8a607e131a166109ece2b1be354588747cf45fe7be88177db82e256a58f1d17d2336936c4b733fd9d3703808095edb79a170d08e57abe9591f3ab6a83b14350badf11d5ce5397d70e465dd02bf5"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x835}}, {0xda, &(0x7f0000000440)=@string={0xda, 0x3, "39653fd5b3b0e7eacd6f2707fe86971dc9e04b38c113552459f6cd1597df0c94dace90349245e5296cb38783c157a2040c2eea155fc0e561b74e0f6f1529b068b3085dfd1d6707b237d6e8af89c45079de76973c8a6c46acd95a75401c89407d3c1f66af458c3f5d06ad2ad637eee61e3703a47910d715c0a48ae9cc4429509d692f391f15fa169178cf2024b3354ef16d0ec3e8207717251d228a8d4d63ab3e93482bf7894412c2fdc6b68c8df0939fdfe64dc7063047edb11076afa2177675b076f92d671f472b3294595becb6acd5fc887dc2bcf22a09"}}]}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 6m14.330293493s ago: executing program 2 (id=1340): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 6m14.098184405s ago: executing program 2 (id=1342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0xffe0}], 0x1) 6m12.037843877s ago: executing program 2 (id=1346): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0xe0000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x1d}) close_range(r0, 0xffffffffffffffff, 0x0) 6m11.357265374s ago: executing program 32 (id=1346): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0xe0000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x1d}) close_range(r0, 0xffffffffffffffff, 0x0) 6.865746493s ago: executing program 5 (id=3483): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x200, 0x0, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0xfe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5.976164572s ago: executing program 5 (id=3494): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xad41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000600)="8a26c339", 0x4}, {&(0x7f0000000780)="5e6c45ed96fd6198e9c19876", 0xc}], 0x2, 0x200, 0x4614) 5.768403528s ago: executing program 5 (id=3495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x73, 0x0, 0xee00}, {0x8, 0x9, 0x81, 0x3a4, 0x4, 0x8, 0x6, 0x1}, {0x0, 0xffffffffffff98c9, 0x3ff, 0x2}, 0x0, 0x6e6bc0, 0x2, 0x1, 0x6, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x32}, 0xa, @in=@multicast2, 0x3501, 0x2, 0x1, 0x6, 0x0, 0x1, 0x5}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a"], 0x6c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0x5, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x200000d4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r10, 0x0, 0x0, 0x700, 0x0) io_setup(0x1, &(0x7f0000000300)) 4.263243118s ago: executing program 1 (id=3502): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e80)="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", 0x1ec}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b256", 0xf3}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6", 0x51}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9", 0xc2}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.859161609s ago: executing program 1 (id=3503): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004"], 0x48) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 3.561521781s ago: executing program 1 (id=3505): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d", 0x27}], 0x1, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.4056298s ago: executing program 1 (id=3506): r0 = socket$inet6(0xa, 0x2, 0x6) connect$inet6(r0, &(0x7f0000000140)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000008c0), 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x800, @empty, 0x4000003}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) close(r0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="4005db87869a1d02c9dd24e0"], 0x0, 0x0}) syz_open_dev$vbi(0x0, 0x3, 0x2) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f000035b000/0x2000)=nil}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000008c0)='w', 0x1}], 0x1}}], 0x2, 0x8080) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x2, 0xab51, 0x4, 0x0, 0x0, 0x6, 0x7, 0x3, r5}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 3.326861608s ago: executing program 5 (id=3507): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2023, 0x0) 3.137383697s ago: executing program 5 (id=3508): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0}) 2.950542028s ago: executing program 3 (id=3512): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x4000000) 2.901818612s ago: executing program 3 (id=3513): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0xe3fd, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea2}, 0x0, 0x20000044}) fcntl$lock(r1, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000002c0)={{&(0x7f0000124000/0x4000)=nil, 0x4000}}) io_uring_enter(r3, 0x2afd, 0x308b, 0xc, 0x0, 0x0) 2.370116021s ago: executing program 4 (id=3516): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d", 0x27}], 0x1, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.293450888s ago: executing program 4 (id=3517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x7, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) sendmmsg$inet(r2, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000006d00)=[{&(0x7f0000005d00)='9', 0x1}], 0x1}}], 0x1, 0x8800) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) 1.733507268s ago: executing program 3 (id=3518): socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x3) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x452b, 0x1000, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) 1.689867083s ago: executing program 1 (id=3519): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100040001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf", @ANYRES32=0x0, @ANYBLOB="8400028040"], 0xa0}, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24040084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.641911713s ago: executing program 3 (id=3520): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 1.513774249s ago: executing program 3 (id=3521): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x111, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000006680)) unshare(0x24020400) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000680)={0x0, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x0, 0x2], [0x0, 0x2, 0x1], [0x0, 0x0, 0xfffffffffefffff8, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3fb, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000480)=r6) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) sync() socket$packet(0x11, 0x2, 0x300) 1.470953865s ago: executing program 1 (id=3522): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904"], 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r3, 0x541b, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x50, 0x7fff7ffc}]}) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1830000001"], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000000340)={r5, 0x0, 0x47, 0xdb9, 0x7, 0x2}) 1.360552411s ago: executing program 4 (id=3523): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x4000000) 1.076617658s ago: executing program 4 (id=3524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000300000000000000040200008500000022000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.044059504s ago: executing program 0 (id=3525): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1411, 0x1}, 0x10}}, 0x0) 930.996062ms ago: executing program 0 (id=3526): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004"], 0x48) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 909.101827ms ago: executing program 4 (id=3527): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') preadv(r1, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') socket$packet(0x11, 0x3, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r3], 0x3c}}, 0x10) 780.048862ms ago: executing program 0 (id=3528): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de", 0x24}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a", 0x83}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d4", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 422.360708ms ago: executing program 0 (id=3529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000480)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x2c, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47bc, 0x0, 0x200000000000000, 0x0, 0x0) 242.261143ms ago: executing program 3 (id=3530): socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) 137.20372ms ago: executing program 4 (id=3531): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) 137.027046ms ago: executing program 0 (id=3532): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/58, 0x3a}, 0x7f}], 0x1, 0x2023, 0x0) 108.242738ms ago: executing program 5 (id=3533): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x4) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 0 (id=3534): r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x68000080) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000400)=[0x3], &(0x7f0000000640), &(0x7f0000000340), 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) kernel console output (not intermixed with test programs): 3575302.072:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.4.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e679c799 code=0x7ffc0000 [ 528.341412][ T29] audit: type=1326 audit(1773575302.072:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.4.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e679c799 code=0x7ffc0000 [ 528.389305][ T29] audit: type=1326 audit(1773575302.072:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.4.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fd9e679c799 code=0x7ffc0000 [ 528.413286][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'. [ 528.540540][ T29] audit: type=1326 audit(1773575302.072:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.4.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e679c799 code=0x7ffc0000 [ 528.629523][ T29] audit: type=1326 audit(1773575302.072:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.4.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e679c799 code=0x7ffc0000 [ 528.675619][ T29] audit: type=1326 audit(1773575302.072:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.4.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e679c799 code=0x7ffc0000 [ 528.699666][ T29] audit: type=1326 audit(1773575302.072:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.4.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd9e679c799 code=0x7ffc0000 [ 528.795187][ T29] audit: type=1326 audit(1773575302.072:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.4.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e679c799 code=0x7ffc0000 [ 530.131403][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2519'. [ 532.490669][T13413] loop9: detected capacity change from 0 to 7 [ 532.511718][T13413] buffer_io_error: 9 callbacks suppressed [ 532.511750][T13413] Buffer I/O error on dev loop9, logical block 0, async page read [ 532.530815][T13413] Buffer I/O error on dev loop9, logical block 0, async page read [ 532.539894][T13415] netlink: 'syz.5.2526': attribute type 1 has an invalid length. [ 532.548424][T13413] Buffer I/O error on dev loop9, logical block 0, async page read [ 532.558846][T13413] Buffer I/O error on dev loop9, logical block 0, async page read [ 532.566998][T13413] Buffer I/O error on dev loop9, logical block 0, async page read [ 532.581018][T13413] Buffer I/O error on dev loop9, logical block 0, async page read [ 532.589525][T13413] Buffer I/O error on dev loop9, logical block 0, async page read [ 532.597587][T13413] ldm_validate_partition_table(): Disk read failed. [ 532.609579][T13413] Buffer I/O error on dev loop9, logical block 0, async page read [ 532.617633][T13413] Buffer I/O error on dev loop9, logical block 0, async page read [ 532.626130][T13413] Buffer I/O error on dev loop9, logical block 0, async page read [ 532.634335][T13413] Dev loop9: unable to read RDB block 0 [ 532.639981][T13413] loop9: unable to read partition table [ 532.646103][T13413] loop9: partition table beyond EOD, truncated [ 532.652407][T13413] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 532.652407][T13413] ) failed (rc=-5) [ 532.811646][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 532.811664][ T29] audit: type=1400 audit(1773575307.062:955): avc: denied { connect } for pid=13416 comm="syz.4.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 532.853841][ T29] audit: type=1400 audit(1773575307.062:956): avc: denied { ioctl } for pid=13416 comm="syz.4.2528" path="socket:[33660]" dev="sockfs" ino=33660 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 533.938986][ T29] audit: type=1326 audit(1773575308.232:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b5f9c799 code=0x7ffc0000 [ 533.981699][ T29] audit: type=1326 audit(1773575308.232:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b5f9c799 code=0x7ffc0000 [ 534.104282][ T29] audit: type=1326 audit(1773575308.232:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b5f9c799 code=0x7ffc0000 [ 534.184202][ T29] audit: type=1326 audit(1773575308.232:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b5f9c799 code=0x7ffc0000 [ 535.298074][ T29] audit: type=1326 audit(1773575308.232:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fe5b5f9c799 code=0x7ffc0000 [ 535.471343][ T29] audit: type=1326 audit(1773575308.232:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b5f9c799 code=0x7ffc0000 [ 535.548105][ T29] audit: type=1326 audit(1773575308.312:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5b5f5cfce code=0x7ffc0000 [ 535.631311][ T29] audit: type=1326 audit(1773575308.312:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5b5f5cfce code=0x7ffc0000 [ 535.912686][T13489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2557'. [ 536.263243][T13506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.737745][T13517] 9pnet_virtio: no channels available for device /dev/loop5 [ 537.207519][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2569'. [ 537.220741][T13521] 9p: Bad value for 'wfdno' [ 537.702178][ T5916] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 537.783079][T13543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.892034][T13549] 9p: Bad value for 'wfdno' [ 537.981305][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 537.988071][ T5916] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 538.011366][ T5916] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 538.048777][ T5916] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 538.059054][ T5916] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 538.482657][ T5916] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 538.961346][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.990255][ T5916] usb 4-1: Product: syz [ 539.001135][ T5916] usb 4-1: Manufacturer: syz [ 539.009596][ T5916] usb 4-1: SerialNumber: syz [ 539.219885][ T5916] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 539.257220][ T5916] imon 4-1:155.0: unable to initialize intf0, err -19 [ 539.287663][ T5916] imon:imon_probe: failed to initialize context! [ 539.307906][ T5916] imon 4-1:155.0: unable to register, err -19 [ 539.440932][ T5917] usb 4-1: USB disconnect, device number 25 [ 539.672304][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 542.670032][T13640] 9p: Bad value for 'rfdno' [ 542.811502][ T5916] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 543.011842][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 543.020062][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.049986][ T5916] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 543.069500][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.197018][ T5916] usb 6-1: config 0 descriptor?? [ 543.421442][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 543.792547][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.804884][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 543.815871][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.825761][ T10] usb 4-1: config 0 descriptor?? [ 543.835285][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 543.846604][ T5916] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 544.237743][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 544.245554][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 544.253242][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 544.260640][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 544.269232][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 544.277886][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 544.287434][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 544.298110][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 544.305804][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 544.316697][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 544.342201][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 544.357969][T13680] 9p: Bad value for 'rfdno' [ 544.371451][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 544.747445][T13685] lo speed is unknown, defaulting to 1000 [ 544.757885][T13685] lo speed is unknown, defaulting to 1000 [ 544.768157][T13685] xfrm0 speed is unknown, defaulting to 1000 [ 545.100049][T13690] 8021q: VLANs not supported on xfrm0 [ 545.372768][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 546.341713][ T5794] usb 6-1: USB disconnect, device number 15 [ 546.385833][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 546.404664][ T10] pwc: Registered as video103. [ 546.413596][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 546.432293][ T10] usb 4-1: USB disconnect, device number 26 [ 546.991495][ T5794] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 547.184300][ T5794] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 547.213896][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.239239][ T5794] usb 6-1: Product: syz [ 547.256242][ T5794] usb 6-1: Manufacturer: syz [ 547.272947][ T5794] usb 6-1: SerialNumber: syz [ 547.540609][ T5794] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 547.566856][ T5794] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 547.592175][ T5794] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 547.616720][ T5794] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 547.667440][ T5794] usb 6-1: USB disconnect, device number 16 [ 550.012048][ T5794] libceph: connect (1)[c::]:6789 error -101 [ 550.411072][ T5794] libceph: mon0 (1)[c::]:6789 connect error [ 550.534515][T13779] ceph: No mds server is up or the cluster is laggy [ 553.433669][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2667'. [ 556.920624][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2685'. [ 557.326896][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.336184][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.583680][T13913] overlayfs: failed to clone upperpath [ 560.016250][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2703'. [ 560.971327][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 561.201400][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 561.210008][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 561.250079][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 561.332710][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 561.379033][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.390420][ T10] usb 6-1: Product: ṣ﷧ḅ옽Մ丶铞癥쉏쩄냌쉏ᰈ珽晡쩅뻐榕಺䫏鼗㗣፲蘠읟஋럇ણ凌젋ަ㇡暡鸐⯎塔䞇䗏篾臨ꕖᶏ툗椳쐶㎷鷽̷肀骷ഗ빺醕꯳荪䎱멐ᇟ컕靓໗嵆⯐ [ 561.414726][ T10] usb 6-1: Manufacturer: ⠉ [ 561.586352][ T10] usb 6-1: SerialNumber: ࠵ [ 561.636493][T13955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 562.155676][T13955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 562.502362][ T10] usb 6-1: USB disconnect, device number 17 [ 563.035809][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2722'. [ 563.364864][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 563.364878][ T29] audit: type=1400 audit(1773575337.652:1226): avc: denied { execute } for pid=13990 comm="syz.1.2728" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 564.181275][ T29] audit: type=1400 audit(1773575338.452:1227): avc: denied { execute } for pid=13999 comm="syz.3.2730" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 565.867226][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2747'. [ 566.177643][T14046] lo speed is unknown, defaulting to 1000 [ 566.189718][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2739'. [ 566.217813][T14046] lo speed is unknown, defaulting to 1000 [ 566.428374][T14046] xfrm0 speed is unknown, defaulting to 1000 [ 566.751394][ T5794] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 567.656479][ T5794] usb 6-1: Using ep0 maxpacket: 16 [ 567.720727][ T5794] usb 6-1: config 0 has no interfaces? [ 567.877573][ T5794] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 567.892074][ T5794] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 568.133000][ T5794] usb 6-1: Manufacturer: syz [ 568.162519][ T5794] usb 6-1: config 0 descriptor?? [ 568.664653][T14087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 568.861114][T14046] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 569.041402][ T29] audit: type=1400 audit(1773575343.272:1228): avc: denied { read } for pid=14088 comm="syz.4.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 569.628825][T12139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 569.638444][T12139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 569.653055][T12139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 569.665475][T12139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 569.673084][T12139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 569.833957][T14096] lo speed is unknown, defaulting to 1000 [ 570.412444][T14096] lo speed is unknown, defaulting to 1000 [ 570.421729][T14096] xfrm0 speed is unknown, defaulting to 1000 [ 570.551128][ T5812] usb 6-1: USB disconnect, device number 18 [ 570.905005][T14121] loop5: detected capacity change from 0 to 7 [ 571.602463][T14121] Dev loop5: unable to read RDB block 7 [ 571.608068][T14121] loop5: unable to read partition table [ 571.613868][T14121] loop5: partition table beyond EOD, truncated [ 571.620023][T14121] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 571.736803][T12139] Bluetooth: hci5: command tx timeout [ 571.795619][T14129] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2773'. [ 571.831371][ T5812] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 571.850944][T14096] chnl_net:caif_netlink_parms(): no params data found [ 571.865564][T14129] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 572.430206][ T5812] usb 6-1: Using ep0 maxpacket: 8 [ 572.444479][ T5812] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 572.471322][ T5812] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 572.522277][ T5812] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 572.556826][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.568027][T14096] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.570501][ T29] audit: type=1400 audit(1773575346.862:1229): avc: denied { append } for pid=14140 comm="syz.3.2776" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 572.572640][T14096] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.572784][T14096] bridge_slave_0: entered allmulticast mode [ 572.573699][T14096] bridge_slave_0: entered promiscuous mode [ 572.580042][T14096] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.580118][T14096] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.580203][T14096] bridge_slave_1: entered allmulticast mode [ 572.580992][T14096] bridge_slave_1: entered promiscuous mode [ 572.582724][ T5812] usb 6-1: Product: ṣ﷧ḅ옽Մ丶铞癥쉏쩄냌쉏ᰈ珽晡쩅뻐榕಺䫏鼗㗣፲蘠읟஋럇ણ凌젋ަ㇡暡鸐⯎塔䞇䗏篾臨ꕖᶏ툗椳쐶㎷鷽̷肀骷ഗ빺醕꯳荪䎱멐ᇟ컕靓໗嵆⯐ [ 572.582753][ T5812] usb 6-1: Manufacturer: ⠉ [ 572.582767][ T5812] usb 6-1: SerialNumber: ࠵ [ 572.593775][T14125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 572.596884][T14125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 572.631857][T14096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.653686][ T1157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.665433][T14096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.727236][T14096] team0: Port device team_slave_0 added [ 572.729401][T14096] team0: Port device team_slave_1 added [ 572.759391][T14096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.759408][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.761753][T14096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.763186][T14096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.763198][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.763219][T14096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.843006][ T5812] usb 6-1: USB disconnect, device number 19 [ 572.867704][ T1157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.150148][T14096] hsr_slave_0: entered promiscuous mode [ 573.201853][T14096] hsr_slave_1: entered promiscuous mode [ 573.210147][T14096] debugfs: 'hsr0' already exists in 'hsr' [ 573.228644][T14096] Cannot create hsr debugfs directory [ 573.566679][T14145] bridge0: entered promiscuous mode [ 573.606785][T14145] bridge0: port 3(macvtap1) entered blocking state [ 573.635725][T14145] bridge0: port 3(macvtap1) entered disabled state [ 573.666611][T14145] macvtap1: entered allmulticast mode [ 573.688430][T14145] bridge0: entered allmulticast mode [ 573.728299][T14145] macvtap1: left allmulticast mode [ 573.746187][T14145] bridge0: left allmulticast mode [ 573.788514][T14145] bridge0: left promiscuous mode [ 573.823250][T12139] Bluetooth: hci5: command tx timeout [ 574.079492][ T1157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.193894][ T1157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.658741][ T29] audit: type=1800 audit(1773575348.952:1230): pid=14182 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2796" name="nullb0" dev="tmpfs" ino=737 res=0 errno=0 [ 576.116338][T12139] Bluetooth: hci5: command tx timeout [ 576.392349][ T1157] bridge_slave_1: left allmulticast mode [ 576.398028][ T1157] bridge_slave_1: left promiscuous mode [ 576.409264][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.422875][ T1157] bridge_slave_0: left allmulticast mode [ 576.430515][ T1157] bridge_slave_0: left promiscuous mode [ 576.436524][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.524598][T14203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2801'. [ 576.542636][ T5867] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 576.622074][ T5916] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 576.712644][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 576.726676][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.748627][ T5867] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 576.759377][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.776759][ T5867] usb 6-1: config 0 descriptor?? [ 576.793133][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 576.805256][ T5916] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 576.818834][ T5916] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 576.839219][ T1157] bond0 (unregistering): (slave ): Releasing backup interface [ 576.849990][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.859601][ T5916] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 576.869821][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.878266][ T1157] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 576.887589][ T5916] usb 4-1: Product: ṣ﷧ḅ옽Մ丶铞癥쉏쩄냌쉏ᰈ珽晡쩅뻐榕಺䫏鼗㗣፲蘠읟஋럇ણ凌젋ަ㇡暡鸐⯎塔䞇䗏篾臨ꕖᶏ툗椳쐶㎷鷽̷肀骷ഗ빺醕꯳荪䎱멐ᇟ컕靓໗嵆⯐ [ 576.910896][ T5916] usb 4-1: Manufacturer: ⠉ [ 576.916938][ T5916] usb 4-1: SerialNumber: ࠵ [ 576.929675][ T1157] bond0 (unregistering): Released all slaves [ 576.941475][ T1157] bond1 (unregistering): (slave veth3): Releasing backup interface [ 576.957139][T14185] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 576.967332][ T1157] bond1 (unregistering): (slave vlan2): Releasing backup interface [ 576.971588][T14185] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 576.983042][ T1157] veth0_to_bond: left promiscuous mode [ 576.989928][ T1157] bond1 (unregistering): Released all slaves [ 576.991403][ T5867] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 577.007752][ T1157] bond2 (unregistering): (slave veth5): Releasing backup interface [ 577.019574][ T1157] bond2 (unregistering): Released all slaves [ 577.037375][ T1157] bond3 (unregistering): (slave veth7): Releasing backup interface [ 577.046380][ T1157] bond3 (unregistering): Released all slaves [ 577.058318][ T922] xfrm0 speed is unknown, defaulting to 1000 [ 577.071833][ T922] infiniband syz1: ib_query_port failed (-19) [ 577.246862][ T5916] usb 4-1: USB disconnect, device number 27 [ 577.313015][ T1157] tipc: Left network mode [ 577.695357][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.705904][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.736548][ T1157] veth1_macvtap: left promiscuous mode [ 577.743320][ T1157] veth0_macvtap: left promiscuous mode [ 577.748974][ T1157] veth1_vlan: left promiscuous mode [ 577.774759][ T1157] veth0_vlan: left promiscuous mode [ 578.202187][T12139] Bluetooth: hci5: command tx timeout [ 578.487652][T14247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2811'. [ 578.638203][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 578.664929][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 578.791308][ T5916] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 578.837905][T14096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 578.851114][T14096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 578.862262][T14096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 578.873833][T14096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 578.954967][ T5916] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 578.965311][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.976060][ T5916] usb 4-1: config 0 descriptor?? [ 578.983288][ T5916] cp210x 4-1:0.0: cp210x converter detected [ 579.118873][T14096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.151126][T14096] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.165761][ T1157] IPVS: stop unused estimator thread 0... [ 579.178335][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.185513][ T8680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.214414][ T5916] usb 4-1: cp210x converter now attached to ttyUSB0 [ 579.250206][ T7688] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.257358][ T7688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.343323][ T10] usb 6-1: USB disconnect, device number 20 [ 579.410994][ T29] audit: type=1400 audit(1773575353.702:1231): avc: denied { module_request } for pid=14096 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 579.501549][ T5916] hid_parser_main: 7 callbacks suppressed [ 579.501568][ T5916] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 579.546776][ T5916] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 579.709146][ T29] audit: type=1400 audit(1773575354.002:1232): avc: denied { write } for pid=14291 comm="syz.1.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 579.767197][T14096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.812168][T14096] veth0_vlan: entered promiscuous mode [ 579.823315][T14096] veth1_vlan: entered promiscuous mode [ 579.847334][T14096] veth0_macvtap: entered promiscuous mode [ 579.856468][T14096] veth1_macvtap: entered promiscuous mode [ 579.892724][T14096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.025978][T14299] syz.1.2820: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 580.041134][T14299] CPU: 0 UID: 0 PID: 14299 Comm: syz.1.2820 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.041166][T14299] Tainted: [L]=SOFTLOCKUP [ 580.041174][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.041186][T14299] Call Trace: [ 580.041193][T14299] [ 580.041201][T14299] dump_stack_lvl+0x100/0x190 [ 580.041239][T14299] warn_alloc.cold+0x95/0x1c1 [ 580.041267][T14299] ? __pfx_warn_alloc+0x10/0x10 [ 580.041288][T14299] ? filter_irq_stacks+0x19/0x90 [ 580.041319][T14299] ? kasan_save_stack+0x3f/0x50 [ 580.041340][T14299] ? kasan_save_stack+0x30/0x50 [ 580.041363][T14299] ? kasan_save_track+0x14/0x30 [ 580.041386][T14299] ? xskq_create+0xfb/0x1d0 [ 580.041406][T14299] __vmalloc_node_range_noprof+0x1252/0x1530 [ 580.041434][T14299] ? xskq_create+0xfb/0x1d0 [ 580.041458][T14299] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 580.041497][T14299] ? xskq_create+0xfb/0x1d0 [ 580.041517][T14299] vmalloc_user_noprof+0x9e/0xe0 [ 580.041539][T14299] ? xskq_create+0xfb/0x1d0 [ 580.041559][T14299] xskq_create+0xfb/0x1d0 [ 580.041580][T14299] xsk_setsockopt+0x743/0xab0 [ 580.041601][T14299] ? __pfx_xsk_setsockopt+0x10/0x10 [ 580.041620][T14299] ? find_held_lock+0x2b/0x80 [ 580.041643][T14299] ? __fget_files+0x215/0x3d0 [ 580.041667][T14299] ? selinux_socket_setsockopt+0x6a/0x80 [ 580.041692][T14299] ? __pfx_xsk_setsockopt+0x10/0x10 [ 580.041710][T14299] do_sock_setsockopt+0xf3/0x1d0 [ 580.041741][T14299] __sys_setsockopt+0x195/0x220 [ 580.041767][T14299] __x64_sys_setsockopt+0xbd/0x160 [ 580.041787][T14299] ? do_syscall_64+0x95/0xf80 [ 580.041809][T14299] ? lockdep_hardirqs_on+0x78/0x100 [ 580.041832][T14299] do_syscall_64+0x106/0xf80 [ 580.041853][T14299] ? clear_bhb_loop+0x40/0x90 [ 580.041876][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.041895][T14299] RIP: 0033:0x7f193f19c799 [ 580.041912][T14299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.041930][T14299] RSP: 002b:00007f1940059028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 580.041949][T14299] RAX: ffffffffffffffda RBX: 00007f193f416180 RCX: 00007f193f19c799 [ 580.041962][T14299] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 580.041972][T14299] RBP: 00007f193f232c99 R08: 0000000000000004 R09: 0000000000000000 [ 580.041983][T14299] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.041995][T14299] R13: 00007f193f416218 R14: 00007f193f416180 R15: 00007ffe0c1a2af8 [ 580.042021][T14299] [ 580.292995][T14299] Mem-Info: [ 580.296119][T14299] active_anon:14388 inactive_anon:0 isolated_anon:0 [ 580.296119][T14299] active_file:20998 inactive_file:40866 isolated_file:0 [ 580.296119][T14299] unevictable:768 dirty:367 writeback:0 [ 580.296119][T14299] slab_reclaimable:12606 slab_unreclaimable:99996 [ 580.296119][T14299] mapped:36030 shmem:7032 pagetables:1458 [ 580.296119][T14299] sec_pagetables:0 bounce:0 [ 580.296119][T14299] kernel_misc_reclaimable:0 [ 580.296119][T14299] free:1285755 free_pcp:14845 free_cma:0 [ 580.299937][T14096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.341843][T14299] Node 0 active_anon:57552kB inactive_anon:0kB active_file:83992kB inactive_file:163264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144120kB dirty:1464kB writeback:0kB shmem:26592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12472kB pagetables:5648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 580.381098][T14299] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 580.410968][T14299] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 580.440832][T14299] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 580.446890][T14299] Node 0 DMA32 free:1196900kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57980kB inactive_anon:0kB active_file:83992kB inactive_file:163264kB unevictable:1536kB writepending:1464kB zspages:0kB present:3129332kB managed:2537160kB mlocked:0kB bounce:0kB free_pcp:50200kB local_pcp:31660kB free_cma:0kB [ 580.477170][ T7688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.480700][T14299] lowmem_reserve[]: 0 0 1 1 1 [ 580.489897][ T7688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.493701][T14299] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1048kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 580.493755][T14299] lowmem_reserve[]: 0 0 0 0 0 [ 580.493791][T14299] Node 1 Normal free:3930528kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8784kB local_pcp:0kB free_cma:0kB [ 580.493841][T14299] lowmem_reserve[]: 0 0 0 0 0 [ 580.493875][T14299] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 580.494007][T14299] Node 0 DMA32: 3157*4kB (UM) 2937*8kB (U) 1689*16kB (UM) 746*32kB (UM) 486*64kB (UME) 323*128kB (UME) 202*256kB (UME) 121*512kB (UME) 82*1024kB (UME) 18*2048kB (UME) 196*4096kB (UM) = 1196780kB [ 580.606314][T14299] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 580.617878][T14299] Node 1 Normal: 2*4kB (U) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 7*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 957*4096kB (UM) = 3930528kB [ 580.634698][T14299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.644306][T14299] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 580.653680][T14299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.663278][T14299] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 580.672635][T14299] 68983 total pagecache pages [ 580.677313][T14299] 0 pages in swap cache [ 580.682112][T14299] Free swap = 124996kB [ 580.686266][T14299] Total swap = 124996kB [ 580.690692][T14299] 2097051 pages RAM [ 580.694651][T14299] 0 pages HighMem/MovableOnly [ 580.699321][T14299] 430884 pages reserved [ 580.703546][T14299] 0 pages cma reserved [ 580.788380][ T7688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.839742][ T7688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.909391][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.926474][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.018356][ T7688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.033063][ T7688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.058527][ T29] audit: type=1400 audit(1773575355.352:1233): avc: denied { mounton } for pid=14096 comm="syz-executor" path="/root/syzkaller.Bti8hZ/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 581.556803][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2824'. [ 581.566467][ T29] audit: type=1400 audit(1773575355.542:1234): avc: denied { mounton } for pid=14096 comm="syz-executor" path="/root/syzkaller.Bti8hZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 581.612417][ T10] usb 4-1: USB disconnect, device number 28 [ 581.652154][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 581.666587][ T29] audit: type=1400 audit(1773575355.792:1235): avc: denied { mounton } for pid=14096 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 581.925790][ T10] cp210x 4-1:0.0: device disconnected [ 582.160073][T12139] Bluetooth: hci2: unexpected cc 0x1004 length: 84 > 11 [ 582.315421][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 582.333701][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 582.344144][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 582.360073][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 582.369561][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 582.439726][T14344] lo speed is unknown, defaulting to 1000 [ 582.482690][ T5916] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 582.506258][T14351] syzkaller0: entered promiscuous mode [ 582.532749][ T5916] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 582.555631][T14351] syzkaller0: entered allmulticast mode [ 582.592160][T14344] lo speed is unknown, defaulting to 1000 [ 583.159174][T14344] chnl_net:caif_netlink_parms(): no params data found [ 583.171403][ T5916] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 583.273085][T14344] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.273206][T14344] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.273314][T14344] bridge_slave_0: entered allmulticast mode [ 583.274801][T14344] bridge_slave_0: entered promiscuous mode [ 583.303938][T14344] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.304041][T14344] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.304150][T14344] bridge_slave_1: entered allmulticast mode [ 583.305288][T14344] bridge_slave_1: entered promiscuous mode [ 583.353150][ T5916] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 583.353181][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.355187][ T5916] usb 6-1: config 0 descriptor?? [ 583.360461][ T5916] cp210x 6-1:0.0: cp210x converter detected [ 583.381133][T14344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.384418][T14344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.404294][T14344] team0: Port device team_slave_0 added [ 583.442356][T14344] team0: Port device team_slave_1 added [ 583.463902][T14344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.463918][T14344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.463940][T14344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.465376][T14344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.465389][T14344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.465410][T14344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.506659][T14344] hsr_slave_0: entered promiscuous mode [ 583.612354][T14344] hsr_slave_1: entered promiscuous mode [ 583.612949][T14344] debugfs: 'hsr0' already exists in 'hsr' [ 583.612969][T14344] Cannot create hsr debugfs directory [ 583.900125][ T5916] usb 6-1: cp210x converter now attached to ttyUSB0 [ 584.096409][T14344] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.210547][T14344] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.355070][T14344] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.383230][ T29] audit: type=1400 audit(1773575358.662:1236): avc: denied { getopt } for pid=14403 comm="syz.0.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 584.447838][ T5810] Bluetooth: hci0: command tx timeout [ 584.501722][T14344] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.621722][T14344] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 584.632495][T14344] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 584.641620][T14344] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 584.650433][T14344] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 584.698798][T14344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.716563][T14344] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.726422][ T7688] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.733584][ T7688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.746201][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.753335][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.771518][ T5794] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 584.781372][ T5914] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 584.888236][T14344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.917551][T14344] veth0_vlan: entered promiscuous mode [ 584.926768][T14344] veth1_vlan: entered promiscuous mode [ 584.931978][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 584.940057][ T5914] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 584.948579][T14344] veth0_macvtap: entered promiscuous mode [ 584.951502][ T5794] usb 1-1: Using ep0 maxpacket: 32 [ 584.959855][ T5914] usb 4-1: config 0 has no interface number 0 [ 584.960687][T14344] veth1_macvtap: entered promiscuous mode [ 584.973545][ T5914] usb 4-1: config 0 interface 12 has no altsetting 0 [ 584.983529][ T5794] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 584.991389][T14344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.993579][ T5794] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 585.004371][T14344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.013449][ T5794] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 585.025800][ T5914] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 585.033886][ T7688] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.035176][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.043752][ T7688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.052196][ T5794] usb 1-1: config 1 has no interface number 0 [ 585.066835][ T5914] usb 4-1: Product: syz [ 585.071002][ T5914] usb 4-1: Manufacturer: syz [ 585.075832][ T5794] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 585.084220][ T7688] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.088543][ T5914] usb 4-1: SerialNumber: syz [ 585.100608][ T5794] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 585.123509][ T5914] usb 4-1: config 0 descriptor?? [ 585.135000][ T7688] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.138283][ T5794] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 585.154202][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.172579][ T7688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.187888][ T7688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.196066][ T5794] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 585.218844][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.227847][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.374541][ T5794] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 585.542571][ T5914] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 585.550115][ T5914] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 585.558609][ T5914] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 585.601518][ T5914] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 585.637271][ T5914] usb 4-1: USB disconnect, device number 29 [ 585.823324][ T5794] usb 1-1: USB disconnect, device number 5 [ 585.836271][ T5794] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 585.969098][ T10] usb 6-1: USB disconnect, device number 21 [ 585.992903][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 586.024037][ T10] cp210x 6-1:0.0: device disconnected [ 586.052545][ T5810] Bluetooth: hci2: unexpected cc 0x1004 length: 84 > 11 [ 586.170117][T14437] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 586.193624][T14437] macvlan2: entered promiscuous mode [ 586.531350][ T5810] Bluetooth: hci0: command tx timeout [ 587.954931][T12139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 587.966916][T12139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 587.977043][T12139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 587.997539][T12139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 588.011697][T12139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 588.321410][ T5915] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 588.601410][ T5810] Bluetooth: hci0: command tx timeout [ 589.136639][ T5915] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 589.146121][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 589.157451][ T5915] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 589.167069][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.175219][ T5915] usb 6-1: Product: syz [ 589.181307][ T5915] usb 6-1: Manufacturer: syz [ 589.190629][ T5915] usb 6-1: SerialNumber: syz [ 589.203584][ T5915] usb 6-1: config 0 descriptor?? [ 589.211977][ T5915] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 589.794465][T14472] lo speed is unknown, defaulting to 1000 [ 589.811424][T14486] bridge0: port 3(syz_tun) entered blocking state [ 589.817903][T14486] bridge0: port 3(syz_tun) entered disabled state [ 589.905623][T14486] syz_tun: entered allmulticast mode [ 589.925202][T14486] syz_tun: entered promiscuous mode [ 589.930941][T14486] bridge0: port 3(syz_tun) entered blocking state [ 589.937492][T14486] bridge0: port 3(syz_tun) entered forwarding state [ 589.952598][T14472] lo speed is unknown, defaulting to 1000 [ 590.118130][T14493] netlink: 'syz.1.2871': attribute type 10 has an invalid length. [ 590.121648][ T5810] Bluetooth: hci3: command tx timeout [ 590.218898][ T1157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.306515][ T922] usb 6-1: USB disconnect, device number 22 [ 590.388998][T14493] team0 (unregistering): Port device team_slave_0 removed [ 590.475566][T14493] team0 (unregistering): Port device team_slave_1 removed [ 590.631124][ T1157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.691322][ T5810] Bluetooth: hci0: command tx timeout [ 590.756969][ T1157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.887099][ T1157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.169256][T14517] QAT: Invalid ioctl 21531 [ 591.211121][T14472] chnl_net:caif_netlink_parms(): no params data found [ 591.404078][ T1157] bridge_slave_1: left allmulticast mode [ 591.409742][ T1157] bridge_slave_1: left promiscuous mode [ 591.421738][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.211578][ T5810] Bluetooth: hci3: command tx timeout [ 592.594814][ T1157] bridge_slave_0: left allmulticast mode [ 592.600456][ T1157] bridge_slave_0: left promiscuous mode [ 592.666252][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.731827][ T1157] bond1 (unregistering): (slave gretap1): Releasing active interface [ 594.072797][ T922] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 594.083020][T14556] loop5: detected capacity change from 0 to 7 [ 594.091746][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.161736][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.170983][ T2791] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 594.181888][ T2791] buffer_io_error: 9 callbacks suppressed [ 594.181904][ T2791] Buffer I/O error on dev loop5, logical block 0, async page read [ 594.197516][T14556] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 594.210328][ T1157] bond0 (unregistering): Released all slaves [ 594.226015][T14556] Buffer I/O error on dev loop5, logical block 0, async page read [ 594.243731][ T1157] bond1 (unregistering): Released all slaves [ 594.246182][ T922] usb 4-1: Using ep0 maxpacket: 32 [ 594.261457][T14556] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 594.267664][ T922] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 594.281763][ T5810] Bluetooth: hci3: command tx timeout [ 594.288794][ T922] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 594.307747][ T922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 594.327970][ T922] usb 4-1: config 1 has no interface number 0 [ 594.329350][T14556] Buffer I/O error on dev loop5, logical block 0, async page read [ 594.338104][ T922] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 594.353776][T14556] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 594.398250][T14556] Buffer I/O error on dev loop5, logical block 0, async page read [ 594.407656][ T922] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 594.408034][T14556] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 594.446590][ T922] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 594.466070][ T922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.468540][T14556] Buffer I/O error on dev loop5, logical block 0, async page read [ 594.483566][ T922] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 594.561427][T14556] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 594.575507][T14556] Buffer I/O error on dev loop5, logical block 0, async page read [ 594.593682][T14556] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 594.636769][T14472] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.644073][T14472] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.651419][T14556] Buffer I/O error on dev loop5, logical block 0, async page read [ 594.731877][ T922] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 594.740256][T14472] bridge_slave_0: entered allmulticast mode [ 594.746409][T14556] ldm_validate_partition_table(): Disk read failed. [ 594.762175][T14556] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 594.769360][T14472] bridge_slave_0: entered promiscuous mode [ 594.836135][T14570] 9pnet_virtio: no channels available for device /dev/loop0 [ 595.275276][T14472] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.284002][T14472] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.296941][ T5794] usb 4-1: USB disconnect, device number 30 [ 595.302903][T14472] bridge_slave_1: entered allmulticast mode [ 595.304149][T14472] bridge_slave_1: entered promiscuous mode [ 595.320120][T14556] Buffer I/O error on dev loop5, logical block 0, async page read [ 595.330189][ T5794] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 595.351402][T14556] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 595.379802][T14556] Buffer I/O error on dev loop5, logical block 0, async page read [ 595.399897][T14556] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 595.400945][T14472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.426236][T14556] Buffer I/O error on dev loop5, logical block 0, async page read [ 595.434282][T14556] Dev loop5: unable to read RDB block 0 [ 595.439931][T14556] loop5: unable to read partition table [ 595.482125][T14556] loop5: partition table beyond EOD, truncated [ 595.506206][T14472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.516314][T14556] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 595.646224][T14472] team0: Port device team_slave_0 added [ 595.684195][T14472] team0: Port device team_slave_1 added [ 595.739986][T14472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.740005][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.740027][T14472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.746435][T14472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.802790][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.802819][T14472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.843964][ T1157] hsr_slave_0: left promiscuous mode [ 595.855724][ T1157] hsr_slave_1: left promiscuous mode [ 595.856307][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.856324][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.859288][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.859305][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.875013][ T1157] veth1_macvtap: left promiscuous mode [ 595.875056][ T1157] veth0_macvtap: left promiscuous mode [ 595.876070][ T1157] veth1_vlan: left promiscuous mode [ 595.878361][ T1157] veth0_vlan: left promiscuous mode [ 596.361970][ T5810] Bluetooth: hci3: command tx timeout [ 596.958598][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 597.005136][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 597.804861][ T24] lo speed is unknown, defaulting to 1000 [ 597.830451][ T24] infiniband syz0: ib_query_port failed (-19) [ 597.925941][T14472] hsr_slave_0: entered promiscuous mode [ 597.939487][T14472] hsr_slave_1: entered promiscuous mode [ 598.252764][T14634] 9pnet_virtio: no channels available for device /dev/loop3 [ 600.404269][ T1157] IPVS: stop unused estimator thread 0... [ 602.263410][T14472] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 602.340643][T14472] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 602.410133][T14472] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 602.609567][T14472] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 603.666376][T14472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.682327][ T29] audit: type=1400 audit(1773575377.972:1237): avc: denied { watch } for pid=14717 comm="syz.1.2918" path="/21/file1" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 603.729055][T14472] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.798374][ T7688] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.805498][ T7688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.878520][ T7688] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.885665][ T7688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.969132][T14472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 603.998899][T14472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 605.388644][T14472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.734201][T14472] veth0_vlan: entered promiscuous mode [ 606.746465][T14472] veth1_vlan: entered promiscuous mode [ 606.780948][T14472] veth0_macvtap: entered promiscuous mode [ 606.837671][T14472] veth1_macvtap: entered promiscuous mode [ 606.908399][T14472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.927565][T14472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.970860][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.970921][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.970951][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.970980][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.127355][ T29] audit: type=1400 audit(1773575381.422:1238): avc: denied { mount } for pid=14798 comm="syz.5.2940" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 607.276423][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2942'. [ 607.390347][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.404652][ T5915] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 607.420869][ T29] audit: type=1400 audit(1773575381.712:1239): avc: denied { bind } for pid=14805 comm="syz.3.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 607.423033][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.490427][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.499118][ T29] audit: type=1400 audit(1773575381.712:1240): avc: denied { connect } for pid=14805 comm="syz.3.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 607.510598][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.565679][ T29] audit: type=1400 audit(1773575381.712:1241): avc: denied { write } for pid=14805 comm="syz.3.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 607.625050][ T5915] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 607.644247][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.670822][ T5915] usb 6-1: Product: syz [ 607.679485][ T5915] usb 6-1: Manufacturer: syz [ 607.699998][ T5915] usb 6-1: SerialNumber: syz [ 607.763488][ T29] audit: type=1400 audit(1773575382.062:1242): avc: denied { ioctl } for pid=14817 comm="syz.4.2862" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 608.556873][ T29] audit: type=1400 audit(1773575382.852:1243): avc: denied { remount } for pid=14798 comm="syz.5.2940" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 608.593459][ T5915] usb 6-1: unit 8 not found! [ 608.636713][ T5915] usb 6-1: unit 6 not found! [ 608.647591][ T5915] usb 6-1: unit 0 not found! [ 608.871016][ T5915] usb 6-1: USB disconnect, device number 23 [ 609.448053][T12484] udevd[12484]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.605479][ T29] audit: type=1400 audit(1773575383.902:1244): avc: denied { unmount } for pid=9767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 609.659872][ T29] audit: type=1400 audit(1773575383.952:1245): avc: denied { name_bind } for pid=14848 comm="syz.4.2954" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 609.683391][ T29] audit: type=1400 audit(1773575383.952:1246): avc: denied { node_bind } for pid=14848 comm="syz.4.2954" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 610.189483][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2959'. [ 611.616135][T14903] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 611.643907][ T29] audit: type=1400 audit(1773575385.942:1247): avc: denied { setopt } for pid=14901 comm="syz.1.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 611.665618][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'. [ 611.699317][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'. [ 611.709648][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.727448][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.758287][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.799852][T14912] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2967'. [ 611.803563][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.893701][T14912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.915080][T14912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.929796][T14912] bond0 (unregistering): Released all slaves [ 611.941442][ T922] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 612.113381][ T922] usb 1-1: config 4 has an invalid interface number: 121 but max is 0 [ 612.126598][ T922] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 612.152113][ T922] usb 1-1: config 4 has no interface number 0 [ 612.171664][ T922] usb 1-1: config 4 interface 121 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 612.202724][ T922] usb 1-1: config 4 interface 121 has no altsetting 0 [ 612.226206][ T922] usb 1-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 612.237779][ T922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.263641][ T922] usb 1-1: Product: syz [ 612.271997][ T922] usb 1-1: Manufacturer: syz [ 612.283707][ T922] usb 1-1: SerialNumber: syz [ 612.382055][ T29] audit: type=1400 audit(1773575386.672:1248): avc: denied { audit_write } for pid=14924 comm="syz.4.2973" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 612.574256][ T922] usb 1-1: USB disconnect, device number 6 [ 614.332469][T14969] syzkaller0: entered promiscuous mode [ 614.357414][T14969] syzkaller0: entered allmulticast mode [ 614.363157][ T1145] wlan0: Trigger new scan to find an IBSS to join [ 615.162280][ T5874] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 615.331308][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 616.623143][T14997] Trying to write to read-only block-device nullb0 [ 616.965456][ T5874] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 617.010547][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.025742][ T5874] usb 5-1: Product: syz [ 617.030078][ T5874] usb 5-1: Manufacturer: syz [ 617.080892][ T5874] usb 5-1: SerialNumber: syz [ 617.092248][ T5874] usb 5-1: config 0 descriptor?? [ 617.116704][ T5874] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 617.141699][ T5874] dw2102: su3000_power_ctrl: 1, initialized 0 [ 617.149277][T15007] syz_tun: entered allmulticast mode [ 617.158166][ T5874] dvb-usb: bulk message failed: -22 (2/0) [ 617.259494][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 617.282285][ T5874] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 617.291600][ T5874] usb 5-1: media controller created [ 617.303952][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 617.311517][ T5874] dw2102: i2c transfer failed. [ 617.320168][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 617.328012][ T5874] dw2102: i2c transfer failed. [ 617.441808][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 617.447535][ T5874] dw2102: i2c transfer failed. [ 617.481749][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 617.514186][ T5874] dw2102: i2c transfer failed. [ 617.544579][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 617.581339][ T5874] dw2102: i2c transfer failed. [ 617.601183][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 617.632495][ T5874] dw2102: i2c transfer failed. [ 617.637293][ T5874] dvb-usb: MAC address: 02:02:02:02:02:02 [ 617.785805][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 617.821056][ T5874] dvb-usb: bulk message failed: -22 (3/0) [ 617.835256][ T5874] dw2102: command 0x0e transfer failed. [ 617.865980][ T5874] dvb-usb: bulk message failed: -22 (3/0) [ 617.891573][ T5874] dw2102: command 0x0e transfer failed. [ 618.211381][ T5874] dvb-usb: bulk message failed: -22 (3/0) [ 618.217147][ T5874] dw2102: command 0x0e transfer failed. [ 618.321480][ T5874] dvb-usb: bulk message failed: -22 (3/0) [ 618.341660][ T5874] dw2102: command 0x0e transfer failed. [ 618.347205][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 618.779895][ T5874] dw2102: command 0x51 transfer failed. [ 618.791395][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.799393][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.863656][ T5874] DVB: Unable to find symbol ds3000_attach() [ 618.869782][ T5874] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 618.952580][ T5874] rc_core: IR keymap rc-su3000 not found [ 618.958242][ T5874] Registered IR keymap rc-empty [ 618.991750][ T5874] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 619.029152][ T5874] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input19 [ 619.136688][ T5874] dvb-usb: schedule remote query interval to 150 msecs. [ 619.190873][ T5874] dw2102: su3000_power_ctrl: 0, initialized 1 [ 619.204142][ T5874] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 619.267283][ T5874] usb 5-1: USB disconnect, device number 6 [ 619.402705][ T54] wlan0: Trigger new scan to find an IBSS to join [ 619.482888][T15053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3016'. [ 619.523149][T15037] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3011'. [ 620.496905][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.523871][ T5874] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 620.671703][T15071] netlink: 'syz.5.3023': attribute type 29 has an invalid length. [ 620.780076][T15067] netlink: 'syz.5.3023': attribute type 29 has an invalid length. [ 620.831700][T15067] netlink: 'syz.5.3023': attribute type 29 has an invalid length. [ 623.971560][ T922] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 624.133482][ T922] usb 2-1: Using ep0 maxpacket: 8 [ 624.170542][ T922] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 624.187929][ T922] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 624.216014][ T922] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 624.234393][ T922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.271326][ T922] usb 2-1: Product: ṣ﷧ḅ옽Մ丶铞癥쉏쩄냌쉏ᰈ珽晡쩅뻐榕಺䫏鼗㗣፲蘠읟஋럇ણ凌젋ަ㇡暡鸐⯎塔䞇䗏篾臨ꕖᶏ툗椳쐶㎷鷽̷肀骷ഗ빺醕꯳荪䎱멐ᇟ컕靓໗嵆⯐ [ 624.283370][T15119] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3034'. [ 624.320996][ T922] usb 2-1: Manufacturer: ⠉ [ 624.328886][ T922] usb 2-1: SerialNumber: ࠵ [ 624.355853][T15111] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 624.381677][T15111] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 624.665067][ T922] usb 2-1: USB disconnect, device number 4 [ 624.968291][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3048'. [ 625.052696][T15143] bridge0: entered promiscuous mode [ 625.315233][T15150] fuse: Bad value for 'fd' [ 625.723259][T15164] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3054'. [ 625.732354][T15164] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3054'. [ 626.079826][T15171] random: crng reseeded on system resumption [ 629.085508][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3080'. [ 629.159366][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'. [ 629.228916][T15236] bridge0: entered promiscuous mode [ 629.331310][ T922] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 629.481366][ T922] usb 6-1: Using ep0 maxpacket: 16 [ 629.487783][ T922] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.500885][ T922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 629.550058][ T922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 629.559916][ T922] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 629.569598][ T922] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.616498][ T922] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 629.625644][ T922] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 629.644229][ T922] usb 6-1: Manufacturer: syz [ 629.727356][ T922] usb 6-1: config 0 descriptor?? [ 630.081282][ T922] rc_core: IR keymap rc-hauppauge not found [ 630.227693][ T922] Registered IR keymap rc-empty [ 630.256679][ T922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 630.321758][ T922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 630.387412][ T922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 630.526714][ T922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input20 [ 630.661023][ T922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 630.729440][ T922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 630.793304][ T922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 630.822761][ T922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 630.861479][ T922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 630.881349][ T922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 630.942853][ T922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 630.970034][ T922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 631.038017][ T922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 631.261555][ T922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 631.282778][ T922] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 631.297416][ T922] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 631.323328][ T922] usb 6-1: USB disconnect, device number 24 [ 631.862354][ T922] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 632.022044][ T922] usb 4-1: Using ep0 maxpacket: 16 [ 632.024357][ T922] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 632.024386][ T922] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 632.024409][ T922] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.024435][ T922] usb 4-1: config 1 interface 0 has no altsetting 0 [ 632.026254][ T922] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 632.026280][ T922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.026299][ T922] usb 4-1: Product: syz [ 632.026314][ T922] usb 4-1: Manufacturer: syz [ 632.026328][ T922] usb 4-1: SerialNumber: syz [ 632.338096][ T922] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 632.631516][ T29] audit: type=1400 audit(1773575406.922:1249): avc: denied { read write } for pid=15290 comm="syz.3.3104" name="lp0" dev="devtmpfs" ino=3133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 632.766715][ T922] usb 4-1: USB disconnect, device number 31 [ 633.327008][ T922] usblp0: removed [ 633.445154][ T29] audit: type=1400 audit(1773575406.932:1250): avc: denied { open } for pid=15290 comm="syz.3.3104" path="/dev/usb/lp0" dev="devtmpfs" ino=3133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 634.903931][T15357] random: crng reseeded on system resumption [ 635.101394][ T5874] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 635.292270][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 635.299512][ T5874] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.319252][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 635.347868][ T5874] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 635.364127][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.382118][ T5874] usb 2-1: Product: syz [ 635.386576][ T5874] usb 2-1: Manufacturer: syz [ 635.391598][ T5874] usb 2-1: SerialNumber: syz [ 635.611373][ T922] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 635.863477][ T5874] usb 2-1: cannot find UAC_HEADER [ 635.874953][ T922] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 635.890211][ T922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.925254][ T922] usb 5-1: config 0 descriptor?? [ 635.933837][ T5874] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 635.996394][ T922] cp210x 5-1:0.0: cp210x converter detected [ 636.007645][ T5874] usb 2-1: USB disconnect, device number 5 [ 636.142254][T12484] udevd[12484]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.398964][ T922] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 636.407465][ T922] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 636.417453][ T922] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 636.521084][T15389] netlink: 'syz.0.3136': attribute type 10 has an invalid length. [ 636.529282][T15389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3136'. [ 636.546246][ T922] usb 5-1: cp210x converter now attached to ttyUSB0 [ 636.937377][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3143'. [ 637.004383][T15404] lo speed is unknown, defaulting to 1000 [ 637.581329][ T5867] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 637.742051][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'. [ 637.753346][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'. [ 637.762291][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 637.795457][ T5867] usb 2-1: config 0 has no interfaces? [ 637.814811][ T5867] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 637.824590][ T5867] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 637.838092][ T5867] usb 2-1: Manufacturer: syz [ 637.860705][ T5867] usb 2-1: config 0 descriptor?? [ 637.937624][T15416] lo speed is unknown, defaulting to 1000 [ 638.561120][ T5915] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 638.864737][ T5794] usb 5-1: USB disconnect, device number 7 [ 638.979904][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 639.144629][ T5915] usb 4-1: config 0 has no interfaces? [ 639.350875][ T5915] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 639.388483][ T5794] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 639.505772][ T5915] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 639.543449][ T5794] cp210x 5-1:0.0: device disconnected [ 639.567619][ T5915] usb 4-1: Manufacturer: syz [ 639.624632][ T5915] usb 4-1: config 0 descriptor?? [ 640.089335][ T5874] usb 2-1: USB disconnect, device number 6 [ 640.184670][T15440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3154'. [ 640.256689][T15442] mmap: syz.5.3152 (15442) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 640.281975][ T29] audit: type=1400 audit(1773575414.542:1251): avc: denied { write } for pid=15435 comm="syz.5.3152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 640.677228][T15454] lo speed is unknown, defaulting to 1000 [ 640.697177][T15459] netlink: 'syz.0.3160': attribute type 3 has an invalid length. [ 640.879352][T15462] syzkaller1: entered promiscuous mode [ 640.909378][T15462] syzkaller1: entered allmulticast mode [ 641.396404][ T5794] usb 4-1: USB disconnect, device number 32 [ 641.479769][T15473] netlink: 'syz.3.3166': attribute type 3 has an invalid length. [ 642.552508][ T5794] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 642.579209][ T5794] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 644.145473][T15529] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3186'. [ 644.767335][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3195'. [ 644.961003][T15560] openvswitch: netlink: IP tunnel dst address not specified [ 645.469036][ T922] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 645.588705][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3204'. [ 645.741572][ T922] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 645.791731][ T922] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 645.829065][T15575] tipc: Started in network mode [ 645.834052][T15575] tipc: Node identity ac1414aa, cluster identity 4711 [ 645.857967][T15575] tipc: Enabled bearer , priority 10 [ 645.930005][ T922] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 645.969451][ T922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.038332][T15551] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 646.052722][ T922] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 646.951711][ T5867] tipc: Node number set to 2886997162 [ 647.951302][ T5916] usb 4-1: USB disconnect, device number 33 [ 647.971309][ T922] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 648.123280][ T922] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 648.144398][ T922] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 648.171488][ T922] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 648.188565][ T922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 648.214989][ T922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 648.226822][T15624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3224'. [ 648.255156][ T922] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 648.265375][ T922] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 648.282624][ T922] usb 6-1: Product: syz [ 648.311439][ T922] usb 6-1: Manufacturer: syz [ 648.331471][ T922] cdc_wdm 6-1:1.0: skipping garbage [ 648.336713][ T922] cdc_wdm 6-1:1.0: skipping garbage [ 648.349185][ T922] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 648.366953][ T922] cdc_wdm 6-1:1.0: Unknown control protocol [ 648.378269][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3228'. [ 648.390057][T15632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3229'. [ 648.681671][ T5916] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 648.976186][ T5916] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 648.988636][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.997213][ T5916] usb 1-1: Product: syz [ 649.003028][ T5916] usb 1-1: Manufacturer: syz [ 649.007873][ T5916] usb 1-1: SerialNumber: syz [ 649.017713][ T5916] usb 1-1: config 0 descriptor?? [ 649.030895][ T5916] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 649.157750][ T5794] usb 6-1: USB disconnect, device number 25 [ 649.553659][ T5916] gspca_stk1135: reg_w 0x2 err -110 [ 649.569422][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 649.800010][ T5916] gspca_stk1135: Sensor write failed [ 649.817622][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 650.180290][ T5916] gspca_stk1135: Sensor write failed [ 650.196041][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 650.211255][ T5916] gspca_stk1135: Sensor read failed [ 650.225616][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 650.250936][ T5916] gspca_stk1135: Sensor read failed [ 650.256515][ T5916] gspca_stk1135: Detected sensor type unknown (0x0) [ 650.289390][T15672] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3239'. [ 650.319947][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 650.330097][ T5916] gspca_stk1135: Sensor read failed [ 650.373790][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 650.400434][ T5916] gspca_stk1135: Sensor read failed [ 650.423746][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 650.478244][ T5916] gspca_stk1135: Sensor write failed [ 650.490168][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 650.506947][ T5916] gspca_stk1135: Sensor write failed [ 650.513815][ T5916] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 651.253908][ T922] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 651.421305][ T922] usb 6-1: Using ep0 maxpacket: 16 [ 651.429967][ T922] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 651.441189][ T922] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 651.453063][ T922] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.497339][ T922] usb 6-1: config 1 interface 0 has no altsetting 0 [ 651.533014][ T922] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 651.542741][ T922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.552266][ T922] usb 6-1: Product: syz [ 651.561303][ T922] usb 6-1: Manufacturer: syz [ 651.572309][ T922] usb 6-1: SerialNumber: syz [ 651.784192][ T29] audit: type=1400 audit(1773575426.082:1252): avc: denied { write } for pid=15702 comm="syz.1.3252" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 651.824972][ T922] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 651.981645][ T29] audit: type=1400 audit(1773575426.102:1253): avc: denied { open } for pid=15702 comm="syz.1.3252" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 651.996541][ T922] usb 6-1: USB disconnect, device number 26 [ 652.047013][ T922] usblp0: removed [ 652.169221][ T5794] usb 1-1: USB disconnect, device number 7 [ 652.404280][ T29] audit: type=1400 audit(1773575426.702:1254): avc: denied { read } for pid=15715 comm="syz.3.3259" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 652.581379][ T5794] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 652.821358][ T5794] usb 2-1: Using ep0 maxpacket: 16 [ 652.839475][ T5794] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 652.850447][ T5794] usb 2-1: config 0 has no interface number 0 [ 652.858488][ T5794] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.961267][ T5794] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.996932][ T5794] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 653.018941][ T5794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.039122][ T5794] usb 2-1: config 0 descriptor?? [ 653.548077][ T5794] hid (null): global environment stack underflow [ 653.557133][ T5794] hid (null): invalid report_count 1438906294 [ 653.810661][ T5874] usb 2-1: USB disconnect, device number 7 [ 653.971561][ T1036] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.609156][T12139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 654.621981][T12139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 654.634377][T12139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 654.647077][T12139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 654.656915][T12139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 654.743984][T15756] lo speed is unknown, defaulting to 1000 [ 654.845168][T15763] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3274'. [ 654.864549][ T29] audit: type=1400 audit(1773575429.142:1255): avc: denied { write } for pid=15758 comm="syz.4.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 655.128888][T15769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3277'. [ 655.376025][T14871] bridge0: port 3(syz_tun) entered disabled state [ 655.418851][T14871] syz_tun (unregistering): left allmulticast mode [ 655.425462][T14871] syz_tun (unregistering): left promiscuous mode [ 655.434144][T14871] bridge0: port 3(syz_tun) entered disabled state [ 656.138895][T15756] chnl_net:caif_netlink_parms(): no params data found [ 656.187242][ T1157] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.493861][ T1157] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.652573][ T1157] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.681361][ T5810] Bluetooth: hci1: command tx timeout [ 657.246283][ T1157] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.286613][T15756] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.302407][T15756] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.319796][T15756] bridge_slave_0: entered allmulticast mode [ 657.377707][T15756] bridge_slave_0: entered promiscuous mode [ 657.389666][T15756] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.409821][T15756] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.417790][T15803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3288'. [ 657.427177][T15756] bridge_slave_1: entered allmulticast mode [ 657.435979][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3288'. [ 657.458508][T15756] bridge_slave_1: entered promiscuous mode [ 657.609672][T15756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.685406][T15756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.359703][ T29] audit: type=1400 audit(1773575432.652:1256): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 658.439799][T15756] team0: Port device team_slave_0 added [ 658.464642][T15756] team0: Port device team_slave_1 added [ 658.577354][ T1157] bridge_slave_1: left allmulticast mode [ 658.600399][ T1157] bridge_slave_1: left promiscuous mode [ 658.637866][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.670633][ T1157] bridge_slave_0: left allmulticast mode [ 658.701306][ T1157] bridge_slave_0: left promiscuous mode [ 658.707056][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.761301][ T5810] Bluetooth: hci1: command tx timeout [ 659.021281][ T5874] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 659.111944][ T922] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 659.171375][ T5874] usb 1-1: device descriptor read/64, error -71 [ 659.291951][ T922] usb 5-1: Using ep0 maxpacket: 32 [ 659.352465][ T922] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.364501][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.382186][ T922] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.401851][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.413764][ T1157] bond0 (unregistering): Released all slaves [ 659.415745][ T922] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 659.429886][ T1157] bond1 (unregistering): (slave vlan2): Releasing active interface [ 659.441147][ T1157] bond1 (unregistering): Released all slaves [ 659.451622][ T5874] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 659.457405][ T1157] bond2 (unregistering): Released all slaves [ 659.468607][ T922] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 659.474701][ T1157] bond3 (unregistering): Released all slaves [ 659.496900][ T922] usb 5-1: Product: syz [ 659.509379][ T922] usb 5-1: Manufacturer: syz [ 659.591365][ T5874] usb 1-1: device descriptor read/64, error -71 [ 659.616233][ T922] hub 5-1:4.0: USB hub found [ 659.714383][ T5874] usb usb1-port1: attempt power cycle [ 659.846014][ T922] hub 5-1:4.0: 2 ports detected [ 660.209867][T15756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.241351][ T5874] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 660.284872][ T5874] usb 1-1: device descriptor read/8, error -71 [ 660.295752][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.326374][T15756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.363581][T15756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.386935][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.430246][T15756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.591681][ T5874] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 660.632802][ T5874] usb 1-1: device descriptor read/8, error -71 [ 660.679911][T15756] hsr_slave_0: entered promiscuous mode [ 660.692367][T15756] hsr_slave_1: entered promiscuous mode [ 660.719061][T15756] debugfs: 'hsr0' already exists in 'hsr' [ 660.721292][ T5794] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 660.737260][T15756] Cannot create hsr debugfs directory [ 660.763019][ T5874] usb usb1-port1: unable to enumerate USB device [ 660.843945][ T5810] Bluetooth: hci1: command tx timeout [ 660.892619][ T5794] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 660.914467][ T5794] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 660.941505][ T5794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.984053][ T5794] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 661.080110][ T1157] hsr_slave_0: left promiscuous mode [ 661.122772][ T1157] hsr_slave_1: left promiscuous mode [ 661.128789][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.148809][ T5874] hub 5-1:4.0: activate --> -90 [ 661.181286][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.208669][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.221000][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.249674][ T1157] veth1_macvtap: left promiscuous mode [ 661.255373][ T1157] veth0_macvtap: left promiscuous mode [ 661.261011][ T1157] veth1_vlan: left promiscuous mode [ 661.266803][ T1157] veth0_vlan: left promiscuous mode [ 661.441022][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 661.456586][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 661.464974][ T922] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 661.551033][ T5874] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 661.581604][ T5874] usb 5-1-port2: cannot reset (err = -71) [ 661.587663][ T5867] usb 5-1: USB disconnect, device number 8 [ 661.594783][ T5874] usb 5-1-port2: cannot reset (err = -71) [ 661.600514][ T5874] usb 5-1-port2: Cannot enable. Maybe the USB cable is bad? [ 661.609453][ T5874] usb 5-1-port2: attempt power cycle [ 661.655301][ T922] usb 6-1: Using ep0 maxpacket: 32 [ 661.683246][ T922] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 661.701243][ T922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.710880][ T922] usb 6-1: Product: syz [ 661.721258][ T922] usb 6-1: Manufacturer: syz [ 661.732367][ T922] usb 6-1: SerialNumber: syz [ 661.757210][ T922] usb 6-1: config 0 descriptor?? [ 661.774933][ T922] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 661.806430][ T922] dvb-usb: bulk message failed: -22 (4/0) [ 661.820557][ T922] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 661.848334][ T922] dvb-usb: bulk message failed: -22 (5/0) [ 661.854328][ T922] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 661.877223][ T922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 661.893986][ T922] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 661.904163][ T922] usb 6-1: media controller created [ 661.918300][ T922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 661.986553][T15869] dvb-usb: bulk message failed: -22 (7/0) [ 661.989123][ T922] usb 6-1: selecting invalid altsetting 3 [ 661.996702][T15869] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 662.008138][ T922] ttusb2: set interface to alts=3 failed [ 662.026058][T15869] ttusb2: i2c transfer failed. [ 662.053215][ T5794] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 662.065157][ T922] DVB: Unable to find symbol tda10086_attach() [ 662.074916][ T922] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 662.107420][ T922] dvb-usb: bulk message failed: -22 (4/0) [ 662.119857][ T922] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 662.145232][ T922] dvb-usb: bulk message failed: -22 (5/0) [ 662.167096][ T922] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 662.213036][ T922] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 662.262585][ T5794] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 662.271622][ T922] usb 6-1: USB disconnect, device number 27 [ 662.315336][ T5794] stv0680 2-1:4.0: last error: 131, command = 0x8d [ 662.350911][ T5794] usb 2-1: USB disconnect, device number 8 [ 662.414625][ T922] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 662.553347][T15897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3316'. [ 662.560279][T15756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 662.577530][T15756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 662.596830][T15756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 662.612731][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3316'. [ 662.621405][T15756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 662.819735][T15756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.943198][ T5810] Bluetooth: hci1: command tx timeout [ 663.100130][T15756] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.378556][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.385654][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.419856][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.426945][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.611404][ T5914] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 663.651331][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 663.761413][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 663.774730][T15756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.793256][ T24] usb 2-1: device descriptor read/64, error -71 [ 663.800514][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.831407][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 663.856257][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 663.889806][ T5914] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 663.915483][T15756] veth0_vlan: entered promiscuous mode [ 663.921076][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.952127][T15756] veth1_vlan: entered promiscuous mode [ 663.968379][ T5914] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 664.001810][ T5914] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 664.020035][ T5914] usb 6-1: Manufacturer: syz [ 664.030452][T15756] veth0_macvtap: entered promiscuous mode [ 664.043088][ T5914] usb 6-1: config 0 descriptor?? [ 664.061299][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 664.072533][T15756] veth1_macvtap: entered promiscuous mode [ 664.109181][T15756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.150448][T15756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.182121][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.204094][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.211349][ T24] usb 2-1: device descriptor read/64, error -71 [ 664.233719][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.321631][ T24] usb usb2-port1: attempt power cycle [ 664.381360][ T5914] rc_core: IR keymap rc-hauppauge not found [ 664.389264][ T5914] Registered IR keymap rc-empty [ 664.408151][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.492405][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.512623][ T5914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 664.534830][ T5914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 664.620153][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.648741][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.672048][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 664.681411][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.692393][ T24] usb 2-1: device descriptor read/8, error -71 [ 664.711944][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.739384][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.801337][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.823266][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.833919][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.841593][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.852639][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.861344][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.885189][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.931435][ T5914] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.959439][ T5914] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 664.965090][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.968596][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 664.984164][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.005028][ T5914] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 665.046876][ T24] usb 2-1: device descriptor read/8, error -71 [ 665.060746][ T5914] usb 6-1: USB disconnect, device number 28 [ 665.192682][ T24] usb usb2-port1: unable to enumerate USB device [ 665.246134][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3327'. [ 665.275995][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3327'. [ 665.307842][T15977] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 665.841603][T15984] hfs: unable to load iocharset "io#harset" [ 666.694553][T16000] input: syz0 as /devices/virtual/input/input22 [ 668.043290][ T5812] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 668.222663][ T5812] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 668.244122][ T5812] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 668.260152][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.275634][ T5812] usb 4-1: Product: syz [ 668.283191][ T5812] usb 4-1: Manufacturer: syz [ 668.347673][ T5812] usb 4-1: SerialNumber: syz [ 668.376367][ T29] audit: type=1400 audit(1773575442.652:1257): avc: denied { create } for pid=16046 comm="syz.5.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 668.409854][ T5812] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 668.729653][T16062] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 669.192392][ T5812] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 669.226160][ T5812] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 669.271342][ T5812] usb 4-1: media controller created [ 669.327196][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 670.043525][ T5794] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 670.188346][ T5812] usb 4-1: USB disconnect, device number 34 [ 670.201771][ T5794] usb 1-1: Using ep0 maxpacket: 8 [ 670.245751][ T5794] usb 1-1: config 0 has an invalid interface number: 99 but max is 0 [ 670.265703][ T5794] usb 1-1: config 0 has no interface number 0 [ 670.291480][ T5794] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 670.321335][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.352575][ T5794] usb 1-1: config 0 descriptor?? [ 670.373928][ T5794] usb-storage 1-1:0.99: USB Mass Storage device detected [ 670.431840][ T5794] usb-storage 1-1:0.99: device ignored [ 670.786650][ T5810] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 671.504707][T16117] input: syz0 as /devices/virtual/input/input23 [ 673.060400][ T5794] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 673.133517][ T5812] usb 1-1: USB disconnect, device number 12 [ 673.274310][ T29] audit: type=1400 audit(1773575447.552:1258): avc: denied { mounton } for pid=16124 comm="syz.5.3380" path="/file0" dev="ramfs" ino=45612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 673.298045][ T5794] usb 5-1: Using ep0 maxpacket: 16 [ 673.335107][ T5794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.360180][ T5794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 673.379597][ T5794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 673.402083][ T5794] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 673.413028][ T5794] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.428100][ T5794] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 673.450612][ T5794] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 673.460693][ T5794] usb 5-1: Manufacturer: syz [ 673.471717][ T5794] usb 5-1: config 0 descriptor?? [ 673.721952][ T5794] rc_core: IR keymap rc-hauppauge not found [ 673.732317][ T5794] Registered IR keymap rc-empty [ 673.741582][ T5794] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.778887][ T5794] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.801869][ T5794] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 673.857021][ T5794] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 673.887313][ T5794] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.921495][ T5794] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 673.952528][ T5794] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 674.014532][ T5794] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 674.042149][ T5794] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 674.061416][ T5794] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 674.091292][ T5794] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 674.141341][ T5794] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 674.161313][ T5794] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 674.181934][ T5794] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 674.212334][ T5794] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 674.256703][ T5794] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 674.337679][ T5794] usb 5-1: USB disconnect, device number 13 [ 674.471830][T16151] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3389'. [ 674.962023][ T5812] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 674.970269][ T29] audit: type=1400 audit(1773575449.252:1259): avc: denied { ioctl } for pid=16171 comm="syz.0.3398" path="socket:[45663]" dev="sockfs" ino=45663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 675.007443][T16176] random: crng reseeded on system resumption [ 675.071323][ T5874] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 675.133230][ T5812] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 675.142488][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.173303][ T5812] usb 2-1: config 0 descriptor?? [ 675.241168][ T5812] cp210x 2-1:0.0: cp210x converter detected [ 675.248251][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 675.255703][ T5874] usb 6-1: config 0 has an invalid interface number: 99 but max is 0 [ 675.323412][ T5874] usb 6-1: config 0 has no interface number 0 [ 675.453158][ T5874] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 675.488247][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.533234][ T5874] usb 6-1: config 0 descriptor?? [ 675.586243][ T5874] usb-storage 6-1:0.99: USB Mass Storage device detected [ 675.623204][ T5874] usb-storage 6-1:0.99: device ignored [ 675.652656][ T5812] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 675.811912][ T5810] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 675.875996][T16187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3402'. [ 675.949646][ T5812] usb 2-1: cp210x converter now attached to ttyUSB0 [ 676.156353][ T5812] usb 2-1: USB disconnect, device number 13 [ 676.216265][ T5812] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 676.280520][ T5812] cp210x 2-1:0.0: device disconnected [ 676.951511][ T3587] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.596516][T16230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3417'. [ 677.618056][T16230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3417'. [ 678.515771][ T5914] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 678.664888][ T922] usb 6-1: USB disconnect, device number 29 [ 678.683449][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 678.705533][ T5914] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.730104][ T5914] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.757960][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 678.783022][ T5914] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 678.813699][ T5914] usb 4-1: Product: syz [ 678.828992][ T5914] usb 4-1: Manufacturer: syz [ 678.890757][ T5914] hub 4-1:4.0: USB hub found [ 679.175856][ T5914] hub 4-1:4.0: 2 ports detected [ 679.306598][ T922] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 679.482694][ T922] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 679.491087][ T922] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 679.532692][ T922] usb 5-1: config 150 has no interface number 0 [ 679.539002][ T922] usb 5-1: config 150 interface 204 has no altsetting 0 [ 679.572484][ T922] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 679.593013][ T922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.621560][ T922] usb 5-1: Product: syz [ 679.625767][ T922] usb 5-1: Manufacturer: syz [ 679.630357][ T922] usb 5-1: SerialNumber: syz [ 679.711345][ T5812] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 679.871287][ T5812] usb 6-1: Using ep0 maxpacket: 8 [ 679.883304][ T922] xr_serial 5-1:150.204: skipping garbage [ 679.889775][ T922] xr_serial 5-1:150.204: xr_serial converter detected [ 679.897721][ T5812] usb 6-1: config 0 has an invalid interface number: 99 but max is 0 [ 679.909901][ T5812] usb 6-1: config 0 has no interface number 0 [ 679.916511][ T5812] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 679.926122][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.950728][ T5812] usb 6-1: config 0 descriptor?? [ 679.969410][ T5812] usb-storage 6-1:0.99: USB Mass Storage device detected [ 679.981300][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 679.998317][ T5812] usb-storage 6-1:0.99: device ignored [ 680.152791][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 680.165006][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 680.177537][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 680.189115][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.195105][ T5810] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 680.201715][ T24] usb 2-1: config 0 descriptor?? [ 680.213863][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.220161][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.470349][ T5914] hub 4-1:4.0: activate --> -90 [ 680.483489][ T922] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 680.490806][ T922] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 680.502519][ T922] usb 5-1: USB disconnect, device number 14 [ 680.513094][ T922] xr_serial 5-1:150.204: device disconnected [ 680.644545][ T24] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 680.656243][ T24] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 680.663380][ T24] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 680.674354][ T24] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 680.681755][ T24] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 680.688630][ T24] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 680.697353][ T24] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 680.710454][ T24] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 680.841548][ T24] arvo 0003:1E7D:30D4.0009: couldn't init struct arvo_device [ 680.854553][ T24] arvo 0003:1E7D:30D4.0009: couldn't install keyboard [ 680.866227][ T24] arvo 0003:1E7D:30D4.0009: probe with driver arvo failed with error -71 [ 680.871642][ T922] usb 4-1: USB disconnect, device number 35 [ 680.878898][ T24] usb 2-1: USB disconnect, device number 14 [ 681.688590][T16308] 9pnet_virtio: no channels available for device /dev/loop4 [ 681.824916][T16314] netlink: 'syz.1.3450': attribute type 7 has an invalid length. [ 681.853986][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3450'. [ 681.885631][T16314] netlink: 'syz.1.3450': attribute type 2 has an invalid length. [ 682.062559][ T922] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 682.288340][ T24] usb 6-1: USB disconnect, device number 30 [ 682.370611][ T922] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 682.401147][ T922] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 682.422664][T16326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3455'. [ 682.432159][ T922] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 682.467503][ T922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.486794][ T922] usb 1-1: Product: syz [ 682.500637][ T922] usb 1-1: Manufacturer: syz [ 682.509652][ T922] usb 1-1: SerialNumber: syz [ 682.519207][ T922] usb 1-1: config 0 descriptor?? [ 682.534051][ T922] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 683.651608][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 683.961744][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 684.013040][ T24] usb 5-1: config 0 has an invalid interface number: 99 but max is 0 [ 684.021173][ T24] usb 5-1: config 0 has no interface number 0 [ 684.066579][ T24] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 684.087566][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.111648][ T24] usb 5-1: config 0 descriptor?? [ 684.116245][T16369] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1025 (2050 ns) > initial count (14 ns). Using initial count to start timer. [ 684.134705][ T24] usb-storage 5-1:0.99: USB Mass Storage device detected [ 684.155375][ T24] usb-storage 5-1:0.99: device ignored [ 684.284891][ T922] gspca_sunplus: reg_r err -71 [ 684.289779][ T922] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 684.306777][ T922] usb 1-1: USB disconnect, device number 13 [ 684.362976][ T5810] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 684.861281][ T5812] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 685.081302][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 685.092477][ T5812] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 685.103928][ T5812] usb 4-1: config 0 has no interface number 0 [ 685.117062][ T5812] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 685.141252][ T5812] usb 4-1: config 0 interface 89 has no altsetting 0 [ 685.156123][ T5812] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 685.170795][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.190462][ T5812] usb 4-1: Product: syz [ 685.199737][ T5812] usb 4-1: Manufacturer: syz [ 685.204411][ T5812] usb 4-1: SerialNumber: syz [ 685.216196][ T5812] usb 4-1: config 0 descriptor?? [ 685.228385][ T5812] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 685.247730][ T5812] em28xx 4-1:0.89: Video interface 89 found: [ 685.509715][T16398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3481'. [ 685.993650][ T5812] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 686.042769][ T24] usb 5-1: USB disconnect, device number 15 [ 686.341285][ T29] audit: type=1400 audit(1773575460.632:1260): avc: denied { map } for pid=16419 comm="syz.4.3488" path="socket:[47014]" dev="sockfs" ino=47014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 687.267569][ T5812] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 687.286118][ T5812] em28xx 4-1:0.89: board has no eeprom [ 687.518143][T16441] openvswitch: netlink: IP tunnel dst address not specified [ 687.585020][ T5812] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 687.601278][ T5812] em28xx 4-1:0.89: analog set to bulk mode. [ 687.607410][ T5867] em28xx 4-1:0.89: Registering V4L2 extension [ 687.716587][ T5812] usb 4-1: USB disconnect, device number 36 [ 687.735242][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3495'. [ 687.747637][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3495'. [ 687.761436][ T5812] em28xx 4-1:0.89: Disconnecting em28xx [ 687.811762][ T5867] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 687.819584][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3495'. [ 687.829214][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3495'. [ 687.875548][ T5867] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 687.899713][ T5867] em28xx 4-1:0.89: No AC97 audio processor [ 687.939809][ T5867] usb 4-1: Decoder not found [ 687.956012][ T5867] em28xx 4-1:0.89: failed to create media graph [ 688.007624][ T5867] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 688.112710][ T5867] em28xx 4-1:0.89: Registering snapshot button... [ 688.128855][ T5867] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input25 [ 688.212856][ T5867] em28xx 4-1:0.89: Remote control support is not available for this card. [ 688.325279][ T29] audit: type=1326 audit(1773575462.622:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3778f9c799 code=0x7ffc0000 [ 688.331475][ T5812] em28xx 4-1:0.89: Closing input extension [ 688.432481][ T5812] em28xx 4-1:0.89: Deregistering snapshot button [ 688.443877][ T29] audit: type=1326 audit(1773575462.622:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3778f9c799 code=0x7ffc0000 [ 688.552420][ T29] audit: type=1326 audit(1773575462.652:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3778f9c799 code=0x7ffc0000 [ 688.614724][ T29] audit: type=1326 audit(1773575462.652:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3778f9c799 code=0x7ffc0000 [ 688.767725][ T29] audit: type=1326 audit(1773575462.652:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3778f9c799 code=0x7ffc0000 [ 688.899919][ T5812] em28xx 4-1:0.89: Freeing device [ 688.905149][ T29] audit: type=1326 audit(1773575462.662:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f3778f9c799 code=0x7ffc0000 [ 689.035017][ T29] audit: type=1326 audit(1773575462.662:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3778f9c799 code=0x7ffc0000 [ 689.180853][ T29] audit: type=1326 audit(1773575462.662:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3778f9c799 code=0x7ffc0000 [ 689.701284][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 689.841532][ T5812] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 689.851284][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 689.872454][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 689.895656][ T24] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 689.905257][ T24] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 689.922895][ T24] usb 2-1: Product: syz [ 689.927333][ T24] usb 2-1: Manufacturer: syz [ 689.936857][ T24] usb 2-1: SerialNumber: syz [ 690.001440][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 690.008065][ T5812] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 690.016971][ T5812] usb 6-1: config 0 has no interface number 0 [ 690.023342][ T5812] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 690.059504][ T5812] usb 6-1: config 0 interface 89 has no altsetting 0 [ 690.072091][ T5812] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 690.081414][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.089409][ T5812] usb 6-1: Product: syz [ 690.198994][ T5812] usb 6-1: Manufacturer: syz [ 690.251757][ T5812] usb 6-1: SerialNumber: syz [ 690.258978][ T24] usb 2-1: Invalid connection information received from device [ 690.266907][ T29] audit: type=1400 audit(1773575464.402:1269): avc: denied { lock } for pid=16487 comm="syz.3.3513" path="socket:[47246]" dev="sockfs" ino=47246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 690.268852][ T5812] usb 6-1: config 0 descriptor?? [ 690.381939][ T5812] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 690.412786][ T5812] em28xx 6-1:0.89: Video interface 89 found: [ 690.464099][T16471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.475393][T16471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.502299][ T5867] usb 2-1: USB disconnect, device number 15 [ 690.991385][ T5812] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 691.147381][T16504] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3519'. [ 691.791342][ T5867] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 691.967643][ T29] audit: type=1400 audit(1773575466.262:1270): avc: denied { ioctl } for pid=16525 comm="syz.4.3527" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 691.998704][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 692.061712][ T5812] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 692.104505][ T5812] em28xx 6-1:0.89: board has no eeprom [ 692.115643][ T5867] usb 2-1: config 0 has an invalid interface number: 99 but max is 0 [ 692.132465][ T5867] usb 2-1: config 0 has no interface number 0 [ 692.138648][ T5867] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 692.151105][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.171513][ T5812] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 692.178774][ T5812] em28xx 6-1:0.89: analog set to bulk mode. [ 692.185358][ T922] em28xx 6-1:0.89: Registering V4L2 extension [ 692.195385][ T5867] usb 2-1: config 0 descriptor?? [ 692.240592][ T5812] usb 6-1: USB disconnect, device number 31 [ 692.251161][ T5867] usb-storage 2-1:0.99: USB Mass Storage device detected [ 692.282709][ T5812] em28xx 6-1:0.89: Disconnecting em28xx [ 692.289585][ T5867] usb-storage 2-1:0.99: device ignored [ 692.343537][ T922] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 692.350481][ T922] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 692.429597][ T922] em28xx 6-1:0.89: No AC97 audio processor [ 692.477929][T12139] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 692.523226][T12139] Bluetooth: hci5: command 0x0406 tx timeout [ 692.523790][ T922] usb 6-1: Decoder not found [ 692.645135][ T922] em28xx 6-1:0.89: failed to create media graph [ 692.676352][ T922] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 692.729301][T16535] ================================================================== [ 692.737385][T16535] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 692.744856][T16535] Read of size 8 at addr ffff88805f978748 by task v4l_id/16535 [ 692.752415][T16535] [ 692.754746][T16535] CPU: 0 UID: 0 PID: 16535 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 692.754773][T16535] Tainted: [L]=SOFTLOCKUP [ 692.754779][T16535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 692.754789][T16535] Call Trace: [ 692.754795][T16535] [ 692.754802][T16535] dump_stack_lvl+0x100/0x190 [ 692.754833][T16535] print_report+0x156/0x4c9 [ 692.754856][T16535] ? __virt_addr_valid+0x81/0x620 [ 692.754880][T16535] ? __phys_addr+0xe8/0x180 [ 692.754910][T16535] ? v4l2_fh_init+0x27d/0x2c0 [ 692.754932][T16535] kasan_report+0xdf/0x1e0 [ 692.754948][T16535] ? v4l2_fh_init+0x27d/0x2c0 [ 692.754972][T16535] v4l2_fh_init+0x27d/0x2c0 [ 692.754993][T16535] v4l2_fh_open+0x64/0xa0 [ 692.755014][T16535] em28xx_v4l2_open+0x11e/0x570 [ 692.755036][T16535] v4l2_open+0x1d2/0x490 [ 692.755058][T16535] ? __pfx_v4l2_open+0x10/0x10 [ 692.755080][T16535] chrdev_open+0x234/0x6a0 [ 692.755098][T16535] ? __pfx_chrdev_open+0x10/0x10 [ 692.755115][T16535] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 692.755138][T16535] do_dentry_open+0x6d8/0x1660 [ 692.755165][T16535] ? __pfx_chrdev_open+0x10/0x10 [ 692.755183][T16535] vfs_open+0x82/0x3f0 [ 692.755205][T16535] path_openat+0x208c/0x31a0 [ 692.755226][T16535] ? __pfx_path_openat+0x10/0x10 [ 692.755247][T16535] do_file_open+0x20e/0x430 [ 692.755265][T16535] ? __pfx_do_file_open+0x10/0x10 [ 692.755290][T16535] ? alloc_fd+0x476/0x790 [ 692.755308][T16535] ? do_getname+0x191/0x390 [ 692.755329][T16535] do_sys_openat2+0x10d/0x1e0 [ 692.755350][T16535] ? __pfx_do_sys_openat2+0x10/0x10 [ 692.755374][T16535] __x64_sys_openat+0x12d/0x210 [ 692.755393][T16535] ? __pfx___x64_sys_openat+0x10/0x10 [ 692.755415][T16535] ? do_user_addr_fault+0x8d6/0x12f0 [ 692.755436][T16535] do_syscall_64+0x106/0xf80 [ 692.755457][T16535] ? clear_bhb_loop+0x40/0x90 [ 692.755475][T16535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.755491][T16535] RIP: 0033:0x7f2a734a7407 [ 692.755505][T16535] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 692.755522][T16535] RSP: 002b:00007ffc439646f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 692.755540][T16535] RAX: ffffffffffffffda RBX: 00007f2a73b4d880 RCX: 00007f2a734a7407 [ 692.755552][T16535] RDX: 0000000000000000 RSI: 00007ffc43965f1c RDI: ffffffffffffff9c [ 692.755563][T16535] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 692.755572][T16535] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 692.755582][T16535] R13: 00007ffc43964940 R14: 00007f2a73cb4000 R15: 00005633b927d4d8 [ 692.755599][T16535] [ 692.755605][T16535] [ 693.015734][T16535] Allocated by task 922: [ 693.019944][T16535] kasan_save_stack+0x30/0x50 [ 693.024602][T16535] kasan_save_track+0x14/0x30 [ 693.029253][T16535] __kasan_kmalloc+0xaa/0xb0 [ 693.033816][T16535] em28xx_v4l2_init.cold+0x94/0x3503 [ 693.039080][T16535] em28xx_init_extension+0x13a/0x200 [ 693.044342][T16535] request_module_async+0x61/0x80 [ 693.049341][T16535] process_one_work+0xa23/0x19a0 [ 693.054250][T16535] worker_thread+0x5ef/0xe50 [ 693.058809][T16535] kthread+0x370/0x450 [ 693.062849][T16535] ret_from_fork+0x754/0xd80 [ 693.067407][T16535] ret_from_fork_asm+0x1a/0x30 [ 693.072140][T16535] [ 693.074435][T16535] Freed by task 922: [ 693.078292][T16535] kasan_save_stack+0x30/0x50 [ 693.082946][T16535] kasan_save_track+0x14/0x30 [ 693.087597][T16535] kasan_save_free_info+0x3b/0x70 [ 693.092591][T16535] __kasan_slab_free+0x5f/0x80 [ 693.097342][T16535] kfree+0x1f6/0x6b0 [ 693.101213][T16535] kref_put.isra.0+0x56/0x90 [ 693.105777][T16535] em28xx_v4l2_init.cold+0x280/0x3503 [ 693.111124][T16535] em28xx_init_extension+0x13a/0x200 [ 693.116382][T16535] request_module_async+0x61/0x80 [ 693.121385][T16535] process_one_work+0xa23/0x19a0 [ 693.126294][T16535] worker_thread+0x5ef/0xe50 [ 693.130863][T16535] kthread+0x370/0x450 [ 693.134904][T16535] ret_from_fork+0x754/0xd80 [ 693.139463][T16535] ret_from_fork_asm+0x1a/0x30 [ 693.144197][T16535] [ 693.146491][T16535] The buggy address belongs to the object at ffff88805f978000 [ 693.146491][T16535] which belongs to the cache kmalloc-8k of size 8192 [ 693.160514][T16535] The buggy address is located 1864 bytes inside of [ 693.160514][T16535] freed 8192-byte region [ffff88805f978000, ffff88805f97a000) [ 693.174450][T16535] [ 693.176758][T16535] The buggy address belongs to the physical page: [ 693.183141][T16535] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f978 [ 693.191926][T16535] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 693.200409][T16535] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 693.207933][T16535] page_type: f5(slab) [ 693.211885][T16535] raw: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122 [ 693.220442][T16535] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 693.228998][T16535] head: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122 [ 693.237650][T16535] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 693.246291][T16535] head: 00fff00000000003 ffffea00017e5e01 00000000ffffffff 00000000ffffffff [ 693.254946][T16535] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 693.263593][T16535] page dumped because: kasan: bad access detected [ 693.269971][T16535] page_owner tracks the page as allocated [ 693.275663][T16535] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5808, tgid 5808 (syz-executor), ts 56632856423, free_ts 12734997351 [ 693.296391][T16535] post_alloc_hook+0x153/0x170 [ 693.301137][T16535] get_page_from_freelist+0x111d/0x3140 [ 693.306670][T16535] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 693.312538][T16535] new_slab+0xa6/0x6b0 [ 693.316577][T16535] refill_objects+0x26b/0x400 [ 693.321229][T16535] __pcs_replace_empty_main+0x1ab/0x660 [ 693.326753][T16535] __kmalloc_noprof+0x688/0x850 [ 693.331578][T16535] batadv_hash_new+0xb2/0x2e0 [ 693.336228][T16535] batadv_bla_init+0x361/0x700 [ 693.340966][T16535] batadv_mesh_init+0x523/0x910 [ 693.345794][T16535] batadv_meshif_init_late+0xbce/0xf30 [ 693.351229][T16535] register_netdevice+0x685/0x2210 [ 693.356332][T16535] batadv_meshif_newlink+0x8f/0xc0 [ 693.361421][T16535] rtnl_newlink+0x1494/0x2380 [ 693.366128][T16535] rtnetlink_rcv_msg+0x95e/0xe90 [ 693.371057][T16535] netlink_rcv_skb+0x159/0x420 [ 693.375844][T16535] page last free pid 1 tgid 1 stack trace: [ 693.381621][T16535] __free_frozen_pages+0x7e1/0x10d0 [ 693.386794][T16535] free_contig_range+0xde/0x1d0 [ 693.391617][T16535] destroy_args+0xa8/0x7a0 [ 693.396002][T16535] debug_vm_pgtable+0x1b66/0x34c0 [ 693.400996][T16535] do_one_initcall+0x11d/0x760 [ 693.405732][T16535] kernel_init_freeable+0x6e5/0x7a0 [ 693.410906][T16535] kernel_init+0x1f/0x1e0 [ 693.415221][T16535] ret_from_fork+0x754/0xd80 [ 693.419784][T16535] ret_from_fork_asm+0x1a/0x30 [ 693.424533][T16535] [ 693.426839][T16535] Memory state around the buggy address: [ 693.432439][T16535] ffff88805f978600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 693.440474][T16535] ffff88805f978680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 693.448505][T16535] >ffff88805f978700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 693.456534][T16535] ^ [ 693.462914][T16535] ffff88805f978780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 693.470942][T16535] ffff88805f978800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 693.478969][T16535] ================================================================== [ 693.491263][ T922] em28xx 6-1:0.89: Registering snapshot button... [ 693.498886][ T922] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input26 [ 693.525462][ T922] em28xx 6-1:0.89: Remote control support is not available for this card. [ 693.731549][ T5812] em28xx 6-1:0.89: Closing input extension [ 693.737465][ T5812] em28xx 6-1:0.89: Deregistering snapshot button [ 693.744988][T16535] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 693.752181][T16535] CPU: 0 UID: 0 PID: 16535 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 693.762749][T16535] Tainted: [L]=SOFTLOCKUP [ 693.767049][T16535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 693.777083][T16535] Call Trace: [ 693.780348][T16535] [ 693.783260][T16535] dump_stack_lvl+0x100/0x190 [ 693.787928][T16535] vpanic+0x552/0x970 [ 693.791888][T16535] ? __pfx_vpanic+0x10/0x10 [ 693.796371][T16535] ? v4l2_fh_init+0x27d/0x2c0 [ 693.801035][T16535] panic+0xd1/0xe0 [ 693.804737][T16535] ? __pfx_panic+0x10/0x10 [ 693.809130][T16535] ? v4l2_fh_init+0x27d/0x2c0 [ 693.813788][T16535] ? preempt_schedule_common+0x42/0xc0 [ 693.819231][T16535] ? check_panic_on_warn+0x1f/0x90 [ 693.824330][T16535] check_panic_on_warn.cold+0x19/0x34 [ 693.829683][T16535] end_report.part.0+0x3a/0x90 [ 693.834432][T16535] kasan_report.cold+0xe/0x18 [ 693.839098][T16535] ? v4l2_fh_init+0x27d/0x2c0 [ 693.843761][T16535] v4l2_fh_init+0x27d/0x2c0 [ 693.848249][T16535] v4l2_fh_open+0x64/0xa0 [ 693.852562][T16535] em28xx_v4l2_open+0x11e/0x570 [ 693.857395][T16535] v4l2_open+0x1d2/0x490 [ 693.861622][T16535] ? __pfx_v4l2_open+0x10/0x10 [ 693.866367][T16535] chrdev_open+0x234/0x6a0 [ 693.870763][T16535] ? __pfx_chrdev_open+0x10/0x10 [ 693.875679][T16535] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 693.881990][T16535] do_dentry_open+0x6d8/0x1660 [ 693.886741][T16535] ? __pfx_chrdev_open+0x10/0x10 [ 693.891658][T16535] vfs_open+0x82/0x3f0 [ 693.895710][T16535] path_openat+0x208c/0x31a0 [ 693.900283][T16535] ? __pfx_path_openat+0x10/0x10 [ 693.905205][T16535] do_file_open+0x20e/0x430 [ 693.909714][T16535] ? __pfx_do_file_open+0x10/0x10 [ 693.914723][T16535] ? alloc_fd+0x476/0x790 [ 693.919044][T16535] ? do_getname+0x191/0x390 [ 693.923534][T16535] do_sys_openat2+0x10d/0x1e0 [ 693.928193][T16535] ? __pfx_do_sys_openat2+0x10/0x10 [ 693.933379][T16535] __x64_sys_openat+0x12d/0x210 [ 693.938235][T16535] ? __pfx___x64_sys_openat+0x10/0x10 [ 693.943591][T16535] ? do_user_addr_fault+0x8d6/0x12f0 [ 693.948859][T16535] do_syscall_64+0x106/0xf80 [ 693.953433][T16535] ? clear_bhb_loop+0x40/0x90 [ 693.958121][T16535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.963994][T16535] RIP: 0033:0x7f2a734a7407 [ 693.968389][T16535] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 693.987977][T16535] RSP: 002b:00007ffc439646f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 693.996370][T16535] RAX: ffffffffffffffda RBX: 00007f2a73b4d880 RCX: 00007f2a734a7407 [ 694.004322][T16535] RDX: 0000000000000000 RSI: 00007ffc43965f1c RDI: ffffffffffffff9c [ 694.012274][T16535] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 694.020223][T16535] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 694.028198][T16535] R13: 00007ffc43964940 R14: 00007f2a73cb4000 R15: 00005633b927d4d8 [ 694.036154][T16535] [ 694.039362][T16535] Kernel Offset: disabled [ 694.043687][T16535] Rebooting in 86400 seconds..