last executing test programs: 19m43.89702621s ago: executing program 0 (id=4246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x78}}, 0x74800) 19m43.769897974s ago: executing program 0 (id=4249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c002400124000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 19m42.838007036s ago: executing program 0 (id=4252): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x80}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 19m41.492422367s ago: executing program 0 (id=4255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 19m40.607584806s ago: executing program 0 (id=4258): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}, 0x1, 0x0, 0x0, 0x4c094}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 19m40.359810152s ago: executing program 0 (id=4260): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000001c0)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xfe94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000380)) 19m24.872921936s ago: executing program 32 (id=4260): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000001c0)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xfe94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000380)) 18m35.460983694s ago: executing program 2 (id=4513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 18m34.538371096s ago: executing program 2 (id=4518): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x10002, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000200)={0x2, 0xffffffff, 0x2, 0x7f, 0x9, 0x4}) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff8080e9c4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}}, 0xffffffffffffff14) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x298, 0x0, 0xfffffffffffffff9, [{{0x3, 0x3, 0x10000, 0x7, 0x86, 0x100b402, {0x3, 0x1, 0x20000000000000, 0x3, 0xb, 0x7ff, 0x1000, 0x3f, 0x3, 0x4000, 0x3, 0xee00, 0x0, 0xc6, 0x2}}, {0x2, 0x81, 0x2, 0x0, 'fd'}}, {{0x5, 0x1, 0x0, 0x3979, 0x7b9, 0x5, {0xfffffffffffffffd, 0x400, 0x100, 0x61a, 0x6, 0x5, 0x7, 0x3, 0x6, 0x2000, 0x5, r2, r3, 0x0, 0xf}}, {0x1, 0x10000, 0x9, 0x6, '/dTv/kvm\x00'}}, {{0x3, 0x0, 0xdffe, 0x7d1, 0x20000000, 0x1, {0x3, 0x7, 0x4, 0xf61, 0x509e, 0x6, 0x100, 0x2, 0x2, 0x2000, 0x8, r2, r3, 0x80, 0x3}}, {0x1, 0x9, 0x1, 0x7, '\x00'}}, {{0x0, 0x2, 0xf650, 0x265704ea, 0x7, 0xfffffffa, {0x5, 0x81, 0x7, 0x7, 0x4, 0xfffffffffffffff9, 0x4, 0x5, 0x1, 0x0, 0x2, r2, r3, 0x0, 0x2}}, {0x0, 0xfffffffeffffffff, 0x1, 0x1, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000002c0)={0x3, 0x0, [{0xb, 0x6, 0x3, 0x9, 0x81}, {0x80000019, 0x5, 0x0, 0x5}, {0x80000019, 0x1, 0x186733, 0xec74, 0xfffff001}]}) ioctl$KVM_TDX_FINALIZE_VM(r6, 0xc004aeba, &(0x7f0000000000)) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 18m32.590207334s ago: executing program 2 (id=4525): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4, 0x1}, 'syz1\x00', 0x35}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x8, 0x2, 0x0, 0x1}, 0x3d, [0x6, 0x5dc4, 0x10001, 0x1, 0x2, 0x7, 0x1, 0xc, 0x8, 0x6, 0x3, 0x200, 0x1, 0x6, 0x8001, 0x7, 0x0, 0x8, 0x9, 0x9, 0x1, 0x3, 0x8000, 0x0, 0x7, 0x3, 0x2, 0x1, 0x4, 0x2, 0x8, 0x2, 0x5, 0x8, 0x1, 0x10, 0x4, 0x0, 0x0, 0x1, 0x80000002, 0xfc43, 0x733, 0xddc, 0x9, 0x40000005, 0x0, 0xe, 0x0, 0xe, 0x6, 0x7, 0x6, 0x4, 0x4ff0, 0x6, 0xfffffb3e, 0x8004, 0x100, 0x6, 0x4ec, 0x1000, 0x1, 0x8001], [0x3, 0x1, 0x8, 0xa3d, 0xe1de, 0x7c79, 0x1, 0x2, 0x3b5, 0xe, 0xd, 0x0, 0x4, 0x8c2, 0x4, 0x7, 0x2, 0xdf9, 0x626b, 0x4, 0x2667, 0x3ff, 0x4, 0x1, 0x4, 0x1, 0xb, 0x7, 0x9, 0xffffffff, 0x2, 0x8, 0xfffff6de, 0xffffffff, 0x1, 0x1000, 0x80000000, 0x9, 0xb, 0x6, 0x0, 0x3, 0x0, 0x6, 0x5, 0x5, 0x0, 0x8, 0x1, 0x400, 0x3ce, 0x4, 0x6, 0xa7, 0x9, 0x7fffffff, 0x7, 0x6, 0x1, 0x5, 0x2, 0x0, 0xfff], [0xffffffff, 0x2, 0x41, 0x3dd3, 0x6, 0xe, 0xd03a, 0x2, 0xffffffff, 0x7ff, 0xc45, 0x6, 0x0, 0x1, 0x7fffffff, 0x5, 0xe, 0x0, 0x401, 0x10001, 0x10, 0xffff, 0x4, 0x2, 0x9, 0x3, 0x8000, 0x7d9, 0x5, 0xd, 0x7, 0x70000, 0x5, 0x10000, 0x5, 0x3, 0x1, 0x4, 0x3, 0x0, 0x10001, 0xd, 0x2, 0xb, 0x40, 0x0, 0x0, 0xb07, 0xfffffffe, 0x7ff, 0x0, 0x40, 0x100d4, 0x7ae, 0x7fff, 0x82d, 0xfff, 0x800, 0x7, 0x1, 0x6, 0xffff, 0x7, 0x1000], [0x7, 0x9, 0x4000008, 0x65d, 0x7, 0x7, 0x1, 0x8000, 0x2, 0x1ff, 0x1, 0x80, 0x5, 0xf, 0x7, 0x30f, 0x1, 0xfc, 0x3, 0x80000001, 0xfffffffe, 0x653, 0x8, 0x7, 0x0, 0x9, 0x7fff, 0x3, 0x1000, 0x3, 0xd45, 0x0, 0x3, 0x3, 0x9, 0x2, 0x5, 0x2, 0xff, 0x2, 0xe, 0x1000000, 0x5, 0x1000000, 0xfffffffd, 0x2, 0x40, 0xe64c, 0x19, 0x1, 0x9, 0x7, 0x4, 0x9, 0x7ff, 0x6, 0x8, 0x8, 0xb, 0x9, 0x3ff, 0x1, 0x1, 0x1]}, 0x45c) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a", 0x7b}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408b", 0x8e}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c", 0x38}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000e00)={'syz1\x00', {0x2d, 0xa, 0x6, 0x5}, 0x2b, [0xac, 0xffffffff, 0x4, 0xfffffffc, 0xfff, 0x6, 0x7d, 0x4, 0x1, 0x0, 0x81, 0x9, 0x0, 0x8, 0x9, 0x401, 0x0, 0x5, 0x8, 0x2, 0x39b5, 0x7f, 0xffffff01, 0x283f, 0x5, 0x3, 0x4, 0x9, 0xfffffff2, 0x2, 0x9, 0x5, 0x0, 0x8, 0x0, 0x5, 0x5, 0x9, 0x16a9, 0x4, 0x1ff, 0x7, 0x4, 0x1, 0x1, 0x0, 0x6, 0x9, 0x6eaaf251, 0x4, 0x1, 0x1, 0x8, 0x80000000, 0x7ff, 0x10000, 0x3, 0x8, 0x2, 0xfff, 0x4f, 0x800, 0xc1fe, 0x10], [0x10, 0x2, 0xffff, 0x1, 0xb9, 0x9, 0x1, 0x2, 0x1, 0xffffffff, 0x0, 0x5, 0x1, 0x0, 0x7fffffff, 0x40000000, 0x120000, 0x7, 0x7ff, 0x8, 0x6, 0x2, 0x27, 0x2, 0x4, 0x174f, 0x0, 0x229, 0x8, 0x9, 0x3, 0x3, 0xff, 0x2, 0x8, 0x9, 0x6, 0x3, 0xd04, 0x1, 0x6, 0xa, 0x9, 0x0, 0x3, 0x5, 0x7, 0x7, 0x7fff, 0x8, 0xb, 0x2, 0x428f9541, 0x3, 0x7, 0xfffffff8, 0x5, 0x0, 0xd, 0x3ff, 0x664, 0x7fffffff, 0x8, 0x7], [0x1, 0x7fffffff, 0x2, 0x0, 0x8, 0x5, 0x5, 0x6, 0x8, 0x7, 0x800, 0x20000000, 0x6, 0x9, 0x401, 0x9, 0x10, 0x5, 0x4, 0xc, 0x7fffffff, 0xff, 0x0, 0x783, 0x2, 0x5, 0x5, 0x7, 0x7fffffff, 0xb4, 0xfffffff6, 0x7, 0x9, 0x4, 0x1, 0x3, 0x2, 0x7, 0xe, 0x4, 0xf, 0x7, 0x5, 0x6, 0xffffb416, 0x3, 0x8, 0x23edefa8, 0x4, 0xfffffff9, 0x8, 0x2, 0x2, 0x93f, 0x812, 0x6, 0x7fff, 0x1, 0x10001, 0x7, 0x101, 0x5, 0x3, 0x240000], [0x1, 0x80000001, 0x101, 0x9, 0x3b, 0x7, 0x7, 0xd, 0x4f3, 0x1, 0x0, 0x4, 0x1, 0x8, 0x80000001, 0x6, 0x7fffffff, 0x3, 0x6, 0x0, 0x6, 0x429, 0x0, 0x1, 0x3, 0xd7, 0x5, 0x3, 0x3, 0xb, 0x9, 0xc13, 0x7, 0x62, 0xff, 0xfffffff5, 0xd52, 0x1, 0x200, 0x10, 0x7029, 0x3ff, 0xfffeffff, 0x9, 0xfffffffb, 0x3, 0x0, 0x5, 0x1, 0x7, 0x1c07, 0xcf7e, 0x7, 0x40, 0x6, 0x5, 0x3, 0x5, 0x3, 0x97, 0x100, 0x9, 0x6, 0x6]}, 0x45c) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 18m32.256201346s ago: executing program 2 (id=4528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 18m31.213389259s ago: executing program 2 (id=4530): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x7fff, {0x0, 0xb}, 0x6, 0x6}) 18m31.132551441s ago: executing program 2 (id=4531): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000380)) 18m15.485129108s ago: executing program 33 (id=4531): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000380)) 5m13.56994752s ago: executing program 6 (id=8675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff04000000000088a8000081"], 0x0) 5m13.413379291s ago: executing program 6 (id=8676): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x0, 0x0}, 0x78) 5m13.236901558s ago: executing program 6 (id=8677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$set_timeout(0xf, 0x0, 0x4b2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 5m13.000373587s ago: executing program 6 (id=8678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) 5m11.345639355s ago: executing program 6 (id=8683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 5m11.049372977s ago: executing program 6 (id=8684): unshare(0x62040200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x7003, [0x7, 0x401, 0x70e, 0x1a6, 0x2]}, &(0x7f0000000100)=0x54) 4m55.990899187s ago: executing program 34 (id=8684): unshare(0x62040200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x7003, [0x7, 0x401, 0x70e, 0x1a6, 0x2]}, &(0x7f0000000100)=0x54) 22.194729804s ago: executing program 5 (id=10297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) 22.089530001s ago: executing program 5 (id=10298): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0xd000) 22.013079572s ago: executing program 5 (id=10300): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040cb06f4730000000000010902240001000090000904000009030004000921200000012228000905810408000308"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000500}, {0xfffffff9}]}}) close(0x3) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlink(&(0x7f0000000180)='./bus\x00') r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) io_setup(0x4005, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000480)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x114, 0x10, 0x1, 0x8000000, 0x0, {{@in=@empty, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@loopback, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x69, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x9d}, [@extra_flags={0x8, 0x18, 0x2}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044018) 18.457642553s ago: executing program 5 (id=10320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1008, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x11}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 18.211666835s ago: executing program 5 (id=10322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x2c8, 0xffffffff, 0xffffffff, 0x2c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3f8) 4.146801771s ago: executing program 4 (id=10381): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3.99744961s ago: executing program 7 (id=10382): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000008d2b2b0400ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000580)}, {&(0x7f0000002000)="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", 0xfbc}], 0x2, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x1, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 3.85495534s ago: executing program 1 (id=10383): r0 = syz_open_dev$vcsa(0x0, 0x9, 0x84080) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x9100, 0x3) 3.740511761s ago: executing program 7 (id=10384): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) 3.605111184s ago: executing program 7 (id=10385): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.45835575s ago: executing program 4 (id=10386): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7fff, 0x4, 0x10000000, 0x4, 0xf6a2}, 0x2, 0x8}, [{0x5, 0x8, 0x400, 0x6e8, 0x6}, {0x6, 0x9, 0x2, 0x3, 0x2, 0x5}, {0x6, 0x5, 0xffffff80, 0x2, 0x101, 0x3}, {0x6, 0x8, 0xbfa, 0x10000, 0x7, 0x6}, {0x80, 0xd, 0xf, 0x3, 0x4, 0x10000}, {0x80000000, 0xb, 0x1, 0x7b, 0x10000, 0x401}, {0x9, 0x9, 0x80000001, 0x200, 0x8, 0x7}, {0x3bbe, 0xffffcd60, 0x80ea, 0x8, 0xc71, 0x8}, {0x10002, 0xffffffff, 0x418b, 0x8, 0x1, 0xa}, {0x4, 0x5, 0x311, 0x4af, 0x8, 0x1}, {0x4, 0x0, 0x55, 0x1, 0x3, 0x4}, {0x1, 0x800000, 0x6, 0x7, 0x23, 0xb5}, {0xfffffff9, 0x3, 0x8, 0x3, 0x7, 0x88d6}, {0x601, 0x3, 0xa58, 0x9, 0x19, 0x3}, {0x6, 0x5, 0x9, 0x9, 0x7fff, 0x7ff}, {0xfffffffb, 0x1ff, 0x3, 0xe7, 0x200, 0xffff}, {0x1125, 0x0, 0x4d28, 0x5, 0x1, 0x7}, {0x6, 0x8001, 0x3, 0x4, 0x5}, {0x4, 0xdeef, 0x3, 0x6, 0x40, 0x6}, {0x6, 0x1, 0x8, 0x80000000, 0x9, 0xffffff07}, {0x10, 0x6, 0x8, 0xd30, 0x1, 0x6}, {0x4, 0x3, 0x1, 0x8, 0x2, 0x5}, {0x9, 0x3ff, 0x9, 0x6, 0x100, 0x1000}, {0x4, 0x1ff, 0x6861, 0x98c5, 0x5, 0x8}, {0x2, 0x43, 0x6, 0x2, 0x6, 0x80}, {0x0, 0x7, 0x7, 0xfffffffe, 0x6, 0x7}, {0x9, 0x8, 0x51, 0x4, 0x723, 0x7ffb}, {0x3, 0x1d, 0x1, 0x4, 0x18ab, 0x141}, {0x0, 0x80, 0xf87, 0x1, 0x6}, {0x5, 0x1, 0x89b, 0x4, 0x6, 0x4}, {0x5, 0x60000000, 0x400, 0xa, 0x1}, {0x2a7, 0x36c, 0x80a, 0x100, 0x8, 0x7}, {0x4, 0x8, 0x4, 0x9, 0xffffffff, 0x6}, {0x4, 0x3c6f1121, 0x9, 0x2e, 0x6, 0x1}, {0xffffffff, 0x0, 0x5cd, 0x6, 0xfffff000, 0x8d3}, {0x5, 0x101, 0x2, 0x10000, 0x6, 0x5}, {0x0, 0x800, 0xe, 0x9, 0x454, 0x81}, {0xffffff7f, 0x24847369, 0x7ff, 0x4, 0x9}, {0xff, 0x7b, 0x2, 0x2, 0x3ff, 0xfffffffd}, {0x8, 0x4, 0xffff8535, 0x2, 0x7, 0x100}, {0xfffff801, 0x800, 0x0, 0x4, 0x2, 0xa49}, {0x1, 0x7, 0x8, 0xfff, 0x4, 0x6}, {0x8, 0x4, 0x5, 0xf, 0x9, 0x3}, {0x6, 0xfffffffd, 0x9, 0x4, 0x8, 0x9}, {0x64d8, 0x0, 0x3ae0d4be, 0xb, 0x81, 0x4}, {0x1, 0x5, 0x1882, 0x3, 0x9, 0x3}, {0x8001, 0x7fffffff, 0xfffffffd, 0x3, 0x3, 0xffffffff}, {0xf, 0x2, 0x1, 0xd, 0x7, 0x4}, {0x9, 0xb9, 0x3, 0x0, 0xffff, 0x1000}, {0x7, 0xc, 0x7, 0x4, 0x5, 0x9}, {0x9, 0x5, 0x3, 0x1ff, 0x5, 0x9}, {0x6, 0x6, 0xfffffc01, 0x1, 0x7a2, 0x9}, {0x8000, 0xffffffff, 0x0, 0x1, 0x100, 0x93}, {0xffff12f1, 0x3, 0x0, 0x7, 0x80, 0x8000}, {0x8, 0x6, 0x4, 0x1, 0x7fffffff}, {0x7f, 0x5, 0x5, 0x0, 0x9, 0x6}, {0x3, 0x6, 0x80000000, 0xffffffff, 0x9, 0x9}, {0x4, 0xffff, 0x0, 0xfffffff8, 0x8001, 0x50000000}, {0x789, 0x3, 0xff, 0x3, 0x4, 0x78}, {0x8, 0x7, 0xb92, 0x1, 0x66e00000, 0x1}, {0x2, 0x7559a01e, 0x5, 0x100, 0xfffff8ee, 0x7}, {0x10001, 0xad, 0x9, 0xb2ad, 0x5, 0x4d4}, {0x6, 0x8c, 0x4e, 0x1, 0x4}, {0xff, 0x4, 0x5, 0x4, 0x6a0, 0x1ff}, {0x8, 0x6ff, 0x3, 0x11f6, 0x80000000, 0x9}, {0x5, 0x9, 0x2, 0x80000000, 0x2}, {0x483, 0x40, 0x0, 0x3, 0xfffffff9, 0x2}, {0x2, 0x10, 0x8, 0x6, 0x7, 0x400}, {0x80000001, 0x57, 0x3, 0xbf06, 0xb, 0x1}, {0x0, 0x9d0c, 0x6, 0xfff, 0x9, 0x1}, {0x1, 0x200, 0x83eb, 0x1, 0x758, 0x5}, {0x1, 0x4, 0x5, 0x3e8, 0xfffffff8, 0x7}, {0x101, 0x9, 0xfffff801, 0x6, 0x2, 0x8}, {0x9, 0x2, 0x0, 0x25, 0x80000001}, {0x6, 0x8, 0x0, 0x3, 0x8, 0x6}, {0x0, 0xdf, 0xff, 0x7, 0x3, 0x9}, {0x266, 0xfffffff7, 0xb111, 0x7fff, 0x0, 0x4}, {0x0, 0x4, 0x10001, 0x99b4, 0x3ff, 0x8000}, {0x6, 0x7f, 0x1, 0x8, 0x4, 0x1}, {0x2, 0x3, 0x3, 0x4, 0x6, 0xfffffffb}, {0x4, 0x1, 0x2, 0x5c, 0x20000100, 0xe}, {0x7ff, 0x8, 0x6, 0x10000, 0x85d, 0x5}, {0x6, 0x2c9e, 0xfffffffc, 0x1, 0x739, 0xa}, {0x5, 0x0, 0x5, 0x5, 0x1, 0x7}, {0x10000d6, 0x401, 0xe3be, 0x6, 0x5, 0xf}, {0x5, 0x6, 0x100, 0x5, 0x4, 0xf0a5}, {0x7fff, 0x5, 0x8, 0xfffffff8, 0x5ed, 0xea75}, {0x1, 0xfff, 0x0, 0x1, 0x0, 0x6}, {0x2, 0x8000, 0x6, 0x2, 0xcbf2, 0x4}, {0x5, 0x9, 0x6, 0x9, 0x4, 0x8}, {0x4, 0x9b, 0x8, 0x1, 0xd, 0x1}, {0x231, 0x4, 0x10000, 0x6, 0x3, 0x9}, {0xb0c, 0x61, 0x4, 0x420, 0xd, 0x8}, {0x9, 0x4, 0x9, 0x3, 0x80000000, 0x5}, {0xb, 0x3, 0x401, 0x2000000, 0x8001, 0x7}, {0x7fffffff, 0x0, 0x7, 0x3, 0x2, 0x5}, {0x1, 0xfffffffe, 0xa, 0x2eab, 0x4, 0x10000}, {0x5, 0xa, 0x8, 0x8, 0x2, 0xbc}, {0x401, 0xfffffffe, 0x2ea4eda4, 0x81, 0x473a, 0x400}, {0xfd, 0x0, 0x80000000, 0x0, 0xfffffffb, 0x10001}, {0x1, 0xf, 0x0, 0x797, 0x7, 0x3}, {0x401, 0xffff, 0x5347, 0xf, 0x624, 0x1ea}, {0x4, 0x1ff, 0x7, 0x3, 0xff, 0xc}, {0xa, 0x2, 0x15b8, 0x5, 0x8000, 0xb618}, {0x0, 0xfffffffb, 0x20007, 0x7, 0x7, 0x3}, {0x4, 0x5, 0x7, 0x3e5, 0x9, 0x80000000}, {0x9, 0x4, 0x80000001, 0x50, 0xd, 0x8}, {0x6, 0xb7f, 0x8, 0x9, 0x3ff, 0x8001}, {0x401, 0x100, 0x9, 0x8, 0x4, 0x8}, {0x2a41a072, 0xb38, 0x5, 0x6, 0x80, 0x2}, {0x4, 0x10, 0x0, 0x7, 0xffffff4f, 0xd}, {0x8, 0x5b, 0xe6, 0x57, 0x1, 0x5}, {0x8, 0xfffffffd, 0x9, 0x9, 0xa0, 0x8}, {0x5, 0xf69, 0x0, 0x2, 0x215, 0xd}, {0x14, 0x6, 0x59167a70, 0xde, 0x5, 0x9}, {0xd, 0x200000, 0x0, 0xfffffff7, 0x1, 0x9}, {0x4, 0xffff12d3, 0x3, 0xffffffff, 0x8, 0xe3}, {0x5, 0x2, 0x64, 0x515, 0x101, 0x5}, {0x7, 0xd, 0x0, 0x6, 0x1, 0x8}, {0x5, 0x5, 0xfffffe00, 0x8001, 0x5e, 0x1}, {0x4, 0x10000, 0x2, 0x36d, 0xfffffff1, 0x4e}, {0xfffffffd, 0x0, 0x1, 0x0, 0x788, 0x32d}, {0x47b8, 0xf86, 0x8b7, 0xd, 0x93c0, 0x400}, {0x100000, 0x42, 0x6, 0x8, 0x6, 0x2528}, {0x8, 0x4, 0xffffffa0, 0xff, 0x1, 0x7}, {0x4, 0x5, 0x65f, 0x3, 0x10}, {0x2, 0xffffff42, 0x9, 0x9, 0x1, 0x80000000}, {0x7ff, 0x4, 0x1000, 0x10000, 0x9, 0x9}], [{0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2}, {0x1}, {0x1}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb0000008000008276000000", 0x22}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 3.036768589s ago: executing program 1 (id=10387): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x4, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2, 0x2, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x3, 0x800, 0x7, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x750, 0x75e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc3, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x9, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001, 0x0, 0xad3]}) 2.840304816s ago: executing program 1 (id=10388): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 2.649492595s ago: executing program 7 (id=10389): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r4) inotify_rm_watch(r6, r5) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa8aaaaa00bb08804500001c000000"], 0x0) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="4500005800000000002f9078000000e0e000c800b48065580000000010000800000086c3080088be000000001000000088f7ffff00000000080022eb00000000200000000200000000000000000000000800655800000000eec28beb3340611bc803979560fe2fd0"], 0x0) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180a0000000000000000000000000000850000006600000095"], &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.437615551s ago: executing program 3 (id=10390): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 2.187207912s ago: executing program 3 (id=10391): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc6) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x2003ffffffe, 0x10}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 1.888061125s ago: executing program 4 (id=10392): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{0x0, 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) 1.818886362s ago: executing program 1 (id=10393): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={@mcast2, @local, @remote, 0x0, 0x4, 0x2000, 0x800, 0x7, 0x4000284}) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x2, 0xfffffffc}, 0x8) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r6, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) close_range(r5, 0xffffffffffffffff, 0x0) 1.780339805s ago: executing program 3 (id=10394): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2c) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x13, 0x200, &(0x7f0000001180)="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"}) 1.779472854s ago: executing program 4 (id=10395): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.672857713s ago: executing program 3 (id=10396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 1.577067946s ago: executing program 1 (id=10397): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r5 = socket(0xa, 0x3, 0x87) sendto(r5, &(0x7f00000003c0)="e111", 0x2, 0x800, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) listen(r0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.567333523s ago: executing program 7 (id=10398): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd) 876.781598ms ago: executing program 1 (id=10399): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001300010000000000000000007863686163686132300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0xe0}}, 0x0) 777.279434ms ago: executing program 3 (id=10400): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x4, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x20000023893) r4 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000611868000000000095000000000000009644c4dfb8895c412f7cbc684bc14d8f85f0fde80b22fbe6b6fae6bdda"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, 0x0) 568.669144ms ago: executing program 7 (id=10401): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7fff, 0x4, 0x10000000, 0x4, 0xf6a2}, 0x2, 0x8}, [{0x5, 0x8, 0x400, 0x6e8, 0x6}, {0x6, 0x9, 0x2, 0x3, 0x2, 0x5}, {0x6, 0x5, 0xffffff80, 0x2, 0x101, 0x3}, {0x6, 0x8, 0xbfa, 0x10000, 0x7, 0x6}, {0x80, 0xd, 0xf, 0x3, 0x4, 0x10000}, {0x80000000, 0xb, 0x1, 0x7b, 0x10000, 0x401}, {0x9, 0x9, 0x80000001, 0x200, 0x8, 0x7}, {0x3bbe, 0xffffcd60, 0x80ea, 0x8, 0xc71, 0x8}, {0x10002, 0xffffffff, 0x418b, 0x8, 0x1, 0xa}, {0x4, 0x5, 0x311, 0x4af, 0x8, 0x1}, {0x4, 0x0, 0x55, 0x1, 0x3, 0x4}, {0x1, 0x800000, 0x6, 0x7, 0x23, 0xb5}, {0xfffffff9, 0x3, 0x8, 0x3, 0x7, 0x88d6}, {0x601, 0x3, 0xa58, 0x9, 0x19, 0x3}, {0x6, 0x5, 0x9, 0x9, 0x7fff, 0x7ff}, {0xfffffffb, 0x1ff, 0x3, 0xe7, 0x200, 0xffff}, {0x1125, 0x0, 0x4d28, 0x5, 0x1, 0x7}, {0x6, 0x8001, 0x3, 0x4, 0x5}, {0x4, 0xdeef, 0x3, 0x6, 0x40, 0x6}, {0x6, 0x1, 0x8, 0x80000000, 0x9, 0xffffff07}, {0x10, 0x6, 0x8, 0xd30, 0x1, 0x6}, {0x4, 0x3, 0x1, 0x8, 0x2, 0x5}, {0x9, 0x3ff, 0x9, 0x6, 0x100, 0x1000}, {0x4, 0x1ff, 0x6861, 0x98c5, 0x5, 0x8}, {0x2, 0x43, 0x6, 0x2, 0x6, 0x80}, {0x0, 0x7, 0x7, 0xfffffffe, 0x6, 0x7}, {0x9, 0x8, 0x51, 0x4, 0x723, 0x7ffb}, {0x3, 0x1d, 0x1, 0x4, 0x18ab, 0x141}, {0x0, 0x80, 0xf87, 0x1, 0x6}, {0x5, 0x1, 0x89b, 0x4, 0x6, 0x4}, {0x5, 0x60000000, 0x400, 0xa, 0x1}, {0x2a7, 0x36c, 0x80a, 0x100, 0x8, 0x7}, {0x4, 0x8, 0x4, 0x9, 0xffffffff, 0x6}, {0x4, 0x3c6f1121, 0x9, 0x2e, 0x6, 0x1}, {0xffffffff, 0x0, 0x5cd, 0x6, 0xfffff000, 0x8d3}, {0x5, 0x101, 0x2, 0x10000, 0x6, 0x5}, {0x0, 0x800, 0xe, 0x9, 0x454, 0x81}, {0xffffff7f, 0x24847369, 0x7ff, 0x4, 0x9}, {0xff, 0x7b, 0x2, 0x2, 0x3ff, 0xfffffffd}, {0x8, 0x4, 0xffff8535, 0x2, 0x7, 0x100}, {0xfffff801, 0x800, 0x0, 0x4, 0x2, 0xa49}, {0x1, 0x7, 0x8, 0xfff, 0x4, 0x6}, {0x8, 0x4, 0x5, 0xf, 0x9, 0x3}, {0x6, 0xfffffffd, 0x9, 0x4, 0x8, 0x9}, {0x64d8, 0x0, 0x3ae0d4be, 0xb, 0x81, 0x4}, {0x1, 0x5, 0x1882, 0x3, 0x9, 0x3}, {0x8001, 0x7fffffff, 0xfffffffd, 0x3, 0x3, 0xffffffff}, {0xf, 0x2, 0x1, 0xd, 0x7, 0x4}, {0x9, 0xb9, 0x3, 0x0, 0xffff, 0x1000}, {0x7, 0xc, 0x7, 0x4, 0x5, 0x9}, {0x9, 0x5, 0x3, 0x1ff, 0x5, 0x9}, {0x6, 0x6, 0xfffffc01, 0x1, 0x7a2, 0x9}, {0x8000, 0xffffffff, 0x0, 0x1, 0x100, 0x93}, {0xffff12f1, 0x3, 0x0, 0x7, 0x80, 0x8000}, {0x8, 0x6, 0x4, 0x1, 0x7fffffff}, {0x7f, 0x5, 0x5, 0x0, 0x9, 0x6}, {0x3, 0x6, 0x80000000, 0xffffffff, 0x9, 0x9}, {0x4, 0xffff, 0x0, 0xfffffff8, 0x8001, 0x50000000}, {0x789, 0x3, 0xff, 0x3, 0x4, 0x78}, {0x8, 0x7, 0xb92, 0x1, 0x66e00000, 0x1}, {0x2, 0x7559a01e, 0x5, 0x100, 0xfffff8ee, 0x7}, {0x10001, 0xad, 0x9, 0xb2ad, 0x5, 0x4d4}, {0x6, 0x8c, 0x4e, 0x1, 0x4}, {0xff, 0x4, 0x5, 0x4, 0x6a0, 0x1ff}, {0x8, 0x6ff, 0x3, 0x11f6, 0x80000000, 0x9}, {0x5, 0x9, 0x2, 0x80000000, 0x2}, {0x483, 0x40, 0x0, 0x3, 0xfffffff9, 0x2}, {0x2, 0x10, 0x8, 0x6, 0x7, 0x400}, {0x80000001, 0x57, 0x3, 0xbf06, 0xb, 0x1}, {0x0, 0x9d0c, 0x6, 0xfff, 0x9, 0x1}, {0x1, 0x200, 0x83eb, 0x1, 0x758, 0x5}, {0x1, 0x4, 0x5, 0x3e8, 0xfffffff8, 0x7}, {0x101, 0x9, 0xfffff801, 0x6, 0x2, 0x8}, {0x9, 0x2, 0x0, 0x25, 0x80000001}, {0x6, 0x8, 0x0, 0x3, 0x8, 0x6}, {0x0, 0xdf, 0xff, 0x7, 0x3, 0x9}, {0x266, 0xfffffff7, 0xb111, 0x7fff, 0x0, 0x4}, {0x0, 0x4, 0x10001, 0x99b4, 0x3ff, 0x8000}, {0x6, 0x7f, 0x1, 0x8, 0x4, 0x1}, {0x2, 0x3, 0x3, 0x4, 0x6, 0xfffffffb}, {0x4, 0x1, 0x2, 0x5c, 0x20000100, 0xe}, {0x7ff, 0x8, 0x6, 0x10000, 0x85d, 0x5}, {0x6, 0x2c9e, 0xfffffffc, 0x1, 0x739, 0xa}, {0x5, 0x0, 0x5, 0x5, 0x1, 0x7}, {0x10000d6, 0x401, 0xe3be, 0x6, 0x5, 0xf}, {0x5, 0x6, 0x100, 0x5, 0x4, 0xf0a5}, {0x7fff, 0x5, 0x8, 0xfffffff8, 0x5ed, 0xea75}, {0x1, 0xfff, 0x0, 0x1, 0x0, 0x6}, {0x2, 0x8000, 0x6, 0x2, 0xcbf2, 0x4}, {0x5, 0x9, 0x6, 0x9, 0x4, 0x8}, {0x4, 0x9b, 0x8, 0x1, 0xd, 0x1}, {0x231, 0x4, 0x10000, 0x6, 0x3, 0x9}, {0xb0c, 0x61, 0x4, 0x420, 0xd, 0x8}, {0x9, 0x4, 0x9, 0x3, 0x80000000, 0x5}, {0xb, 0x3, 0x401, 0x2000000, 0x8001, 0x7}, {0x7fffffff, 0x0, 0x7, 0x3, 0x2, 0x5}, {0x1, 0xfffffffe, 0xa, 0x2eab, 0x4, 0x10000}, {0x5, 0xa, 0x8, 0x8, 0x2, 0xbc}, {0x401, 0xfffffffe, 0x2ea4eda4, 0x81, 0x473a, 0x400}, {0xfd, 0x0, 0x80000000, 0x0, 0xfffffffb, 0x10001}, {0x1, 0xf, 0x0, 0x797, 0x7, 0x3}, {0x401, 0xffff, 0x5347, 0xf, 0x624, 0x1ea}, {0x4, 0x1ff, 0x7, 0x3, 0xff, 0xc}, {0xa, 0x2, 0x15b8, 0x5, 0x8000, 0xb618}, {0x0, 0xfffffffb, 0x20007, 0x7, 0x7, 0x3}, {0x4, 0x5, 0x7, 0x3e5, 0x9, 0x80000000}, {0x9, 0x4, 0x80000001, 0x50, 0xd, 0x8}, {0x6, 0xb7f, 0x8, 0x9, 0x3ff, 0x8001}, {0x401, 0x100, 0x9, 0x8, 0x4, 0x8}, {0x2a41a072, 0xb38, 0x5, 0x6, 0x80, 0x2}, {0x4, 0x10, 0x0, 0x7, 0xffffff4f, 0xd}, {0x8, 0x5b, 0xe6, 0x57, 0x1, 0x5}, {0x8, 0xfffffffd, 0x9, 0x9, 0xa0, 0x8}, {0x5, 0xf69, 0x0, 0x2, 0x215, 0xd}, {0x14, 0x6, 0x59167a70, 0xde, 0x5, 0x9}, {0xd, 0x200000, 0x0, 0xfffffff7, 0x1, 0x9}, {0x4, 0xffff12d3, 0x3, 0xffffffff, 0x8, 0xe3}, {0x5, 0x2, 0x64, 0x515, 0x101, 0x5}, {0x7, 0xd, 0x0, 0x6, 0x1, 0x8}, {0x5, 0x5, 0xfffffe00, 0x8001, 0x5e, 0x1}, {0x4, 0x10000, 0x2, 0x36d, 0xfffffff1, 0x4e}, {0xfffffffd, 0x0, 0x1, 0x0, 0x788, 0x32d}, {0x47b8, 0xf86, 0x8b7, 0xd, 0x93c0, 0x400}, {0x100000, 0x42, 0x6, 0x8, 0x6, 0x2528}, {0x8, 0x4, 0xffffffa0, 0xff, 0x1, 0x7}, {0x4, 0x5, 0x65f, 0x3, 0x10}, {0x2, 0xffffff42, 0x9, 0x9, 0x1, 0x80000000}, {0x7ff, 0x4, 0x1000, 0x10000, 0x9, 0x9}], [{0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2}, {0x1}, {0x1}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb0000008000008276000000", 0x22}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 417.941678ms ago: executing program 4 (id=10402): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a", 0x7b}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d16", 0x6}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 188.886507ms ago: executing program 4 (id=10403): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 99.629737ms ago: executing program 3 (id=10404): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) timer_create(0x0, 0x0, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)) epoll_create(0x11ffffe) sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) syz_open_dev$MSR(&(0x7f00000001c0), 0x3921, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) keyctl$clear(0x7, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0xa931) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) keyctl$setperm(0x5, r1, 0x180400) 0s ago: executing program 5 (id=10324): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r0, 0x3405f8c17b4743e3, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0xc000000) kernel console output (not intermixed with test programs): hcd.1: release socket [ 1561.903429][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1562.043189][T32226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8612'. [ 1562.441512][ T5747] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1562.488680][T32243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8619'. [ 1562.623160][ T5747] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1562.650587][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.679833][ T5747] usb 4-1: config 0 descriptor?? [ 1563.172938][T32247] fuse: fd is not a fuse device [ 1563.589335][T32261] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1563.595884][T32261] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1563.620736][T30700] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1563.667943][T32261] vhci_hcd vhci_hcd.0: Device attached [ 1564.087941][ T29] audit: type=1400 audit(1564.052:2465): avc: denied { write } for pid=32249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1564.233011][T32264] vhci_hcd: connection closed [ 1564.233827][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1564.250420][ T13] vhci_hcd vhci_hcd.1: release socket [ 1564.263384][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1564.340385][ T29] audit: type=1400 audit(1564.302:2466): avc: denied { write } for pid=32285 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1565.290585][ T5747] usb 4-1: Cannot set autoneg [ 1565.332393][ T5747] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1565.766595][ T5747] usb 4-1: USB disconnect, device number 26 [ 1566.541493][T23958] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1566.722519][T23958] usb 5-1: Using ep0 maxpacket: 16 [ 1566.769394][T23958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.813881][T23958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1566.845925][T23958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1566.885628][T23958] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1566.924215][T23958] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1567.006358][T23958] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1567.031748][T30700] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1567.061972][T23958] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1567.103344][T23958] usb 5-1: Manufacturer: syz [ 1567.143450][T23958] usb 5-1: config 0 descriptor?? [ 1567.211452][ T5763] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1567.243373][T30700] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1567.280306][T30700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.386803][T30700] usb 2-1: config 0 descriptor?? [ 1567.642800][T23958] rc_core: IR keymap rc-hauppauge not found [ 1567.666050][T23958] Registered IR keymap rc-empty [ 1567.691120][T23958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1567.887479][ T29] audit: type=1400 audit(1567.852:2467): avc: denied { write } for pid=32333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.748973][T32370] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1568.861999][T23958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1568.902360][T23958] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1569.260393][T23958] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input102 [ 1569.306263][T23958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1569.355679][T23958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1569.411985][T23958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1569.454820][T23958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1569.501522][T23958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1569.544008][T23958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1569.581698][T23958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1569.600839][ T29] audit: type=1400 audit(1569.562:2468): avc: denied { write } for pid=32380 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1569.671527][T23958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1569.711813][T23958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1569.766778][T23958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1569.809751][T23958] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1569.810704][T32389] netlink: 'syz.3.8658': attribute type 1 has an invalid length. [ 1569.869532][T32389] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8658'. [ 1569.897301][T23958] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1569.963182][T23958] usb 5-1: USB disconnect, device number 41 [ 1570.241300][T32401] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1571.096646][T30700] usb 2-1: Cannot set autoneg [ 1571.350071][T30700] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1571.427697][T30700] usb 2-1: USB disconnect, device number 15 [ 1571.606584][T32409] syzkaller0: entered promiscuous mode [ 1571.626919][T32409] syzkaller0: entered allmulticast mode [ 1571.790839][T32423] Bluetooth: MGMT ver 1.23 [ 1572.171471][ T5763] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1572.354106][ T5763] usb 2-1: Using ep0 maxpacket: 16 [ 1572.362274][ T5763] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.378706][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1572.406761][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1572.429234][ T5763] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1572.457845][ T5763] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1572.494231][ T5763] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1572.530818][ T5763] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1572.571393][ T5763] usb 2-1: Manufacturer: syz [ 1572.581427][T23765] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1572.633539][ T5763] usb 2-1: config 0 descriptor?? [ 1572.809160][T23765] usb 4-1: Using ep0 maxpacket: 16 [ 1572.834488][T23765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1572.874822][T23765] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1572.970065][T23765] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1573.155478][T23765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.181427][ T5763] rc_core: IR keymap rc-hauppauge not found [ 1573.187416][ T5763] Registered IR keymap rc-empty [ 1573.200878][T23765] usb 4-1: config 0 descriptor?? [ 1573.206441][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1573.216887][T23765] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1573.262211][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1573.292375][ T5763] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1573.307376][ T5763] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input103 [ 1573.388520][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1573.513488][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1573.571296][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1573.643040][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1573.671464][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1573.739426][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1573.781545][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1573.824878][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1573.874690][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1573.903012][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1573.943148][ T5763] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1573.963994][ T5763] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1574.002948][ T5763] usb 2-1: USB disconnect, device number 16 [ 1575.351831][T23958] usb 4-1: USB disconnect, device number 27 [ 1581.190849][T32510] wg1 speed is unknown, defaulting to 1000 [ 1582.103328][T32472] wg1 speed is unknown, defaulting to 1000 [ 1582.112890][T23765] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1582.275914][ T29] audit: type=1400 audit(1582.242:2469): avc: denied { append } for pid=32525 comm="syz.5.8701" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1582.311540][T23765] usb 2-1: Using ep0 maxpacket: 32 [ 1582.319388][T32526] binder: BINDER_SET_CONTEXT_MGR already set [ 1582.329003][T32526] binder: 32525:32526 ioctl 4018620d 2000000000c0 returned -16 [ 1582.694421][T32529] syzkaller0: entered promiscuous mode [ 1582.702787][T32529] syzkaller0: entered allmulticast mode [ 1583.538117][T23765] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1583.661039][T23765] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1583.682956][T23765] usb 2-1: can't read configurations, error -71 [ 1583.735085][T32547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8706'. [ 1585.322231][T23958] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1585.501668][T23958] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1585.514968][T23958] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1585.525129][T23958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.536690][T23958] usb 6-1: config 0 descriptor?? [ 1585.548093][T23958] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1586.224486][T23958] usb 6-1: USB disconnect, device number 57 [ 1588.432478][T32569] syzkaller0: entered promiscuous mode [ 1588.445984][T32569] syzkaller0: entered allmulticast mode [ 1588.671430][T32581] Bluetooth: hci4: command 0x0406 tx timeout [ 1590.476668][T32581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1590.502932][T32581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1590.535279][T18653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1590.566947][T18653] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1590.582941][T18653] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1590.609285][T18653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1590.612591][T32621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1590.627662][T18653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1590.629551][T32621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1590.643552][T32621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1592.757060][T32621] Bluetooth: hci0: command tx timeout [ 1592.836486][T32621] Bluetooth: hci6: command tx timeout [ 1594.831831][T32621] Bluetooth: hci0: command tx timeout [ 1594.912166][T32621] Bluetooth: hci6: command tx timeout [ 1595.169326][T32616] wg1 speed is unknown, defaulting to 1000 [ 1595.324273][T32674] syzkaller0: entered promiscuous mode [ 1595.330262][T32674] syzkaller0: entered allmulticast mode [ 1595.386419][T32678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8736'. [ 1595.496380][T32618] wg1 speed is unknown, defaulting to 1000 [ 1595.510496][T32676] syzkaller0: entered promiscuous mode [ 1595.516730][T32676] syzkaller0: entered allmulticast mode [ 1596.188385][T32616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.195811][T32616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.203360][T32616] bridge_slave_0: entered allmulticast mode [ 1596.211029][T32616] bridge_slave_0: entered promiscuous mode [ 1596.219470][T32616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.226656][T32616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.234262][T32616] bridge_slave_1: entered allmulticast mode [ 1596.241797][T32616] bridge_slave_1: entered promiscuous mode [ 1596.290654][T32616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1596.332128][T32616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1596.869445][T32616] team0: Port device team_slave_0 added [ 1596.878158][T32616] team0: Port device team_slave_1 added [ 1596.911468][T32621] Bluetooth: hci0: command tx timeout [ 1596.939037][T32714] syzkaller0: entered promiscuous mode [ 1596.950206][T32714] syzkaller0: entered allmulticast mode [ 1596.959782][T32616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1596.967182][T32616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.992769][T32621] Bluetooth: hci6: command tx timeout [ 1596.993767][T32616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.371680][T32731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input104 [ 1597.691259][T32616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1597.711377][T32616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.738808][T32616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.996210][T32742] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8753'. [ 1598.022513][T32616] hsr_slave_0: entered promiscuous mode [ 1598.029034][T32616] hsr_slave_1: entered promiscuous mode [ 1598.035611][T32616] debugfs: 'hsr0' already exists in 'hsr' [ 1598.041799][T32616] Cannot create hsr debugfs directory [ 1598.050162][T32618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.066757][T32618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.078960][T32618] bridge_slave_0: entered allmulticast mode [ 1598.087898][T32618] bridge_slave_0: entered promiscuous mode [ 1598.096165][T32618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.104753][T32618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.115455][T32618] bridge_slave_1: entered allmulticast mode [ 1598.124407][T32618] bridge_slave_1: entered promiscuous mode [ 1598.160956][T32618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1598.175785][T32618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1598.238667][T32618] team0: Port device team_slave_0 added [ 1598.256782][T32618] team0: Port device team_slave_1 added [ 1598.305230][T32618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1598.312296][T32618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.338428][T32618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1598.350950][T32618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1598.358004][T32618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.388639][T32618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.517106][T32618] hsr_slave_0: entered promiscuous mode [ 1598.523686][T32618] hsr_slave_1: entered promiscuous mode [ 1598.529883][T32618] debugfs: 'hsr0' already exists in 'hsr' [ 1598.535699][T32618] Cannot create hsr debugfs directory [ 1598.791238][T32616] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.861825][ T5763] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1599.005557][T32621] Bluetooth: hci0: command tx timeout [ 1599.015071][T32616] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.083594][ T29] audit: type=1400 audit(1599.042:2470): avc: denied { block_suspend } for pid=306 comm="syz.3.8767" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1599.113340][ T5763] usb 5-1: Using ep0 maxpacket: 16 [ 1599.124510][ T5763] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.136777][ T5763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1599.148163][ T5763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1599.158480][ T5763] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1599.161568][T32621] Bluetooth: hci6: command tx timeout [ 1599.171749][ T5763] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1599.220631][ T5763] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1599.352659][ T5763] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1599.379522][ T5763] usb 5-1: Manufacturer: syz [ 1599.480362][ T5763] usb 5-1: config 0 descriptor?? [ 1599.924293][T32616] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.991569][ T5763] rc_core: IR keymap rc-hauppauge not found [ 1599.997560][ T5763] Registered IR keymap rc-empty [ 1600.006741][ T5763] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1600.050309][ T5763] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1600.077538][T32616] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.089075][ T5763] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1600.101610][ T5747] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1600.118306][ T5763] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input105 [ 1600.142148][ T5763] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1600.163084][ T5763] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1600.192215][ T5763] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1600.223045][ T5763] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1600.251839][ T5763] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1600.277325][ T5747] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1600.314685][ T5763] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1600.337713][ T5747] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1600.357099][ T5763] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1600.376959][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.386499][ T5763] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1600.419539][ T5747] usb 4-1: config 0 descriptor?? [ 1600.429144][ T5763] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1600.453542][ T5747] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1600.482946][ T5763] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1600.537338][ T5763] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1600.561736][ T5763] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1600.573715][T32618] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1600.593130][T32618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1600.599007][ T5763] usb 5-1: USB disconnect, device number 42 [ 1600.607828][T32618] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1600.636420][T32618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1600.663927][T32618] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1600.868372][T32618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1600.881279][T32618] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1601.129713][ T5763] usb 4-1: USB disconnect, device number 28 [ 1601.403434][T32618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1601.568915][ T338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8771'. [ 1601.622426][ T340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8773'. [ 1601.631765][ T340] netlink: 120 bytes leftover after parsing attributes in process `syz.5.8773'. [ 1601.688255][T32616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1601.719672][T32616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1601.728387][T32616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1601.744751][T32616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1601.765673][T32616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1601.782471][T32616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1601.806018][T32616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1601.827882][T32616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1601.946821][T32618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.008593][T32618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.628592][T19029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.635832][T19029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1602.890240][T19029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.897443][T19029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1603.156143][T32616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1603.225808][T32616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1603.251495][ T5763] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1603.269337][T19029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.276509][T19029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1603.306078][T19029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.313275][T19029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1603.348018][T32616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1603.365239][T32616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1603.431677][ T5763] usb 4-1: Using ep0 maxpacket: 16 [ 1603.438955][ T5763] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.459584][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1603.522663][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1603.574410][ T5763] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1603.620076][ T5763] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1603.673531][ T5763] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1603.683417][ T5763] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1603.698646][ T5763] usb 4-1: Manufacturer: syz [ 1603.714752][ T5763] usb 4-1: config 0 descriptor?? [ 1604.047622][ T5763] rc_core: IR keymap rc-hauppauge not found [ 1604.065044][ T5763] Registered IR keymap rc-empty [ 1604.108930][T32618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1604.223674][T32616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1604.224655][ T5763] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1604.251450][ T5763] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1604.274169][ T5763] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1604.373191][ T5763] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input106 [ 1604.746996][ T5763] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1604.760038][ C1] rc rc0: IR event FIFO is full! [ 1604.765019][ C1] rc rc0: IR event FIFO is full! [ 1604.769945][ C1] rc rc0: IR event FIFO is full! [ 1604.774864][ C1] rc rc0: IR event FIFO is full! [ 1604.779780][ C1] rc rc0: IR event FIFO is full! [ 1604.785642][ C1] rc rc0: IR event FIFO is full! [ 1604.789943][T32616] veth0_vlan: entered promiscuous mode [ 1604.790587][ C1] rc rc0: IR event FIFO is full! [ 1604.800962][ C1] rc rc0: IR event FIFO is full! [ 1604.806702][ C1] rc rc0: IR event FIFO is full! [ 1604.811842][ C1] rc rc0: IR event FIFO is full! [ 1604.816786][ C1] rc rc0: IR event FIFO is full! [ 1604.821731][ C1] rc rc0: IR event FIFO is full! [ 1604.825426][T32616] veth1_vlan: entered promiscuous mode [ 1604.826669][ C1] rc rc0: IR event FIFO is full! [ 1604.837059][ T410] rc rc0: two consecutive events of type space [ 1604.851510][ T5763] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1604.873128][ T5763] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1604.891838][ T5763] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1604.921525][ T5763] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1604.947171][T32616] veth0_macvtap: entered promiscuous mode [ 1604.956013][ T5763] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1604.978320][T32616] veth1_macvtap: entered promiscuous mode [ 1605.016821][T32616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1605.043830][T32616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1605.068527][T14762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.081775][ T5763] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1605.103729][T14762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.128055][T14762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.131495][ T5763] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1605.150265][T14762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.157714][ T29] audit: type=1400 audit(1605.122:2471): avc: denied { read } for pid=417 comm="syz.5.8791" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1605.169941][ T5763] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1605.224335][ T29] audit: type=1400 audit(1605.122:2472): avc: denied { open } for pid=417 comm="syz.5.8791" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1605.224376][ T29] audit: type=1400 audit(1605.152:2473): avc: denied { ioctl } for pid=417 comm="syz.5.8791" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1605.374686][T19029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.374709][T19029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.403954][ T5763] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1605.423193][ T5763] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1605.485588][ T5763] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1605.760221][ T5763] usb 4-1: USB disconnect, device number 29 [ 1606.505330][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.562889][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.668721][T32618] veth0_vlan: entered promiscuous mode [ 1606.710021][T32618] veth1_vlan: entered promiscuous mode [ 1606.814278][T32618] veth0_macvtap: entered promiscuous mode [ 1606.850090][T32618] veth1_macvtap: entered promiscuous mode [ 1606.895712][T32618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.917146][T32618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.950133][ T1006] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.995333][T19024] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.026150][T19024] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.050762][T19024] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.082153][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.089828][ T1310] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1607.779636][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.795979][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.837931][ T312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.848413][ T312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.162979][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1608.632109][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1608.696347][ T472] overlayfs: failed to resolve './file1': -2 [ 1608.712386][ T5763] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1609.255985][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.321906][ T5763] usb 5-1: Using ep0 maxpacket: 16 [ 1609.338619][ T5763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1609.371514][ T5763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1609.587641][ T5763] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1609.730939][ T486] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8811'. [ 1610.134888][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1610.151494][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1610.162171][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1610.172066][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1610.193139][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1610.204906][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1610.267431][ T10] usb 2-1: Manufacturer: syz [ 1610.295316][ T10] usb 2-1: config 0 descriptor?? [ 1610.347830][ T475] syzkaller0: entered promiscuous mode [ 1610.355797][ T475] syzkaller0: entered allmulticast mode [ 1610.505533][ T5763] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1610.525883][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.544231][ T5763] usb 5-1: config 0 descriptor?? [ 1610.647899][ T10] rc_core: IR keymap rc-hauppauge not found [ 1610.657523][ T10] Registered IR keymap rc-empty [ 1610.753455][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1610.811882][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1610.853396][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1610.874134][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input107 [ 1610.890168][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1610.901151][ T496] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1610.907690][ T496] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1610.916094][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1610.925404][ T496] vhci_hcd vhci_hcd.0: Device attached [ 1610.936371][ T496] Bluetooth: MGMT ver 1.23 [ 1610.941538][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1610.950317][ T501] vhci_hcd: connection closed [ 1610.961837][T19024] vhci_hcd vhci_hcd.7: stop threads [ 1610.976554][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1610.985768][T19024] vhci_hcd vhci_hcd.7: release socket [ 1610.991303][T19024] vhci_hcd vhci_hcd.7: disconnect device [ 1611.002560][ T5763] usbhid 5-1:0.0: can't add hid device: -71 [ 1611.027190][ T5763] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1611.030211][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1611.038827][ T5763] usb 5-1: USB disconnect, device number 43 [ 1611.089456][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1611.114594][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1611.131660][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1611.173866][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1611.211691][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1611.235550][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1611.244872][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1611.265114][ T10] usb 2-1: USB disconnect, device number 19 [ 1613.455028][ T548] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1613.461553][ T548] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1613.540211][ T548] vhci_hcd vhci_hcd.0: Device attached [ 1613.574103][ T550] vhci_hcd: connection closed [ 1613.574636][T14762] vhci_hcd vhci_hcd.1: stop threads [ 1613.626451][T14762] vhci_hcd vhci_hcd.1: release socket [ 1613.642685][T14762] vhci_hcd vhci_hcd.1: disconnect device [ 1614.239322][ T553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8828'. [ 1616.073164][ T508] syzkaller0: entered promiscuous mode [ 1616.078723][ T508] syzkaller0: entered allmulticast mode [ 1616.228446][ T572] netlink: 168 bytes leftover after parsing attributes in process `syz.7.8835'. [ 1617.051432][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1617.350382][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 1617.377485][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.388586][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.615745][ T604] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8847'. [ 1617.943575][ T50] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1617.971154][ T50] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1617.980362][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.111888][ T50] usb 8-1: config 0 descriptor?? [ 1618.538595][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1618.546091][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1618.557234][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1618.564770][ T50] usbhid 8-1:0.0: can't add hid device: -32 [ 1618.571306][ T50] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1618.601532][ T50] usb 8-1: USB disconnect, device number 2 [ 1619.882114][ T636] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8853'. [ 1619.891464][ T636] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8853'. [ 1621.894882][ T647] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1624.298671][ T661] tipc: Enabling of bearer rejected, failed to enable media [ 1625.311140][ T684] syzkaller0: entered promiscuous mode [ 1625.317849][ T684] syzkaller0: entered allmulticast mode [ 1625.803668][ T705] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1625.887275][ T29] audit: type=1400 audit(1625.862:2474): avc: denied { getopt } for pid=708 comm="syz.5.8878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1630.043908][ T692] syzkaller0: entered promiscuous mode [ 1630.049389][ T692] syzkaller0: entered allmulticast mode [ 1630.057083][ T711] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1630.229537][ T736] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8886'. [ 1630.498597][ T748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8893'. [ 1631.151599][ T5747] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1631.354108][ T5747] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1631.386056][ T5747] usb 8-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1631.414578][ T5747] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.484265][ T5747] usb 8-1: config 0 descriptor?? [ 1631.524301][ T5747] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1631.584657][ T780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8900'. [ 1632.247336][ T5763] usb 8-1: USB disconnect, device number 3 [ 1634.995690][ T814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8910'. [ 1635.774009][ T822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8913'. [ 1638.730393][ T5747] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1639.315229][ T5747] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1639.326701][ T5747] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1639.345422][ T5747] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1639.380712][ T5747] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1639.424709][ T5747] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1639.447913][ T5747] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1639.457719][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1639.466066][ T5747] usb 4-1: Product: syz [ 1639.563986][ T5747] usb 4-1: Manufacturer: syz [ 1639.584338][ T5747] cdc_wdm 4-1:1.0: skipping garbage [ 1639.606777][ T5747] cdc_wdm 4-1:1.0: skipping garbage [ 1639.621826][ T5747] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1639.627829][ T5747] cdc_wdm 4-1:1.0: Unknown control protocol [ 1639.823006][ T29] audit: type=1400 audit(1639.782:2475): avc: denied { read write } for pid=846 comm="syz.3.8922" name="cdc-wdm0" dev="devtmpfs" ino=4699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1639.859506][ C1] wdm_int_callback: 53 callbacks suppressed [ 1639.859531][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1639.926968][ T29] audit: type=1400 audit(1639.782:2476): avc: denied { open } for pid=846 comm="syz.3.8922" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1640.065178][ T5763] usb 4-1: USB disconnect, device number 30 [ 1640.181810][T32581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1640.197838][T32581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1640.207937][T32581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1640.232895][T32581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1640.246034][T32581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1641.738591][ T892] wg1 speed is unknown, defaulting to 1000 [ 1642.132923][ T29] audit: type=1400 audit(1642.102:2477): avc: denied { mount } for pid=933 comm="syz.3.8949" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1642.328455][ T963] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1642.352949][T32581] Bluetooth: hci1: command tx timeout [ 1642.491547][ T29] audit: type=1400 audit(1642.452:2478): avc: denied { ioctl } for pid=969 comm="syz.1.8958" path="socket:[129729]" dev="sockfs" ino=129729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1642.651418][ T5763] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1643.160544][ T892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.167878][ T892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.175863][ T892] bridge_slave_0: entered allmulticast mode [ 1643.183482][ T892] bridge_slave_0: entered promiscuous mode [ 1643.192033][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.199248][ T892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.210529][ T892] bridge_slave_1: entered allmulticast mode [ 1643.218188][ T892] bridge_slave_1: entered promiscuous mode [ 1643.251920][ T892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.264070][ T892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.295511][ T5763] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1643.331631][ T5763] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1643.360773][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.420631][ T5763] usb 6-1: config 0 descriptor?? [ 1643.447200][ T5763] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1643.449723][ T892] team0: Port device team_slave_0 added [ 1643.489166][ T982] tipc: Enabling of bearer rejected, failed to enable media [ 1643.510988][ T892] team0: Port device team_slave_1 added [ 1643.568719][ T892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1643.576247][ T892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.603780][ T892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1643.616411][ T892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.623798][ T892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.653246][ T892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.711639][ T892] hsr_slave_0: entered promiscuous mode [ 1643.718213][ T892] hsr_slave_1: entered promiscuous mode [ 1643.725043][ T892] debugfs: 'hsr0' already exists in 'hsr' [ 1643.730916][ T892] Cannot create hsr debugfs directory [ 1643.902374][T23958] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1644.013812][T30700] usb 6-1: USB disconnect, device number 58 [ 1644.123521][ T312] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.431694][T32581] Bluetooth: hci1: command tx timeout [ 1644.684711][ T892] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.828237][ T1023] wg1 speed is unknown, defaulting to 1000 [ 1645.020772][ T892] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.023476][ T1036] fuse: Bad value for 'group_id' [ 1645.036581][ T1036] fuse: Bad value for 'group_id' [ 1645.152470][ T892] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.323479][ T892] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.916409][ T1062] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1646.512028][T32581] Bluetooth: hci1: command tx timeout [ 1647.783233][ T5747] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1648.041631][ T5747] usb 6-1: Using ep0 maxpacket: 16 [ 1648.105225][ T5747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.153799][ T5747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.198455][ T5747] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1648.232421][ T5747] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1648.259068][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.287958][ T5747] usb 6-1: config 0 descriptor?? [ 1648.320728][ T892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1648.330415][ T892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1648.338548][ T892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1648.348064][ T892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1648.356465][ T892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1648.366484][ T892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1648.371452][T30700] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1648.374502][ T892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1648.392081][ T892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1648.449846][ T892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1648.470550][ T892] 8021q: adding VLAN 0 to HW filter on device team0 [ 1648.482904][ T906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.490070][ T906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1648.503806][T19035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.510964][T19035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1648.523673][ T10] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1648.533564][T30700] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1648.544668][T30700] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1648.562358][T30700] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1648.573434][T30700] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1648.587951][T30700] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1648.602405][T32581] Bluetooth: hci1: command tx timeout [ 1648.603470][T30700] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1648.620846][T30700] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1648.632892][T30700] usb 8-1: Product: syz [ 1648.640595][T30700] usb 8-1: Manufacturer: syz [ 1648.657859][T30700] cdc_wdm 8-1:1.0: skipping garbage [ 1648.669781][T30700] cdc_wdm 8-1:1.0: skipping garbage [ 1648.678065][T30700] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1648.691780][T30700] cdc_wdm 8-1:1.0: Unknown control protocol [ 1648.697838][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1648.715918][ T5747] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1648.725564][ T10] usb 2-1: config 0 has no interface number 0 [ 1648.731751][ T5747] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1648.731780][ T5747] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1648.747430][ T5747] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1648.756701][ T5747] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1648.768293][ T5747] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1648.777560][ T5747] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1648.794368][ T10] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1648.798427][ T5747] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1648.810598][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1648.825861][ T5747] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1648.830382][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.850112][ T5747] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1648.860222][ T10] usb 2-1: Product: syz [ 1648.875957][ T5747] microsoft 0003:045E:07DA.0030: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1648.884394][ T10] usb 2-1: Manufacturer: syz [ 1648.907747][ T10] usb 2-1: SerialNumber: syz [ 1648.907747][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1648.908291][ T5747] microsoft 0003:045E:07DA.0030: no inputs found [ 1648.922835][ T10] usb 2-1: config 0 descriptor?? [ 1648.984903][ T5747] microsoft 0003:045E:07DA.0030: could not initialize ff, continuing anyway [ 1649.023634][ T5747] usb 6-1: USB disconnect, device number 59 [ 1649.109234][T30700] usb 8-1: USB disconnect, device number 5 [ 1649.211716][T31144] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1649.260274][ T892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.363329][T31144] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1649.376517][T31144] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1649.390322][T31144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.404676][T31144] usb 4-1: config 0 descriptor?? [ 1649.417976][T31144] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1649.492930][ T892] veth0_vlan: entered promiscuous mode [ 1649.510961][ T892] veth1_vlan: entered promiscuous mode [ 1649.564954][ T892] veth0_macvtap: entered promiscuous mode [ 1649.577986][ T892] veth1_macvtap: entered promiscuous mode [ 1649.606302][ T892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1649.778715][ T892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1649.793647][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1649.845094][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.857158][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.061039][T23958] usb 4-1: USB disconnect, device number 31 [ 1650.169539][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1650.327088][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.347489][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1650.363149][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.386343][ T10] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1650.443034][ T10] usb 2-1: USB disconnect, device number 20 [ 1650.486128][ T1122] fuse: Bad value for 'group_id' [ 1650.493725][ T1122] fuse: Bad value for 'group_id' [ 1650.551813][ T1124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8994'. [ 1650.670389][T19035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.693757][T19035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.789530][ T906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.802226][ T906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1651.064057][ T29] audit: type=1400 audit(1651.032:2479): avc: denied { append } for pid=1138 comm="syz.5.8997" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1651.092220][ T1139] loop3: detected capacity change from 0 to 7 [ 1651.109070][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1651.118485][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1651.130837][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1651.140029][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1651.151885][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1651.161084][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 1651.169077][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1651.178348][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1651.186913][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1651.196133][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1651.204544][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1651.213718][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1651.223866][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1651.233049][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1651.241419][ T1139] ldm_validate_partition_table(): Disk read failed. [ 1651.258148][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1651.267401][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1651.275895][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1651.285095][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1651.296000][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1651.305235][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1651.314280][ T1139] Dev loop3: unable to read RDB block 0 [ 1651.334023][ T1139] loop3: unable to read partition table [ 1651.343005][ T1139] loop3: partition table beyond EOD, truncated [ 1651.372585][ T1139] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 1651.631845][ T1154] binder: 1153:1154 ioctl c0306201 2000000003c0 returned -14 [ 1651.706530][ T1156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9004'. [ 1652.710816][T32621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1652.731933][T32621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1652.749395][T32621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1652.764383][T32621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1652.775522][T32621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1652.996331][ T1182] binder: 1181:1182 ioctl 4018620d 0 returned -22 [ 1653.478709][ T1174] wg1 speed is unknown, defaulting to 1000 [ 1653.907386][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.914781][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.922669][ T1174] bridge_slave_0: entered allmulticast mode [ 1653.929651][ T1174] bridge_slave_0: entered promiscuous mode [ 1653.937906][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.945111][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.953143][ T1174] bridge_slave_1: entered allmulticast mode [ 1653.960019][ T1174] bridge_slave_1: entered promiscuous mode [ 1653.983875][ T1174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1653.995734][ T1174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.021753][ T1174] team0: Port device team_slave_0 added [ 1654.029298][ T1174] team0: Port device team_slave_1 added [ 1654.050503][ T1174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1654.057659][ T1174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1654.083618][ T1174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1654.091672][T30700] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1654.096546][ T1174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1654.108555][ T1174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1654.136425][ T1174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1654.173931][ T1174] hsr_slave_0: entered promiscuous mode [ 1654.180130][ T1174] hsr_slave_1: entered promiscuous mode [ 1654.186221][ T1174] debugfs: 'hsr0' already exists in 'hsr' [ 1654.192995][ T1174] Cannot create hsr debugfs directory [ 1654.251778][T30700] usb 8-1: Using ep0 maxpacket: 8 [ 1654.258978][T30700] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1654.267837][T30700] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.279656][T30700] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1654.299829][T30700] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1654.309021][T30700] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.325584][T30700] usbtmc 8-1:16.0: bulk endpoints not found [ 1654.388905][ T1174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.500959][ T1174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.597231][ T1174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.700494][ T1174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.862454][T32581] Bluetooth: hci2: command tx timeout [ 1654.943396][ T1174] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1654.978158][ T1174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1655.005647][ T1174] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1655.017280][ T1174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1655.027568][ T1174] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1655.109984][ T1174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1655.216418][ T1220] wg1 speed is unknown, defaulting to 1000 [ 1655.561140][T32621] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1655.979156][ T1174] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1656.006550][ T1174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1656.471576][ T1174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1656.531595][ T1174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.570369][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.577536][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.619902][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.627090][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.916060][T32621] Bluetooth: hci2: command tx timeout [ 1657.235595][ T5733] usb 8-1: USB disconnect, device number 6 [ 1657.751462][ T5733] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1657.765752][ T1174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1657.903264][ T5733] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1657.938926][ T5733] usb 8-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1657.966163][ T5733] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.969821][ T1174] veth0_vlan: entered promiscuous mode [ 1658.007629][ T5733] usb 8-1: config 0 descriptor?? [ 1658.040453][ T5733] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1658.041087][ T1174] veth1_vlan: entered promiscuous mode [ 1658.157110][ T1174] veth0_macvtap: entered promiscuous mode [ 1658.202431][ T1174] veth1_macvtap: entered promiscuous mode [ 1658.287392][ T1174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1658.298832][ T1174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1658.747848][ T5763] usb 8-1: USB disconnect, device number 7 [ 1659.044803][T32621] Bluetooth: hci2: command tx timeout [ 1659.156135][T19031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.198508][T19031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.230625][T19031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.257651][T19031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.531650][ T312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.539604][ T312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1659.565328][T19024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.573804][T19024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1659.721502][T31144] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1659.749181][ T1305] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1659.755728][ T1305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1659.765498][ T1305] vhci_hcd vhci_hcd.0: Device attached [ 1659.785856][ T1308] vhci_hcd: connection closed [ 1659.786077][ T831] vhci_hcd vhci_hcd.3: stop threads [ 1659.797861][ T831] vhci_hcd vhci_hcd.3: release socket [ 1659.803998][ T831] vhci_hcd vhci_hcd.3: disconnect device [ 1659.901431][T31144] usb 5-1: Using ep0 maxpacket: 8 [ 1659.908305][T31144] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1659.917863][T31144] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.929226][T31144] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1659.942468][T31144] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1659.952020][T31144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.969846][T31144] usbtmc 5-1:16.0: bulk endpoints not found [ 1660.749736][T32621] Bluetooth: Unexpected continuation frame (len 66) [ 1660.749807][ T29] audit: type=1400 audit(1660.712:2480): avc: denied { write } for pid=1342 comm="syz.3.9055" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1661.219336][ T1360] syz_tun: entered allmulticast mode [ 1661.491276][ T1357] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1661.497828][ T1357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1661.637568][ T1357] vhci_hcd vhci_hcd.0: Device attached [ 1661.652870][ T1358] vhci_hcd: connection closed [ 1661.653124][ T831] vhci_hcd vhci_hcd.3: stop threads [ 1661.669510][ T831] vhci_hcd vhci_hcd.3: release socket [ 1661.675379][ T831] vhci_hcd vhci_hcd.3: disconnect device [ 1661.711502][T23958] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1661.786686][ T1350] syz_tun: left allmulticast mode [ 1661.984232][T23958] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1661.997612][T23958] usb 8-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1662.008612][T23958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.024973][T23958] usb 8-1: config 0 descriptor?? [ 1662.052517][T23958] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1662.399453][T31144] usb 5-1: USB disconnect, device number 44 [ 1663.275793][ T312] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.571804][T23765] usb 8-1: USB disconnect, device number 8 [ 1664.281663][T31144] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1664.451407][T31144] usb 5-1: Using ep0 maxpacket: 16 [ 1664.457968][T31144] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.468334][T31144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1664.480210][T31144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1664.490020][T31144] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1664.500620][T31144] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1664.514589][T31144] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1664.523678][T31144] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1664.531789][T31144] usb 5-1: Manufacturer: syz [ 1664.539285][T31144] usb 5-1: config 0 descriptor?? [ 1664.753413][T32621] Bluetooth: Unexpected continuation frame (len 66) [ 1664.874158][ T1401] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9072'. [ 1664.902769][T31144] rc_core: IR keymap rc-hauppauge not found [ 1664.914085][T31144] Registered IR keymap rc-empty [ 1664.929640][T31144] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1665.100260][T31144] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1665.122762][T31144] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1665.151951][T31144] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input108 [ 1665.339052][T31144] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1665.564808][T31144] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1665.585217][ T1411] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1665.591762][ T1411] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1665.599547][ T1414] syz_tun: entered allmulticast mode [ 1665.607880][ T1411] vhci_hcd vhci_hcd.0: Device attached [ 1665.621515][T31144] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1665.639937][ T1419] vhci_hcd: connection closed [ 1665.640211][T19024] vhci_hcd vhci_hcd.3: stop threads [ 1665.666121][T31144] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1665.674332][T19024] vhci_hcd vhci_hcd.3: release socket [ 1665.687884][T19024] vhci_hcd vhci_hcd.3: disconnect device [ 1665.712729][T31144] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1665.753597][T31144] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1665.784290][ T1403] syz_tun: left allmulticast mode [ 1665.894779][T31144] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1665.931938][T31144] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1665.978441][T31144] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1667.025431][ T1429] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1667.281896][T31144] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1667.642073][T31144] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1667.782904][T31144] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1668.212858][T31144] usb 5-1: USB disconnect, device number 45 [ 1668.562654][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.571860][ T1310] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1668.597135][ T1436] binder: 1435:1436 ioctl c0306201 200000000140 returned -11 [ 1668.626103][ T1428] syzkaller0: entered promiscuous mode [ 1668.655387][ T1428] syzkaller0: entered allmulticast mode [ 1668.834245][T32621] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1668.843226][T32621] Bluetooth: hci0: Injecting HCI hardware error event [ 1668.864383][T32581] Bluetooth: hci0: hardware error 0x00 [ 1669.021750][T31144] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1669.201444][T31144] usb 5-1: Using ep0 maxpacket: 8 [ 1669.209885][T31144] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1669.226886][T31144] usb 5-1: config 0 has no interface number 0 [ 1669.275184][T31144] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1669.291681][T31144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.323456][T31144] usb 5-1: Product: syz [ 1669.327689][T31144] usb 5-1: Manufacturer: syz [ 1669.342512][T31144] usb 5-1: SerialNumber: syz [ 1669.352047][ T1450] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9087'. [ 1669.367840][T31144] usb 5-1: config 0 descriptor?? [ 1669.602816][T31144] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1669.614536][T31144] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1669.664745][T31144] usb 5-1: USB disconnect, device number 46 [ 1669.734328][ T1465] fuse: Bad value for 'fd' [ 1671.005339][T32581] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1674.205506][ T29] audit: type=1400 audit(1674.172:2481): avc: denied { relabelfrom } for pid=1496 comm="syz.4.9098" name="NETLINK" dev="sockfs" ino=134504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1674.346309][ T1505] fuse: Bad value for 'fd' [ 1675.198786][ T1524] syzkaller0: entered promiscuous mode [ 1675.204426][ T1524] syzkaller0: entered allmulticast mode [ 1675.301459][ T5733] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1675.483103][ T5733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1675.536582][ T5733] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1675.582817][ T5733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1675.604184][ T5733] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1675.630322][ T5733] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1675.647607][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.666249][ T5733] usb 6-1: Product: syz [ 1675.672103][ T5733] usb 6-1: Manufacturer: syz [ 1675.682324][ T5733] usb 6-1: SerialNumber: syz [ 1675.710327][ T5733] usb 6-1: config 0 descriptor?? [ 1675.726081][ T5733] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 1675.773811][ T1534] syzkaller0: entered promiscuous mode [ 1675.791812][ T1534] syzkaller0: entered allmulticast mode [ 1676.074818][ T5733] scsi host1: usb-storage 6-1:0.0 [ 1676.100712][ T5733] usb 6-1: USB disconnect, device number 60 [ 1680.607390][ T1560] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9118'. [ 1680.748380][ T1581] netlink: 'syz.4.9127': attribute type 12 has an invalid length. [ 1680.760197][T32581] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1680.777093][ T1581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9127'. [ 1680.786880][ T1581] macsec0: entered promiscuous mode [ 1680.793280][ T1581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9127'. [ 1680.811281][ T1581] veth1_macvtap: left promiscuous mode [ 1680.838753][ T1581] macsec0 (unregistering): left promiscuous mode [ 1681.160059][ T1588] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1681.205645][ T1598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9132'. [ 1681.215363][ T1598] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9132'. [ 1681.226808][ T1598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9132'. [ 1681.526726][ T29] audit: type=1400 audit(1681.502:2482): avc: denied { mounton } for pid=1603 comm="syz.1.9134" path=2F38342F66696C65302FE91F7189591E9233614B dev="overlay" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1681.528413][ T1605] 9pnet_fd: p9_fd_create_unix (1605): problem connecting socket: éq‰Y’3aK: -111 [ 1683.498351][ T1636] syz_tun: entered allmulticast mode [ 1684.041775][ T1631] syz_tun: left allmulticast mode [ 1684.661154][ T1651] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1684.667705][ T1651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1684.707782][ T1651] vhci_hcd vhci_hcd.0: Device attached [ 1684.730516][ T1658] vhci_hcd: connection closed [ 1684.738565][T19035] vhci_hcd vhci_hcd.1: stop threads [ 1684.774851][T19035] vhci_hcd vhci_hcd.1: release socket [ 1684.793180][T19035] vhci_hcd vhci_hcd.1: disconnect device [ 1686.180505][ T1701] input: syz0 as /devices/virtual/input/input109 [ 1687.627236][ T1713] tap0: tun_chr_ioctl cmd 35108 [ 1687.635352][ T1717] input input110: cannot allocate more than FF_MAX_EFFECTS effects [ 1687.705880][ T29] audit: type=1400 audit(1687.662:2483): avc: denied { map } for pid=1715 comm="syz.7.9172" path="socket:[134920]" dev="sockfs" ino=134920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1687.756510][ T1716] wg1 speed is unknown, defaulting to 1000 [ 1687.960189][ T1723] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1687.966745][ T1723] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1687.974536][ T1723] vhci_hcd vhci_hcd.0: Device attached [ 1688.008936][ T1724] vhci_hcd: connection closed [ 1688.009306][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1688.055570][ T13] vhci_hcd vhci_hcd.1: release socket [ 1688.065735][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1690.846570][ T1772] syzkaller0: entered promiscuous mode [ 1690.854232][ T1772] syzkaller0: entered allmulticast mode [ 1692.242099][ T1803] Invalid argument reading file caps for ./file0 [ 1693.248108][ T1821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9206'. [ 1695.272797][ T1829] xt_hashlimit: size too large, truncated to 1048576 [ 1698.377779][ T1796] tipc: Enabling of bearer rejected, failed to enable media [ 1698.666628][ T1855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9218'. [ 1698.893032][ T29] audit: type=1400 audit(1698.852:2484): avc: denied { mounton } for pid=1864 comm="syz.5.9222" path="/367/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1699.027478][ T29] audit: type=1326 audit(1698.992:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.3.9225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1699.080001][ T1871] netlink: 'syz.3.9225': attribute type 5 has an invalid length. [ 1699.098111][ T29] audit: type=1326 audit(1698.992:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.3.9225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1699.194474][ T29] audit: type=1326 audit(1699.032:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.3.9225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1699.224736][ T29] audit: type=1326 audit(1699.032:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.3.9225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1699.266587][ T29] audit: type=1326 audit(1699.032:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.3.9225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1699.294390][ T1876] wg1 speed is unknown, defaulting to 1000 [ 1699.295955][ T1884] tipc: Enabling of bearer rejected, failed to enable media [ 1699.312069][ T29] audit: type=1326 audit(1699.032:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.3.9225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1699.344313][ T29] audit: type=1326 audit(1699.032:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.3.9225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1699.400888][ T29] audit: type=1326 audit(1699.032:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.3.9225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1699.475337][ T29] audit: type=1326 audit(1699.032:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.3.9225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1699.930915][ T1899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9231'. [ 1700.209280][ T1911] fuse: fd is not a fuse device [ 1700.235933][ T1916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9238'. [ 1700.255999][ T1916] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9238'. [ 1700.280476][ T1916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9238'. [ 1700.332414][ T50] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1700.403751][ T1923] wg1 speed is unknown, defaulting to 1000 [ 1700.501410][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 1700.513706][ T50] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.530533][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1700.553435][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1700.601112][ T50] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1700.612113][ T1939] fuse: Bad value for 'fd' [ 1700.649009][ T50] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1700.710423][ T50] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1700.739279][ T50] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1700.767010][ T50] usb 2-1: Manufacturer: syz [ 1700.799241][ T50] usb 2-1: config 0 descriptor?? [ 1701.142890][ T50] rc_core: IR keymap rc-hauppauge not found [ 1701.164921][ T50] Registered IR keymap rc-empty [ 1701.323842][ T50] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1701.391487][ T50] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1701.427443][ T50] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1701.600326][ T50] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input111 [ 1701.898929][ T1969] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9245'. [ 1701.923261][ T50] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1701.961726][ T50] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1701.991492][ T50] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1702.151456][ T50] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1702.155484][ T1980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9250'. [ 1702.172678][ T50] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1702.193639][ T1980] netlink: 120 bytes leftover after parsing attributes in process `syz.7.9250'. [ 1702.226572][ T1980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9250'. [ 1702.231940][ T50] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1702.260685][ T1985] tipc: Enabling of bearer rejected, failed to enable media [ 1702.291507][ T50] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1702.323456][ T50] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1702.354005][ T50] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1702.544772][ T50] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1702.575953][ T50] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1702.602134][ T50] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1702.632563][ T50] usb 2-1: USB disconnect, device number 21 [ 1703.108569][ T1999] fuse: fd is not a fuse device [ 1703.450395][ T2018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9261'. [ 1703.553639][ T2028] fuse: fd is not a fuse device [ 1703.928270][ T5733] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1704.145737][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1704.187001][ T5733] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1704.214302][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.242867][ T5733] usb 2-1: config 0 descriptor?? [ 1704.276203][ T5733] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1705.468326][T19035] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.478091][ T50] usb 2-1: USB disconnect, device number 22 [ 1705.900993][ T2059] __nla_validate_parse: 3 callbacks suppressed [ 1705.901015][ T2059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9275'. [ 1705.940260][ T2059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9275'. [ 1706.424753][ T2086] netlink: 'syz.5.9282': attribute type 13 has an invalid length. [ 1706.433826][ T2086] netlink: 'syz.5.9282': attribute type 17 has an invalid length. [ 1706.575408][ T2086] macvlan2: left promiscuous mode [ 1706.580642][ T2086] macvlan2: left allmulticast mode [ 1706.585963][ T2086] netdevsim netdevsim5 netdevsim3: left allmulticast mode [ 1707.308043][ T2110] overlayfs: failed to clone upperpath [ 1707.812947][ T2129] xt_hashlimit: size too large, truncated to 1048576 [ 1708.745180][ T2151] netlink: 72 bytes leftover after parsing attributes in process `syz.7.9309'. [ 1709.056465][ T2156] netlink: 'syz.7.9309': attribute type 13 has an invalid length. [ 1709.076045][ T2153] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1709.082596][ T2153] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1709.138778][ T2156] netlink: 'syz.7.9309': attribute type 17 has an invalid length. [ 1709.177025][ T2153] vhci_hcd vhci_hcd.0: Device attached [ 1709.192308][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1709.192328][ T29] audit: type=1400 audit(1709.092:2522): avc: denied { listen } for pid=2150 comm="syz.7.9309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1709.265424][ T2157] vhci_hcd: connection closed [ 1709.269910][T19027] vhci_hcd vhci_hcd.1: stop threads [ 1709.317805][T19027] vhci_hcd vhci_hcd.1: release socket [ 1709.345317][T19027] vhci_hcd vhci_hcd.1: disconnect device [ 1710.041059][ T2180] wg1 speed is unknown, defaulting to 1000 [ 1710.920858][ T29] audit: type=1400 audit(1710.852:2523): avc: denied { relabelfrom } for pid=2207 comm="syz.1.9326" name="" dev="pipefs" ino=136802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1711.442602][T23765] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1711.623249][T23765] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1711.649746][T23765] usb 2-1: New USB device found, idVendor=0e41, idProduct=3000, bcdDevice= 0.40 [ 1711.674500][T23765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.691496][T23765] usb 2-1: Product: syz [ 1711.700904][T23765] usb 2-1: Manufacturer: syz [ 1711.720778][T23765] usb 2-1: SerialNumber: syz [ 1711.885075][ T2252] netlink: 264 bytes leftover after parsing attributes in process `syz.4.9339'. [ 1712.828506][ T2300] fuse: fd is not a fuse device [ 1713.135393][ T2301] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9352'. [ 1713.810246][T23765] usb 2-1: Unsupported UAC3 BADD profile [ 1713.971698][T23765] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1714.286421][T23765] usb 2-1: USB disconnect, device number 23 [ 1714.575231][ T2183] udevd[2183]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1714.698575][ T2322] syzkaller0: entered promiscuous mode [ 1714.723604][ T2322] syzkaller0: entered allmulticast mode [ 1715.763777][ T2349] overlayfs: missing 'lowerdir' [ 1715.869188][ T2355] fuse: fd is not a fuse device [ 1716.905692][ T2374] fuse: Bad value for 'fd' [ 1718.046169][ T2386] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9386'. [ 1719.020326][ T2399] fuse: fd is not a fuse device [ 1719.280456][ T2403] fuse: fd is not a fuse device [ 1720.236204][ T2409] fuse: fd is not a fuse device [ 1720.318417][ T2414] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9398'. [ 1722.029388][ T2431] xt_bpf: check failed: parse error [ 1722.069468][ T29] audit: type=1400 audit(1721.444:2524): avc: denied { watch } for pid=2430 comm="syz.4.9403" path="/78/file1" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1722.134984][ T2433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9405'. [ 1722.257109][ T29] audit: type=1400 audit(1721.622:2525): avc: denied { remount } for pid=2430 comm="syz.4.9403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1722.408096][T32621] Bluetooth: hci6: command 0x0406 tx timeout [ 1722.435935][ T2437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9402'. [ 1722.461399][ T2442] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1722.467957][ T2442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1722.527458][ T2452] fuse: fd is not a fuse device [ 1722.539508][ T2442] vhci_hcd vhci_hcd.0: Device attached [ 1722.567746][ T2449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9408'. [ 1722.584334][ T2448] vhci_hcd: connection closed [ 1722.590107][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1722.651040][ T13] vhci_hcd vhci_hcd.1: release socket [ 1722.686090][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1724.151994][ T2498] fuse: Bad value for 'fd' [ 1724.634957][ T2505] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9421'. [ 1726.063047][ T2554] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9433'. [ 1726.182970][ T2565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.192304][ T2565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.498666][ T2577] netlink: 'syz.3.9435': attribute type 4 has an invalid length. [ 1728.495025][ T5747] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1729.077094][ T5747] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1729.102837][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.123937][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1729.150797][ T5747] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1729.189727][ T5747] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1729.201560][ T2601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9445'. [ 1729.213579][ T2601] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9445'. [ 1729.218982][ T5747] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1729.239940][ T5747] usb 2-1: Manufacturer: syz [ 1729.334755][ T5747] usb 2-1: config 0 descriptor?? [ 1729.784286][ T5747] appleir 0003:05AC:8243.0031: item fetching failed at offset 0/1 [ 1729.793947][ T2662] netlink: 'syz.7.9456': attribute type 13 has an invalid length. [ 1729.802823][ T5747] appleir 0003:05AC:8243.0031: parse failed [ 1729.809126][ T2662] netlink: 'syz.7.9456': attribute type 17 has an invalid length. [ 1729.817361][ T5747] appleir 0003:05AC:8243.0031: probe with driver appleir failed with error -22 [ 1730.000024][ T5747] usb 2-1: USB disconnect, device number 24 [ 1730.575127][ T2677] autofs: Unknown parameter '0x0000000000000000' [ 1731.214573][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.226485][ T1310] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1731.268257][ T2691] netlink: 172 bytes leftover after parsing attributes in process `syz.1.9464'. [ 1734.783938][ T2743] autofs: Unknown parameter '0x0000000000000000' [ 1736.286286][ T6443] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.745467][ T2800] autofs: Unknown parameter '0x0000000000000000' [ 1738.010588][ T2811] tipc: Enabling of bearer rejected, failed to enable media [ 1738.446556][ T2838] syzkaller0: entered promiscuous mode [ 1738.465826][ T2838] syzkaller0: entered allmulticast mode [ 1738.483666][ T2840] xt_hashlimit: size too large, truncated to 1048576 [ 1738.999203][ T2852] tipc: Enabling of bearer rejected, failed to enable media [ 1740.842698][ T2893] wg1 speed is unknown, defaulting to 1000 [ 1742.240406][ T2931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9520'. [ 1742.727768][ T2942] xt_hashlimit: size too large, truncated to 1048576 [ 1745.219925][ T2976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9534'. [ 1745.588124][ T2991] fuse: fd is not a fuse device [ 1746.906817][ T3020] fuse: fd is not a fuse device [ 1747.112516][ T3027] syzkaller0: entered promiscuous mode [ 1747.120191][ T3027] syzkaller0: entered allmulticast mode [ 1747.335620][ T3032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9551'. [ 1747.755512][ T3045] fuse: fd is not a fuse device [ 1747.903841][ T3053] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1747.923194][ T3053] syzkaller0: entered promiscuous mode [ 1747.943954][ T3053] syzkaller0: entered allmulticast mode [ 1747.983353][ T3053] tipc: Started in network mode [ 1748.437009][ T3053] tipc: Node identity aadd584cb98f, cluster identity 4711 [ 1748.448028][ T3053] tipc: Enabled bearer , priority 0 [ 1748.459947][ T3052] tipc: Resetting bearer [ 1748.543103][ T3052] tipc: Disabling bearer [ 1751.122038][ T3121] fuse: Unknown parameter '0x0000000000000003' [ 1751.203645][ T3125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9589'. [ 1751.301239][ T3128] syzkaller0: entered promiscuous mode [ 1751.306936][ T3128] syzkaller0: entered allmulticast mode [ 1753.342915][ T3133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1753.355598][ T3133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1754.112697][ T312] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.146661][ T2050] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.171692][ T3159] fuse: fd is not a fuse device [ 1754.187466][ T2050] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.905272][ T3177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9607'. [ 1754.948873][ T3179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9607'. [ 1758.515563][ T3249] fuse: fd is not a fuse device [ 1760.561063][ T3289] fuse: Bad value for 'fd' [ 1762.011890][ T3315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9645'. [ 1762.259146][ T3332] fuse: fd is not a fuse device [ 1762.541315][ T29] audit: type=1400 audit(1759.325:2526): avc: denied { ioctl } for pid=3341 comm="syz.4.9655" path="socket:[137897]" dev="sockfs" ino=137897 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1763.688893][ T3369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9662'. [ 1765.573478][ T3408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9673'. [ 1766.182089][T32581] Bluetooth: hci1: command 0x0406 tx timeout [ 1767.530014][ T3455] No control pipe specified [ 1769.407508][ T3497] No control pipe specified [ 1770.071952][ T3522] fuse: Bad value for 'fd' [ 1770.746808][ T3531] No control pipe specified [ 1771.155047][ T3554] fuse: fd is not a fuse device [ 1771.687302][ T29] audit: type=1400 audit(1767.878:2527): avc: denied { write } for pid=3576 comm="syz.5.9726" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1772.631831][ T3614] fuse: fd is not a fuse device [ 1773.868730][ T3670] fuse: Bad value for 'fd' [ 1774.644772][ T3686] fuse: fd is not a fuse device [ 1774.871170][ T3696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9757'. [ 1775.667660][ T3732] fuse: fd is not a fuse device [ 1775.806974][ T3737] fuse: fd is not a fuse device [ 1777.179352][ T3742] tmpfs: Unknown parameter 'mp' [ 1777.893248][ T3798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9782'. [ 1778.039970][ T3806] fuse: fd is not a fuse device [ 1778.534896][ T3837] fuse: Bad value for 'fd' [ 1780.992271][ T3900] tmpfs: Bad value for 'mpol' [ 1782.585491][T32621] Bluetooth: hci2: command 0x0406 tx timeout [ 1784.849873][ T3964] tmpfs: Bad value for 'mpol' [ 1787.696698][ T4018] overlayfs: failed to clone upperpath [ 1789.245135][ T4073] wg1 speed is unknown, defaulting to 1000 [ 1791.538011][ T6443] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.454203][ T6443] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.655847][ T4143] tmpfs: Bad value for 'mpol' [ 1793.201379][ T6443] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.457254][ T6443] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.690542][ T4193] fuse: fd is not a fuse device [ 1796.667774][ T4204] syz_tun: entered allmulticast mode [ 1796.673448][ T4204] syz_tun: left allmulticast mode [ 1796.808835][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.816256][ T1310] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1797.076449][ T4226] overlayfs: failed to clone upperpath [ 1798.011133][ T6443] bridge_slave_1: left allmulticast mode [ 1798.035338][ T6443] bridge_slave_1: left promiscuous mode [ 1798.057688][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.090592][ T29] audit: type=1400 audit(1800.582:2528): avc: denied { lock } for pid=4240 comm="syz.5.9900" path="socket:[140153]" dev="sockfs" ino=140153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1799.553931][ T6443] bridge_slave_0: left allmulticast mode [ 1799.623205][ T6443] bridge_slave_0: left promiscuous mode [ 1799.667031][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.727436][ T4260] fuse: fd is not a fuse device [ 1800.320738][ T6443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.340690][ T6443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1800.362494][ T6443] bond0 (unregistering): Released all slaves [ 1801.361804][ T6443] hsr_slave_0: left promiscuous mode [ 1801.441982][ T4303] overlayfs: failed to clone upperpath [ 1802.402772][ T6443] hsr_slave_1: left promiscuous mode [ 1802.472460][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1802.524406][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.647187][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.694089][ T29] audit: type=1400 audit(1804.896:2529): avc: denied { write } for pid=4270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1802.731770][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1803.017979][ T6443] veth1_macvtap: left promiscuous mode [ 1803.042155][ T6443] veth0_macvtap: left promiscuous mode [ 1803.068155][ T6443] veth1_vlan: left promiscuous mode [ 1803.087928][ T6443] veth0_vlan: left promiscuous mode [ 1803.818448][ T29] audit: type=1400 audit(1805.945:2530): avc: denied { write } for pid=4322 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1804.988484][ T6443] team0 (unregistering): Port device team_slave_1 removed [ 1805.010019][ T6443] team0 (unregistering): Port device team_slave_0 removed [ 1805.234682][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1808.399304][ T4391] overlayfs: failed to clone upperpath [ 1808.584288][ T29] audit: type=1400 audit(1810.390:2531): avc: denied { write } for pid=4352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1808.850341][ T29] audit: type=1400 audit(1810.652:2532): avc: denied { write } for pid=4407 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1809.251112][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1810.514309][ T29] audit: type=1400 audit(1812.214:2533): avc: denied { write } for pid=4431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1810.766173][ T29] audit: type=1400 audit(1812.458:2534): avc: denied { write } for pid=4462 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1810.959129][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1811.883726][ T29] audit: type=1400 audit(1813.496:2535): avc: denied { write } for pid=4471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1812.148764][ T29] audit: type=1400 audit(1813.749:2536): avc: denied { write } for pid=4490 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1812.210666][ T4492] netlink: 'syz.7.9947': attribute type 12 has an invalid length. [ 1812.235180][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9947'. [ 1812.255469][ T4492] macsec0: entered promiscuous mode [ 1812.266669][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9947'. [ 1812.422776][ T4492] macsec0 (unregistering): left promiscuous mode [ 1812.503402][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1814.358245][ T4543] fuse: Bad value for 'fd' [ 1816.708221][ T4600] fuse: Bad value for 'fd' [ 1817.994232][ T29] audit: type=1326 audit(1819.214:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.9974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1818.052147][ T29] audit: type=1326 audit(1819.242:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.9974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1818.161753][ T29] audit: type=1326 audit(1819.242:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.9974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1818.408228][ T29] audit: type=1326 audit(1819.242:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.9974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1818.947029][ T29] audit: type=1326 audit(1819.242:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.9974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1818.978743][ T29] audit: type=1326 audit(1819.242:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.9974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1819.061300][ T29] audit: type=1326 audit(1819.242:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.9974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1819.330605][ T29] audit: type=1326 audit(1819.242:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.9974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1819.359057][ T29] audit: type=1326 audit(1819.242:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.9974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1819.385267][ T29] audit: type=1326 audit(1819.242:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.9974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1820.688850][ T4690] fuse: fd is not a fuse device [ 1824.713240][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1824.713259][ T29] audit: type=1400 audit(1825.493:2556): avc: denied { write } for pid=4758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1824.749456][ T4788] syz_tun: entered allmulticast mode [ 1825.128415][ T4775] syz_tun: left allmulticast mode [ 1825.144078][ T29] audit: type=1400 audit(1825.905:2557): avc: denied { write } for pid=4793 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1825.258928][ T4799] fuse: fd is not a fuse device [ 1826.077609][ T29] audit: type=1400 audit(1826.579:2558): avc: denied { write } for pid=4808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1826.122595][ T29] audit: type=1400 audit(1826.673:2559): avc: denied { write } for pid=4826 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1826.458187][ T29] audit: type=1400 audit(1827.140:2560): avc: denied { write } for pid=4829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1826.781821][ T4844] netlink: 'syz.7.10015': attribute type 4 has an invalid length. [ 1827.025373][ T29] audit: type=1400 audit(1827.665:2561): avc: denied { write } for pid=4845 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1827.083570][ T312] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.330508][ T4865] fuse: fd is not a fuse device [ 1828.102327][ T29] audit: type=1400 audit(1828.675:2562): avc: denied { write } for pid=4873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1828.287732][ T29] audit: type=1400 audit(1828.844:2563): avc: denied { write } for pid=4905 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1828.673385][ T4922] fuse: fd is not a fuse device [ 1829.302595][ T4950] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4950 comm=syz.7.10042 [ 1829.321026][ T4950] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4950 comm=syz.7.10042 [ 1829.719186][ T4969] overlayfs: failed to clone upperpath [ 1830.123547][ T4968] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1831.015049][ T4980] fuse: fd is not a fuse device [ 1831.309559][ T4988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10053'. [ 1831.820254][ T5016] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10062'. [ 1832.585146][ T5033] netlink: 324 bytes leftover after parsing attributes in process `syz.1.10066'. [ 1833.833834][ T5045] fuse: Bad value for 'fd' [ 1834.757628][ T5077] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1835.368348][ T5100] fuse: Bad value for 'fd' [ 1836.040249][ T5139] netlink: 182 bytes leftover after parsing attributes in process `syz.4.10101'. [ 1836.325417][ T5151] overlayfs: failed to clone upperpath [ 1837.093486][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1837.103538][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1837.843239][ T5175] fuse: fd is not a fuse device [ 1838.193746][ T5190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10116'. [ 1838.203013][ T5190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10116'. [ 1838.570250][ T5205] netlink: 'syz.4.10119': attribute type 12 has an invalid length. [ 1838.602223][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10119'. [ 1838.616014][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10119'. [ 1839.690983][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10127'. [ 1839.713050][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10127'. [ 1840.107017][ T5253] fuse: fd is not a fuse device [ 1840.208157][ T29] audit: type=1326 audit(1840.008:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.4.10136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1840.225870][ T5260] syz.1.10138 (5260): attempted to duplicate a private mapping with mremap. This is not supported. [ 1840.266176][ T29] audit: type=1326 audit(1840.036:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.4.10136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1840.312092][ T29] audit: type=1326 audit(1840.045:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.4.10136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1840.339552][ T29] audit: type=1326 audit(1840.045:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.4.10136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1840.378818][ T29] audit: type=1326 audit(1840.045:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.4.10136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1840.406020][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10140'. [ 1840.410696][ T29] audit: type=1326 audit(1840.045:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.4.10136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1840.415940][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10140'. [ 1840.443037][ T29] audit: type=1326 audit(1840.045:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.4.10136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1840.484297][ T29] audit: type=1326 audit(1840.045:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.4.10136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1840.511421][ T29] audit: type=1326 audit(1840.045:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.4.10136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1840.537955][ T29] audit: type=1326 audit(1840.045:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.4.10136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94e99cdd9 code=0x7ffc0000 [ 1841.358783][ T5288] fuse: fd is not a fuse device [ 1841.954133][ T5317] overlayfs: failed to clone upperpath [ 1841.975364][ T5319] fuse: fd is not a fuse device [ 1842.065961][ T5326] fuse: fd is not a fuse device [ 1842.344571][ T5331] wg1 speed is unknown, defaulting to 1000 [ 1842.923784][ T5343] 9p: Bad value for 'rfdno' [ 1844.598907][ T5372] vlan2: entered allmulticast mode [ 1844.609630][ T5372] bond_slave_0: entered allmulticast mode [ 1846.152502][ T5418] 9p: Bad value for 'wfdno' [ 1846.290452][ T5421] overlayfs: failed to clone upperpath [ 1847.751352][ T5443] fuse: fd is not a fuse device [ 1848.045250][ T5457] __nla_validate_parse: 3 callbacks suppressed [ 1848.045273][ T5457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10204'. [ 1848.108358][ T5460] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10205'. [ 1848.467257][ T5476] fuse: fd is not a fuse device [ 1850.060189][ T5481] overlayfs: failed to clone upperpath [ 1851.967427][ T5512] netlink: 'syz.1.10225': attribute type 12 has an invalid length. [ 1851.994847][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10225'. [ 1852.017127][ T5512] macsec0: entered promiscuous mode [ 1852.034342][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10225'. [ 1852.054030][ T5512] veth1_macvtap: left promiscuous mode [ 1852.072150][ T5512] macsec0 (unregistering): left promiscuous mode [ 1853.205864][ T5523] overlayfs: failed to clone upperpath [ 1854.155192][ T5530] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10229'. [ 1854.177270][ T5530] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1854.523146][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1854.523163][ T29] audit: type=1400 audit(1853.399:2594): avc: denied { setopt } for pid=5535 comm="syz.4.10234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1854.555866][ T5536] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1540 sclass=netlink_xfrm_socket pid=5536 comm=syz.4.10234 [ 1855.835396][ T5564] netlink: 'syz.5.10245': attribute type 10 has an invalid length. [ 1855.843669][ T5564] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.10245'. [ 1858.421417][T32581] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1858.431397][T32581] CPU: 0 UID: 0 PID: 32581 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1858.431437][T32581] Tainted: [L]=SOFTLOCKUP [ 1858.431447][T32581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1858.431464][T32581] Workqueue: hci1 hci_rx_work [ 1858.431499][T32581] Call Trace: [ 1858.431508][T32581] [ 1858.431519][T32581] dump_stack_lvl+0x100/0x190 [ 1858.431553][T32581] sysfs_warn_dup.cold+0x1c/0x28 [ 1858.431590][T32581] sysfs_create_dir_ns+0x24b/0x2b0 [ 1858.431621][T32581] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1858.431648][T32581] ? find_held_lock+0x2b/0x80 [ 1858.431672][T32581] ? kobject_add_internal+0x25f/0x930 [ 1858.431711][T32581] ? kobject_add_internal+0x25f/0x930 [ 1858.431750][T32581] ? do_raw_spin_unlock+0x145/0x1e0 [ 1858.431786][T32581] kobject_add_internal+0x2c8/0x930 [ 1858.431829][T32581] kobject_add+0x16a/0x1e0 [ 1858.431851][T32581] ? __pfx_kobject_add+0x10/0x10 [ 1858.431871][T32581] ? preempt_schedule_thunk+0x16/0x30 [ 1858.431900][T32581] ? kobject_put+0xb9/0x640 [ 1858.431933][T32581] ? _raw_spin_unlock+0x3e/0x50 [ 1858.431968][T32581] device_add+0x294/0x1950 [ 1858.431996][T32581] ? __pfx_dev_set_name+0x10/0x10 [ 1858.432026][T32581] ? __pfx_device_add+0x10/0x10 [ 1858.432053][T32581] ? mgmt_send_event_skb+0x2fb/0x460 [ 1858.432092][T32581] hci_conn_add_sysfs+0x1a3/0x260 [ 1858.432127][T32581] le_conn_complete_evt+0x11eb/0x1f60 [ 1858.432165][T32581] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1858.432204][T32581] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1858.432235][T32581] ? skb_pull_data+0x15f/0x1e0 [ 1858.432271][T32581] hci_le_meta_evt+0x34a/0x5f0 [ 1858.432309][T32581] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1858.432344][T32581] hci_event_packet+0x51c/0xcd0 [ 1858.432376][T32581] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1858.432408][T32581] ? __pfx_hci_event_packet+0x10/0x10 [ 1858.432444][T32581] ? kcov_remote_start+0x384/0x660 [ 1858.432479][T32581] hci_rx_work+0x451/0xfc0 [ 1858.432513][T32581] process_one_work+0xa0e/0x1980 [ 1858.432558][T32581] ? __pfx_process_one_work+0x10/0x10 [ 1858.432599][T32581] ? __pfx_hci_rx_work+0x10/0x10 [ 1858.432630][T32581] worker_thread+0x5ef/0xe50 [ 1858.432669][T32581] ? __pfx_worker_thread+0x10/0x10 [ 1858.432701][T32581] ? kthread+0x13a/0x450 [ 1858.432727][T32581] ? __pfx_worker_thread+0x10/0x10 [ 1858.432756][T32581] kthread+0x370/0x450 [ 1858.432782][T32581] ? __pfx_kthread+0x10/0x10 [ 1858.432812][T32581] ret_from_fork+0x72b/0xd50 [ 1858.432844][T32581] ? __pfx_ret_from_fork+0x10/0x10 [ 1858.432875][T32581] ? __switch_to+0x800/0x1100 [ 1858.432911][T32581] ? __pfx_kthread+0x10/0x10 [ 1858.432941][T32581] ret_from_fork_asm+0x1a/0x30 [ 1858.432991][T32581] [ 1858.433236][T32581] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1858.714096][T32581] Bluetooth: hci1: failed to register connection device [ 1858.799170][ T5621] fuse: fd is not a fuse device [ 1861.191076][ T5676] syz_tun: entered allmulticast mode [ 1861.500320][ T5681] netlink: 'syz.7.10287': attribute type 21 has an invalid length. [ 1862.327807][ T5666] syz_tun: left allmulticast mode [ 1862.433520][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1862.440795][ T1310] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1862.826927][ T5692] 9p: Bad value for 'rfdno' [ 1867.686880][T32581] Bluetooth: hci2: command 0x0406 tx timeout [ 1867.998499][ T5777] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1868.092644][ T5779] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10323'. [ 1868.566285][T32621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1868.582557][T32621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1868.633785][T32621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1868.642626][T32621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1868.656728][T32621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1868.785543][ T5790] 9p: Invalid uid '0x00000000ffffffff' [ 1869.241392][ T5786] wg1 speed is unknown, defaulting to 1000 [ 1869.349013][ T29] audit: type=1326 audit(1867.277:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.3.10337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1869.375701][ T29] audit: type=1326 audit(1867.277:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.3.10337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1869.402713][ T29] audit: type=1326 audit(1867.277:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.3.10337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1869.428936][ T29] audit: type=1326 audit(1867.277:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.3.10337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1869.455719][ T29] audit: type=1326 audit(1867.277:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.3.10337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1869.482519][ T29] audit: type=1326 audit(1867.277:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.3.10337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1869.509522][ T29] audit: type=1326 audit(1867.277:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.3.10337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1869.536110][ T29] audit: type=1326 audit(1867.277:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.3.10337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1869.563279][ T29] audit: type=1326 audit(1867.277:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.3.10337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1869.589587][ T29] audit: type=1326 audit(1867.277:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.3.10337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378879cdd9 code=0x7ffc0000 [ 1870.895026][T32581] Bluetooth: hci3: command tx timeout [ 1871.538192][ T5855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10347'. [ 1871.669838][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.687113][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1871.720509][ T5786] bridge_slave_0: entered allmulticast mode [ 1871.741545][ T5786] bridge_slave_0: entered promiscuous mode [ 1871.765686][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.785810][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.803232][ T5786] bridge_slave_1: entered allmulticast mode [ 1871.815580][ T5786] bridge_slave_1: entered promiscuous mode [ 1871.882321][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1871.914908][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1871.991047][ T5786] team0: Port device team_slave_0 added [ 1872.007725][ T5786] team0: Port device team_slave_1 added [ 1872.072226][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1872.102194][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1872.162708][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1872.187378][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1872.201420][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1872.249826][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1872.382883][ T5867] fuse: fd is not a fuse device [ 1872.399569][ T5786] hsr_slave_0: entered promiscuous mode [ 1872.407698][ T5786] hsr_slave_1: entered promiscuous mode [ 1872.414154][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 1872.419999][ T5786] Cannot create hsr debugfs directory [ 1873.820348][T32621] Bluetooth: hci3: command tx timeout [ 1874.027995][ T5786] team0: Port device macvlan2 removed [ 1874.055345][ T5786] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.102378][ T5883] syz_tun: entered allmulticast mode [ 1874.108156][ T5883] syz_tun: left allmulticast mode [ 1875.132870][ T5786] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.379836][ T5786] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.024615][T32621] Bluetooth: hci3: command tx timeout [ 1877.124099][ T5786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1877.150827][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1877.185899][ T5786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1877.213633][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1877.233008][ T5786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1877.293551][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1877.319263][ T5786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1877.397795][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1877.444951][ T5932] netlink: 'syz.1.10369': attribute type 12 has an invalid length. [ 1878.202707][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10369'. [ 1878.247618][T32621] Bluetooth: hci3: command tx timeout [ 1878.281227][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10369'. [ 1878.721254][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1878.775010][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1878.798469][ T906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.805621][ T906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1878.868992][ T2050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.876170][ T2050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1879.023118][ T5952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1879.041957][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1881.210664][ T5981] batadv_slave_1: entered allmulticast mode [ 1881.346607][ T5977] batadv_slave_1: left allmulticast mode [ 1881.785966][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1882.265407][ T6006] netlink: 'syz.7.10382': attribute type 12 has an invalid length. [ 1882.288990][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10382'. [ 1882.308281][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10382'. [ 1882.713917][ T5786] veth0_vlan: entered promiscuous mode [ 1883.285669][ T5786] veth1_vlan: entered promiscuous mode [ 1883.420991][ T5786] veth0_macvtap: entered promiscuous mode [ 1883.534218][ T5786] veth1_macvtap: entered promiscuous mode [ 1883.755279][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1884.275321][ T6039] syz_tun: entered allmulticast mode [ 1884.302131][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1884.413995][ T6443] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.466000][ T6443] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.504501][ T6033] syz_tun: left allmulticast mode [ 1885.307786][ T6443] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.356813][ T6443] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.450676][T32621] Bluetooth: hci6: unexpected event for opcode 0x2060 [ 1885.747094][ T831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1885.785897][ T831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1885.907000][ T6443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1885.942788][ T6443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1886.091412][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1886.091430][ T29] audit: type=1400 audit(1882.933:2613): avc: denied { mounton } for pid=5786 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1998.336283][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1998.343277][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5929/1:b..l P6076/1:b..l P6081/1:b..l [ 1998.354108][ C1] rcu: (detected by 1, t=10502 jiffies, g=251881, q=511 ncpus=2) [ 1998.361899][ C1] task:modprobe state:R running task stack:26488 pid:6081 tgid:6081 ppid:2050 task_flags:0x400000 flags:0x00080000 [ 1998.376487][ C1] Call Trace: [ 1998.379767][ C1] [ 1998.382692][ C1] __schedule+0x1295/0x67a0 [ 1998.387215][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1998.392156][ C1] ? __pfx___schedule+0x10/0x10 [ 1998.397004][ C1] ? rcu_is_watching+0x12/0xc0 [ 1998.401773][ C1] preempt_schedule_irq+0x50/0x90 [ 1998.406794][ C1] irqentry_exit+0x205/0x7e0 [ 1998.411386][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1998.417363][ C1] RIP: 0010:unwind_next_frame+0xfc9/0x2090 [ 1998.423170][ C1] Code: b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 6c 0d 00 00 41 39 5d 00 0f 84 9c 06 00 00 01 00 00 00 e9 d0 f3 ff ff ba 28 00 00 00 4c 89 f6 4c 89 ef 48 [ 1998.442770][ C1] RSP: 0018:ffffc900065374f0 EFLAGS: 00000287 [ 1998.448828][ C1] RAX: ffffc90006538001 RBX: ffffc900065378c0 RCX: ffffffff91856801 [ 1998.456786][ C1] RDX: ffffc900065378c8 RSI: 0000000000000001 RDI: ffffc90006537570 [ 1998.464745][ C1] RBP: ffffc90006530000 R08: ffffffff918568ca R09: 0000000000000007 [ 1998.472709][ C1] R10: 0000000000000200 R11: 0000000000017637 R12: ffffc900065375b0 [ 1998.480668][ C1] R13: ffffc90006537560 R14: ffffc900065378c0 R15: ffffc90006537594 [ 1998.488649][ C1] ? kasan_save_track+0x14/0x30 [ 1998.493501][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1998.499652][ C1] arch_stack_walk+0x94/0xf0 [ 1998.504515][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1998.509285][ C1] ? __fput_deferred+0x3e9/0x4a0 [ 1998.514220][ C1] stack_trace_save+0x8e/0xc0 [ 1998.518893][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1998.524258][ C1] ? find_held_lock+0x2b/0x80 [ 1998.528924][ C1] ? __refill_objects_node+0x789/0x8e0 [ 1998.534384][ C1] ? rcu_is_watching+0x12/0xc0 [ 1998.539150][ C1] kasan_save_stack+0x30/0x50 [ 1998.543815][ C1] ? kasan_save_stack+0x30/0x50 [ 1998.548655][ C1] ? kasan_save_track+0x14/0x30 [ 1998.553543][ C1] kasan_save_track+0x14/0x30 [ 1998.558210][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1998.562802][ C1] kmem_cache_free+0x41e/0x6c0 [ 1998.567567][ C1] ? percpu_counter_add_batch+0xb9/0x230 [ 1998.573205][ C1] __fput_deferred+0x3e9/0x4a0 [ 1998.577971][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 1998.583256][ C1] ? lookup_fast+0x2da/0x600 [ 1998.587845][ C1] fput_close+0x118/0x250 [ 1998.592176][ C1] ? __pfx_fput_close+0x10/0x10 [ 1998.597029][ C1] ? terminate_walk+0x246/0x670 [ 1998.601875][ C1] path_openat+0xfec/0x31a0 [ 1998.606375][ C1] ? kasan_save_stack+0x3f/0x50 [ 1998.611217][ C1] ? kasan_save_stack+0x30/0x50 [ 1998.616056][ C1] ? kasan_save_track+0x14/0x30 [ 1998.620896][ C1] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1998.626539][ C1] ? __pfx_path_openat+0x10/0x10 [ 1998.631484][ C1] do_file_open+0x20e/0x430 [ 1998.635989][ C1] ? __pfx_do_file_open+0x10/0x10 [ 1998.641033][ C1] ? alloc_fd+0x476/0x790 [ 1998.645361][ C1] ? do_getname+0x191/0x390 [ 1998.649868][ C1] do_sys_openat2+0x10d/0x1e0 [ 1998.654546][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1998.659755][ C1] __x64_sys_openat+0x12d/0x210 [ 1998.664610][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 1998.669988][ C1] ? rcu_is_watching+0x12/0xc0 [ 1998.674760][ C1] do_syscall_64+0x10b/0xf80 [ 1998.679350][ C1] ? clear_bhb_loop+0x40/0x90 [ 1998.684024][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1998.689909][ C1] RIP: 0033:0x7fda0bda80ba [ 1998.694327][ C1] RSP: 002b:00007ffda172bff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1998.702728][ C1] RAX: ffffffffffffffda RBX: 00007ffda172c070 RCX: 00007fda0bda80ba [ 1998.710691][ C1] RDX: 0000000000080000 RSI: 00007ffda172c070 RDI: 00000000ffffff9c [ 1998.718649][ C1] RBP: 00007ffda172c060 R08: 00007ffda172c267 R09: 0000000000000000 [ 1998.726612][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000033 [ 1998.734571][ C1] R13: 00007fda0bd7c000 R14: 00007ffda172c280 R15: 0000000000000000 [ 1998.742545][ C1] [ 1998.745555][ C1] task:modprobe state:R running task stack:25528 pid:6076 tgid:6076 ppid:1287 task_flags:0x40000c flags:0x00080000 [ 1998.759047][ C1] Call Trace: [ 1998.762315][ C1] [ 1998.765238][ C1] __schedule+0x1295/0x67a0 [ 1998.769759][ C1] ? __pfx___schedule+0x10/0x10 [ 1998.774609][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1998.779986][ C1] preempt_schedule_common+0x42/0xc0 [ 1998.785291][ C1] preempt_schedule_thunk+0x16/0x30 [ 1998.790503][ C1] _raw_spin_unlock+0x3e/0x50 [ 1998.795186][ C1] __zap_vma_range+0x1791/0x4bf0 [ 1998.800146][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1998.805434][ C1] ? find_held_lock+0x2b/0x80 [ 1998.810111][ C1] unmap_vmas+0x299/0x5f0 [ 1998.814439][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1998.819285][ C1] ? mas_next_slot+0x10a3/0x1960 [ 1998.824239][ C1] exit_mmap+0x1ef/0xa10 [ 1998.828480][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1998.833238][ C1] ? trace_contention_end+0x122/0x170 [ 1998.838612][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1998.843724][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1998.848845][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1998.853791][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 1998.859430][ C1] __mmput+0x12a/0x410 [ 1998.863501][ C1] mmput+0x67/0x80 [ 1998.867223][ C1] do_exit+0x833/0x2a60 [ 1998.871376][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1998.876402][ C1] ? __pfx_do_exit+0x10/0x10 [ 1998.880984][ C1] ? do_group_exit+0x1bd/0x2a0 [ 1998.885739][ C1] ? rcu_is_watching+0x12/0xc0 [ 1998.890512][ C1] do_group_exit+0xd5/0x2a0 [ 1998.895017][ C1] __x64_sys_exit_group+0x3e/0x50 [ 1998.900039][ C1] x64_sys_call+0x102c/0x1530 [ 1998.904717][ C1] do_syscall_64+0x10b/0xf80 [ 1998.909305][ C1] ? clear_bhb_loop+0x40/0x90 [ 1998.913977][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1998.919863][ C1] RIP: 0033:0x7fec5f1026c5 [ 1998.924267][ C1] RSP: 002b:00007ffeee669918 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 1998.932669][ C1] RAX: ffffffffffffffda RBX: 00007fec5f203fe8 RCX: 00007fec5f1026c5 [ 1998.940631][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 1998.948588][ C1] RBP: 0000000000000001 R08: 00007ffeee6698a8 R09: 0000000000000000 [ 1998.956551][ C1] R10: 00007ffeee669740 R11: 0000000000000206 R12: 0000000000000000 [ 1998.964510][ C1] R13: 0000000000000001 R14: 00007fec5f202680 R15: 00007fec5f204000 [ 1998.972488][ C1] [ 1998.975495][ C1] task:syz.3.10366 state:R running task stack:22760 pid:5929 tgid:5929 ppid:1174 task_flags:0x40064c flags:0x00080001 [ 1998.988987][ C1] Call Trace: [ 1998.992253][ C1] [ 1998.995175][ C1] __schedule+0x1295/0x67a0 [ 1998.999696][ C1] ? __pfx___schedule+0x10/0x10 [ 1999.004718][ C1] ? rcu_is_watching+0x12/0xc0 [ 1999.009489][ C1] preempt_schedule_irq+0x50/0x90 [ 1999.014511][ C1] irqentry_exit+0x205/0x7e0 [ 1999.019110][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1999.025087][ C1] RIP: 0010:lock_release+0x8d/0x310 [ 1999.030287][ C1] Code: 00 00 65 4c 8b 25 bb 54 26 12 41 8b bc 24 8c 0b 00 00 85 ff 0f 85 21 01 00 00 48 81 3b 00 a7 11 94 0f 84 14 01 00 00 9c 41 5e 48 c7 c7 c9 27 01 8e e8 a6 0d a6 09 65 ff 05 f7 9b 26 12 8b 35 [ 1999.049885][ C1] RSP: 0018:ffffc9000721eed8 EFLAGS: 00000202 [ 1999.055943][ C1] RAX: 0000000000000000 RBX: ffffffff8e7e54e0 RCX: ffffffff9187c101 [ 1999.063905][ C1] RDX: 0000000000000000 RSI: ffffffff8c1c3780 RDI: 0000000000000000 [ 1999.071863][ C1] RBP: ffffffff81b7d1ae R08: 0000000000000001 R09: 0000000000000007 [ 1999.079824][ C1] R10: 0000000000000200 R11: 0000000000019207 R12: ffff8880236c0000 [ 1999.087784][ C1] R13: ffffc9000721ef90 R14: 0000000000000202 R15: ffffc9000721efc4 [ 1999.095745][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1999.100964][ C1] unwind_next_frame+0x3c3/0x2090 [ 1999.105993][ C1] ? evict+0x3c2/0xad0 [ 1999.110067][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1999.116218][ C1] arch_stack_walk+0x94/0xf0 [ 1999.120815][ C1] ? iput.part.0+0x605/0xf50 [ 1999.125400][ C1] stack_trace_save+0x8e/0xc0 [ 1999.130069][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1999.135435][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1999.140370][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1999.146174][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1999.151370][ C1] save_stack+0x162/0x1e0 [ 1999.155691][ C1] ? __pfx_save_stack+0x10/0x10 [ 1999.160531][ C1] ? free_unref_folios+0xa0d/0x16f0 [ 1999.165735][ C1] ? folios_put_refs+0x571/0xa90 [ 1999.170674][ C1] ? shmem_undo_range+0x5e5/0x1570 [ 1999.176121][ C1] ? shmem_evict_inode+0x3f3/0xc40 [ 1999.181227][ C1] ? evict+0x3c2/0xad0 [ 1999.185302][ C1] ? page_ext_put+0x3e/0xd0 [ 1999.189803][ C1] __reset_page_owner+0x84/0x190 [ 1999.194735][ C1] free_unref_folios+0xa0d/0x16f0 [ 1999.199765][ C1] ? print_kernel_ident+0x10/0x40 [ 1999.204781][ C1] ? folios_put_refs+0x50a/0xa90 [ 1999.209719][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1999.215525][ C1] folios_put_refs+0x571/0xa90 [ 1999.220297][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1999.225586][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1999.231912][ C1] shmem_undo_range+0x5e5/0x1570 [ 1999.236848][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1999.242272][ C1] shmem_evict_inode+0x3f3/0xc40 [ 1999.247201][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 1999.252914][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1999.258362][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1999.264426][ C1] ? find_held_lock+0x2b/0x80 [ 1999.269092][ C1] ? evict+0x37e/0xad0 [ 1999.273161][ C1] ? evict+0x37e/0xad0 [ 1999.277236][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1999.282689][ C1] evict+0x3c2/0xad0 [ 1999.286587][ C1] ? find_held_lock+0x2b/0x80 [ 1999.291254][ C1] ? __pfx_evict+0x10/0x10 [ 1999.295678][ C1] ? iput.part.0+0x5fd/0xf50 [ 1999.300273][ C1] iput.part.0+0x605/0xf50 [ 1999.304681][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 1999.309967][ C1] iput+0x35/0x40 [ 1999.313589][ C1] dentry_unlink_inode+0x2c0/0x4c0 [ 1999.318703][ C1] __dentry_kill+0x1d0/0x690 [ 1999.323295][ C1] finish_dput+0x76/0x480 [ 1999.327615][ C1] dput.part.0+0x456/0x570 [ 1999.332022][ C1] dput+0x1f/0x30 [ 1999.335647][ C1] __fput+0x519/0xb50 [ 1999.339634][ C1] task_work_run+0x150/0x240 [ 1999.344224][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1999.349333][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1999.354541][ C1] do_exit+0x8d2/0x2a60 [ 1999.358695][ C1] ? __pfx_do_exit+0x10/0x10 [ 1999.363288][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1999.369280][ C1] do_group_exit+0xd5/0x2a0 [ 1999.373780][ C1] get_signal+0x1ec7/0x21e0 [ 1999.378296][ C1] ? __pfx_get_signal+0x10/0x10 [ 1999.383154][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1999.388706][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1999.394874][ C1] ? rcu_is_watching+0x12/0xc0 [ 1999.399643][ C1] irqentry_exit+0x410/0x7e0 [ 1999.404237][ C1] asm_exc_page_fault+0x26/0x30 [ 1999.409081][ C1] RIP: 0033:0x7f378879cde1 [ 1999.413483][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1999.419544][ C1] RAX: 0000000000000000 RBX: 00007f3788a16090 RCX: 00007f378879cdd9 [ 1999.427501][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1999.435467][ C1] RBP: 00007f3788832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1999.443424][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1999.451382][ C1] R13: 00007f3788a16128 R14: 00007f3788a16090 R15: 00007fffbe335958 [ 1999.459355][ C1] [ 1999.462379][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10497 jiffies! g251881 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1999.474775][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=124395 [ 1999.482741][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g251881 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1999.494182][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1999.504135][ C1] rcu: RCU grace-period kthread stack dump: [ 1999.510003][ C1] task:rcu_preempt state:I stack:27832 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1999.521927][ C1] Call Trace: [ 1999.525193][ C1] [ 1999.528119][ C1] __schedule+0x1295/0x67a0 [ 1999.532639][ C1] ? __pfx___schedule+0x10/0x10 [ 1999.537484][ C1] ? find_held_lock+0x2b/0x80 [ 1999.542158][ C1] ? schedule+0x2bf/0x390 [ 1999.546488][ C1] schedule+0xdd/0x390 [ 1999.550559][ C1] schedule_timeout+0x127/0x280 [ 1999.555403][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1999.560769][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1999.566048][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1999.571849][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1999.577311][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1999.582070][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1999.587349][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 1999.592803][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1999.597740][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1999.602933][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1999.608737][ C1] rcu_gp_kthread+0x179/0x230 [ 1999.613408][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1999.618599][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1999.624409][ C1] ? __kthread_parkme+0x18c/0x230 [ 1999.629428][ C1] ? kthread+0x13a/0x450 [ 1999.633662][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1999.638852][ C1] kthread+0x370/0x450 [ 1999.642917][ C1] ? __pfx_kthread+0x10/0x10 [ 1999.647507][ C1] ret_from_fork+0x72b/0xd50 [ 1999.652097][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1999.657206][ C1] ? __switch_to+0x800/0x1100 [ 1999.661885][ C1] ? __pfx_kthread+0x10/0x10 [ 1999.666471][ C1] ret_from_fork_asm+0x1a/0x30 [ 1999.671256][ C1] [ 1999.674263][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1999.680582][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1999.685785][ C0] NMI backtrace for cpu 0 [ 1999.685802][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1999.685826][ C0] Tainted: [L]=SOFTLOCKUP [ 1999.685833][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1999.685843][ C0] RIP: 0010:__kasan_check_read+0x8/0x20 [ 1999.685871][ C0] Code: fe 90 0f 0b 90 48 83 c4 60 5b 5d 41 5c e9 40 50 17 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f6 31 d2 e9 0f f3 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 1999.685888][ C0] RSP: 0018:ffffc90000007d20 EFLAGS: 00000046 [ 1999.685902][ C0] RAX: 0000000000000007 RBX: ffffffff9b38fe10 RCX: ffffffff81e4db23 [ 1999.685914][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9b38fe10 [ 1999.685925][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: fffff52000000f9a [ 1999.685936][ C0] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000002 [ 1999.685946][ C0] R13: ffff8880237ae300 R14: dffffc0000000000 R15: 1ffff92000000fb0 [ 1999.685958][ C0] FS: 0000000000000000(0000) GS:ffff888124372000(0000) knlGS:0000000000000000 [ 1999.685976][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1999.685987][ C0] CR2: 00007f3788786400 CR3: 000000002e937000 CR4: 00000000003526f0 [ 1999.686005][ C0] Call Trace: [ 1999.686011][ C0] [ 1999.686018][ C0] do_raw_spin_unlock+0x53/0x1e0 [ 1999.686064][ C0] _raw_spin_unlock_irqrestore+0x22/0x80 [ 1999.686086][ C0] debug_object_activate+0x331/0x490 [ 1999.686112][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1999.686138][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1999.686166][ C0] enqueue_hrtimer+0x75/0x2f0 [ 1999.686193][ C0] __hrtimer_run_queues+0x73d/0xa00 [ 1999.686223][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1999.686246][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1999.686273][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1999.686296][ C0] [ 1999.686302][ C0] [ 1999.686308][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1999.686328][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1999.686350][ C0] Code: d6 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 00 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1999.686366][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 1999.686379][ C0] RAX: 00000000031340bb RBX: ffffffff8e4955c0 RCX: ffffffff8b8a9095 [ 1999.686391][ C0] RDX: 0000000000000000 RSI: ffffffff8df21135 RDI: ffffffff8c1c3800 [ 1999.686403][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 1999.686413][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 1999.686424][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d7ae50 [ 1999.686439][ C0] ? ct_kernel_exit+0x125/0x180 [ 1999.686464][ C0] default_idle+0x9/0x10 [ 1999.686488][ C0] default_idle_call+0x6c/0xb0 [ 1999.686513][ C0] do_idle+0x464/0x590 [ 1999.686530][ C0] ? __pfx_do_idle+0x10/0x10 [ 1999.686550][ C0] cpu_startup_entry+0x4f/0x60 [ 1999.686567][ C0] rest_init+0x251/0x260 [ 1999.686582][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1999.686609][ C0] start_kernel+0x484/0x490 [ 1999.686632][ C0] x86_64_start_reservations+0x24/0x30 [ 1999.686657][ C0] x86_64_start_kernel+0x12b/0x130 [ 1999.686681][ C0] common_startup_64+0x13e/0x148 [ 1999.686712][ C0]