last executing test programs: 17m51.174380551s ago: executing program 32 (id=63): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17m0.555673527s ago: executing program 33 (id=225): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x24, 0xc0, 0x3, 0x0, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x656}, {@broadcast}, {@empty}]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @noop, @lsrr={0x83, 0x3, 0xda}, @rr={0x7, 0x7, 0x0, [@remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16m16.679409975s ago: executing program 34 (id=342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 15m30.720994672s ago: executing program 6 (id=453): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_pidfd_open(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) 15m28.860154569s ago: executing program 6 (id=457): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000002000000040060809c0a01"], 0xab4}}, 0x0) accept(r1, &(0x7f00000000c0)=@nfc, &(0x7f0000000000)=0x80) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f0000000340)='/\x00\x01\x00H\x98', 0x0) tkill(r2, 0xb) 15m26.876521643s ago: executing program 6 (id=463): socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000280)={0x0, &(0x7f0000000100)}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) 15m26.094888474s ago: executing program 6 (id=467): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x922, 0x12) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioperm(0x0, 0x1fb, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r3, &(0x7f0000000080)='./file0/file0\x00', r3, &(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0) tkill(r2, 0x1) write$cgroup_int(r1, &(0x7f0000000040)=0x922, 0x12) 15m24.143974287s ago: executing program 6 (id=471): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, 0x0, 0xfe33) r3 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x9) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f0000001940)=""/4086, 0xff6) request_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='/dev/cpu/#/msr\x00', r4) 15m21.58135596s ago: executing program 6 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) waitid(0x2, r1, 0x0, 0x4, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@can_delroute={0x48, 0x19, 0x8, 0x70bd26, 0x25dfdbff, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x9}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}, @CGW_SRC_IF={0x8, 0x9, r2}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "92692cf6c382bd60"}, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x885}, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000240)={0x0, 0x2, 0x4, '\x00', &(0x7f0000000200)}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x121082, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x468, 0xffffffff, 0x140, 0x280, 0x140, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ipv6={@local, @remote, [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 'veth1\x00', 'xfrm0\x00', {}, {}, 0x33, 0x8, 0x1, 0xb0}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x7fffffff, 0x2, 0x1, [0x1ff, 0xcbc, 0x2350, 0xffff, 0x0, 0x7, 0x6, 0x401, 0x6, 0x14, 0x6, 0x7, 0x9, 0x401, 0x5a, 0x1], 0xc}}, @common=@ipv6header={{0x28}, {0x88, 0x2, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast2, @mcast1, [0x0, 0x0, 0xff], [0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'veth1_to_batadv\x00', {}, {}, 0x67, 0x40, 0x2, 0x8}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xfffffffffffffffd}, {0x2}], 0x3, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], 0x4e24, 0x4e24, 0x4e22, 0x4e20, 0xf, 0x800, 0x7, 0x400, 0xb}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x6, 0x4, 0x1, 0x0, "bda221ca1b809563dacbc67bb57526486945c869bdde6fd66f33c2032735bb8055b8a17af14eebfabcd486ee33135336a1b90eeb33b14e03e7280040e261feb8"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) 15m20.848734266s ago: executing program 35 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) waitid(0x2, r1, 0x0, 0x4, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@can_delroute={0x48, 0x19, 0x8, 0x70bd26, 0x25dfdbff, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x9}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}, @CGW_SRC_IF={0x8, 0x9, r2}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "92692cf6c382bd60"}, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x885}, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000240)={0x0, 0x2, 0x4, '\x00', &(0x7f0000000200)}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x121082, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x468, 0xffffffff, 0x140, 0x280, 0x140, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ipv6={@local, @remote, [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 'veth1\x00', 'xfrm0\x00', {}, {}, 0x33, 0x8, 0x1, 0xb0}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x7fffffff, 0x2, 0x1, [0x1ff, 0xcbc, 0x2350, 0xffff, 0x0, 0x7, 0x6, 0x401, 0x6, 0x14, 0x6, 0x7, 0x9, 0x401, 0x5a, 0x1], 0xc}}, @common=@ipv6header={{0x28}, {0x88, 0x2, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast2, @mcast1, [0x0, 0x0, 0xff], [0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'veth1_to_batadv\x00', {}, {}, 0x67, 0x40, 0x2, 0x8}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xfffffffffffffffd}, {0x2}], 0x3, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], 0x4e24, 0x4e24, 0x4e22, 0x4e20, 0xf, 0x800, 0x7, 0x400, 0xb}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x6, 0x4, 0x1, 0x0, "bda221ca1b809563dacbc67bb57526486945c869bdde6fd66f33c2032735bb8055b8a17af14eebfabcd486ee33135336a1b90eeb33b14e03e7280040e261feb8"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) 13m53.001939299s ago: executing program 7 (id=675): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000006200002e2d2f55009500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = io_uring_setup(0x4233, &(0x7f0000000100)={0x0, 0xaa02, 0x2, 0x0, 0x173}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) syz_io_uring_setup(0xe50, &(0x7f00000002c0)={0x0, 0x932, 0x20, 0x0, 0x5b, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000040), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m52.158490366s ago: executing program 7 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000000, 0x210383) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 13m49.543686979s ago: executing program 7 (id=683): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b000000000020006c0000000000000000001000", @ANYRESOCT=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="000000000000000000000300"/28], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) unshare(0x62040200) 13m46.477642737s ago: executing program 7 (id=689): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x64}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xfc) bind$bt_l2cap(r4, 0x0, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000200)=0x10) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') 13m44.365913549s ago: executing program 7 (id=691): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1c}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x800000008ec1, 0xa) 13m43.590881904s ago: executing program 7 (id=695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x1000000) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(0x0, 0x0, 0x0, 0x0) r3 = timerfd_create(0x9, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0xff00) 13m43.330992238s ago: executing program 36 (id=695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x1000000) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(0x0, 0x0, 0x0, 0x0) r3 = timerfd_create(0x9, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0xff00) 11m46.818217516s ago: executing program 1 (id=950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000500)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@generic={0xd, "e289badb0c772b4d02cad4c03ae4e6ce1fb46b5ff6c8637fc8e41ad5dea512d48b0fcaa89c520fd049b205d852c5ca894d55bf8946a33c1acfa4c9cb3fca837342973ea9b2385e298d82d5bf3ccedb72de6daa33d1264a9b5c6853394c121c656ed32f87f9406c8dc4440e9c1cff3413079232f2cb4f896a17d7033d749991cc7f897efcde2b4fa5d8cd99f2267e3bc6914f0907b91a936250f2c0d081de6398698dc9e8fab0551351af9563681c4b772a462f6afe20de69429ed7ddfa"}}}, &(0x7f0000000280)={0x0, 0x1, [0x708, 0xdeb, 0x6e9, 0x5b2]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 11m45.577238601s ago: executing program 1 (id=955): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) shmget$private(0x0, 0x4000, 0x6, &(0x7f00004bd000/0x4000)=nil) shmat(0x0, &(0x7f00000ca000/0x4000)=nil, 0x4000) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2002080, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, 0x0, 0x0, 0x7ff, 0x1000000000004}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2b8000000000000}) 11m43.197446845s ago: executing program 1 (id=962): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_uring_setup(0x1329, &(0x7f0000000700)={0x0, 0x92b5, 0x10, 0x2, 0x3a0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet(0x2, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket(0x15, 0x5, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11m41.32961859s ago: executing program 1 (id=967): mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x2004, &(0x7f0000000140)=ANY=[@ANYBLOB="6d706f6c3d642a1b6984c6b2f90d3d01a92cd4fa00"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x140440, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b14010000000000000000000800"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setns(0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create(0x208000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xc901, 0x0) 11m39.470255228s ago: executing program 1 (id=972): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[0x0]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601010000000000000000eb7af834050005000a000000050004000000000014000780080006400000000008000840000000f00900020073797a3000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 11m37.425473609s ago: executing program 1 (id=976): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x0, 0x0) 11m20.858702863s ago: executing program 37 (id=976): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x0, 0x0) 1m42.453621784s ago: executing program 2 (id=2827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fanotify_init(0x0, 0x80000) r2 = memfd_create(&(0x7f0000000e80)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbcg@\xcd\xb4k5I\xcb\x11\xa2\xe8\xa9lc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xe18M\xcd\xfb\xcc\x82n=\x7f=\xcdJ\x93\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r3 = dup(r2) sendto$packet(r3, &(0x7f0000000480)="5a9d42b108403deb196ec80d8fd8be62ba94467f852ac983d3aeb284c4a12f27ae459ddbd4226046bd0e8aaf489da0ee52e979f3b64d220363af2c70c6c8c8f3a4261211a09eb8831bd2d0639c2c94cb8257da8f9073d4899f8ca4210a5a3f775ea30daa03a108685e3d68853a61ff4e1020bbb130307f48afd6d5a9d9ec12aa886f613be04101cac0b0894efc458d74c390a94f3069d5ad563de0050c935377eaa47e278b345f12bf27125ba3d7b813f1498f501e8b1f3aba19688f767a63cd1f4ad1e2d65e04e862a70d2afd46773b5691448336701c42f350a998c6b9d145993169428f3587ea2a47f089fb262d4d5ce5", 0xf2, 0x40, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @raw_data="bc689b6a16021551b6ccb5c9bd3aba3bbe9e73a6d89c27331601569eb3b43828133f5b70cb6941320e821bc25136f7adde68863c39f4fac2c1d669d957dda98bd649fdec8b3150db23b0f4e06273084979a8c60fa612c404a86e2a4241a4daf531e8e5ad4f5021a0874b0406c8f41bf28be6e9f579d011c05b24b9044af6be62f9757e30219ca7000eefe7c2bbcdaaa65387fd5e6bfa3ef9210766f486c9377c6df80564cf912ca6166260072c6e0023a37f75429a8365f73797de9951624d4268dedd5f829b2380"}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) add_key$user(0x0, &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400)="f4", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 1m42.333199268s ago: executing program 2 (id=2828): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0}) 1m39.107095955s ago: executing program 2 (id=2856): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x4, 0x9000000, 0x80000001}, 0x10) 1m38.977588216s ago: executing program 2 (id=2858): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m38.937345965s ago: executing program 2 (id=2860): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0xc0844123, &(0x7f0000000080)={0x0, 0x0}) 1m37.841510274s ago: executing program 2 (id=2864): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c6", 0x38}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1m37.398784378s ago: executing program 38 (id=2864): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c6", 0x38}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 44.157564361s ago: executing program 5 (id=3175): r0 = gettid() r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa000000a}) finit_module(r2, 0x0, 0x0) tkill(r0, 0x7) 43.970551379s ago: executing program 5 (id=3177): socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000090900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b6574000014000280080002400000001608000140000000071400"], 0xc4}}, 0x4000040) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x7fffffff, 0x0, 0x10001, 0x0, 0x0, 0x80, 0x9, 0xfffffffffffffffc, 0x0, 0x2, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000070b000/0x4000)=nil, 0x4000, &(0x7f0000000280)='keyring\x00') r7 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000100)={0x0, 0xffffffffffffff3d, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9}) 42.873208367s ago: executing program 5 (id=3181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = fanotify_init(0x0, 0x80000) r3 = memfd_create(&(0x7f0000000e80)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbcg@\xcd\xb4k5I\xcb\x11\xa2\xe8\xa9lc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xe18M\xcd\xfb\xcc\x82n=\x7f=\xcdJ\x93\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x48001023, r4, 0x0) sendto$packet(r4, &(0x7f0000000480)="5a9d42b108403deb196ec80d8fd8be62ba94467f852ac983d3aeb284c4a12f27ae459ddbd4226046bd0e8aaf489da0ee52e979f3b64d220363af2c70c6c8c8f3a4261211a09eb8831bd2d0639c2c94cb8257da8f9073d4899f8ca4210a5a3f775ea30daa03a108685e3d68853a61ff4e1020bbb130307f48af", 0x79, 0x40, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000300)={0x1, @raw_data="bc689b6a16021551b6ccb5c9bd3aba3bbe9e73a6d89c27331601569eb3b43828133f5b70cb6941320e821bc25136f7adde68863c39f4fac2c1d669d957dda98bd649fdec8b3150db23b0f4e06273084979a8c60fa612c404a86e2a4241a4daf531e8e5ad4f5021a0874b0406c8f41bf28be6e9f579d011c05b24b9044af6be62f9757e30219ca7000eefe7c2bbcdaaa65387fd5e6bfa3ef9210766f486c9377c6df80564cf912ca6166260072c6e0023a37f75429a8365f73797de9951624d4268dedd5f829b2380"}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) add_key$user(0x0, &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400)="f4", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 41.501772762s ago: executing program 5 (id=3189): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 41.242164615s ago: executing program 5 (id=3194): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x3e}]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 40.346978073s ago: executing program 5 (id=3197): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x149101) r1 = dup(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x0) mount$9p_unix(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x201000, 0x0) mount$9p_tcp(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x44021, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000003211000d000000fddfffff"]) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130}}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x1, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 40.073848972s ago: executing program 39 (id=3197): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x149101) r1 = dup(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x0) mount$9p_unix(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x201000, 0x0) mount$9p_tcp(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x44021, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000003211000d000000fddfffff"]) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130}}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x1, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 6.892598942s ago: executing program 4 (id=3425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x42}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 6.816782169s ago: executing program 4 (id=3426): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000640)={0x58, r1, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4ec61fb}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004004) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt6_stats\x00') r8 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x1f, 0x8a, 0x70}, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xc, [@struct={0xe, 0x4, 0x0, 0x4, 0x1, 0xc374, [{0x8, 0x3, 0x4}, {0x7, 0x0, 0x6}, {0x9, 0x4, 0x5}, {0xd, 0x3, 0x9}]}, @func={0x2, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @fwd={0xf}]}, {0x0, [0x5f, 0x61, 0x1e, 0x0, 0x30, 0x3e, 0x2e, 0x61, 0x5f, 0x30]}}, &(0x7f0000000240)=""/128, 0x90, 0x80, 0x0, 0x7, 0x10000, @value=r6}, 0x28) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) close_range(r7, 0xffffffffffffffff, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}}, 0x10) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0xd1, 0x5c4da462, 0x0, 0xce, 0x8, 0xa, 0x0, 0x0, 0x100}}, 0x50) chown(&(0x7f0000000100)='./file0\x00', r13, r14) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 6.583416256s ago: executing program 4 (id=3427): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) lseek(r2, 0x1000002, 0x3) 5.24586072s ago: executing program 3 (id=3437): syz_io_uring_setup(0x67f7, &(0x7f0000000140)={0x0, 0xcb02, 0x20, 0x0, 0x122}, &(0x7f0000000000), &(0x7f00000001c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 5.053803934s ago: executing program 3 (id=3439): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x4000000000001a7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r5, &(0x7f0000000040), &(0x7f0000000080), 0x0) ioctl(r3, 0x8b1a, &(0x7f0000000040)) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) wait4(r0, 0x0, 0x2, 0x0) epoll_create1(0x80000) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x3, 0x3800, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.859159426s ago: executing program 9 (id=3442): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 3.858612793s ago: executing program 8 (id=3443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)={0x1c, r2, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) 3.795988504s ago: executing program 3 (id=3444): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 3.732418538s ago: executing program 0 (id=3445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x98, 0x0, 0x0, "69869f9b4a0074586c9f0c522844c65014127e4651d085a89043138706e79a415b0b0d126c51c1215cfe34997eddd2b4a8256b525b5c15b219daa9ce4cca864a73d9c49ae2771bb70203ebd653200a0d37a0c028cb33b28c7532f384febe039d54537e6952f92cc821c13f34a5426d1532ddd442827bd8dae047fac4b17d711520cd"}, {0x50, 0x0, 0x0, "72a9590a604c03a1efaa205bc9b33fe1e977c3d1d1408ae17ab1ff9118f13db566222a1e12c010521a70c445d97d0cba145ba79178a6d3bbaf70f226"}, {0xe0, 0x0, 0x0, "187ab360a4694eb57bbe6342b5dda581327297f3380b94699ac0c4df81a9904c6b5b40886799022be834dbee1691a0b86881e701b7411036b9d70173dcfe9af0e46c8b97f7a94c1cb39e3ff9ffb5ead3394e9aa03d9a841b579823964df8643ed6ce4a33534bd8f71d23cf382643573c2b096540e8b3015e71ab7ab18d7b0365f8a57e46b31177feadae2f9ba0b1dec676eb60a744f5aac4213806b82bfc2390dc42727cc56d3bbf03700c77441d5e788d6ef2656c82c6b151c4180dbf2b21d7e7f8e824eb8e2c6ab2"}, {0x10, 0x110, 0xd}], 0x1d8, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0xc800) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3) recvmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[@op={0x18, 0x114}], 0x18}, 0x0) 3.681881632s ago: executing program 9 (id=3446): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000640)={0x24, r1, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4ec61fb}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004004) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt6_stats\x00') r6 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x1f, 0x8a, 0x70}, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xc, [@struct={0xe, 0x4, 0x0, 0x4, 0x1, 0xc374, [{0x8, 0x3, 0x4}, {0x7, 0x0, 0x6}, {0x9, 0x4, 0x5}, {0xd, 0x3, 0x9}]}, @func={0x2, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @fwd={0xf}]}, {0x0, [0x5f, 0x61, 0x1e, 0x0, 0x30, 0x3e, 0x2e, 0x61, 0x5f, 0x30]}}, &(0x7f0000000240)=""/128, 0x90, 0x80, 0x0, 0x7, 0x10000, @value=r4}, 0x28) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) close_range(r5, 0xffffffffffffffff, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}}, 0x10) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0xd1, 0x5c4da462, 0x0, 0xce, 0x8, 0xa, 0x0, 0x0, 0x100}}, 0x50) chown(&(0x7f0000000100)='./file0\x00', r11, r12) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 2.96122232s ago: executing program 4 (id=3447): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x200d40, 0x4) 2.700335468s ago: executing program 0 (id=3448): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x8}}}, 0x7) 2.61484437s ago: executing program 9 (id=3449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x25}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) 2.262992094s ago: executing program 3 (id=3450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) 2.181299976s ago: executing program 0 (id=3451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000480)=[{}], 0x1, 0x800) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x100) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x10000001}) 2.121202117s ago: executing program 9 (id=3452): syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) listxattr(0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f00009c6000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/141, 0x8d, 0x1, &(0x7f0000000940)=""/4096, 0x1000}, &(0x7f00000002c0)=0x40) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c04000700", 0x20) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x168, 0x9, 0x0, 0xa, 0x358, 0x250, 0x250, 0x358, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00'}, 0x6000000, 0x228, 0x248, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'batadv_slave_1\x00', {0x0, 0x0, 0x54, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ecn={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "5c14"}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "82514666efa69cf2c138e4411e7a0f420d7c9f5c73c76826f7e208dfcd40"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x141, @time={0x5, 0xdc5b}, 0x9, {0x7}, 0x0, 0x2, 0x4}) mknod(&(0x7f0000000080)='./file0\x00', 0x400, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r0, &(0x7f00000000c0)=0x58, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x3d, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0xc000) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$tipc(r7, 0x0, 0x0) 1.975308938s ago: executing program 0 (id=3453): socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0xc048aeca, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) 1.9460363s ago: executing program 8 (id=3454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 1.841268101s ago: executing program 4 (id=3455): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x40082102, 0x20000000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000140)="8f06bca2a292ae57593c26d42a7b5ad7e8b88c216af862e6", 0x18, 0x3b00, 0x0, 0x0) 1.767753492s ago: executing program 3 (id=3456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x100, 0x0, {0x0, 0x3, 0x0, 0xffff, 0x369, 0x0, 0x4, 0x3, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0x4004092b, 0x0) 1.646007496s ago: executing program 8 (id=3457): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) 1.529469325s ago: executing program 0 (id=3458): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x5, 0x0, "a05c7b5d00008023e9c59cf5ff7700"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) io_setup(0x689, &(0x7f0000000280)=0x0) io_submit(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x20, 0x1) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000300)={0xff7ffffc}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0x7}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) read$FUSE(r8, &(0x7f0000005740)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 814.477249ms ago: executing program 4 (id=3459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="5f198721fa66", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a8b4ce", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x46}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 807.205389ms ago: executing program 3 (id=3460): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_open_dev$vim2m(&(0x7f0000000080), 0x200000000000000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141301) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 622.948174ms ago: executing program 9 (id=3461): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file2', [{0x20, ','}, {0x20, 'ext4\x00'}, {0x20, '\x00'}, {0x20, 'ext4\x00'}, {0x20, '(%'}, {0x20, '\x00'}, {0x20, 'ro\x00'}], 0xa, "98ffe8aad4600ffdee7f7b202931869cc0ebacd18510f0008697cfc47a9bb2364d0e71"}, 0x47) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f", 0x30) write$qrtrtun(r0, &(0x7f0000000240)="25375468d806d8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a3c", 0x2b) write$qrtrtun(r0, &(0x7f0000000c00)="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", 0x3bb) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 594.052778ms ago: executing program 8 (id=3462): r0 = syz_io_uring_setup(0x176a, &(0x7f0000000080)={0x0, 0x7d7e, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0xd, r3, 0x0, 0x0, 0x0, 0x30120, 0x0, {0x2}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0xe, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) io_uring_enter(r0, 0x1fd0, 0xffffffff, 0x0, 0x0, 0x0) 464.072806ms ago: executing program 8 (id=3463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = fanotify_init(0x0, 0x80000) r3 = memfd_create(&(0x7f0000000e80)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbcg@\xcd\xb4k5I\xcb\x11\xa2\xe8\xa9lc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xe18M\xcd\xfb\xcc\x82n=\x7f=\xcdJ\x93\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x48001023, r4, 0x0) sendto$packet(r4, &(0x7f0000000480)="5a9d42b108403deb196ec80d8fd8be62ba94467f852ac983d3aeb284c4a12f27ae459ddbd4226046bd0e8aaf489da0ee52e979f3b64d220363af2c70c6c8c8f3a4261211a09eb8831bd2d0639c2c94cb8257da8f9073d4899f8ca4210a5a3f775ea30daa03a108685e3d68853a61ff4e1020bbb130307f48afd6d5a9d9ec12aa886f613be04101cac0b0894efc458d74c390a94f3069d5ad563de0050c935377eaa47e278b345f12bf27125ba3d7b813f1498f501e8b1f3aba19688f767a63cd1f4ad1e2d65e04e862a70d2afd46773b5691448336701c42f350a998c6b9d145993169428f3587ea2a47f089fb262d4d5ce5", 0xf2, 0x40, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000300)={0x1, @raw_data="bc689b6a16021551b6ccb5c9bd3aba3bbe9e73a6d89c27331601569eb3b43828133f5b70cb6941320e821bc25136f7adde68863c39f4fac2c1d669d957dda98bd649fdec8b3150db23b0f4e06273084979a8c60fa612c404a86e2a4241a4daf531e8e5ad4f5021a0874b0406c8f41bf28be6e9f579d011c05b24b9044af6be62f9757e30219ca7000eefe7c2bbcdaaa65387fd5e6bfa3ef9210766f486c9377c6df80564cf912ca6166260072c6e0023a37f75429a8365f73797de9951624d4268dedd5f829b2380"}) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) add_key$user(0x0, &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400)="f4", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 166.60247ms ago: executing program 0 (id=3464): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = timerfd_create(0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r3 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8000000}) 110.680495ms ago: executing program 9 (id=3465): chdir(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x4e, 0x101240) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x20040000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0xc008aeba, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000080)={0x9f, 0x0, 0x1}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 0s ago: executing program 8 (id=3466): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x401870cb, &(0x7f0000000040)=0xf00) kernel console output (not intermixed with test programs): sing maximum allowed: 32 [ 1029.465287][T11142] usb 10-1: Using ep0 maxpacket: 16 [ 1029.483484][T11142] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.496091][ T5863] usb 3-1: USB disconnect, device number 19 [ 1029.517923][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1029.530401][T11142] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1029.551811][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1029.561776][T11142] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1029.571675][ T5864] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1029.581413][T11142] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1029.591452][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1029.604690][T11142] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1029.617974][ T5864] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1029.627318][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.639028][ T5864] usb 1-1: config 0 descriptor?? [ 1029.647663][T11142] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1029.662830][T11142] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1029.673452][T11142] usb 10-1: Manufacturer: syz [ 1029.683399][T11142] usb 10-1: config 0 descriptor?? [ 1029.903328][ T5864] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1030.098644][T11142] rc_core: IR keymap rc-hauppauge not found [ 1030.104805][T11142] Registered IR keymap rc-empty [ 1030.111325][T11142] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1030.138281][ T5894] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1030.150689][T11142] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1030.297251][T11142] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1030.411237][ T5894] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1030.551629][ T5894] usb 5-1: config 0 has no interface number 0 [ 1030.563052][ T5864] usb 1-1: USB disconnect, device number 21 [ 1030.575157][T11142] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input74 [ 1030.610154][ T5894] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1030.619981][ T5864] usblp0: removed [ 1030.631261][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.644444][T11142] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1030.662738][ T5894] usb 5-1: Product: syz [ 1030.667153][ T5894] usb 5-1: Manufacturer: syz [ 1030.671779][ T5894] usb 5-1: SerialNumber: syz [ 1030.683963][T11142] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1030.695711][ T5894] usb 5-1: config 0 descriptor?? [ 1030.705054][T11142] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1030.737429][T11142] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1030.769107][T11142] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1031.145766][T11142] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1031.192747][T11142] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1031.218461][T11142] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1031.239750][T11142] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1031.260996][T11142] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1031.287120][T11142] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1031.296563][T11142] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1031.348750][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1031.348766][ T29] audit: type=1400 audit(2000000889.100:1962): avc: denied { read write } for pid=17892 comm="syz.4.2750" name="mouse0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1031.403858][ T29] audit: type=1400 audit(2000000889.100:1963): avc: denied { open } for pid=17892 comm="syz.4.2750" path="/dev/input/mouse0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1031.429312][ T5894] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1031.465779][ T5894] usb 5-1: USB disconnect, device number 23 [ 1031.503108][T11142] usb 10-1: USB disconnect, device number 16 [ 1031.612312][ T29] audit: type=1400 audit(2000000889.427:1964): avc: denied { write } for pid=17921 comm="syz.8.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1031.938899][ T29] audit: type=1400 audit(2000000889.661:1965): avc: denied { mount } for pid=17925 comm="syz.8.2761" name="/" dev="configfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1032.055621][ T29] audit: type=1400 audit(2000000889.829:1966): avc: denied { write } for pid=17927 comm="syz.0.2760" name="ns" dev="proc" ino=55221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1032.176738][ T29] audit: type=1400 audit(2000000889.923:1967): avc: denied { add_name } for pid=17927 comm="syz.0.2760" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1032.254387][ T29] audit: type=1400 audit(2000000889.923:1968): avc: denied { create } for pid=17927 comm="syz.0.2760" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 1032.304198][ T29] audit: type=1400 audit(2000000889.923:1969): avc: denied { associate } for pid=17927 comm="syz.0.2760" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1032.372519][ T29] audit: type=1400 audit(2000000890.007:1970): avc: denied { create } for pid=17927 comm="syz.0.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1032.449307][ T29] audit: type=1400 audit(2000000890.007:1971): avc: denied { connect } for pid=17927 comm="syz.0.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1035.501252][T18013] __nla_validate_parse: 3 callbacks suppressed [ 1035.501266][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 1035.605763][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2788'. [ 1036.991766][ T5894] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1038.209777][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 1038.313192][ T5894] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1038.460717][ T5894] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1038.487711][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.495739][ T5894] usb 3-1: Product: syz [ 1038.500012][ T5894] usb 3-1: Manufacturer: syz [ 1038.504633][ T5894] usb 3-1: SerialNumber: syz [ 1038.521454][ T5894] usb 3-1: config 0 descriptor?? [ 1038.527087][T18042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1038.539705][ T5894] hub 3-1:0.0: bad descriptor, ignoring hub [ 1038.545990][ T5894] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1038.575450][ T5894] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input75 [ 1038.871379][ T5894] usb 3-1: USB disconnect, device number 20 [ 1038.877402][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1039.616647][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 1039.616665][ T29] audit: type=1400 audit(2000000896.910:1999): avc: denied { mount } for pid=18073 comm="syz.8.2805" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1039.706749][ T29] audit: type=1400 audit(2000000896.938:2000): avc: denied { remount } for pid=18073 comm="syz.8.2805" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1039.741865][T18077] netlink: 'syz.4.2807': attribute type 9 has an invalid length. [ 1039.745661][ T29] audit: type=1400 audit(2000000896.995:2001): avc: denied { unmount } for pid=8373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1039.769856][T18077] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2807'. [ 1039.830862][ T29] audit: type=1400 audit(2000000897.116:2002): avc: denied { create } for pid=18079 comm="syz.8.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1039.863184][ T29] audit: type=1400 audit(2000000897.144:2003): avc: denied { setopt } for pid=18079 comm="syz.8.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1039.957838][T18086] netlink: 'syz.4.2810': attribute type 1 has an invalid length. [ 1039.970199][ T29] audit: type=1400 audit(2000000897.247:2004): avc: denied { write } for pid=18087 comm="syz.9.2812" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1039.980684][T18086] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2810'. [ 1040.008675][ T29] audit: type=1400 audit(2000000897.275:2005): avc: denied { ioctl } for pid=18087 comm="syz.9.2812" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1040.648269][T18105] Illegal XDP return value 268435456 on prog (id 391) dev syz_tun, expect packet loss! [ 1040.896623][ T29] audit: type=1400 audit(2000000898.089:2006): avc: denied { connect } for pid=18110 comm="syz.2.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1040.936243][T18109] xt_hashlimit: invalid rate [ 1041.023630][T18117] netlink: 208 bytes leftover after parsing attributes in process `syz.9.2822'. [ 1041.088069][ T29] audit: type=1400 audit(2000000898.098:2007): avc: denied { write } for pid=18110 comm="syz.2.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1041.485368][T18124] 9pnet_fd: Insufficient options for proto=fd [ 1041.610131][ T29] audit: type=1400 audit(2000000898.781:2008): avc: denied { read } for pid=18125 comm="syz.9.2825" name="/" dev="configfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1041.949753][T18142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2831'. [ 1041.966861][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1042.432782][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1042.445973][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1042.455645][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1042.465351][ T9] usb 3-1: Product: syz [ 1042.469714][ T9] usb 3-1: Manufacturer: syz [ 1042.474395][ T9] usb 3-1: SerialNumber: syz [ 1042.487097][ T9] usb 3-1: config 0 descriptor?? [ 1042.798163][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1044.040042][T18189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.157916][ T9] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1044.170658][ T9] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 1044.201030][ T9] usb 3-1: USB disconnect, device number 21 [ 1044.249958][ T5894] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1044.446451][ T5894] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1044.501300][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.716414][ T5894] usb 1-1: Product: syz [ 1044.763280][ T5894] usb 1-1: Manufacturer: syz [ 1044.773756][ T5894] usb 1-1: SerialNumber: syz [ 1044.787243][ T5894] usb 1-1: config 0 descriptor?? [ 1044.987608][ T9] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1045.245085][ T5894] usb 1-1: Firmware version (0.0) predates our first public release. [ 1045.253224][ T5894] usb 1-1: Please update to version 0.2 or newer [ 1045.263674][ T5894] usb 1-1: Firmware: build [ 1045.746386][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1045.757517][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1045.768654][ T9] usb 9-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 1045.778075][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.788012][ T9] usb 9-1: config 0 descriptor?? [ 1045.794075][T18203] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1045.803994][ T5894] usb 1-1: USB disconnect, device number 22 [ 1045.844193][T17219] bridge0: port 3(syz_tun) entered disabled state [ 1045.893297][T17219] syz_tun (unregistering): left allmulticast mode [ 1045.900344][T17219] syz_tun (unregistering): left promiscuous mode [ 1045.907340][T17219] bridge0: port 3(syz_tun) entered disabled state [ 1046.095278][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 1046.101593][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1046.130446][ T9] usb 9-1: USB disconnect, device number 14 [ 1046.219606][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1046.219621][ T29] audit: type=1400 audit(2000000903.093:2020): avc: denied { read } for pid=5483 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1046.475039][ T7738] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.486240][ T7738] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.735221][ T7738] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.757749][ T7738] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.802184][T18235] syz.9.2863 (18235): drop_caches: 2 [ 1046.937419][T18235] syz.9.2863 (18235): drop_caches: 2 [ 1046.952277][ T29] audit: type=1400 audit(2000000903.767:2021): avc: denied { read } for pid=18244 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1046.984364][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1047.016836][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1047.031592][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1047.039404][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1047.046780][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1047.057905][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1047.065615][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1047.071896][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1047.083080][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1047.091591][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1047.101262][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1047.123914][ T7738] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.142597][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1047.146517][ T29] audit: type=1400 audit(2000000903.767:2022): avc: denied { open } for pid=18244 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1047.178650][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1047.186329][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1047.194699][ T7738] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.312621][ T29] audit: type=1400 audit(2000000904.019:2023): avc: denied { mounton } for pid=18244 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1047.623884][ T29] audit: type=1400 audit(2000000904.263:2024): avc: denied { open } for pid=18251 comm="syz.8.2870" path="/dev/ptyr4" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1047.647640][ T29] audit: type=1400 audit(2000000904.272:2025): avc: denied { ioctl } for pid=18251 comm="syz.8.2870" path="/dev/ptyr4" dev="devtmpfs" ino=139 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1047.697558][ T7738] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.708075][ T7738] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.720748][T18244] lo speed is unknown, defaulting to 1000 [ 1047.768754][ T29] audit: type=1400 audit(2000000904.543:2026): avc: denied { getopt } for pid=18255 comm="syz.4.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1048.146097][T18244] chnl_net:caif_netlink_parms(): no params data found [ 1048.305337][ T29] audit: type=1400 audit(2000000905.039:2027): avc: denied { search } for pid=5483 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.701822][ T29] audit: type=1400 audit(2000000905.076:2028): avc: denied { read } for pid=5483 comm="dhcpcd" name="n174" dev="tmpfs" ino=9134 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1048.985865][ T29] audit: type=1400 audit(2000000905.076:2029): avc: denied { open } for pid=5483 comm="dhcpcd" path="/run/udev/data/n174" dev="tmpfs" ino=9134 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1049.072770][ T7738] erspan0: left allmulticast mode [ 1049.077958][ T7738] erspan0: left promiscuous mode [ 1049.289270][ T7738] bridge0: port 4(erspan0) entered disabled state [ 1049.303095][ T7738] bridge_slave_1: left allmulticast mode [ 1049.314121][ T7738] bridge_slave_1: left promiscuous mode [ 1049.356664][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.389861][ T5829] Bluetooth: hci1: command tx timeout [ 1050.002091][ T7738] bridge_slave_0: left promiscuous mode [ 1050.007839][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.316178][T18305] fuse: Unknown parameter 'grou00000000000000000000' [ 1050.572331][T18317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1050.728658][ T5894] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1050.907364][ T5894] usb 9-1: Using ep0 maxpacket: 16 [ 1050.933185][ T5894] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.959865][ T5894] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1050.978609][ T5894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.017307][ T5894] usb 9-1: config 0 descriptor?? [ 1051.025237][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input76 [ 1051.100065][ T7738]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.110758][ T7738]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.121606][ T7738]  (unregistering): Released all slaves [ 1051.269667][ T7738] bond0 (unregistering): Released all slaves [ 1051.309347][T18244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.316585][T18244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.323771][T18244] bridge_slave_0: entered allmulticast mode [ 1051.331385][T18244] bridge_slave_0: entered promiscuous mode [ 1051.345005][T18244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.352262][T18244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.369060][ T5174] bcm5974 9-1:0.0: could not read from device [ 1051.373812][T18244] bridge_slave_1: entered allmulticast mode [ 1051.401431][T18244] bridge_slave_1: entered promiscuous mode [ 1051.427904][ T5174] bcm5974 9-1:0.0: could not read from device [ 1051.443490][ T7738] IPVS: stopping master sync thread 11855 ... [ 1051.452654][ T5894] usb 9-1: USB disconnect, device number 15 [ 1051.475356][T18313] bcm5974 9-1:0.0: could not read from device [ 1051.585658][ T5829] Bluetooth: hci1: command tx timeout [ 1052.144246][T18334] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1052.202043][T18244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.215886][T18244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.359289][T18244] team0: Port device team_slave_0 added [ 1052.479740][T18244] team0: Port device team_slave_1 added [ 1052.604829][T18351] syz.9.2890 (18351): drop_caches: 2 [ 1052.949810][T18244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.958023][T18244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.087930][T18351] syz.9.2890 (18351): drop_caches: 2 [ 1053.127103][T18244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.187627][ T5816] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1053.191663][T18244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.213600][T18244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.244471][T18244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.315124][ T7738] hsr_slave_0: left promiscuous mode [ 1053.345473][ T7738] hsr_slave_1: left promiscuous mode [ 1053.350900][ T5816] usb 5-1: Using ep0 maxpacket: 8 [ 1053.363216][ T5816] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1053.373069][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.393215][ T7738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.400762][ T7738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.415893][ T7738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.416215][ T5816] usb 5-1: Product: syz [ 1053.428556][ T7738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.450601][ T5816] usb 5-1: Manufacturer: syz [ 1053.454106][ T7738] bridge_slave_0: left allmulticast mode [ 1053.456176][ T5816] usb 5-1: SerialNumber: syz [ 1053.483914][ T7738] veth1_macvtap: left promiscuous mode [ 1053.493556][ T7738] veth0_macvtap: left promiscuous mode [ 1053.494885][ T5816] usb 5-1: config 0 descriptor?? [ 1053.525133][ T7738] veth1_vlan: left promiscuous mode [ 1053.539354][ T7738] veth0_vlan: left promiscuous mode [ 1053.546720][ T5816] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1053.551967][T18371] fuse: Unknown parameter 'grou00000000000000000000' [ 1053.799248][ T7738] pimreg3 (unregistering): left allmulticast mode [ 1053.819056][ T5829] Bluetooth: hci1: command tx timeout [ 1054.095997][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 1054.106315][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 1054.120672][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 1054.168666][T18380] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1054.193573][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 1054.254627][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 1054.315117][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 1054.449639][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 1054.812393][ T5816] usb 5-1: USB disconnect, device number 24 [ 1055.113431][ T7738] team0 (unregistering): Port device team_slave_1 removed [ 1055.210217][ T7738] team0 (unregistering): Port device team_slave_0 removed [ 1056.032917][ T5829] Bluetooth: hci1: command tx timeout [ 1057.141801][T18409] 8021q: VLANs not supported on lo [ 1058.266933][T18425] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1058.321298][T18244] hsr_slave_0: entered promiscuous mode [ 1058.343184][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2912'. [ 1058.353172][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2912'. [ 1058.363967][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2912'. [ 1058.373279][T18244] hsr_slave_1: entered promiscuous mode [ 1058.394481][T18244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1058.412077][T18244] Cannot create hsr debugfs directory [ 1060.276921][T18451] tipc: New replicast peer: 0.0.0.0 [ 1060.284771][T18451] tipc: Enabled bearer , priority 10 [ 1060.311898][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1060.311913][ T29] audit: type=1326 audit(2000000916.264:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18452 comm="syz.8.2919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4118785d19 code=0x0 [ 1060.347724][T18460] tipc: New replicast peer: 100.1.1.0 [ 1060.607153][T18470] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1061.444906][ T29] audit: type=1400 audit(2000000917.124:2042): avc: denied { mount } for pid=18486 comm="syz.4.2924" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1061.474695][ T29] audit: type=1400 audit(2000000917.134:2043): avc: denied { mounton } for pid=18486 comm="syz.4.2924" path="/334/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1061.504242][ T29] audit: type=1400 audit(2000000917.358:2044): avc: denied { unmount } for pid=10941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1061.537040][ T5894] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1061.620257][ T7738] IPVS: stop unused estimator thread 0... [ 1061.651399][ T29] audit: type=1400 audit(2000000917.470:2045): avc: denied { create } for pid=18493 comm="syz.8.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1061.709047][ T5894] usb 10-1: Using ep0 maxpacket: 8 [ 1061.747418][ T5894] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1061.747525][ T29] audit: type=1400 audit(2000000917.470:2046): avc: denied { read } for pid=18493 comm="syz.8.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1061.765012][ T5894] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1061.784708][ T29] audit: type=1400 audit(2000000917.564:2047): avc: denied { write } for pid=18493 comm="syz.8.2926" path="socket:[58384]" dev="sockfs" ino=58384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1061.995466][ T5894] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1062.008645][ T5894] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1062.019342][ T5894] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1062.032640][ T5894] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1062.043894][ T5894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.066410][T18515] input: syz1 as /devices/virtual/input/input77 [ 1063.071513][ T29] audit: type=1400 audit(2000000918.846:2048): avc: denied { write } for pid=18514 comm="syz.4.2930" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1063.136722][ T29] audit: type=1400 audit(2000000918.846:2049): avc: denied { open } for pid=18514 comm="syz.4.2930" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1063.138123][ T5894] usb 10-1: usb_control_msg returned -32 [ 1063.225737][ T5894] usbtmc 10-1:16.0: can't read capabilities [ 1063.232642][ T29] audit: type=1400 audit(2000000918.846:2050): avc: denied { ioctl } for pid=18514 comm="syz.4.2930" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1063.654884][T18244] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1063.873910][T18244] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1063.894137][T18244] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1063.962913][T18244] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1064.093401][T18549] __nla_validate_parse: 4 callbacks suppressed [ 1064.093419][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'. [ 1064.110329][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'. [ 1064.117021][T18244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.124998][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'. [ 1064.143311][T18553] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1064.158252][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'. [ 1064.160536][T18244] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.189570][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'. [ 1064.211533][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'. [ 1064.221434][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.228515][ T7738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.246421][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.253561][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.557802][T18244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.847439][T18590] bond_slave_0: entered promiscuous mode [ 1064.853786][T18590] bond_slave_1: entered promiscuous mode [ 1064.872712][T18590] bond_slave_0: left promiscuous mode [ 1064.878403][T18590] bond_slave_1: left promiscuous mode [ 1064.905642][T18244] veth0_vlan: entered promiscuous mode [ 1064.919111][T18244] veth1_vlan: entered promiscuous mode [ 1064.961984][T18244] veth0_macvtap: entered promiscuous mode [ 1065.006088][T18244] veth1_macvtap: entered promiscuous mode [ 1065.142514][ T5894] usb 10-1: USB disconnect, device number 17 [ 1065.916185][T18244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.965233][T18244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.000252][T18244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.010861][T18244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.020856][T18244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.032367][T18244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.042728][T18244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.053192][T18244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.063062][T18244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.073550][T18244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.084308][T18244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.158680][T18244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.179207][T18244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.240575][T18244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.272884][T18244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.282761][T18244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.310318][T18244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.326774][T18244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.338072][T18244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.354281][T18244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.382409][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1066.382426][ T29] audit: type=1400 audit(2000000921.942:2052): avc: denied { sys_chroot } for pid=18614 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1066.411645][ T29] audit: type=1400 audit(2000000921.942:2053): avc: denied { setgid } for pid=18614 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1067.061207][T18244] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.108344][ T29] audit: type=1400 audit(2000000921.942:2054): avc: denied { setrlimit } for pid=18614 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 1067.197645][T18244] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.206604][T18244] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.213269][ T29] audit: type=1400 audit(2000000922.690:2055): avc: denied { read write } for pid=18630 comm="syz.4.2951" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1067.215371][T18244] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.319291][ T29] audit: type=1400 audit(2000000922.690:2056): avc: denied { open } for pid=18630 comm="syz.4.2951" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1067.406451][ T8011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.415390][ T8011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.473265][ T29] audit: type=1400 audit(2000000922.971:2057): avc: denied { append } for pid=18639 comm="syz.8.2954" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1067.537323][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.545533][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.596431][ T29] audit: type=1400 audit(2000000923.083:2058): avc: denied { mounton } for pid=18244 comm="syz-executor" path="/root/syzkaller.pvOSMQ/syz-tmp" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1067.651130][ T29] audit: type=1400 audit(2000000923.083:2059): avc: denied { mounton } for pid=18244 comm="syz-executor" path="/root/syzkaller.pvOSMQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1067.711391][ T29] audit: type=1400 audit(2000000923.083:2060): avc: denied { mounton } for pid=18244 comm="syz-executor" path="/root/syzkaller.pvOSMQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=58904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1067.791181][ T29] audit: type=1400 audit(2000000923.176:2061): avc: denied { mounton } for pid=18244 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1067.910094][T18653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2956'. [ 1067.919830][T18653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2956'. [ 1067.929974][T18653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2956'. [ 1067.938906][T18653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2956'. [ 1067.950872][T18662] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1068.227086][T18679] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1068.300094][T18682] input: syz0 as /devices/virtual/input/input78 [ 1068.379335][ T5864] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1068.570216][T18698] fuse: Bad value for 'fd' [ 1068.661582][ T5864] usb 10-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1068.671243][ T5864] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.699272][ T5864] usb 10-1: Product: syz [ 1068.709946][ T5864] usb 10-1: Manufacturer: syz [ 1068.722480][ T5864] usb 10-1: SerialNumber: syz [ 1068.731291][ T5894] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1068.751117][ T5864] usb 10-1: config 0 descriptor?? [ 1068.826247][T18711] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1068.909981][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1068.923059][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.785962][T18711] fuse: Bad value for 'fd' [ 1069.869150][ T5894] usb 6-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1069.878443][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.890989][ T5864] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1069.910325][ T5864] asix 10-1:0.0: probe with driver asix failed with error -32 [ 1069.921451][ T5894] usb 6-1: config 0 descriptor?? [ 1069.982949][ T5864] usb 10-1: USB disconnect, device number 18 [ 1070.255993][T18737] pimreg: entered allmulticast mode [ 1070.450897][ T5894] smartjoyplus 0003:0B43:0003.000C: unknown main item tag 0x0 [ 1070.540238][ T5894] smartjoyplus 0003:0B43:0003.000C: unknown main item tag 0x0 [ 1070.664399][ T5894] smartjoyplus 0003:0B43:0003.000C: unknown main item tag 0x0 [ 1070.808446][ T5894] smartjoyplus 0003:0B43:0003.000C: unknown main item tag 0x0 [ 1070.823342][ T5894] smartjoyplus 0003:0B43:0003.000C: unknown main item tag 0x0 [ 1070.840968][ T5894] smartjoyplus 0003:0B43:0003.000C: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.5-1/input0 [ 1070.852982][ T5894] smartjoyplus 0003:0B43:0003.000C: no output reports found [ 1070.867923][ T5894] usb 6-1: USB disconnect, device number 4 [ 1073.110896][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1073.110907][ T29] audit: type=1400 audit(2000000928.246:2080): avc: denied { read } for pid=18778 comm="syz.5.2986" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1073.608664][ T29] audit: type=1400 audit(2000000928.686:2081): avc: denied { create } for pid=18793 comm="syz.5.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1073.630742][ T29] audit: type=1400 audit(2000000928.686:2082): avc: denied { listen } for pid=18793 comm="syz.5.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1073.660409][T18799] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1073.712964][ T29] audit: type=1400 audit(2000000928.686:2083): avc: denied { accept } for pid=18793 comm="syz.5.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1073.760531][ T29] audit: type=1400 audit(2000000928.686:2084): avc: denied { write } for pid=18793 comm="syz.5.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1073.896332][T18798] __nla_validate_parse: 8 callbacks suppressed [ 1073.896349][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1073.922445][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1073.949402][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1073.958469][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1074.009134][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1074.022153][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1074.279922][ T5894] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1074.451067][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 1074.464666][ T5894] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1074.473993][ T5894] usb 1-1: config 0 has no interface number 0 [ 1074.480139][ T5894] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1074.495413][T18837] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1074.513916][ T5894] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1074.529808][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.574988][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2997'. [ 1074.599380][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2997'. [ 1074.629674][ T5894] usb 1-1: config 0 descriptor?? [ 1074.968137][ T5894] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1074.973149][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2997'. [ 1074.997851][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2997'. [ 1075.041229][ T29] audit: type=1400 audit(2000000930.033:2085): avc: denied { mounton } for pid=18843 comm="syz.9.2998" path="/proc/1591/task" dev="proc" ino=59696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1075.099910][ T5894] usb 1-1: USB disconnect, device number 23 [ 1075.143407][T18847] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1075.363153][T18824] xt_hashlimit: invalid rate [ 1076.021058][ T29] audit: type=1326 audit(2000000930.959:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.0.3002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8efb85d19 code=0x0 [ 1076.091745][T18861] fuse: Bad value for 'fd' [ 1076.739119][ T5894] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1076.920435][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 1076.942160][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 1076.973738][ T5894] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 1076.994761][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.016365][ T5894] usb 6-1: config 0 descriptor?? [ 1077.016678][ T5816] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1077.187852][ T5816] usb 10-1: Using ep0 maxpacket: 8 [ 1077.205585][ T5816] usb 10-1: config 16 has an invalid interface number: 91 but max is 0 [ 1077.214123][ T5816] usb 10-1: config 16 has no interface number 0 [ 1077.231733][ T5816] usb 10-1: config 16 interface 91 has no altsetting 0 [ 1077.293873][ T5816] usb 10-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=62.4a [ 1077.333537][ T5816] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.627812][ T5816] usb 10-1: string descriptor 0 read error: -71 [ 1077.633905][T18900] lo speed is unknown, defaulting to 1000 [ 1077.655079][ T5816] usb 10-1: USB disconnect, device number 19 [ 1077.697433][ T5894] aquacomputer_d5next 0003:0C70:F00E.000D: unknown main item tag 0xd [ 1077.711212][ T5894] aquacomputer_d5next 0003:0C70:F00E.000D: item fetching failed at offset 10/11 [ 1077.730209][ T5894] aquacomputer_d5next 0003:0C70:F00E.000D: probe with driver aquacomputer_d5next failed with error -22 [ 1077.743474][ T117] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1077.797101][ T5864] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1077.913348][ T5894] usb 6-1: USB disconnect, device number 5 [ 1077.936367][ T117] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1077.945980][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.967298][ T117] usb 1-1: config 0 descriptor?? [ 1077.984484][ T117] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1078.059304][ T5864] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1078.071639][ T5864] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.096043][ T5864] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.106421][ T5864] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1078.171532][ T5864] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1078.181065][ T5864] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1078.214016][ T5864] usb 9-1: Manufacturer: syz [ 1078.256251][ T5864] usb 9-1: config 0 descriptor?? [ 1078.330832][ T29] audit: type=1400 audit(2000000933.120:2087): avc: denied { map } for pid=18930 comm="syz.9.3014" path="/dev/sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1078.449793][ T117] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1078.461402][ T29] audit: type=1400 audit(2000000933.120:2088): avc: denied { execute } for pid=18930 comm="syz.9.3014" path="/dev/sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1078.719466][ T5864] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 1078.752421][ T5864] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 1078.802486][ T5864] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1078.879337][ T117] gspca_cpia1: usb_control_msg 02, error -71 [ 1078.885570][ T117] gspca_cpia1: usb_control_msg 05, error -71 [ 1078.891774][ T117] cpia1 1-1:0.0: unexpected systemstate: 00 [ 1078.908962][ T117] usb 1-1: USB disconnect, device number 24 [ 1079.050352][ T5864] usb 9-1: USB disconnect, device number 16 [ 1079.422038][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1079.636058][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1079.653523][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1079.672166][ T9] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1079.689903][ T29] audit: type=1400 audit(2000000934.383:2089): avc: denied { bind } for pid=18983 comm="syz.9.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1079.723853][ T9] usb 6-1: Product: syz [ 1079.730678][ T9] usb 6-1: Manufacturer: syz [ 1079.742464][ T9] usb 6-1: SerialNumber: syz [ 1079.745382][ T29] audit: type=1400 audit(2000000934.383:2090): avc: denied { name_bind } for pid=18983 comm="syz.9.3025" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1079.769588][ T9] usb 6-1: config 0 descriptor?? [ 1079.770957][ T29] audit: type=1400 audit(2000000934.383:2091): avc: denied { node_bind } for pid=18983 comm="syz.9.3025" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 1079.795725][ T29] audit: type=1400 audit(2000000934.383:2092): avc: denied { connect } for pid=18983 comm="syz.9.3025" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1079.816680][ T29] audit: type=1400 audit(2000000934.383:2093): avc: denied { name_connect } for pid=18983 comm="syz.9.3025" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1079.999197][ T5864] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1080.073338][ T9] usb 6-1: USB disconnect, device number 6 [ 1080.182328][ T5864] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1080.194230][ T5864] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.240538][ T5864] usb 9-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1080.249874][ T5864] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.260630][ T5864] usb 9-1: config 0 descriptor?? [ 1080.702377][ T5864] smartjoyplus 0003:0B43:0003.000F: unbalanced collection at end of report description [ 1080.715197][ T5864] smartjoyplus 0003:0B43:0003.000F: parse failed [ 1080.722065][ T5864] smartjoyplus 0003:0B43:0003.000F: probe with driver smartjoyplus failed with error -22 [ 1080.931442][ T29] audit: type=1400 audit(2000000935.561:2094): avc: denied { read } for pid=19031 comm="syz.5.3030" path="socket:[60432]" dev="sockfs" ino=60432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1080.971487][T18723] usb 9-1: USB disconnect, device number 17 [ 1081.114344][T19047] input: syz1 as /devices/virtual/input/input81 [ 1082.746928][ T5864] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1082.966137][ T5864] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.998774][ T5864] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1083.080207][ T29] audit: type=1400 audit(2000000937.563:2095): avc: denied { create } for pid=19103 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1083.100096][ T29] audit: type=1400 audit(2000000937.572:2096): avc: denied { bind } for pid=19103 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1083.119605][ T29] audit: type=1400 audit(2000000937.582:2097): avc: denied { write } for pid=19103 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1083.139209][ T5864] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1083.148675][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.156761][ T5864] usb 1-1: Product: syz [ 1083.160930][ T5864] usb 1-1: Manufacturer: syz [ 1083.165636][ T5864] usb 1-1: SerialNumber: syz [ 1083.511534][T19076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1083.987401][T18723] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1084.168691][T18723] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.200777][T18723] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.219884][T18723] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1084.254944][T18723] usb 9-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 1084.291588][T19076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1084.371041][T18723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.562052][T18723] usb 9-1: config 0 descriptor?? [ 1084.579137][ T5864] cdc_mbim 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1084.587780][ T5864] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1084.595387][ T5864] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 1084.801568][ T5864] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 1084.850640][ T5864] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 1084.909695][ T5864] wwan wwan0: port wwan0mbim0 attached [ 1084.948936][ T5864] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42 [ 1085.031419][ T5864] usb 1-1: USB disconnect, device number 25 [ 1085.038135][ T5864] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 1085.073668][T19156] fuse: Bad value for 'rootmode' [ 1085.168663][T18723] lenovo 0003:17EF:6009.0010: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.8-1/input0 [ 1085.170067][ T5864] wwan wwan0: port wwan0mbim0 disconnected [ 1085.598247][ T5816] usb 9-1: USB disconnect, device number 18 [ 1085.746014][T19170] sctp: [Deprecated]: syz.4.3060 (pid 19170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1085.746014][T19170] Use struct sctp_sack_info instead [ 1085.832139][T19177] __nla_validate_parse: 2 callbacks suppressed [ 1085.832155][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3063'. [ 1085.897277][ T29] audit: type=1326 audit(2000000940.201:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19182 comm="syz.4.3065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879af85d19 code=0x0 [ 1085.985398][ T29] audit: type=1400 audit(2000000940.285:2099): avc: denied { name_bind } for pid=19189 comm="syz.9.3066" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1086.007482][T18723] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1086.170625][T18723] usb 6-1: Using ep0 maxpacket: 32 [ 1086.182285][T18723] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1086.319493][T18723] usb 6-1: config 0 has no interface number 0 [ 1086.365026][T18723] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1086.403736][T18723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.521092][T18723] usb 6-1: Product: syz [ 1086.581162][T18723] usb 6-1: Manufacturer: syz [ 1086.624850][T18723] usb 6-1: SerialNumber: syz [ 1086.654125][T18723] usb 6-1: config 0 descriptor?? [ 1086.672219][T18723] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1086.687260][ T29] audit: type=1400 audit(2000000940.940:2100): avc: denied { map } for pid=19207 comm="syz.9.3069" path="socket:[60336]" dev="sockfs" ino=60336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1086.755024][ T29] audit: type=1400 audit(2000000940.940:2101): avc: denied { read } for pid=19207 comm="syz.9.3069" path="socket:[60336]" dev="sockfs" ino=60336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1086.901862][T18723] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1086.944578][T18723] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1087.003035][ T29] audit: type=1400 audit(2000000941.230:2102): avc: denied { create } for pid=19220 comm="syz.0.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1087.064881][ T29] audit: type=1400 audit(2000000941.267:2103): avc: denied { getopt } for pid=19220 comm="syz.0.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1087.153880][T19172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.179715][T19172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.238390][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 144 [ 1087.589923][T18723] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1087.620246][ T29] audit: type=1400 audit(2000000941.810:2104): avc: denied { write } for pid=19247 comm="syz.4.3077" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1087.661153][T19248] loop6: detected capacity change from 0 to 524287999 [ 1087.668349][ T29] audit: type=1400 audit(2000000941.856:2105): avc: denied { append } for pid=19247 comm="syz.4.3077" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1087.684890][ T5864] usb 6-1: USB disconnect, device number 7 [ 1087.692414][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1087.715980][ C0] blk_print_req_error: 92 callbacks suppressed [ 1087.715992][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1087.731412][ C0] buffer_io_error: 90 callbacks suppressed [ 1087.731420][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1087.746714][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1087.747455][ T5864] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1087.755927][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1087.794080][ T5864] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1087.805788][ T5864] quatech2 6-1:0.51: device disconnected [ 1087.808061][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1087.820546][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1087.851099][T18723] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.866153][T19251] loop6: detected capacity change from 524287999 to 524287952 [ 1087.898925][T18723] usb 9-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.011334][T18723] usb 9-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.032437][T19253] Invalid logical block size (3) [ 1088.063631][T19248] loop6: unable to read partition table [ 1088.085825][T18723] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1088.122844][T19248] loop_reread_partitions: partition scan of loop6 (Ǵ8CP'OQ=}m=@4r(Uk+Z 4>F1ԙ1) failed (rc=-5) [ 1088.166955][T18723] usb 9-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1088.176613][T18723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.195996][T18723] usb 9-1: config 0 descriptor?? [ 1088.685462][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3080'. [ 1088.699256][ T29] audit: type=1400 audit(2000000942.810:2106): avc: denied { unlink } for pid=19265 comm="syz.0.3079" name="#21" dev="tmpfs" ino=3509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1088.730310][ T29] audit: type=1400 audit(2000000942.810:2107): avc: denied { setopt } for pid=19270 comm="syz.5.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1088.871923][T18723] zeroplus 0003:0C12:0005.0011: item fetching failed at offset 1/5 [ 1088.891271][T18723] zeroplus 0003:0C12:0005.0011: parse failed [ 1088.898962][T18723] zeroplus 0003:0C12:0005.0011: probe with driver zeroplus failed with error -22 [ 1089.579431][ T5816] usb 9-1: USB disconnect, device number 19 [ 1089.837272][T19293] fuse: Unknown parameter 'use00000000000000000000' [ 1089.950018][T19310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1090.049238][T19318] sg_write: data in/out 91/2 bytes for SCSI command 0x0-- guessing data in; [ 1090.049238][T19318] program syz.9.3093 not setting count and/or reply_len properly [ 1090.105511][T19320] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1090.227336][T19325] fuse: Bad value for 'fd' [ 1091.698783][T19357] input: syz0 as /devices/virtual/input/input82 [ 1091.959791][T19365] input: syz0 as /devices/virtual/input/input83 [ 1092.062370][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1092.062385][ T29] audit: type=1400 audit(2000000945.972:2110): avc: denied { read } for pid=19366 comm="syz.0.3105" lport=57709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1092.176308][ T29] audit: type=1400 audit(2000000946.000:2111): avc: denied { ioctl } for pid=19368 comm="syz.9.3102" path="socket:[61086]" dev="sockfs" ino=61086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1092.247825][T19381] fuse: Bad value for 'fd' [ 1092.343181][ T29] audit: type=1400 audit(2000000946.234:2112): avc: denied { shutdown } for pid=19380 comm="syz.5.3109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1092.412896][ T29] audit: type=1400 audit(2000000946.271:2113): avc: denied { write } for pid=19389 comm="syz.4.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1093.169013][ T29] audit: type=1400 audit(2000000947.001:2114): avc: denied { ioctl } for pid=19418 comm="syz.0.3117" path="mnt:[4026532848]" dev="nsfs" ino=4026532848 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1093.400253][ T29] audit: type=1400 audit(2000000947.226:2115): avc: denied { connect } for pid=19423 comm="syz.0.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1093.640890][ T5816] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 1093.771456][ T29] audit: type=1400 audit(2000000947.572:2116): avc: denied { name_bind } for pid=19445 comm="syz.8.3122" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1093.826026][ T5816] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1093.836931][ T5816] usb 5-1: config 0 has no interface number 0 [ 1093.843066][ T5816] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1093.857743][ T5816] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1093.870441][ T5816] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1093.890863][ T5816] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1093.918641][ T5816] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1093.939830][ T5816] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1093.955869][ T5816] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1093.967265][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.987300][ T5816] usb 5-1: config 0 descriptor?? [ 1093.993562][T19425] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1094.000817][T19425] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1094.020692][ T5816] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1094.218665][ T29] audit: type=1400 audit(2000000947.993:2117): avc: denied { watch_reads } for pid=19469 comm="syz.9.3127" path="/487" dev="tmpfs" ino=2632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1094.428424][ T29] audit: type=1400 audit(2000000948.180:2118): avc: denied { watch watch_reads } for pid=19474 comm="syz.9.3128" path="/proc/1698/net" dev="proc" ino=61628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1094.689330][ T117] usb 5-1: USB disconnect, device number 25 [ 1094.705088][ T117] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1095.145335][ T29] audit: type=1400 audit(2000000948.853:2119): avc: denied { listen } for pid=19515 comm="syz.8.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1097.397694][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3150'. [ 1097.459068][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3150'. [ 1097.591127][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3150'. [ 1097.660977][T19584] random: crng reseeded on system resumption [ 1097.671286][T19568] xt_hashlimit: invalid rate [ 1097.676004][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1097.676017][ T29] audit: type=1400 audit(2000000951.210:2125): avc: denied { write } for pid=19583 comm="syz.9.3151" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1097.707629][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3150'. [ 1097.757298][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3150'. [ 1097.810182][ T29] audit: type=1400 audit(2000000951.210:2126): avc: denied { open } for pid=19583 comm="syz.9.3151" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1097.811681][T19579] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1098.227123][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3150'. [ 1098.372446][T19579] fuse: Bad value for 'fd' [ 1098.523216][T19599] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1098.640806][ T29] audit: type=1400 audit(2000000952.127:2127): avc: denied { watch watch_reads } for pid=19600 comm="syz.5.3156" path="pipe:[62533]" dev="pipefs" ino=62533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1098.793574][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3158'. [ 1098.802484][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3158'. [ 1098.805383][T19609] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1098.836035][ T29] audit: type=1400 audit(2000000952.305:2128): avc: denied { getopt } for pid=19611 comm="syz.9.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1098.879031][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3158'. [ 1098.888097][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3158'. [ 1098.897058][ T117] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1099.081978][ T117] usb 5-1: Using ep0 maxpacket: 8 [ 1099.101605][ T117] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1099.110845][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1099.141355][ T117] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1099.164337][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1099.197144][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1099.217317][ T117] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1099.231644][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1099.255210][ T117] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1099.275232][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1099.291976][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1099.304288][ T117] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1099.314549][ T29] audit: type=1400 audit(2000000952.754:2129): avc: denied { create } for pid=19634 comm="syz.0.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1099.338582][ T5816] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1099.345878][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1099.357605][ T5894] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1099.386848][ T117] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1099.403204][ T29] audit: type=1400 audit(2000000952.754:2130): avc: denied { write } for pid=19634 comm="syz.0.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1099.413311][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1099.432634][T19638] fuse: Bad value for 'fd' [ 1099.450889][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1099.464714][ T5864] IPVS: starting estimator thread 0... [ 1099.470476][T19631] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1099.491642][ T117] usb 5-1: string descriptor 0 read error: -22 [ 1099.498696][ T117] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1099.509525][ T117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.513239][ T5816] usb 10-1: Using ep0 maxpacket: 8 [ 1099.524479][ T5816] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1099.535209][ T5816] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1099.563128][T19639] IPVS: using max 34 ests per chain, 81600 per kthread [ 1099.563267][ T117] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1099.577555][ T5894] usb 9-1: Using ep0 maxpacket: 8 [ 1099.578923][ T5816] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1099.608632][ T5894] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.608961][ T5816] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1099.618878][ T5894] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1099.618906][ T5894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.651716][ T5894] usb 9-1: config 0 descriptor?? [ 1099.671330][ T5894] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1099.701626][ T5816] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1099.718128][ T5816] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.729961][ T29] audit: type=1400 audit(2000000953.147:2131): avc: denied { listen } for pid=19643 comm="syz.5.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1099.778671][ T29] audit: type=1400 audit(2000000953.147:2132): avc: denied { accept } for pid=19643 comm="syz.5.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1099.854629][ T29] audit: type=1400 audit(2000000953.184:2133): avc: denied { watch } for pid=19646 comm="syz.0.3174" path="/667/file0" dev="tmpfs" ino=3623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1099.909006][ T9] usb 5-1: USB disconnect, device number 26 [ 1099.919774][ T29] audit: type=1400 audit(2000000953.184:2134): avc: denied { watch_sb } for pid=19646 comm="syz.0.3174" path="/667/file0" dev="tmpfs" ino=3623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1099.956943][T19650] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1099.987182][ T5816] usb 10-1: usb_control_msg returned -32 [ 1100.009318][ T5816] usbtmc 10-1:16.0: can't read capabilities [ 1100.288938][T19596] adutux: No device or device unplugged -19 [ 1101.405841][ T5894] gspca_vc032x: reg_w err -71 [ 1101.411362][ T5894] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 1101.778838][ T5894] usb 9-1: USB disconnect, device number 20 [ 1102.323683][ T117] usb 10-1: USB disconnect, device number 20 [ 1102.332619][T19686] binder: 19685:19686 ioctl c0306201 200002c0 returned -14 [ 1103.487123][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1103.585345][T19718] __nla_validate_parse: 14 callbacks suppressed [ 1103.585364][T19718] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3195'. [ 1103.617618][T19718] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3195'. [ 1103.630002][T19718] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3195'. [ 1103.640787][T19718] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3195'. [ 1103.681251][T19719] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1103.688488][T19718] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3195'. [ 1103.697998][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1103.713312][T19718] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3195'. [ 1103.713367][ T9] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1103.730766][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.754038][ T9] usb 9-1: config 0 has no interface number 0 [ 1103.760157][ T9] usb 9-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1103.814566][ T9] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1103.839418][ T9] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1103.860394][ T8011] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.876250][ T9] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1103.892828][ T9] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1103.903209][ T9] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1103.935683][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.963921][ T9] usb 9-1: config 0 descriptor?? [ 1104.066954][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1104.066969][ T29] audit: type=1400 audit(2000000957.206:2144): avc: denied { ioctl } for pid=19729 comm="syz.9.3201" path="socket:[62134]" dev="sockfs" ino=62134 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1104.067163][ T8011] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.118252][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3200'. [ 1104.132138][T19733] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1104.139710][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3200'. [ 1104.165200][T19731] @: renamed from vlan0 (while UP) [ 1104.170490][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3200'. [ 1104.189312][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3200'. [ 1104.244907][ T9] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input84 [ 1104.304117][ T8011] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.369092][ T29] audit: type=1400 audit(2000000957.459:2145): avc: denied { create } for pid=19737 comm="syz.0.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1104.454430][ T29] audit: type=1400 audit(2000000957.534:2146): avc: denied { read } for pid=19737 comm="syz.0.3204" path="socket:[62848]" dev="sockfs" ino=62848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1104.497698][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1104.514435][ T5894] usb 9-1: USB disconnect, device number 21 [ 1104.530312][ T5174] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 1104.552961][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1104.563521][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1104.575129][ T29] audit: type=1400 audit(2000000957.534:2147): avc: denied { write } for pid=19737 comm="syz.0.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1104.575138][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1104.619715][ T117] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1104.631524][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1104.638849][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1104.664490][T19750] fuse: Unknown parameter '0x0000000000000007' [ 1104.728159][ T8011] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.751820][ T29] audit: type=1400 audit(2000000957.842:2148): avc: denied { setopt } for pid=19751 comm="syz.4.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1104.803973][ T117] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.815240][ T117] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.839753][ T117] usb 10-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1104.876307][ T117] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.887902][ T54] Bluetooth: hci3: sending frame failed (-49) [ 1104.896138][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 1104.919686][ T117] usb 10-1: config 0 descriptor?? [ 1105.017522][T19743] lo speed is unknown, defaulting to 1000 [ 1105.159913][ T8011] bridge_slave_1: left allmulticast mode [ 1105.189724][ T8011] bridge_slave_1: left promiscuous mode [ 1105.195461][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.868442][ T117] zydacron 0003:13EC:0006.0012: item fetching failed at offset 1/5 [ 1105.876805][ T117] zydacron 0003:13EC:0006.0012: parse failed [ 1105.883034][ T117] zydacron 0003:13EC:0006.0012: probe with driver zydacron failed with error -22 [ 1105.957603][ T8011] bridge_slave_0: left allmulticast mode [ 1105.963393][ T8011] bridge_slave_0: left promiscuous mode [ 1105.984359][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.140093][T18723] usb 10-1: USB disconnect, device number 21 [ 1106.475665][ T8011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1106.486061][ T8011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1106.496145][ T8011] bond0 (unregistering): Released all slaves [ 1106.875483][ T5829] Bluetooth: hci1: command tx timeout [ 1107.011648][ T29] audit: type=1400 audit(2000000959.956:2149): avc: denied { bind } for pid=19799 comm="syz.9.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1107.060642][T19743] chnl_net:caif_netlink_parms(): no params data found [ 1107.136839][T19806] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1109.193319][ T5829] Bluetooth: hci1: command tx timeout [ 1109.292095][T19743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.309276][T19743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.334451][T19743] bridge_slave_0: entered allmulticast mode [ 1109.341081][T19743] bridge_slave_0: entered promiscuous mode [ 1109.398254][ T8011] hsr_slave_0: left promiscuous mode [ 1109.416176][ T8011] hsr_slave_1: left promiscuous mode [ 1109.439606][ T8011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.454297][ T8011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.462769][ T8011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.470212][ T8011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.497190][ T8011] veth1_macvtap: left promiscuous mode [ 1109.502847][ T8011] veth0_macvtap: left promiscuous mode [ 1109.508908][ T8011] veth1_vlan: left promiscuous mode [ 1109.514335][ T8011] veth0_vlan: left promiscuous mode [ 1109.601792][ T29] audit: type=1400 audit(2000000962.370:2150): avc: denied { setopt } for pid=19863 comm="syz.9.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1109.676539][ T5816] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1109.934077][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.945194][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.955204][ T5816] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1109.964415][ T5816] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.991718][ T5816] usb 9-1: config 0 descriptor?? [ 1111.097213][ T8011] team0 (unregistering): Port device team_slave_1 removed [ 1111.167194][ T8011] team0 (unregistering): Port device team_slave_0 removed [ 1111.302501][ T5816] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #200: -71 [ 1111.311407][ T5816] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 1111.319984][ T5816] uclogic 0003:256C:006D.0013: failed probing pen v2 parameters: -71 [ 1111.328485][ T5816] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 1111.336340][ T5816] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 1111.355042][ T5816] usb 9-1: USB disconnect, device number 22 [ 1111.373933][ T5829] Bluetooth: hci1: command tx timeout [ 1111.419009][ T9] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1111.594518][ T9] usb 10-1: config 0 has no interfaces? [ 1111.605129][ T9] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1111.614745][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.623158][ T9] usb 10-1: Product: syz [ 1111.627525][ T9] usb 10-1: Manufacturer: syz [ 1111.632420][ T9] usb 10-1: SerialNumber: syz [ 1111.638892][ T9] usb 10-1: config 0 descriptor?? [ 1111.814132][T19743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.822520][T19743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.835165][T19743] bridge_slave_1: entered allmulticast mode [ 1111.842651][T19743] bridge_slave_1: entered promiscuous mode [ 1111.921035][ T5816] usb 10-1: USB disconnect, device number 22 [ 1111.959460][T19884] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1111.994442][T19743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.020250][T19743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.095676][T19743] team0: Port device team_slave_0 added [ 1112.115619][T19743] team0: Port device team_slave_1 added [ 1112.187534][ T29] audit: type=1400 audit(2000000964.792:2151): avc: denied { validate_trans } for pid=19887 comm="syz.0.3242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1112.210657][T19743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.220990][T19743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.306338][T19743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.344391][T19743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.349092][T19893] __nla_validate_parse: 3 callbacks suppressed [ 1112.349107][T19893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1112.358718][T19896] input: syz0 as /devices/virtual/input/input85 [ 1112.379348][T19743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.411157][T19898] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1112.449599][T19893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1112.467041][T19743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.558766][T19893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1112.591534][T19893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1112.608908][T19893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1112.613879][ T29] audit: type=1400 audit(2000000965.195:2152): avc: denied { create } for pid=19904 comm="syz.9.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1112.642916][T19893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1112.663048][T19743] hsr_slave_0: entered promiscuous mode [ 1112.678909][ T29] audit: type=1400 audit(2000000965.195:2153): avc: denied { connect } for pid=19904 comm="syz.9.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1112.699585][T19743] hsr_slave_1: entered promiscuous mode [ 1112.709335][T19743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1112.723202][T19743] Cannot create hsr debugfs directory [ 1112.762131][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1112.773104][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1112.784331][ T8011] IPVS: stop unused estimator thread 0... [ 1112.824250][ T29] audit: type=1400 audit(2000000965.195:2154): avc: denied { read } for pid=19904 comm="syz.9.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1112.901719][ T29] audit: type=1400 audit(2000000965.241:2155): avc: denied { write } for pid=19904 comm="syz.9.3246" path="socket:[63576]" dev="sockfs" ino=63576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1113.003066][ T29] audit: type=1326 audit(2000000965.559:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19918 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879af85d19 code=0x7ffc0000 [ 1113.100130][ T29] audit: type=1326 audit(2000000965.587:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19918 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879af85d19 code=0x7ffc0000 [ 1113.181862][ T29] audit: type=1326 audit(2000000965.597:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19918 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f879af85d19 code=0x7ffc0000 [ 1113.262955][ T29] audit: type=1326 audit(2000000965.597:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19918 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879af85d19 code=0x7ffc0000 [ 1113.268646][T19929] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1113.617264][ T5829] Bluetooth: hci1: command tx timeout [ 1113.960221][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3257'. [ 1114.194561][T19952] 9pnet: p9_errstr2errno: server reported unknown error [ 1114.410000][T19966] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1114.470048][T19971] 9pnet: p9_errstr2errno: server reported unknown error @:d.o^$h94Y½JSjp [ 1115.133775][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1115.133791][ T29] audit: type=1400 audit(2000000967.552:2174): avc: denied { write } for pid=19988 comm="syz.0.3270" lport=44553 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1115.203814][ T29] audit: type=1400 audit(2000000967.589:2175): avc: denied { setopt } for pid=19988 comm="syz.0.3270" lport=44553 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1115.338640][T19743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1115.360415][T19999] netlink: 'syz.0.3273': attribute type 1 has an invalid length. [ 1115.371877][T19743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1115.397848][T19999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1115.405305][T19743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1115.443651][T19743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1115.449986][ T29] audit: type=1400 audit(2000000967.851:2176): avc: denied { read } for pid=20004 comm="syz.4.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1115.530658][T19999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1115.632036][T19999] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1115.670084][T19999] bond1: (slave ip6gre2): Error -95 calling set_mac_address [ 1115.832173][T19743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.885006][T19743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.913410][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.920572][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.962304][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.969481][ T6277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.208736][ T5816] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1116.219544][T19743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.228202][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3283'. [ 1116.253476][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3283'. [ 1116.273150][T19743] veth0_vlan: entered promiscuous mode [ 1116.284281][T19743] veth1_vlan: entered promiscuous mode [ 1116.333584][T19743] veth0_macvtap: entered promiscuous mode [ 1116.346151][T19743] veth1_macvtap: entered promiscuous mode [ 1116.371909][ T5816] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.376497][T19743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.390381][ T5816] usb 10-1: config 0 has no interfaces? [ 1116.399780][ T5816] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1116.415859][ T5816] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.426541][ T5816] usb 10-1: config 0 descriptor?? [ 1116.471128][T19743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.488266][T19743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.499124][T19743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.509056][T19743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.523353][T19743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.535650][T19743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.547946][T19743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.558299][T19743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.569168][T19743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.580497][T19743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.591142][T19743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.601899][T19743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.631753][T19743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.642256][T19743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.654986][T19743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.666376][T19743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.689356][T19743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.699795][T19743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.723744][T19743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.747988][T19743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.757340][T19743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.767066][T19743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.777024][T19743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.928046][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.958123][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.009819][ T29] audit: type=1400 audit(2000000969.301:2177): avc: denied { unmount } for pid=10941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1117.041694][T18055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.069422][T18055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.088361][ T29] audit: type=1400 audit(2000000969.366:2178): avc: denied { append } for pid=20072 comm="syz.8.3290" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1117.326306][ T5816] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1117.556639][ T9] usb 10-1: USB disconnect, device number 23 [ 1117.568946][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 1117.578237][ T5816] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1117.613421][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.645252][ T5816] usb 1-1: config 0 descriptor?? [ 1117.831008][ T29] audit: type=1400 audit(2000000970.077:2179): avc: denied { create } for pid=20093 comm="syz.8.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1117.899127][ T29] audit: type=1400 audit(2000000970.077:2180): avc: denied { sys_admin } for pid=20093 comm="syz.8.3295" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1117.921608][ T5816] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1118.169874][T20095] lo speed is unknown, defaulting to 1000 [ 1118.541444][ T5894] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1118.710961][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 1118.725710][ T52] Bluetooth: hci3: Frame reassembly failed (-84) [ 1118.731604][ T5894] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1118.747153][ T5894] usb 4-1: config 0 has no interface number 0 [ 1118.752838][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1118.754325][ T5894] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1118.794514][ T5894] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1118.808964][T20138] netlink: 176 bytes leftover after parsing attributes in process `syz.8.3303'. [ 1118.823422][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.850695][ T5894] usb 4-1: Product: syz [ 1118.868549][ T5894] usb 4-1: Manufacturer: syz [ 1118.876810][ T5894] usb 4-1: SerialNumber: syz [ 1118.925651][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.941458][ T9] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1118.951749][ T5894] usb 4-1: config 0 descriptor?? [ 1118.958513][T20114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1118.969966][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.978089][ T5894] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1118.978120][ T5894] em28xx 4-1:0.132: Video interface 132 found: bulk [ 1119.004903][ T9] usb 5-1: config 0 descriptor?? [ 1119.026897][ T5816] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1119.044400][ T5816] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1119.055489][ T5816] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1119.073193][ T5816] usb 1-1: USB disconnect, device number 26 [ 1119.416510][ T5894] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1119.445088][ T9] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 1119.455397][ T9] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 1119.465282][ T9] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 1119.475044][ T9] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 1119.484802][ T9] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 1119.496467][ T9] elecom 0003:056E:00FB.0014: hidraw0: USB HID v0.00 Device [HID 056e:00fb] on usb-dummy_hcd.4-1/input0 [ 1119.669666][ T9] usb 5-1: USB disconnect, device number 27 [ 1119.832129][ T29] audit: type=1400 audit(2000000971.939:2181): avc: denied { connect } for pid=20177 comm="syz.8.3308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1119.907368][ T29] audit: type=1400 audit(2000000971.939:2182): avc: denied { setopt } for pid=20177 comm="syz.8.3308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1120.090125][ T5894] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 1120.097213][ T5894] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1120.484650][ T5894] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1120.582385][T18723] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1120.794697][T18723] usb 9-1: Using ep0 maxpacket: 32 [ 1120.818590][T18723] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1120.947216][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1120.962587][ T5894] em28xx 4-1:0.132: analog set to bulk mode. [ 1120.971523][T17850] em28xx 4-1:0.132: Registering V4L2 extension [ 1120.987881][ T5894] usb 4-1: USB disconnect, device number 6 [ 1120.994270][ T5894] em28xx 4-1:0.132: Disconnecting em28xx [ 1120.996008][T18723] usb 9-1: config 0 has no interface number 0 [ 1121.014696][T18723] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1121.024733][T18723] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.049438][T18723] usb 9-1: Product: syz [ 1121.054101][T18723] usb 9-1: Manufacturer: syz [ 1121.058911][T18723] usb 9-1: SerialNumber: syz [ 1121.071018][T18723] usb 9-1: config 0 descriptor?? [ 1121.107914][T18723] smsc95xx v2.0.0 [ 1121.127817][T18723] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1121.175058][T18723] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 1121.180600][T17850] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1121.255448][T17850] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1121.262714][T17850] em28xx 4-1:0.132: No AC97 audio processor [ 1121.277325][T17850] usb 4-1: Decoder not found [ 1121.282559][T17850] em28xx 4-1:0.132: failed to create media graph [ 1121.291826][T17850] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1121.308501][T17850] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1121.317626][ T5894] em28xx 4-1:0.132: Closing input extension [ 1121.384615][ T5894] em28xx 4-1:0.132: Freeing device [ 1121.579396][T20240] netlink: 24576 bytes leftover after parsing attributes in process `syz.0.3319'. [ 1121.763726][ T5894] usb 9-1: USB disconnect, device number 23 [ 1122.218776][T20262] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1122.607574][ T29] audit: type=1400 audit(2000000974.539:2183): avc: denied { ioctl } for pid=20282 comm="syz.8.3329" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1123.062537][ T5894] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1123.283188][ T5894] usb 10-1: Using ep0 maxpacket: 32 [ 1123.295963][ T5894] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1123.355909][ T29] audit: type=1400 audit(2000000975.231:2184): avc: denied { accept } for pid=20303 comm="syz.0.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1123.436777][ T5894] usb 10-1: config 0 has no interface number 0 [ 1123.496967][ T5894] usb 10-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1123.571714][ T5894] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1123.586159][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.594647][ T5894] usb 10-1: Product: syz [ 1123.613806][ T5894] usb 10-1: Manufacturer: syz [ 1123.622179][ T5894] usb 10-1: SerialNumber: syz [ 1123.637150][ T5894] usb 10-1: config 0 descriptor?? [ 1123.645531][T20291] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1123.674193][ T5894] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1123.685600][T20315] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1123.697344][ T5894] em28xx 10-1:0.132: Video interface 132 found: bulk [ 1124.559573][ T5894] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1125.313786][ T29] audit: type=1400 audit(2000000977.074:2185): avc: denied { create } for pid=20355 comm="syz.8.3346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1125.392498][ T29] audit: type=1400 audit(2000000977.102:2186): avc: denied { ioctl } for pid=20355 comm="syz.8.3346" path="socket:[64302]" dev="sockfs" ino=64302 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1125.566431][T20363] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1125.615240][ T5894] em28xx 10-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1125.624757][ T5894] em28xx 10-1:0.132: failed to read eeprom (err=-5) [ 1125.631422][ T5894] em28xx 10-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1125.819555][ T5894] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1125.827500][ T5894] em28xx 10-1:0.132: analog set to bulk mode. [ 1125.862428][ T5816] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1125.968998][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1125.989383][T20376] overlayfs: failed to resolve './file1': -2 [ 1126.011710][ T5864] em28xx 10-1:0.132: Registering V4L2 extension [ 1126.054489][ T5894] usb 10-1: USB disconnect, device number 24 [ 1126.061080][ T5894] em28xx 10-1:0.132: Disconnecting em28xx [ 1126.066801][ T5816] usb 5-1: Using ep0 maxpacket: 16 [ 1126.068211][ T5816] usb 5-1: too many configurations: 116, using maximum allowed: 8 [ 1126.109640][ T5816] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1126.130298][ T5816] usb 5-1: can't read configurations, error -61 [ 1126.139954][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1126.147954][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.167581][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.179123][T17850] IPVS: starting estimator thread 0... [ 1126.224496][T20378] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1126.236634][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1126.283480][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1126.292828][T20387] IPVS: using max 34 ests per chain, 81600 per kthread [ 1126.300545][ T5816] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1126.324737][ T5864] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1126.324737][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.326147][ T9] usb 1-1: config 0 descriptor?? [ 1126.331881][ T5864] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1126.331899][ T5864] em28xx 10-1:0.132: No AC97 audio processor [ 1126.360071][ T5864] usb 10-1: Decoder not found [ 1126.364885][ T5864] em28xx 10-1:0.132: failed to create media graph [ 1126.386190][ T5864] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1126.420531][ T5864] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1126.452278][ T5894] em28xx 10-1:0.132: Closing input extension [ 1126.471895][ T5894] em28xx 10-1:0.132: Freeing device [ 1126.482220][ T5816] usb 5-1: Using ep0 maxpacket: 16 [ 1126.496792][ T5816] usb 5-1: too many configurations: 116, using maximum allowed: 8 [ 1126.509738][ T5816] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1126.521792][ T5816] usb 5-1: can't read configurations, error -61 [ 1126.532896][ T5816] usb usb5-port1: attempt power cycle [ 1126.627326][ T29] audit: type=1400 audit(2000000978.300:2187): avc: denied { listen } for pid=20404 comm="syz.8.3359" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1126.691069][ T29] audit: type=1400 audit(2000000978.365:2188): avc: denied { accept } for pid=20404 comm="syz.8.3359" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1126.747272][ T29] audit: type=1400 audit(2000000978.412:2189): avc: denied { append } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1126.794066][T20405] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3358'. [ 1126.795287][ T29] audit: type=1400 audit(2000000978.412:2190): avc: denied { search } for pid=20411 comm="sed" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.855455][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0015/input/input86 [ 1126.892733][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0015/input/input87 [ 1126.931720][ T29] audit: type=1400 audit(2000000978.412:2191): avc: denied { read } for pid=20411 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1126.954451][ T5816] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1126.986906][ T9] kye 0003:0458:5011.0015: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 1126.995333][ T29] audit: type=1400 audit(2000000978.412:2192): avc: denied { open } for pid=20411 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1127.063180][ T5816] usb 5-1: Using ep0 maxpacket: 16 [ 1127.078766][ T5816] usb 5-1: too many configurations: 116, using maximum allowed: 8 [ 1127.123674][ T5816] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1127.131263][ T5816] usb 5-1: can't read configurations, error -61 [ 1127.380137][ T5816] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1127.402193][ T5816] usb 5-1: Using ep0 maxpacket: 16 [ 1127.408260][ T5816] usb 5-1: too many configurations: 116, using maximum allowed: 8 [ 1127.429189][ T5816] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1127.438847][ T5816] usb 5-1: can't read configurations, error -61 [ 1127.446577][ T5816] usb usb5-port1: unable to enumerate USB device [ 1127.733115][ T5816] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1127.909286][ T5816] usb 10-1: Using ep0 maxpacket: 8 [ 1127.920772][ T5816] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1127.932895][ T5816] usb 10-1: config 179 has no interface number 0 [ 1127.942886][ T5816] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1127.964367][ T5816] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1127.976129][ T5816] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1127.987757][ T5816] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1128.010321][ C0] kye 0003:0458:5011.0015: usb_submit_urb(ctrl) failed: -1 [ 1128.018911][ T5816] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1128.029044][ T5816] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.058327][T20436] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1128.410965][ T5816] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input88 [ 1128.414276][ T5864] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1128.552261][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 1128.552278][ T29] audit: type=1400 audit(2000000980.105:2239): avc: denied { read } for pid=20435 comm="syz.9.3361" name="event4" dev="devtmpfs" ino=3405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1128.581939][ T29] audit: type=1400 audit(2000000980.105:2240): avc: denied { open } for pid=20435 comm="syz.9.3361" path="/dev/input/event4" dev="devtmpfs" ino=3405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1128.620343][ T5864] usb 9-1: Using ep0 maxpacket: 16 [ 1128.641972][ T5864] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1128.653247][ T5864] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1128.662981][ T5864] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1128.703656][T17850] usb 10-1: USB disconnect, device number 25 [ 1128.703673][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1128.709795][ T29] audit: type=1400 audit(2000000980.245:2241): avc: denied { write } for pid=20447 comm="syz.0.3364" name="ip_tables_names" dev="proc" ino=4026533301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1128.718317][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1128.750750][T17850] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1128.763790][ T29] audit: type=1400 audit(2000000980.292:2242): avc: denied { mounton } for pid=20447 comm="syz.0.3364" path="/713" dev="tmpfs" ino=3862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1128.791344][ T5864] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1128.800461][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.808491][ T5864] usb 9-1: Product: syz [ 1128.812689][ T5864] usb 9-1: Manufacturer: syz [ 1128.817329][ T5864] usb 9-1: SerialNumber: syz [ 1128.826369][ T29] audit: type=1400 audit(2000000980.367:2243): avc: denied { create } for pid=20447 comm="syz.0.3364" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1128.847921][ T29] audit: type=1400 audit(2000000980.367:2244): avc: denied { map } for pid=20447 comm="syz.0.3364" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1128.872361][ T29] audit: type=1400 audit(2000000980.367:2245): avc: denied { read write } for pid=20447 comm="syz.0.3364" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1128.901475][ T5894] usb 1-1: USB disconnect, device number 27 [ 1128.924822][ T29] audit: type=1400 audit(2000000980.451:2246): avc: denied { ioctl } for pid=20449 comm="syz.4.3365" path="socket:[65643]" dev="sockfs" ino=65643 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1129.350503][ T5864] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 1129.424457][ T29] audit: type=1400 audit(2000000980.909:2247): avc: denied { read } for pid=20456 comm="syz.0.3368" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1129.467384][ T29] audit: type=1400 audit(2000000980.909:2248): avc: denied { open } for pid=20456 comm="syz.0.3368" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1129.754294][ T5894] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1129.834255][T20463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20463 comm=syz.0.3370 [ 1129.878483][T20463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3370'. [ 1129.936852][ T5894] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.947429][ T5894] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1129.961183][ T5894] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1129.970442][ T5894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1129.978632][ T5894] usb 10-1: SerialNumber: syz [ 1130.236551][ T5864] usb 9-1: 2:1: cannot get freq at ep 0x82 [ 1130.285849][ T5894] usb 10-1: 0:2 : does not exist [ 1130.292012][ T5894] usb 10-1: unit 5: unexpected type 0x09 [ 1130.300108][ T5864] usb 9-1: USB disconnect, device number 24 [ 1130.425330][ T5894] usb 10-1: USB disconnect, device number 26 [ 1130.682117][T14569] udevd[14569]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1132.929238][T20513] netlink: 'syz.9.3383': attribute type 5 has an invalid length. [ 1133.924266][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1133.924282][ T29] audit: type=1400 audit(2000000985.137:2285): avc: denied { create } for pid=20550 comm="syz.8.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1133.985951][ T29] audit: type=1400 audit(2000000985.175:2286): avc: denied { mounton } for pid=20552 comm="syz.0.3396" path="/723/file0" dev="tmpfs" ino=3921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1134.054430][ T29] audit: type=1400 audit(2000000985.175:2287): avc: denied { bind } for pid=20550 comm="syz.8.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1134.079324][ T29] audit: type=1400 audit(2000000985.184:2288): avc: denied { mount } for pid=20552 comm="syz.0.3396" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1134.128654][ T29] audit: type=1400 audit(2000000985.184:2289): avc: denied { write } for pid=20552 comm="syz.0.3396" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1134.163987][ T29] audit: type=1400 audit(2000000985.184:2290): avc: denied { open } for pid=20552 comm="syz.0.3396" path="/723/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1134.209682][ T29] audit: type=1400 audit(2000000985.203:2291): avc: denied { accept } for pid=20550 comm="syz.8.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1134.272964][ T29] audit: type=1400 audit(2000000985.222:2292): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1134.697984][ T29] audit: type=1400 audit(2000000985.848:2293): avc: denied { create } for pid=20583 comm="syz.3.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1134.732281][ T29] audit: type=1400 audit(2000000985.886:2294): avc: denied { ioctl } for pid=20583 comm="syz.3.3402" path="socket:[66878]" dev="sockfs" ino=66878 ioctlcmd=0x42d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1135.035083][T18723] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1135.220503][T18723] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1135.237681][T18723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.274193][T18723] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1135.318083][T18723] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1135.334869][T20614] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3410'. [ 1135.365500][T20620] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1135.365916][T20614] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3410'. [ 1135.381841][T18723] usb 5-1: Manufacturer: syz [ 1135.405568][T20614] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3410'. [ 1135.420336][T18723] usb 5-1: config 0 descriptor?? [ 1135.459081][T20614] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3410'. [ 1135.479337][T20614] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3410'. [ 1135.522686][T18723] rc_core: IR keymap rc-hauppauge not found [ 1135.530771][T18723] Registered IR keymap rc-empty [ 1135.549801][T18723] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1135.625893][T20628] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1135.708213][ T5864] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1135.715698][T18723] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input89 [ 1136.010069][ T5864] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1136.055125][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.084536][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.104475][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1136.147293][ T5864] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1136.165771][T20635] rc rc0: two consecutive events of type space [ 1136.185984][ T5864] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1136.210413][ T5864] usb 4-1: Manufacturer: syz [ 1136.229128][ T5864] usb 4-1: config 0 descriptor?? [ 1136.274796][T18723] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1136.389477][ T9] usb 5-1: USB disconnect, device number 32 [ 1136.445731][T18723] usb 10-1: Using ep0 maxpacket: 16 [ 1136.459511][T18723] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.479860][T18723] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1136.507923][T18723] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.555552][T18723] usb 10-1: config 0 descriptor?? [ 1136.694550][ T5864] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 1136.710159][ T5864] appleir 0003:05AC:8243.0016: No inputs registered, leaving [ 1136.753534][ T5864] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1137.008180][T18723] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 1137.025375][T18723] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x2 [ 1137.042160][T18723] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 1137.060467][T18723] hid-multitouch 0003:1FD2:6007.0017: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.9-1/input0 [ 1137.235651][T18723] usb 10-1: USB disconnect, device number 27 [ 1137.243417][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 1137.259691][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 1137.280569][T20699] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1137.287156][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 1137.307409][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 1137.324009][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 1137.531894][T18723] usb 4-1: USB disconnect, device number 7 [ 1137.751495][T18723] kernel write not supported for file /2139/attr/keycreate (pid: 18723 comm: kworker/0:0) [ 1138.908017][T20764] netlink: 'syz.3.3437': attribute type 5 has an invalid length. [ 1139.905566][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.963501][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.990936][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 1139.990963][ T29] audit: type=1400 audit(2000000990.806:2330): avc: denied { setattr } for pid=20787 comm="syz.8.3441" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1140.185247][ T29] audit: type=1400 audit(2000000990.984:2331): avc: denied { write } for pid=20793 comm="syz.9.3442" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1140.249929][ T29] audit: type=1400 audit(2000000991.012:2332): avc: denied { add_name } for pid=20793 comm="syz.9.3442" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1140.287227][ T29] audit: type=1400 audit(2000000991.012:2333): avc: denied { create } for pid=20793 comm="syz.9.3442" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1140.323822][ T29] audit: type=1400 audit(2000000991.012:2334): avc: denied { associate } for pid=20793 comm="syz.9.3442" name="net_prio.prioidx" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1140.501495][T20799] syz_tun: left promiscuous mode [ 1140.517585][ T29] audit: type=1400 audit(2000000991.292:2335): avc: denied { read write } for pid=20806 comm="syz.3.3444" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1140.742380][ T29] audit: type=1400 audit(2000000991.292:2336): avc: denied { open } for pid=20806 comm="syz.3.3444" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1140.988611][T20799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.995915][T20799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.052550][ T29] audit: type=1400 audit(2000000991.386:2337): avc: denied { create } for pid=20800 comm="syz.0.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1141.121871][ T29] audit: type=1400 audit(2000000991.386:2338): avc: denied { write } for pid=20800 comm="syz.0.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1141.169101][ T29] audit: type=1400 audit(2000000991.470:2339): avc: denied { bind } for pid=20800 comm="syz.0.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1141.219471][T20799] wg2: left promiscuous mode [ 1141.303893][T20826] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1141.315408][T20799] infiniband syz2: set down [ 1141.342152][T20799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.695774][T20799] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.717560][T20799] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.755384][T20799] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.788380][T20799] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.898188][T20799] gtp0: left promiscuous mode [ 1141.906995][T20799] gtp0: left allmulticast mode [ 1141.935510][T20799] syzkaller1: left promiscuous mode [ 1141.946725][T20799] syzkaller1: left allmulticast mode [ 1141.977094][T20835] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3450'. [ 1142.390414][T20853] xt_hashlimit: invalid rate [ 1142.718414][T20867] block device autoloading is deprecated and will be removed. [ 1156.522771][ T757] sched: DL replenish lagged too much [ 1256.351444][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1256.358425][ C0] rcu: 1-...!: (1 GPs behind) idle=fc74/1/0x4000000000000000 softirq=90266/90277 fqs=79 [ 1256.369931][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20905/1:b..l P6152/1:b..l [ 1256.379160][ C0] rcu: (detected by 0, t=10502 jiffies, g=70197, q=289 ncpus=2) [ 1256.386875][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1256.386898][ C1] NMI backtrace for cpu 1 [ 1256.386907][ C1] CPU: 1 UID: 0 PID: 9832 Comm: kworker/1:2H Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 1256.386922][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1256.386933][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 1256.386953][ C1] RIP: 0010:__kasan_check_read+0x0/0x20 [ 1256.386968][ C1] Code: c3 cc cc cc cc 48 83 c4 60 48 c7 c7 c8 5c 7c 8d 5b 5d 41 5c e9 41 76 7c ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f6 31 d2 e9 1f f1 ff ff 66 66 2e 0f 1f [ 1256.386980][ C1] RSP: 0018:ffffc90000a189e8 EFLAGS: 00000047 [ 1256.386991][ C1] RAX: 0000000000000000 RBX: 0000000000000021 RCX: ffff88802e4b0b08 [ 1256.387000][ C1] RDX: 1ffff11005c9616a RSI: 0000000000000008 RDI: ffffffff96e4ecc0 [ 1256.387008][ C1] RBP: ffffc90000a18b38 R08: 0000000000000002 R09: 0000000000000000 [ 1256.387016][ C1] R10: ffffffff96e4ecc7 R11: 0000000000000002 R12: ffff88802e4b0000 [ 1256.387025][ C1] R13: 0000000000000200 R14: 0000000000000009 R15: 1ffff92000143146 [ 1256.387033][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1256.387047][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1256.387055][ C1] CR2: 00000000203f7000 CR3: 000000005d08e000 CR4: 00000000003526f0 [ 1256.387064][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1256.387071][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1256.387079][ C1] Call Trace: [ 1256.387085][ C1] [ 1256.387091][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1256.387106][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1256.387120][ C1] ? nmi_handle+0x1ac/0x5d0 [ 1256.387134][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 1256.387147][ C1] ? default_do_nmi+0x6a/0x160 [ 1256.387166][ C1] ? exc_nmi+0x170/0x1e0 [ 1256.387184][ C1] ? end_repeat_nmi+0xf/0x53 [ 1256.387204][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 1256.387216][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 1256.387229][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 1256.387242][ C1] [ 1256.387245][ C1] [ 1256.387249][ C1] hlock_class+0x4e/0x130 [ 1256.387267][ C1] mark_lock+0xb5/0xc60 [ 1256.387287][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1256.387301][ C1] ? hlock_class+0x4e/0x130 [ 1256.387319][ C1] ? hlock_class+0x4e/0x130 [ 1256.387335][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 1256.387350][ C1] __lock_acquire+0x9f1/0x3c40 [ 1256.387368][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1256.387381][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 1256.387397][ C1] lock_acquire.part.0+0x11b/0x380 [ 1256.387410][ C1] ? advance_sched+0x679/0xc60 [ 1256.387424][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1256.387438][ C1] ? rcu_is_watching+0x12/0xc0 [ 1256.387455][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1256.387473][ C1] ? advance_sched+0x679/0xc60 [ 1256.387485][ C1] ? lock_acquire+0x2f/0xb0 [ 1256.387497][ C1] ? advance_sched+0x679/0xc60 [ 1256.387509][ C1] advance_sched+0x67f/0xc60 [ 1256.387521][ C1] ? advance_sched+0x679/0xc60 [ 1256.387536][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1256.387548][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 1256.387568][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1256.387584][ C1] ? read_tsc+0x9/0x20 [ 1256.387604][ C1] hrtimer_interrupt+0x392/0x8e0 [ 1256.387625][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1256.387641][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1256.387656][ C1] [ 1256.387660][ C1] [ 1256.387664][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1256.387681][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1256.387696][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 f3 4a f6 48 89 df e8 3e 73 4b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 68 3c f6 65 8b 05 96 23 d8 74 85 c0 74 16 5b [ 1256.387707][ C1] RSP: 0018:ffffc90004fffbc0 EFLAGS: 00000246 [ 1256.387717][ C1] RAX: 0000000000000002 RBX: ffff88802fa85930 RCX: 1ffffffff2dd7dca [ 1256.387725][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cd860 RDI: ffffffff8bd1d360 [ 1256.387733][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff2dc9dbb [ 1256.387741][ C1] R10: ffffffff96e4eddf R11: 0000000000000004 R12: 0000000000000293 [ 1256.387749][ C1] R13: 0000000000001000 R14: 0000000000000000 R15: ffff88801b090c00 [ 1256.387763][ C1] snd_rawmidi_proceed+0x105/0x160 [ 1256.387782][ C1] snd_vmidi_output_work+0x30e/0x390 [ 1256.387798][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1256.387813][ C1] ? process_one_work+0x890/0x1ba0 [ 1256.387827][ C1] ? lock_acquire+0x2f/0xb0 [ 1256.387840][ C1] ? process_one_work+0x921/0x1ba0 [ 1256.387854][ C1] process_one_work+0x9c5/0x1ba0 [ 1256.387871][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1256.387885][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1256.387898][ C1] ? rcu_is_watching+0x12/0xc0 [ 1256.387916][ C1] ? assign_work+0x1a0/0x250 [ 1256.387930][ C1] worker_thread+0x6c8/0xf00 [ 1256.387947][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1256.387960][ C1] kthread+0x2c1/0x3a0 [ 1256.387976][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1256.387989][ C1] ? __pfx_kthread+0x10/0x10 [ 1256.388005][ C1] ret_from_fork+0x45/0x80 [ 1256.388017][ C1] ? __pfx_kthread+0x10/0x10 [ 1256.388033][ C1] ret_from_fork_asm+0x1a/0x30 [ 1256.388055][ C1] [ 1256.388893][ C0] task:kworker/u8:9 state:R running task stack:22480 pid:6152 tgid:6152 ppid:2 flags:0x00004000 [ 1256.917605][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 1256.923602][ C0] Call Trace: [ 1256.926872][ C0] [ 1256.929799][ C0] __schedule+0xe58/0x5ad0 [ 1256.934218][ C0] ? reacquire_held_locks+0x490/0x4c0 [ 1256.939599][ C0] ? __pfx___schedule+0x10/0x10 [ 1256.944444][ C0] ? __queue_work+0x43b/0x1080 [ 1256.949209][ C0] ? mark_held_locks+0x9f/0xe0 [ 1256.954057][ C0] ? mod_delayed_work_on+0x1a9/0x1d0 [ 1256.959338][ C0] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 1256.965403][ C0] preempt_schedule_notrace+0x62/0xe0 [ 1256.970778][ C0] preempt_schedule_notrace_thunk+0x1a/0x30 [ 1256.976666][ C0] ? trace_lock_acquire+0x3c/0x1f0 [ 1256.981777][ C0] rcu_is_watching+0x8e/0xc0 [ 1256.986378][ C0] trace_lock_acquire+0x14e/0x1f0 [ 1256.991400][ C0] ? blk_mq_delay_run_hw_queue+0x4d3/0x770 [ 1256.997205][ C0] ? blk_mq_flush_plug_list+0x6b8/0x1c60 [ 1257.002831][ C0] lock_acquire+0x2f/0xb0 [ 1257.007159][ C0] ? blk_mq_flush_plug_list+0x6b8/0x1c60 [ 1257.012797][ C0] blk_mq_flush_plug_list+0x6be/0x1c60 [ 1257.018247][ C0] ? blk_mq_flush_plug_list+0x6b8/0x1c60 [ 1257.023874][ C0] ? print_usage_bug.part.0+0x4e1/0x560 [ 1257.029421][ C0] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1257.035308][ C0] ? find_held_lock+0x2d/0x110 [ 1257.040077][ C0] __blk_flush_plug+0x2c5/0x4b0 [ 1257.044929][ C0] ? prepare_to_wait_exclusive+0xab/0x2b0 [ 1257.050641][ C0] ? mark_held_locks+0x9f/0xe0 [ 1257.055398][ C0] ? __pfx___blk_flush_plug+0x10/0x10 [ 1257.060771][ C0] ? wbt_inflight_cb+0x21f/0x3c0 [ 1257.065705][ C0] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 1257.070992][ C0] io_schedule+0xba/0x130 [ 1257.075321][ C0] rq_qos_wait+0x1a9/0x2e0 [ 1257.079728][ C0] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 1257.084925][ C0] ? __pfx_rq_qos_wait+0x10/0x10 [ 1257.089940][ C0] ? dd_bio_merge+0xdf/0x150 [ 1257.094526][ C0] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 1257.100247][ C0] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 1257.105700][ C0] ? lock_acquire+0x2f/0xb0 [ 1257.110202][ C0] ? dd_bio_merge+0xc2/0x150 [ 1257.114787][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1257.119988][ C0] wbt_wait+0x1b0/0x390 [ 1257.124144][ C0] ? __pfx_wbt_wait+0x10/0x10 [ 1257.128821][ C0] ? __pfx_dd_bio_merge+0x10/0x10 [ 1257.133840][ C0] ? __pfx_wbt_wait+0x10/0x10 [ 1257.138517][ C0] __rq_qos_throttle+0x53/0xa0 [ 1257.143283][ C0] blk_mq_submit_bio+0x8ea/0x24c0 [ 1257.148306][ C0] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 1257.153942][ C0] ? hlock_class+0x4e/0x130 [ 1257.158444][ C0] ? mark_lock+0xb5/0xc60 [ 1257.162771][ C0] __submit_bio+0x384/0x540 [ 1257.167268][ C0] ? __pfx___submit_bio+0x10/0x10 [ 1257.172299][ C0] ? rcu_read_unlock+0x17/0x60 [ 1257.177057][ C0] ? __pfx_lock_release+0x10/0x10 [ 1257.182084][ C0] ? submit_bio_noacct_nocheck+0x698/0xd70 [ 1257.187881][ C0] submit_bio_noacct_nocheck+0x698/0xd70 [ 1257.193600][ C0] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1257.199749][ C0] ? __pfx___might_resched+0x10/0x10 [ 1257.205033][ C0] ? __pfx___folio_start_writeback+0x10/0x10 [ 1257.211015][ C0] submit_bio_noacct+0x93a/0x1e20 [ 1257.216038][ C0] ext4_bio_write_folio+0x74f/0x1da0 [ 1257.221333][ C0] mpage_submit_folio+0x1c0/0x350 [ 1257.226354][ C0] mpage_process_page_bufs+0x46d/0x990 [ 1257.231814][ C0] mpage_prepare_extent_to_map+0x758/0x1470 [ 1257.237716][ C0] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 1257.244063][ C0] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 1257.249437][ C0] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 1257.255068][ C0] ? ext4_init_io_end+0x24/0x170 [ 1257.260004][ C0] ext4_do_writepages+0x968/0x32d0 [ 1257.265165][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1257.270373][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1257.275923][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1257.281114][ C0] ? do_writepages+0x1b3/0x820 [ 1257.285887][ C0] ? ext4_writepages+0x303/0x730 [ 1257.290827][ C0] ext4_writepages+0x303/0x730 [ 1257.295594][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 1257.300890][ C0] ? lock_acquire+0x2f/0xb0 [ 1257.305386][ C0] ? do_writepages+0x5b7/0x820 [ 1257.310172][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 1257.315472][ C0] do_writepages+0x1b3/0x820 [ 1257.320074][ C0] ? __pfx_do_writepages+0x10/0x10 [ 1257.325190][ C0] ? writeback_sb_inodes+0x3a9/0xfa0 [ 1257.330473][ C0] ? reacquire_held_locks+0x20b/0x4c0 [ 1257.335839][ C0] ? writeback_sb_inodes+0x3a9/0xfa0 [ 1257.341123][ C0] ? find_held_lock+0x2d/0x110 [ 1257.345889][ C0] ? wbc_attach_and_unlock_inode+0xee/0x110 [ 1257.351787][ C0] __writeback_single_inode+0x166/0xfa0 [ 1257.357353][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1257.362825][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 1257.368896][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1257.374113][ C0] writeback_sb_inodes+0x606/0xfa0 [ 1257.379235][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1257.384870][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1257.390160][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1257.395009][ C0] ? move_expired_inodes+0x5a3/0x850 [ 1257.400300][ C0] __writeback_inodes_wb+0xff/0x2e0 [ 1257.405499][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 1257.411307][ C0] ? queue_io+0x402/0x530 [ 1257.415634][ C0] wb_writeback+0x803/0xb80 [ 1257.420145][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 1257.425178][ C0] ? get_nr_dirty_inodes+0x171/0x1e0 [ 1257.430470][ C0] wb_workfn+0x8c0/0xbc0 [ 1257.434722][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 1257.439485][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1257.445122][ C0] ? process_one_work+0x921/0x1ba0 [ 1257.450233][ C0] ? lock_acquire+0x2f/0xb0 [ 1257.454735][ C0] ? process_one_work+0x921/0x1ba0 [ 1257.459846][ C0] process_one_work+0x9c5/0x1ba0 [ 1257.464786][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1257.470415][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1257.475872][ C0] ? rcu_is_watching+0x12/0xc0 [ 1257.480660][ C0] ? assign_work+0x1a0/0x250 [ 1257.485269][ C0] worker_thread+0x6c8/0xf00 [ 1257.489890][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1257.495002][ C0] kthread+0x2c1/0x3a0 [ 1257.499085][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1257.504299][ C0] ? __pfx_kthread+0x10/0x10 [ 1257.508923][ C0] ret_from_fork+0x45/0x80 [ 1257.513346][ C0] ? __pfx_kthread+0x10/0x10 [ 1257.517938][ C0] ret_from_fork_asm+0x1a/0x30 [ 1257.522716][ C0] [ 1257.525729][ C0] task:syz.0.3464 state:R running task stack:28608 pid:20905 tgid:20902 ppid:5814 flags:0x00004000 [ 1257.537477][ C0] Call Trace: [ 1257.540748][ C0] [ 1257.543679][ C0] __schedule+0xe58/0x5ad0 [ 1257.548089][ C0] ? find_held_lock+0x2d/0x110 [ 1257.552866][ C0] ? find_held_lock+0x2d/0x110 [ 1257.557636][ C0] ? __pfx_lock_release+0x10/0x10 [ 1257.562664][ C0] ? __pfx___schedule+0x10/0x10 [ 1257.567524][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1257.572890][ C0] preempt_schedule_common+0x44/0xc0 [ 1257.578174][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1257.583372][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1257.588999][ C0] timerfd_clock_was_set+0x164/0x310 [ 1257.594373][ C0] clock_was_set+0x67c/0x850 [ 1257.598968][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 1257.604080][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1257.609883][ C0] timekeeping_inject_offset+0x402/0x520 [ 1257.615572][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1257.620856][ C0] ? __pfx_timekeeping_inject_offset+0x10/0x10 [ 1257.627005][ C0] ? bpf_lsm_capable+0x9/0x10 [ 1257.631687][ C0] ? security_capable+0x7e/0x260 [ 1257.636718][ C0] do_adjtimex+0x369/0xaa0 [ 1257.641142][ C0] ? __pfx_do_adjtimex+0x10/0x10 [ 1257.646077][ C0] ? __might_fault+0x13b/0x190 [ 1257.650847][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1257.656052][ C0] ? __might_fault+0xe3/0x190 [ 1257.660733][ C0] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 1257.666798][ C0] __do_sys_clock_adjtime+0x173/0x290 [ 1257.672166][ C0] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 1257.678056][ C0] ? __pfx_do_futex+0x10/0x10 [ 1257.682742][ C0] ? rcu_is_watching+0x12/0xc0 [ 1257.687515][ C0] do_syscall_64+0xcd/0x250 [ 1257.692019][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.697912][ C0] RIP: 0033:0x7fb8efb85d19 [ 1257.702320][ C0] RSP: 002b:00007fb8f08da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1257.710727][ C0] RAX: ffffffffffffffda RBX: 00007fb8efd76080 RCX: 00007fb8efb85d19 [ 1257.718695][ C0] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000000 [ 1257.726657][ C0] RBP: 00007fb8efc01a20 R08: 0000000000000000 R09: 0000000000000000 [ 1257.734619][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1257.742670][ C0] R13: 0000000000000000 R14: 00007fb8efd76080 R15: 00007ffdf179f538 [ 1257.750734][ C0] [ 1257.753757][ C0] rcu: rcu_preempt kthread starved for 10344 jiffies! g70197 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1257.764941][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1257.774984][ C0] rcu: RCU grace-period kthread stack dump: [ 1257.780856][ C0] task:rcu_preempt state:R running task stack:28160 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1257.792601][ C0] Call Trace: [ 1257.795880][ C0] [ 1257.798810][ C0] __schedule+0xe58/0x5ad0 [ 1257.803227][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1257.808433][ C0] ? __pfx___schedule+0x10/0x10 [ 1257.813289][ C0] ? schedule+0x298/0x350 [ 1257.817630][ C0] ? __pfx_lock_release+0x10/0x10 [ 1257.822656][ C0] ? lock_acquire+0x2f/0xb0 [ 1257.827156][ C0] ? schedule+0x1fd/0x350 [ 1257.831483][ C0] schedule+0xe7/0x350 [ 1257.835548][ C0] schedule_timeout+0x124/0x280 [ 1257.840390][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1257.845755][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1257.851043][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1257.856930][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 1257.862388][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1257.867151][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1257.872435][ C0] ? rcu_gp_init+0xc82/0x1630 [ 1257.877111][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1257.882306][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1257.888108][ C0] rcu_gp_kthread+0x271/0x380 [ 1257.892789][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1257.897982][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1257.903182][ C0] ? __kthread_parkme+0x148/0x220 [ 1257.908212][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1257.913408][ C0] kthread+0x2c1/0x3a0 [ 1257.917475][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1257.922664][ C0] ? __pfx_kthread+0x10/0x10 [ 1257.927322][ C0] ret_from_fork+0x45/0x80 [ 1257.931736][ C0] ? __pfx_kthread+0x10/0x10 [ 1257.936324][ C0] ret_from_fork_asm+0x1a/0x30 [ 1257.941100][ C0] [ 1257.944109][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1257.950422][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 1257.960823][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1257.970883][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 1257.976170][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 b8 85 da 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 48 17 b4 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1257.995946][ C0] RSP: 0018:ffffffff8de07d70 EFLAGS: 00000246 [ 1258.002010][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b293679 [ 1258.009971][ C0] RDX: 0000000000000001 RSI: ffff888021af0800 RDI: ffff888021af0864 [ 1258.017933][ C0] RBP: ffff888021af0864 R08: 0000000000000001 R09: ffffed10170c6fed [ 1258.025904][ C0] R10: ffff8880b8637f6b R11: 0000000000000000 R12: ffff88801eb47000 [ 1258.033865][ C0] R13: ffffffff8ee14ea0 R14: 0000000000000000 R15: 0000000000000000 [ 1258.041829][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1258.050764][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1258.057341][ C0] CR2: 00007fb8f08dad58 CR3: 0000000065eac000 CR4: 00000000003526f0 [ 1258.065319][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1258.073284][ C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1258.081245][ C0] Call Trace: [ 1258.084515][ C0] [ 1258.087352][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1258.093683][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1258.098882][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 1258.104372][ C0] ? timekeeping_advance+0x72e/0xa90 [ 1258.109653][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1258.115376][ C0] ? __asan_memcpy+0x3c/0x60 [ 1258.120056][ C0] ? rcu_is_watching+0x12/0xc0 [ 1258.124941][ C0] ? update_process_times+0x178/0x2d0 [ 1258.130329][ C0] ? __pfx_update_process_times+0x10/0x10 [ 1258.136074][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1258.141555][ C0] ? update_wall_time+0x1c/0x40 [ 1258.146409][ C0] ? tick_nohz_handler+0x376/0x530 [ 1258.151524][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1258.156982][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 1258.162360][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1258.168079][ C0] ? read_tsc+0x9/0x20 [ 1258.172176][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 1258.177303][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1258.183455][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1258.189257][ C0] [ 1258.192179][ C0] [ 1258.195102][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1258.201262][ C0] ? ct_kernel_exit+0x139/0x190 [ 1258.206132][ C0] ? acpi_safe_halt+0x1a/0x20 [ 1258.210811][ C0] acpi_idle_enter+0xc5/0x160 [ 1258.215489][ C0] cpuidle_enter_state+0xaa/0x4f0 [ 1258.220514][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 1258.226402][ C0] cpuidle_enter+0x4e/0xa0 [ 1258.230822][ C0] do_idle+0x310/0x3f0 [ 1258.234886][ C0] ? __pfx_do_idle+0x10/0x10 [ 1258.239473][ C0] ? do_idle+0x2b9/0x3f0 [ 1258.243711][ C0] cpu_startup_entry+0x4f/0x60 [ 1258.248469][ C0] rest_init+0x16b/0x2b0 [ 1258.252724][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1258.258003][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1258.263548][ C0] start_kernel+0x3e4/0x4d0 [ 1258.268054][ C0] x86_64_start_reservations+0x18/0x30 [ 1258.273511][ C0] x86_64_start_kernel+0xb2/0xc0 [ 1258.278465][ C0] common_startup_64+0x13e/0x148 [ 1258.283437][ C0]