last executing test programs: 2m14.941389508s ago: executing program 0 (id=4139): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 2m14.882331359s ago: executing program 0 (id=4141): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x2000008, 0x2, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xee00, 0x0) 2m14.757961368s ago: executing program 0 (id=4145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$dupfd(r2, 0x0, r2) syz_kvm_add_vcpu$x86(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400a40, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mq_timedreceive(r1, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'rose0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000c31100001001000095000000ac1be189"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2m14.265402191s ago: executing program 0 (id=4149): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m14.185947166s ago: executing program 0 (id=4152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$dupfd(r2, 0x0, r2) syz_kvm_add_vcpu$x86(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400a40, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mq_timedreceive(r1, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'rose0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000c31100001001000095000000ac1be189"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2m13.965342995s ago: executing program 0 (id=4154): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650cab, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 2m13.688115247s ago: executing program 32 (id=4154): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650cab, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 10.784742919s ago: executing program 1 (id=4879): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218", 0xc5}], 0x1}}], 0x1, 0x42054) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) 10.620919199s ago: executing program 5 (id=4882): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) socket$inet6(0xa, 0x805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x8, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x4840) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x16, 0x4000ff9, 0x54}, 0x2c) 9.492418404s ago: executing program 1 (id=4887): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x168002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000004c0)=@attr_pmu_init) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x1000}, 0x20) 9.429160982s ago: executing program 5 (id=4889): r0 = socket(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r1 = gettid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x3, 0xa00, 0x7, 0x6}}], 0x18, 0x4855}, 0x24000052) 8.393271802s ago: executing program 2 (id=4893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r2, 0x0, 0x0) 7.935330884s ago: executing program 5 (id=4897): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) mkdir(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 7.202014115s ago: executing program 2 (id=4899): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xff, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x101, 0x2, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd1, 0x0, 0x0, @loopback, @rand_addr=0x640100fe}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x1b, 0x4, 0x62, 0x5}}) r5 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=@random={'security.', 'sit0\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x7c, 0x3f, 0x9, 0x70bd29, 0x0, {0x3}, [@generic="aa56ff28a4d1ca3340e119e4544214c0fbfaefeaf539438c78adb097354307eb8af44109e18e4d42c5c057ca4980375e1290d59ef247ff9ccb9680c579e051babf1c388dc4bd2939240b5489f7d85f", @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 5.037034069s ago: executing program 3 (id=4901): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) set_mempolicy(0x8006, 0x0, 0x5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) syz_usb_connect(0x2, 0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="12015002534ffb08f0030703010001"], 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x4008c001, 0x0) fsync(r4) ppoll(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0) dup2(r4, r0) 5.036443674s ago: executing program 5 (id=4902): socket$kcm(0x21, 0x2, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x6}, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.728925841s ago: executing program 1 (id=4904): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x4004) 3.880706404s ago: executing program 2 (id=4905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$dupfd(r2, 0x0, r2) syz_kvm_add_vcpu$x86(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400a40, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mq_timedreceive(r1, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'rose0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000c31100001001000095000000ac1be189"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 3.63799856s ago: executing program 1 (id=4906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$dupfd(r2, 0x0, r2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400a40, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mq_timedreceive(r1, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'rose0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000c31100001001000095000000ac1be189"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.833020022s ago: executing program 5 (id=4908): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0x0, 0x0) syz_clone(0x14001000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0aca6020"], 0xd) 2.74136943s ago: executing program 1 (id=4909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$dupfd(r1, 0x0, r1) syz_kvm_add_vcpu$x86(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400a40, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000780)={'rose0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000c31100001001000095000000ac1be189"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.689157182s ago: executing program 2 (id=4910): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76", 0x8e}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e145755626689", 0x14}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.249200827s ago: executing program 2 (id=4912): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r5 = syz_open_pts(r4, 0x2000) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x3) 2.23928704s ago: executing program 1 (id=4913): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x8, 0x0, 0x0, 0x2}}}}}}, 0x0) 2.22225004s ago: executing program 4 (id=4914): add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) socket$inet6(0xa, 0x80002, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) socket$inet_smc(0x2b, 0x1, 0x0) 1.204946041s ago: executing program 2 (id=4915): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xff, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x101, 0x2, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd1, 0x0, 0x0, @loopback, @rand_addr=0x640100fe}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x1b, 0x4, 0x62, 0x5}}) r5 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=@random={'security.', 'sit0\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x7c, 0x3f, 0x9, 0x70bd29, 0x0, {0x3}, [@generic="aa56ff28a4d1ca3340e119e4544214c0fbfaefeaf539438c78adb097354307eb8af44109e18e4d42c5c057ca4980375e1290d59ef247ff9ccb9680c579e051babf1c388dc4bd2939240b5489f7d85f", @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 912.750358ms ago: executing program 5 (id=4916): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x1b, 0x0}, 0x2}], 0x88, 0x20, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair(0x18, 0x5, 0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0xfb7, 0x1) write$eventfd(r1, &(0x7f0000000040)=0xfffffffffffff049, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) shutdown(r0, 0x1) 879.341749ms ago: executing program 3 (id=4917): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8781, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000000c0)={0x6f7928f4, 0x9, 0x9, 0xfffffffc, 0x80, 0x3}) tkill(r1, 0x7) 845.070266ms ago: executing program 4 (id=4918): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndctrl(0x0, 0x0, 0x183582) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7ff, 0x100008a}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) utimes(0x0, &(0x7f0000000000)={{0x6, 0xfffffffffffffffe}, {0x8, 0x4}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 699.481971ms ago: executing program 4 (id=4919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$dupfd(r2, 0x0, r2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400a40, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mq_timedreceive(r1, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'rose0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000c31100001001000095000000ac1be189"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 468.976776ms ago: executing program 4 (id=4920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$dupfd(r2, 0x0, r2) syz_kvm_add_vcpu$x86(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400a40, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mq_timedreceive(r1, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'rose0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000c31100001001000095000000ac1be189"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 409.354873ms ago: executing program 3 (id=4921): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x48040) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 344.634356ms ago: executing program 4 (id=4922): socket$inet6(0xa, 0x800000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) socket$inet(0x2, 0x803, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x2, 0x0, 0x4c3], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 230.396669ms ago: executing program 3 (id=4923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$dupfd(r1, 0x0, r1) syz_kvm_add_vcpu$x86(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400a40, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000780)={'rose0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000c31100001001000095000000ac1be189"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 140.064126ms ago: executing program 3 (id=4924): r0 = socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x10002, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2}, 0xc) mremap(&(0x7f00003a9000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) get_robust_list(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 32.715063ms ago: executing program 4 (id=4925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7ff, 0x4, 0x5, 0x4}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 3 (id=4926): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000100), 0x0, &(0x7f0000000480)={0x0, "cec8e9b9d7d4a26bb9073b1d643011dcc9f61a1969d89edd97ddec2ed4c655b1b162e09526f488caa30f100b8be8f6d1c45c2354ccbc004131e1628fcaef59f9", 0x23}, 0x48, r4) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): ete MPEG2 transport stream to the software demuxer [ 1095.805474][T18962] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1095.813809][T18962] usb 1-1: media controller created [ 1095.824995][T18962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1095.977820][T20429] 9p: Bad value for 'wfdno' [ 1096.662178][ T932] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1096.669515][ T932] ath9k_htc: Failed to initialize the device [ 1096.704793][ T932] usb 2-1: ath9k_htc: USB layer deinitialized [ 1096.729996][ T24] usb 2-1: USB disconnect, device number 85 [ 1096.742133][T17582] Bluetooth: hci3: command 0x0406 tx timeout [ 1096.901817][ T5736] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1096.905194][T18962] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1096.965185][T18962] usb 1-1: USB disconnect, device number 85 [ 1097.052830][ T5736] usb 3-1: Using ep0 maxpacket: 16 [ 1097.069411][ T5736] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1097.094167][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.107888][ T5736] usb 3-1: Product: syz [ 1097.112400][ T5736] usb 3-1: Manufacturer: syz [ 1097.117128][ T5736] usb 3-1: SerialNumber: syz [ 1097.132704][ T5736] usb 3-1: config 0 descriptor?? [ 1097.140237][ T5736] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1097.287786][ T29] audit: type=1400 audit(1782785885.775:2603): avc: denied { remount } for pid=20458 comm="syz.1.3835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1097.312156][T20459] option changes via remount are deprecated (pid=20458 comm=syz.1.3835) [ 1097.346179][ T29] audit: type=1400 audit(1782785885.835:2604): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1098.047302][ T5736] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 1098.087554][T20468] netlink: zone id is out of range [ 1098.093225][T20468] netlink: zone id is out of range [ 1098.098416][T20468] netlink: zone id is out of range [ 1098.103720][T20468] netlink: zone id is out of range [ 1098.108866][T20468] netlink: zone id is out of range [ 1098.114460][T20468] netlink: zone id is out of range [ 1098.119619][T20468] netlink: zone id is out of range [ 1098.133560][ T5736] usb 3-1: USB disconnect, device number 89 [ 1098.141648][T20468] netlink: zone id is out of range [ 1098.167395][T20468] netlink: zone id is out of range [ 1098.184212][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3838'. [ 1098.217213][T20470] macvlan2: entered allmulticast mode [ 1098.232940][T20470] veth1_vlan: entered allmulticast mode [ 1099.103210][ T5736] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1099.138904][ T24] kernel write not supported for file [eventfd] (pid: 24 comm: kworker/1:0) [ 1099.260394][ T5736] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1099.347306][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.357268][ T5736] usb 3-1: Product: syz [ 1099.369880][ T5736] usb 3-1: Manufacturer: syz [ 1099.378301][ T5736] usb 3-1: SerialNumber: syz [ 1099.398850][ T5736] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1099.414828][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1099.852118][ T5736] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1099.878418][ T932] usb 3-1: USB disconnect, device number 90 [ 1100.012506][ T5736] usb 2-1: Using ep0 maxpacket: 16 [ 1100.025921][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.046066][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.058809][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1100.077223][ T5736] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1100.090752][T18956] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1100.108538][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.146142][ T5736] usb 2-1: config 0 descriptor?? [ 1100.249301][T20525] sctp: [Deprecated]: syz.4.3862 (pid 20525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1100.249301][T20525] Use struct sctp_sack_info instead [ 1100.357037][T18956] usb 1-1: config 0 has no interfaces? [ 1100.371220][T18956] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1100.380802][T18956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.394781][T18956] usb 1-1: Product: syz [ 1100.399014][T18956] usb 1-1: Manufacturer: syz [ 1100.454007][T18956] usb 1-1: SerialNumber: syz [ 1100.507779][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1100.525407][T18956] usb 1-1: config 0 descriptor?? [ 1100.531140][ T24] ath9k_htc: Failed to initialize the device [ 1100.546982][ T932] usb 3-1: ath9k_htc: USB layer deinitialized [ 1100.999417][ T5736] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1101.254652][ T5736] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000E/input/input49 [ 1101.421725][T20513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.458279][T20513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.541760][ T5736] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1101.560507][ T5736] usb 2-1: USB disconnect, device number 86 [ 1101.669429][T20551] No memory to map [ 1101.676770][ T29] audit: type=1400 audit(1782785890.155:2605): avc: denied { map } for pid=20546 comm="syz.2.3870" path="/dev/video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1101.741052][T20547] fido_id[20547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1102.272299][ T5736] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1102.451992][ T5736] usb 2-1: Using ep0 maxpacket: 16 [ 1102.469995][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.489524][T20559] sctp: [Deprecated]: syz.2.3874 (pid 20559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1102.489524][T20559] Use struct sctp_sack_info instead [ 1102.506678][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1102.528000][ T5736] usb 2-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 1102.547125][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.579103][ T5736] usb 2-1: config 0 descriptor?? [ 1102.745834][ T932] usb 1-1: USB disconnect, device number 86 [ 1103.020147][ T5736] thrustmaster 0003:044F:B320.000F: unknown main item tag 0x7 [ 1103.042007][ T5736] thrustmaster 0003:044F:B320.000F: unknown main item tag 0x7 [ 1103.050980][ T5736] thrustmaster 0003:044F:B320.000F: item fetching failed at offset 24/41 [ 1103.072611][ T5736] thrustmaster 0003:044F:B320.000F: parse failed [ 1103.082007][ T5736] thrustmaster 0003:044F:B320.000F: probe with driver thrustmaster failed with error -22 [ 1103.210795][T20587] net_ratelimit: 1 callbacks suppressed [ 1103.210811][T20587] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1103.263727][ T932] usb 2-1: USB disconnect, device number 87 [ 1103.305628][T20591] tipc: Enabling of bearer rejected, failed to enable media [ 1105.105595][T20627] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1105.170999][ T29] audit: type=1400 audit(1782785893.655:2606): avc: denied { setopt } for pid=20632 comm="syz.2.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1105.219765][T20627] tipc: Enabling of bearer rejected, failed to enable media [ 1106.419182][T20662] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1106.442048][ T5710] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1106.566637][T20670] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1106.613314][ T5710] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1106.622802][ T5710] usb 3-1: config 0 has no interface number 0 [ 1106.629212][ T5710] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1106.642050][ T5710] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 1106.672360][ T5710] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 1106.703631][ T5710] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1106.716791][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.726643][T20670] tipc: Enabling of bearer rejected, failed to enable media [ 1106.742962][ T5710] usb 3-1: config 0 descriptor?? [ 1106.764717][ T5710] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input50 [ 1106.893336][T18962] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1107.047318][ T5710] usb 3-1: USB disconnect, device number 91 [ 1107.302186][ T5736] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1107.482263][ T5736] usb 2-1: Using ep0 maxpacket: 8 [ 1107.489803][T18962] usb 1-1: Using ep0 maxpacket: 8 [ 1107.497864][ T5736] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1107.503104][T18962] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1107.515212][T18962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1107.518485][ T5736] usb 2-1: config 0 has no interface number 0 [ 1107.523968][T18962] usb 1-1: Product: syz [ 1107.534644][T18962] usb 1-1: Manufacturer: syz [ 1107.539254][T18962] usb 1-1: SerialNumber: syz [ 1107.540821][ T5736] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1107.553518][T18962] usb 1-1: config 0 descriptor?? [ 1107.560450][ T5736] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1107.563994][T18962] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1107.570249][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.586898][ T5736] usb 2-1: config 0 descriptor?? [ 1107.600577][T20649] Process accounting resumed [ 1107.627903][T20697] xfrm0: left allmulticast mode [ 1107.639464][ T5736] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1107.655814][T20697] team0: Port device xfrm0 removed [ 1107.668728][T20700] xfrm0: entered allmulticast mode [ 1107.685130][T20700] team0: Port device xfrm0 added [ 1107.700201][T20697] tipc: Enabling of bearer rejected, already enabled [ 1107.716034][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3930'. [ 1108.200336][ T5710] usb 2-1: USB disconnect, device number 88 [ 1108.571039][T18962] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1108.585082][T18962] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 1108.595535][T18962] usb 1-1: USB disconnect, device number 87 [ 1108.731065][T20728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1108.800316][T20732] tipc: Enabling of bearer rejected, failed to enable media [ 1109.479704][T20745] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3949'. [ 1109.727241][T20766] input: syz1 as /devices/virtual/input/input51 [ 1109.750324][T20766] input: failed to attach handler leds to device input51, error: -6 [ 1109.849829][T20769] xfrm0: left allmulticast mode [ 1109.867046][T20769] team0: Port device xfrm0 removed [ 1109.890366][ T738] tipc: Resetting bearer [ 1109.925005][T20774] xfrm0: entered allmulticast mode [ 1109.949131][T20774] team0: Port device xfrm0 added [ 1109.977410][T20769] tipc: Enabling of bearer rejected, already enabled [ 1110.051503][T20787] Bluetooth: hci0: load_link_keys: too big key_count value 16128 [ 1110.163051][T20793] overlayfs: failed to clone upperpath [ 1110.264766][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.272259][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.897099][ T29] audit: type=1400 audit(1782785899.385:2607): avc: denied { setopt } for pid=20814 comm="syz.0.3976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1110.925921][T20815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1111.142052][ T24] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1111.274204][T20838] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1111.318906][T20840] team0: Port device xfrm0 removed [ 1111.334748][T20840] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1111.364880][T20844] team0: Port device xfrm0 added [ 1111.372603][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.376270][T20840] tipc: Enabling of bearer rejected, already enabled [ 1111.395859][T20847] tipc: Enabling of bearer rejected, failed to enable media [ 1111.407348][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1111.451216][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1111.483457][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1111.502364][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1111.550127][ T24] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1111.564976][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1111.602031][ T24] usb 2-1: Product: syz [ 1111.606215][ T24] usb 2-1: Manufacturer: syz [ 1111.617989][ T24] usb 2-1: SerialNumber: syz [ 1111.637616][ T24] usb 2-1: config 0 descriptor?? [ 1111.742828][T20858] IPVS: Scheduler module ip_vs_ not found [ 1111.878570][ T24] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1111.899427][ T24] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1112.081361][ T24] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 1112.103379][ T24] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1112.122800][ T24] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1112.292855][ T24] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 1112.674981][T20888] netlink: 428 bytes leftover after parsing attributes in process `syz.3.4007'. [ 1112.693011][T20888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4007'. [ 1112.702383][ T24] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1112.728347][ T24] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 1112.776800][ T24] usb 2-1: USB disconnect, device number 89 [ 1113.055801][T20906] xfrm0: left allmulticast mode [ 1113.064705][T20906] team0: Port device xfrm0 removed [ 1113.071561][ T12] tipc: Resetting bearer [ 1113.081728][T20906] xfrm0: entered allmulticast mode [ 1113.090461][T20906] team0: Port device xfrm0 added [ 1113.098190][T20906] tipc: Enabling of bearer rejected, already enabled [ 1113.222018][T18962] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1113.248991][ T29] audit: type=1400 audit(1782785901.735:2608): avc: denied { watch_sb } for pid=20909 comm="syz.1.4019" path="/727" dev="tmpfs" ino=3960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1113.303425][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1113.372041][T18962] usb 1-1: Using ep0 maxpacket: 32 [ 1113.378794][T18962] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.390260][T18962] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.401398][T18962] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1113.411200][T18962] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1113.419628][T18962] usb 1-1: Product: syz [ 1113.424450][T18962] usb 1-1: Manufacturer: syz [ 1113.436959][T18962] hub 1-1:4.0: USB hub found [ 1113.457501][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1113.466987][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.503611][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.517144][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1113.526266][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.531995][ T5710] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1113.542440][ T24] usb 3-1: config 0 descriptor?? [ 1113.555166][ T24] hub 3-1:0.0: USB hub found [ 1113.741481][T18962] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 1113.752102][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 1113.754446][ T24] hub 3-1:0.0: 6 ports detected [ 1113.762671][ T24] hub 3-1:0.0: insufficient power available to use all downstream ports [ 1113.772952][ T5710] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1113.788203][ T5710] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1113.970215][ T24] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1114.064558][ T24] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1114.182530][ T5710] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1114.182775][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 1114.190752][ T5710] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1114.190775][ T5710] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1114.190794][ T5710] usb 2-1: config 0 has no interface number 0 [ 1114.212274][ T5736] usb 1-1: USB disconnect, device number 88 [ 1114.214508][ T5710] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1114.224417][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1114.226260][ T5710] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1114.268430][ T5710] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1114.278699][ T5710] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1114.283543][ T24] usb 3-1: USB disconnect, device number 92 [ 1114.291978][ T5710] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1114.305442][ T5710] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1114.316764][ T5710] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1114.326154][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.334362][ T5710] usb 2-1: Product: syz [ 1114.338534][ T5710] usb 2-1: Manufacturer: syz [ 1114.343401][ T5710] usb 2-1: SerialNumber: syz [ 1114.350426][ T5710] usb 2-1: config 0 descriptor?? [ 1114.363035][ T5710] usb 2-1: selecting invalid altsetting 2 [ 1114.802656][T20945] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1114.854265][T20945] tipc: Enabling of bearer rejected, failed to enable media [ 1114.893328][ T24] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1114.934531][ T29] audit: type=1400 audit(1782785903.425:2609): avc: denied { name_bind } for pid=20951 comm="syz.3.4037" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1114.977581][T20956] fuse: fd is not a fuse device [ 1115.073612][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1115.084852][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1115.095884][ T24] usb 1-1: config 0 has no interface number 0 [ 1115.102442][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1115.113561][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1115.125732][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1115.137269][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1115.150477][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1115.159703][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.170308][ T24] usb 1-1: config 0 descriptor?? [ 1115.191398][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1115.373278][ T24] usb 2-1: USB disconnect, device number 90 [ 1115.415193][ T5710] usb 1-1: USB disconnect, device number 89 [ 1115.426988][ T5710] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1115.671525][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1115.727439][T20979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4049'. [ 1115.832080][ T24] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1116.001520][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1116.034777][ T24] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 1116.052040][ T24] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.064951][ T24] usb 3-1: config 63 has no interface number 0 [ 1116.071494][ T24] usb 3-1: config 63 interface 66 has no altsetting 0 [ 1116.083264][ T24] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1116.092588][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.100658][ T24] usb 3-1: Product: syz [ 1116.132468][ T24] usb 3-1: Manufacturer: syz [ 1116.139540][ T24] usb 3-1: SerialNumber: syz [ 1116.194116][T21004] block nbd0: NBD_DISCONNECT [ 1116.305712][ T29] audit: type=1400 audit(1782785904.795:2610): avc: denied { map } for pid=21007 comm="syz.4.4063" path="socket:[77713]" dev="sockfs" ino=77713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1116.356849][ T24] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1116.365587][ T24] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1116.454032][T12141] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1116.463175][ T24] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1116.474208][ T24] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1116.484338][ T24] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1116.494350][ T24] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1116.504251][ T24] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 1116.512258][ T24] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1116.541981][ T24] usb 3-1: USB disconnect, device number 93 [ 1116.612028][T12141] usb 2-1: Using ep0 maxpacket: 16 [ 1116.626853][T12141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 1116.661536][T12141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1116.732429][T12141] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1116.765520][T12141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.864743][T12141] usb 2-1: config 0 descriptor?? [ 1117.172072][ T24] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1117.336520][T12141] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x7 [ 1117.346396][T12141] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 1117.354918][T12141] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x1 [ 1117.367047][T12141] hid-picolcd 0003:04D8:C002.0010: reserved main item tag 0xd [ 1117.752792][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1117.782384][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 1117.794079][ T24] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 1117.804354][ T24] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.815003][ T24] usb 3-1: config 63 has no interface number 0 [ 1117.821192][ T24] usb 3-1: config 63 interface 66 has no altsetting 0 [ 1117.832708][ T24] usb 3-1: string descriptor 0 read error: -22 [ 1117.839072][ T24] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1117.848441][T12141] hid-picolcd 0003:04D8:C002.0010: No report with id 0x11 found [ 1117.860777][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.873404][T12141] usb 2-1: USB disconnect, device number 91 [ 1117.895788][ T24] uvcvideo 3-1:63.66: Found UVC 0.07 device (174f:8acf) [ 1118.137218][T21050] sctp: [Deprecated]: syz.0.4079 (pid 21050) Use of int in max_burst socket option. [ 1118.137218][T21050] Use struct sctp_assoc_value instead [ 1118.322098][ T24] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1118.348787][ T24] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1118.373104][ T24] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1118.389057][T21059] netlink: 'syz.0.4080': attribute type 10 has an invalid length. [ 1118.397509][ T24] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1118.408895][ T24] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 1118.422297][ T24] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1118.435116][T21059] bond0: (slave netdevsim1): Releasing backup interface [ 1118.468977][ T24] usb 3-1: USB disconnect, device number 94 [ 1118.476636][T21059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1118.505392][T21062] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4080'. [ 1118.520004][T21059] team0: Device netdevsim1 is of different type [ 1119.900620][T21091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21091 comm=syz.2.4094 [ 1120.218642][T21107] loop9: detected capacity change from 0 to 7 [ 1120.235877][T21107] Dev loop9: unable to read RDB block 7 [ 1120.244736][T21107] loop9: unable to read partition table [ 1120.252649][T21107] loop9: partition table beyond EOD, truncated [ 1120.266389][T21107] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1120.871573][T21126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4108'. [ 1121.055945][T21134] netlink: 'syz.2.4113': attribute type 10 has an invalid length. [ 1121.068131][T21134] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4113'. [ 1122.749148][ T29] audit: type=1326 audit(1782785910.615:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21144 comm="syz.0.4116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49b939ce59 code=0x0 [ 1124.056699][T21163] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1124.159131][T21172] tipc: Enabling of bearer rejected, failed to enable media [ 1124.205790][T21178] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1124.276748][T21178] tipc: Enabling of bearer rejected, failed to enable media [ 1124.285328][T12141] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1124.332003][T18962] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1124.351432][T21188] netlink: 'syz.3.4127': attribute type 10 has an invalid length. [ 1124.369359][T21188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1124.391978][T21188] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1124.401199][T21188] team0: Device netdevsim1 is of different type [ 1124.412611][T21190] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4127'. [ 1124.442103][T12141] usb 2-1: Using ep0 maxpacket: 32 [ 1124.448770][T12141] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1124.464651][T12141] usb 2-1: config 0 has no interface number 0 [ 1124.477646][T12141] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.492238][T18962] usb 1-1: Using ep0 maxpacket: 32 [ 1124.503612][T18962] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1124.515590][T12141] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.529995][T18962] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1124.538322][T12141] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1124.551335][T18962] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1124.561565][T18962] usb 1-1: config 14 has no interface number 0 [ 1124.567808][T12141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.568280][T18962] usb 1-1: config 14 has no interface number 1 [ 1124.584069][T18962] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1124.595207][T18962] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1124.609406][T18962] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1124.612843][T12141] usb 2-1: config 0 descriptor?? [ 1124.632863][T18962] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1124.649895][T18962] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1124.661866][T18962] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1124.676378][T18962] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1124.684255][T18962] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1124.695971][T18962] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1124.705323][T18962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.713848][T18962] usb 1-1: Product: syz [ 1124.718351][T18962] usb 1-1: Manufacturer: syz [ 1124.723215][T18962] usb 1-1: SerialNumber: syz [ 1125.072693][T12141] ft260 0003:0403:6030.0011: item fetching failed at offset 0/2 [ 1125.089147][T12141] ft260 0003:0403:6030.0011: failed to parse HID [ 1125.192803][T18962] legousbtower 1-1:14.57: interrupt endpoints not found [ 1125.214573][T12141] ft260 0003:0403:6030.0011: probe with driver ft260 failed with error -22 [ 1125.673915][T18962] legousbtower 1-1:14.228: get version request failed: -121 [ 1125.703413][T12141] usb 2-1: USB disconnect, device number 92 [ 1125.705489][T18962] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121 [ 1125.900199][ T24] usb 1-1: USB disconnect, device number 90 [ 1127.116343][ T29] audit: type=1326 audit(1782785915.045:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21208 comm="syz.4.4134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa94279ce59 code=0x0 [ 1128.099400][T21226] bond0: entered promiscuous mode [ 1128.131173][T21226] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1128.158232][T21226] batadv0: entered promiscuous mode [ 1128.607137][T21245] netlink: 'syz.3.4142': attribute type 10 has an invalid length. [ 1128.647566][T21245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1128.667265][T21249] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4142'. [ 1128.677914][T21245] team0: Device netdevsim1 is of different type [ 1128.962954][T18962] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1128.971390][T21260] fuse: fd is not a fuse device [ 1129.067824][ T738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1129.152071][T18962] usb 2-1: Using ep0 maxpacket: 16 [ 1129.168336][T18962] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1129.186796][T18962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.205313][T18962] usb 2-1: Product: syz [ 1129.215095][T18962] usb 2-1: Manufacturer: syz [ 1129.230383][T18962] usb 2-1: SerialNumber: syz [ 1129.267202][T18962] usb 2-1: config 0 descriptor?? [ 1129.280283][ T738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1129.302976][T18962] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1129.511645][T18962] gspca_spca508: reg_read err -32 [ 1129.525903][ T738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1129.547969][T18962] gspca_spca508: reg_read err -32 [ 1129.552480][ T29] audit: type=1800 audit(1782785918.045:2613): pid=21266 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.4157" name="/newroot/882/file0" dev="tmpfs" ino=4694 res=0 errno=0 [ 1129.639125][T18962] gspca_spca508: reg_read err -32 [ 1129.670315][T18962] gspca_spca508: reg_read err -32 [ 1129.714604][T18962] gspca_spca508: reg_read err -32 [ 1130.042008][T18962] gspca_spca508: reg write: error -71 [ 1130.049654][T18962] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 1130.080499][T18962] usb 2-1: USB disconnect, device number 93 [ 1130.096570][T17582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1130.104902][T17582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1130.134707][T17582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1130.149650][T17582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1130.159629][T17582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1130.189402][ T29] audit: type=1400 audit(1782785918.665:2614): avc: denied { mounton } for pid=21278 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1130.225884][ T738] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1130.408079][T21290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1130.512853][T21295] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1130.536754][T21302] fuse: fd is not a fuse device [ 1130.615782][T21295] tipc: Enabling of bearer rejected, failed to enable media [ 1130.785665][ T738] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 1130.803736][ T738] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 1130.823831][ T738] bridge0: port 3(wlan1) entered disabled state [ 1131.000232][ T738] team0: Port device xfrm0 removed [ 1131.016642][ T738] bond1 (unregistering): (slave vti0): Releasing backup interface [ 1131.024614][ T738] vti0 (unregistering): left promiscuous mode [ 1131.039755][ T29] audit: type=1400 audit(1782785919.525:2615): avc: denied { write } for pid=21314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1131.112223][ T29] audit: type=1400 audit(1782785919.605:2616): avc: denied { write } for pid=21334 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1131.190661][ T738] bond0 (unregistering): Released all slaves [ 1131.199499][ T738] bond1 (unregistering): Released all slaves [ 1131.210892][ T738] bond2 (unregistering): Released all slaves [ 1131.236942][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1131.275195][ T738] tipc: Disabling bearer [ 1131.299768][ T738] tipc: Left network mode [ 1131.326157][T21278] lo speed is unknown, defaulting to 1000 [ 1131.425782][T21342] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1131.980242][ T29] audit: type=1400 audit(1782785920.465:2617): avc: denied { write } for pid=21345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1132.077716][ T29] audit: type=1400 audit(1782785920.565:2618): avc: denied { write } for pid=21374 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1132.208108][T21375] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1132.242627][T21375] block device autoloading is deprecated and will be removed. [ 1132.263288][T12649] Bluetooth: hci3: command tx timeout [ 1132.269297][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1132.365715][T21278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.400290][T21278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.423478][T21278] bridge_slave_0: entered allmulticast mode [ 1132.443450][T21278] bridge_slave_0: entered promiscuous mode [ 1132.459604][T21388] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1132.504327][T21278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.536741][T21278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.570310][T21278] bridge_slave_1: entered allmulticast mode [ 1132.586921][T21278] bridge_slave_1: entered promiscuous mode [ 1132.638689][T21401] tipc: Enabling of bearer rejected, failed to enable media [ 1132.721510][T21278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.789465][T21278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.900596][ T738] hsr_slave_0: left promiscuous mode [ 1132.944047][ T738] hsr_slave_1: left promiscuous mode [ 1132.971607][ T738] batman_adv: batadv0: Removing interface: ipvlan2 [ 1133.001435][ T738] veth1_vlan: left allmulticast mode [ 1133.143979][T21434] fuse: fd is not a fuse device [ 1133.247727][T21426] kvm: kvm [21424]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x42ca [ 1133.360374][ T29] audit: type=1400 audit(1782785921.845:2619): avc: denied { write } for pid=21416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.750538][ T29] audit: type=1400 audit(1782785922.235:2620): avc: denied { write } for pid=21445 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1134.053146][T21278] team0: Port device team_slave_0 added [ 1134.072591][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1134.076128][T16213] smbdirect: ib_dev[syz2] removed [ 1134.137059][T21278] team0: Port device team_slave_1 added [ 1134.207459][ T29] audit: type=1400 audit(1782785922.695:2621): avc: denied { ioctl } for pid=21453 comm="syz.1.4203" path="/753/file0/file0" dev="fuse" ino=64 ioctlcmd=0x912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1134.274076][T21278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.284392][T21278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.360705][T12649] Bluetooth: hci3: command tx timeout [ 1134.370695][T21278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.400213][T21278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.417393][T21278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.444822][T21278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.826871][T21278] hsr_slave_0: entered promiscuous mode [ 1134.833242][T21278] hsr_slave_1: entered promiscuous mode [ 1134.841233][T21278] debugfs: 'hsr0' already exists in 'hsr' [ 1134.847956][T21278] Cannot create hsr debugfs directory [ 1135.017520][ T738] IPVS: stop unused estimator thread 0... [ 1135.242652][T18962] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1135.287157][T21495] fuse: fd is not a fuse device [ 1135.300930][T21492] fuse: root generation should be zero [ 1135.413717][T18962] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1135.440919][T18962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.475384][T21278] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1135.482326][T18962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.482354][T18962] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1135.483207][T18962] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1135.518014][ T29] audit: type=1400 audit(1782785923.995:2622): avc: denied { write } for pid=21475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.555091][T21509] fuse: fd is not a fuse device [ 1135.560283][T18962] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1135.566153][T21278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1135.573068][T18962] usb 3-1: Manufacturer: syz [ 1135.588568][T18962] usb 3-1: config 0 descriptor?? [ 1135.594209][T21278] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1135.649444][T21278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1135.681838][T21278] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1135.725447][T21278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1135.748018][T21278] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1135.751180][ T29] audit: type=1400 audit(1782785924.235:2623): avc: denied { write } for pid=21512 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.840515][T21278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1136.029084][T18962] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 1136.055246][T18962] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1136.096740][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1136.137049][T21526] netlink: 'syz.1.4221': attribute type 1 has an invalid length. [ 1136.164707][T21526] bond4: entered promiscuous mode [ 1136.170174][T21526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1136.208629][T21526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1136.216116][T21526] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 1136.226678][T21526] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1136.238688][T21526] bond4: (slave gre1): making interface the new active one [ 1136.246200][T21526] gre1: entered promiscuous mode [ 1136.258664][T21526] bond4: (slave gre1): Enslaving as an active interface with an up link [ 1136.414531][T18956] usb 3-1: USB disconnect, device number 95 [ 1136.422204][T12649] Bluetooth: hci3: command tx timeout [ 1136.488001][T21278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.730251][T21278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.750686][T16213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.757776][T16213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.790258][T16213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.797368][T16213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.928169][T21543] overlayfs: failed to clone upperpath [ 1137.244958][T21278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.364503][T12141] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1137.386034][T21278] veth0_vlan: entered promiscuous mode [ 1137.398736][T21278] veth1_vlan: entered promiscuous mode [ 1137.420273][T21278] veth0_macvtap: entered promiscuous mode [ 1137.428814][T21278] veth1_macvtap: entered promiscuous mode [ 1137.442326][T21278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1137.454651][T21278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.469038][T16215] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.479086][T16215] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.490670][T16215] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.500863][T16215] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.523371][T12141] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1137.561162][T12141] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1137.599858][T12141] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1137.627652][T12141] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1137.643070][T12141] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1137.680593][T12141] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1137.694654][T12141] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1137.721766][T16215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.734751][T16215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.738489][T12141] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1137.757955][T12141] usb 3-1: Product: syz [ 1137.762552][T12141] usb 3-1: Manufacturer: syz [ 1137.772565][T21556] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1137.784317][T12141] cdc_wdm 3-1:1.0: skipping garbage [ 1137.789543][T12141] cdc_wdm 3-1:1.0: skipping garbage [ 1137.796916][T12141] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1137.803116][T12141] cdc_wdm 3-1:1.0: Unknown control protocol [ 1137.909980][T16215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.920866][T16215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.363518][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.370143][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.378098][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.378284][ T29] audit: type=1400 audit(1782785926.855:2624): avc: denied { mounton } for pid=21278 comm="syz-executor" path="/root/syzkaller.1OcsT5/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1138.384685][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.385070][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.421736][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.429804][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.436396][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.442943][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.449535][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.456043][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.462649][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.465384][ T29] audit: type=1400 audit(1782785926.915:2625): avc: denied { mounton } for pid=21278 comm="syz-executor" path="/root/syzkaller.1OcsT5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1138.469120][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.502016][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.509137][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.515734][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.522095][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.528687][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.529815][T12649] Bluetooth: hci3: command tx timeout [ 1138.534924][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.546704][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.600839][ T29] audit: type=1400 audit(1782785926.935:2626): avc: denied { mounton } for pid=21278 comm="syz-executor" path="/root/syzkaller.1OcsT5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=80939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1138.707273][ T29] audit: type=1400 audit(1782785927.175:2627): avc: denied { mounton } for pid=21278 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1138.845596][T16213] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.864404][T16215] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.885073][T16215] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.905143][T18962] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1138.924986][T16215] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.927034][ T29] audit: type=1400 audit(1782785927.415:2628): avc: denied { name_bind } for pid=21601 comm="syz.4.4239" src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 1139.065024][T21605] 0x000000000004-0x000000020000 : "" [ 1139.125335][T21605] ftl_cs: FTL header corrupt! [ 1139.162062][T18962] usb 2-1: Using ep0 maxpacket: 16 [ 1139.184126][T18962] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1139.215737][T18962] usb 2-1: no configurations [ 1139.230406][T18962] usb 2-1: can't read configurations, error -22 [ 1139.886324][T21616] fuse: fd is not a fuse device [ 1140.187395][T21555] Process accounting paused [ 1140.316491][ T5710] usb 3-1: USB disconnect, device number 96 [ 1141.222241][T21633] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.4249'. [ 1141.421893][T21645] fuse: fd is not a fuse device [ 1141.668887][T21650] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1141.687373][T21650] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2583018472 (5166036944 ns) > initial count (2648882350 ns). Using initial count to start timer. [ 1142.100413][T21655] fuse: fd is not a fuse device [ 1144.072005][ T5736] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1144.575181][ T5736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.607552][ T5736] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1144.641139][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.657294][ T5736] usb 3-1: config 0 descriptor?? [ 1145.044906][ T5736] usbhid 3-1:0.0: can't add hid device: -71 [ 1145.060413][ T5736] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1145.107714][ T5736] usb 3-1: USB disconnect, device number 97 [ 1145.430538][T12141] IPVS: starting estimator thread 0... [ 1145.522099][T21717] IPVS: using max 42 ests per chain, 100800 per kthread [ 1145.572136][ T5736] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1145.785389][ T5736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.814475][ T5736] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1145.833985][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.855053][ T5736] usb 3-1: config 0 descriptor?? [ 1146.686521][ T5736] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1146.729950][T21683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.791315][T21747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4287'. [ 1146.874365][ T5736] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input52 [ 1146.895463][T21683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.511123][T21788] netlink: 'syz.5.4293': attribute type 10 has an invalid length. [ 1148.558595][T21788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1148.600365][T21794] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4293'. [ 1148.619459][T21788] team0: Port device netdevsim1 added [ 1148.925029][ T5710] usb 3-1: USB disconnect, device number 98 [ 1148.925129][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1148.991693][T21801] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4299'. [ 1149.058347][T21810] syzkaller1: entered promiscuous mode [ 1149.090499][T21810] syzkaller1: entered allmulticast mode [ 1149.124564][ T29] audit: type=1800 audit(1782785937.615:2629): pid=21811 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4301" name="file1" dev="overlay" ino=4502 res=0 errno=0 [ 1149.358871][ T29] audit: type=1400 audit(1782785937.845:2630): avc: denied { write } for pid=21771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1149.921022][ T29] audit: type=1400 audit(1782785938.405:2631): avc: denied { write } for pid=21826 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1150.822754][T21847] fuse: fd is not a fuse device [ 1151.189916][ T29] audit: type=1400 audit(1782785939.675:2632): avc: denied { write } for pid=21841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.290946][ T29] audit: type=1400 audit(1782785939.775:2633): avc: denied { write } for pid=21871 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.393342][ T5710] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1151.562007][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 1151.639077][T21880] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1151.657853][T21880] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2583018472 (5166036944 ns) > initial count (2648882350 ns). Using initial count to start timer. [ 1151.690307][ T5710] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1151.752387][ T5710] usb 3-1: config 0 has no interface number 0 [ 1151.768211][ T5710] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1151.779022][ T5710] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1151.795804][ T5710] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1151.806411][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.837835][ T5710] usb 3-1: Product: syz [ 1151.848963][ T5710] usb 3-1: Manufacturer: syz [ 1151.860466][ T5710] usb 3-1: SerialNumber: syz [ 1151.893836][ T5710] usb 3-1: config 0 descriptor?? [ 1151.915227][ T5710] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1151.928459][ T5710] em28xx 3-1:0.89: Video interface 89 found: [ 1151.947727][T21889] netlink: 'syz.4.4317': attribute type 10 has an invalid length. [ 1151.984748][T21889] bond0: (slave netdevsim1): Releasing backup interface [ 1152.049908][T21889] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4317'. [ 1152.177136][ T29] audit: type=1400 audit(1782785940.665:2634): avc: denied { write } for pid=21877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.457659][ T29] audit: type=1400 audit(1782785940.945:2635): avc: denied { write } for pid=21902 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.534510][ T5710] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1152.612082][T18962] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1152.783617][T18962] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.816266][T18962] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1152.854874][T18962] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1152.871396][T18962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.895916][T18962] usb 6-1: Product: syz [ 1152.912019][T18962] usb 6-1: Manufacturer: syz [ 1152.930565][T18962] usb 6-1: SerialNumber: syz [ 1152.965310][ T29] audit: type=1400 audit(1782785941.455:2636): avc: denied { write } for pid=21905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1153.060165][ T29] audit: type=1400 audit(1782785941.545:2637): avc: denied { write } for pid=21916 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1153.190390][ T5710] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=200) [ 1153.228980][T21901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.239114][ T5710] em28xx 3-1:0.89: board has no eeprom [ 1153.244991][T21920] fuse: fd is not a fuse device [ 1153.259566][T21901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.290610][T18962] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1153.321110][T18962] usb 6-1: USB disconnect, device number 2 [ 1153.352353][T19327] udevd[19327]: setting mode of /dev/bus/usb/006/002 to 020664 failed: No such file or directory [ 1153.450245][T19327] udevd[19327]: setting owner of /dev/bus/usb/006/002 to uid=0, gid=0 failed: No such file or directory [ 1153.492117][ T5710] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1153.510987][ T5710] em28xx 3-1:0.89: analog set to bulk mode. [ 1153.525626][T17502] em28xx 3-1:0.89: Registering V4L2 extension [ 1153.558784][ T5710] usb 3-1: USB disconnect, device number 99 [ 1153.597526][ T5710] em28xx 3-1:0.89: Disconnecting em28xx [ 1153.639755][T17502] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1153.655271][T17502] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1153.672143][T17502] em28xx 3-1:0.89: No AC97 audio processor [ 1153.687297][T17502] usb 3-1: Decoder not found [ 1153.697298][T17502] em28xx 3-1:0.89: failed to create media graph [ 1153.710841][T17502] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1153.759675][T17502] em28xx 3-1:0.89: Registering snapshot button... [ 1153.790524][T17502] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input53 [ 1153.824574][T17502] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1153.842755][ T5710] em28xx 3-1:0.89: Closing input extension [ 1153.857127][ T5710] em28xx 3-1:0.89: Deregistering snapshot button [ 1153.863737][T18962] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1153.915281][ T5710] em28xx 3-1:0.89: Freeing device [ 1154.232094][T18962] usb 6-1: Using ep0 maxpacket: 8 [ 1154.249955][T18962] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 1154.269531][T18962] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.298257][T18962] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1154.320199][T18962] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1154.343523][T18962] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1154.371176][T18962] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.404598][T18962] usb 6-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1154.444195][T18962] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1154.470556][T18962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.716794][T18962] usb 6-1: usb_control_msg returned -32 [ 1154.732855][T18962] usbtmc 6-1:16.0: can't read capabilities [ 1154.746695][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.752702][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.758678][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.765017][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.771011][ C0] usbtmc 6-1:16.0: invalid notification: 11 [ 1154.777091][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.783223][ C0] usbtmc 6-1:16.0: invalid notification: 2 [ 1154.789164][ C0] usbtmc 6-1:16.0: invalid notification: 5 [ 1154.795119][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.801338][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.807307][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.813270][ C0] usbtmc 6-1:16.0: invalid notification: 40 [ 1154.819451][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.825431][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.831409][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.837381][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.843328][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.849267][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.855376][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.861358][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.867356][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.873366][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.879357][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.885353][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.891335][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.897290][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.903725][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.909882][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.915866][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.921833][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.927823][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.933800][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.939786][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.948634][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.954644][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.960645][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.966625][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.972633][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.978616][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.984691][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.990695][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1154.996694][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.003569][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.009726][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.015693][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.024097][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.030073][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.036081][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.042101][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.048076][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.054058][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.060029][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.066032][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.072015][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.077973][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.083921][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.089885][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.095837][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.101793][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.108617][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.114567][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.120525][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.126479][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.132441][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.138418][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.144385][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.150341][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.156298][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.162256][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.168203][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.174167][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.180113][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.186071][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.192035][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.197993][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.203939][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.210510][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.216463][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.222446][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.228402][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.234386][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.240335][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.246886][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.252849][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.258794][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.264743][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.270684][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.276629][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.282613][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.288590][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.294573][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.300546][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.306527][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.312591][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.318523][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.324448][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.330381][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.336307][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.342244][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.348178][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.354111][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.360033][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.365957][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.371887][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.377824][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.383752][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.389682][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.395624][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.401567][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.407492][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.413570][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.419501][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.425455][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.431430][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.437420][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.443401][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.449376][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.455333][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.461324][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.467312][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.473300][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.479268][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.485211][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.491147][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.497105][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.503092][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.509063][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.522261][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.528440][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.534444][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.540417][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.546389][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.552365][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.558340][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.564337][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.570313][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.576292][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.582294][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.588261][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.594227][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.600194][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.606162][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.612129][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.618422][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.624394][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.630363][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.636332][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.645345][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.651334][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.657309][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.663333][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.669307][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.675274][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.681239][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.687195][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.693155][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.699114][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.705070][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.710995][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.716938][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.732067][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.738212][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.744456][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.750473][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.756482][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.762584][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.768561][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.774540][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.780513][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.786541][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.792526][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.798501][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.804476][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.810449][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.816452][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.822675][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.829118][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.835097][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.841079][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.847060][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.853030][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.858999][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.864965][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.870935][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.876937][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.882931][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.888924][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.894918][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.900893][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.906867][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.912865][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.918844][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.931581][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1155.937868][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 1156.398550][T21957] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1156.422852][ T24] usb 6-1: USB disconnect, device number 3 [ 1156.494822][T21957] tipc: Enabling of bearer rejected, failed to enable media [ 1156.510082][T21966] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4336'. [ 1156.519999][T21966] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4336'. [ 1156.950240][T21980] fuse: fd is not a fuse device [ 1157.061738][T21983] orangefs: client-core tried to read wrong size [ 1157.795108][T22014] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1157.845092][T22014] tipc: Enabling of bearer rejected, failed to enable media [ 1157.987235][T18962] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1158.024276][ T5710] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1158.312919][T18962] usb 2-1: Using ep0 maxpacket: 8 [ 1158.323075][ T5710] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1158.347024][T18962] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1158.366546][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.386767][T18962] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1158.404616][ T5710] usb 3-1: Product: syz [ 1158.408840][ T5710] usb 3-1: Manufacturer: syz [ 1158.413697][T18962] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1158.424563][ T5710] usb 3-1: SerialNumber: syz [ 1158.430427][T18962] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1158.451397][T18962] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1158.472435][T18962] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1158.503276][T18962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.570790][T18962] usb 2-1: usb_control_msg returned -32 [ 1159.585080][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1159.596933][T18962] usbtmc 2-1:16.0: can't read capabilities [ 1159.606968][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1159.623215][T18962] usb 2-1: USB disconnect, device number 96 [ 1159.663539][T22053] fuse: fd is not a fuse device [ 1160.542417][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1160.775107][ T29] audit: type=1400 audit(1782785949.255:2638): avc: denied { ioctl } for pid=22075 comm="syz.1.4373" path="socket:[84229]" dev="sockfs" ino=84229 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1160.777718][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 1161.078029][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1161.106492][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1161.145259][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1161.186364][ T5710] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1161.247900][ T5710] usb 3-1: USB disconnect, device number 100 [ 1161.330311][T22088] fuse: fd is not a fuse device [ 1161.382806][T22089] use of bytesused == 0 is deprecated and will be removed in the future, [ 1161.409156][T22089] use the actual size instead. [ 1161.476809][ T29] audit: type=1400 audit(1782785949.965:2639): avc: denied { accept } for pid=22090 comm="syz.2.4379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1161.624767][T22093] kvm: pic: single mode not supported [ 1161.624780][T22093] kvm: pic: level sensitive irq not supported [ 1161.646311][T22093] kvm: pic: single mode not supported [ 1161.772202][T18962] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1161.825723][T22104] fuse: fd is not a fuse device [ 1161.958137][T18962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.985129][T18962] usb 3-1: config 0 has no interfaces? [ 1162.005626][T18962] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1162.104083][T18962] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1162.112584][T18962] usb 3-1: Product: syz [ 1162.117409][T18962] usb 3-1: Manufacturer: syz [ 1162.125232][T18962] usb 3-1: config 0 descriptor?? [ 1162.618892][ T5710] usb 3-1: USB disconnect, device number 101 [ 1163.482448][ T5710] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1163.665145][ T5710] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1163.705316][ T5710] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1163.739368][ T5710] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1163.782720][T22133] fuse: fd is not a fuse device [ 1163.793270][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1163.811247][ T5710] usb 3-1: Product: syz [ 1164.272077][ T5710] usb 3-1: Manufacturer: syz [ 1164.276722][ T5710] usb 3-1: SerialNumber: syz [ 1164.285810][ T5710] usb 3-1: config 0 descriptor?? [ 1164.295502][ T5710] usb 3-1: selecting invalid altsetting 0 [ 1164.581806][T12141] usb 3-1: USB disconnect, device number 102 [ 1166.314111][T22162] 9p: Bad value for 'rfdno' [ 1166.951343][ T29] audit: type=1326 audit(1782785955.435:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22171 comm="syz.3.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736539ce59 code=0x7ffc0000 [ 1167.185001][ T29] audit: type=1326 audit(1782785955.465:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22171 comm="syz.3.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736539ce59 code=0x7ffc0000 [ 1167.551153][ T29] audit: type=1326 audit(1782785955.505:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22171 comm="syz.3.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736539ce59 code=0x7ffc0000 [ 1167.625335][ T29] audit: type=1326 audit(1782785955.505:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22171 comm="syz.3.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f736539ce59 code=0x7ffc0000 [ 1167.688512][ T29] audit: type=1326 audit(1782785955.505:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22171 comm="syz.3.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736539ce59 code=0x7ffc0000 [ 1167.758519][ T29] audit: type=1326 audit(1782785955.565:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22171 comm="syz.3.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f736535d68e code=0x7ffc0000 [ 1167.823629][ T29] audit: type=1326 audit(1782785955.565:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22171 comm="syz.3.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f736535d68e code=0x7ffc0000 [ 1167.888257][ T29] audit: type=1326 audit(1782785955.565:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22171 comm="syz.3.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f736535d68e code=0x7ffc0000 [ 1167.975496][ T29] audit: type=1326 audit(1782785955.565:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22171 comm="syz.3.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f736535d68e code=0x7ffc0000 [ 1168.127282][ T29] audit: type=1326 audit(1782785955.575:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22171 comm="syz.3.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f736535d68e code=0x7ffc0000 [ 1168.481975][ T24] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1168.529548][T22196] fuse: fd is not a fuse device [ 1168.559978][T22198] input: syz0 as /devices/virtual/input/input54 [ 1168.632701][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1168.656607][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1168.737715][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1168.795652][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1168.842208][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.874007][ T24] usb 3-1: Product: syz [ 1168.899538][ T24] usb 3-1: Manufacturer: syz [ 1168.923661][ T24] usb 3-1: SerialNumber: syz [ 1168.948049][ T24] usb 3-1: config 0 descriptor?? [ 1168.986020][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1169.035239][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1169.217431][T22206] bridge_slave_0: left allmulticast mode [ 1169.231761][T22206] bridge_slave_0: left promiscuous mode [ 1169.252175][T22206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.268627][T22206] bridge_slave_1: left allmulticast mode [ 1169.284801][T22206] bridge_slave_1: left promiscuous mode [ 1169.295967][T22206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.342961][T22206] bond0: (slave bond_slave_0): Releasing backup interface [ 1169.385921][T22206] bond0: (slave bond_slave_1): Releasing backup interface [ 1169.434680][T22206] team0: Port device team_slave_0 removed [ 1169.491464][T22206] team0: Port device team_slave_1 removed [ 1169.530145][T22206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.547493][T22206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.559175][T22206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.570013][T22206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.586946][T22206] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1169.605457][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1169.627030][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1169.650635][T22207] team0: Device xfrm0 is of different type [ 1169.666626][T22208] tipc: Started in network mode [ 1169.671670][T22208] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1169.679704][T22208] tipc: Enabled bearer , priority 0 [ 1170.279310][T22230] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1170.298604][T22229] tipc: Failed to remove unknown binding: 66,0,0/0:529576982/529576984 [ 1170.345847][T22229] tipc: Failed to remove unknown binding: 66,0,0/0:529576982/529576983 [ 1170.401359][T22229] tipc: Failed to remove unknown binding: 66,0,0/0:529576982/529576984 [ 1170.441775][T22229] tipc: Failed to remove unknown binding: 66,0,0/0:529576982/529576983 [ 1170.683801][ T24] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1170.703925][T22237] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4427'. [ 1170.802953][ T5710] tipc: Node number set to 11578026 [ 1170.897577][ T24] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1170.919500][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1170.939437][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1170.959035][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1170.976405][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1171.014457][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1171.046025][ T24] usb 3-1: USB disconnect, device number 103 [ 1171.435190][T22185] Process accounting resumed [ 1171.624792][ T5710] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1171.712636][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.719517][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.823569][ T5710] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1171.932776][ T5710] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1171.953281][ T5710] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1171.983332][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1172.004103][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1172.015240][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 1172.015254][ T29] audit: type=1400 audit(1782785960.495:2716): avc: denied { read } for pid=22264 comm="syz.2.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1172.043754][ T5710] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1172.054203][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1172.065648][ T5710] usb 6-1: Product: syz [ 1172.070490][ T5710] usb 6-1: Manufacturer: syz [ 1172.121305][ T5710] cdc_wdm 6-1:1.0: skipping garbage [ 1172.138336][ T5710] cdc_wdm 6-1:1.0: skipping garbage [ 1172.170797][ T5710] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1172.192718][ T5710] cdc_wdm 6-1:1.0: Unknown control protocol [ 1172.288976][T22271] openvswitch: netlink: Actions may not be safe on all matching packets [ 1172.373414][ C0] wdm_int_callback: 9386 callbacks suppressed [ 1172.373436][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1172.386084][ C0] wdm_int_callback: 9386 callbacks suppressed [ 1172.386094][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1172.398431][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1172.405005][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1172.411981][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1172.418556][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1172.425149][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1172.431717][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1172.438105][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1172.444680][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1172.451894][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1172.458495][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1172.464713][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1172.471280][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1172.477482][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1172.484063][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1172.490255][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1172.496820][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1172.503035][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1172.509612][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1172.522419][ T5710] usb 6-1: USB disconnect, device number 4 [ 1172.528258][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1172.598220][T22275] fuse: fd is not a fuse device [ 1172.987999][T22300] netlink: zone id is out of range [ 1172.993375][T22300] netlink: zone id is out of range [ 1173.058280][T22302] fuse: fd is not a fuse device [ 1173.161420][ T29] audit: type=1400 audit(1782785961.645:2717): avc: denied { read } for pid=22295 comm="syz.4.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1173.233273][T22307] fuse: fd is not a fuse device [ 1173.851554][ T29] audit: type=1400 audit(1782785962.335:2718): avc: denied { setattr } for pid=22304 comm="syz.1.4454" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1174.690638][T22336] fuse: fd is not a fuse device [ 1174.984198][T22346] xt_hashlimit: size too large, truncated to 1048576 [ 1175.166196][T22353] kvm: pic: level sensitive irq not supported [ 1178.205968][T22431] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1178.230548][T22431] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2583018472 (5166036944 ns) > initial count (2648882350 ns). Using initial count to start timer. [ 1178.858392][T22458] overlayfs: failed to clone upperpath [ 1178.866681][T22458] overlayfs: failed to clone upperpath [ 1179.332185][T22474] fuse: fd is not a fuse device [ 1180.421210][T22493] ubi: mtd0 is already attached to ubi31 [ 1182.092012][ T932] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1182.300253][ T932] usb 3-1: config index 0 descriptor too short (expected 65292, got 45) [ 1182.323341][ T932] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1182.335861][ T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.348716][ T932] usb 3-1: Product: syz [ 1182.354452][ T932] usb 3-1: Manufacturer: syz [ 1182.363010][ T932] usb 3-1: SerialNumber: syz [ 1183.060720][ T932] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1183.087558][ T932] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1183.160359][T22542] CIFS mount error: No usable UNC path provided in device string! [ 1183.160359][T22542] [ 1183.170526][T22542] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1183.262683][T22548] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4542'. [ 1184.194851][T17582] Bluetooth: hci3: command 0x0405 tx timeout [ 1184.893338][T22575] evm: overlay not supported [ 1184.900763][ T29] audit: type=1400 audit(1782785973.385:2719): avc: denied { watch } for pid=22574 comm="syz.1.4550" path="/820/bus/file1" dev="overlay" ino=4465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1184.958727][ T932] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1184.973753][ T932] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1184.986719][ T932] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1184.999347][ T932] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1185.011628][ T932] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1185.023675][ T932] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1185.040526][ T932] usb 3-1: USB disconnect, device number 104 [ 1187.326582][T22611] fuse: fd is not a fuse device [ 1187.642106][T17502] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1187.801977][T17502] usb 6-1: Using ep0 maxpacket: 16 [ 1187.813995][T17502] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1187.838969][T17502] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1187.867543][T17502] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1187.939193][T17502] usb 6-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1187.952013][ T24] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1187.953477][T17502] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.972459][T17502] usb 6-1: config 0 descriptor?? [ 1187.979779][T22615] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1188.145155][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1188.163529][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.263478][ T24] usb 3-1: Product: syz [ 1188.451989][ T24] usb 3-1: Manufacturer: syz [ 1188.456717][ T24] usb 3-1: SerialNumber: syz [ 1188.593768][ T24] usb 3-1: config 0 descriptor?? [ 1188.658560][T17502] a4tech 0003:09DA:022B.0013: unknown main item tag 0x0 [ 1188.672901][T17502] a4tech 0003:09DA:022B.0013: unknown main item tag 0x0 [ 1188.687994][T17502] a4tech 0003:09DA:022B.0013: unknown main item tag 0x0 [ 1188.704314][T17502] a4tech 0003:09DA:022B.0013: unknown main item tag 0x0 [ 1188.720795][T17502] a4tech 0003:09DA:022B.0013: unknown main item tag 0x0 [ 1188.765961][T17502] a4tech 0003:09DA:022B.0013: unknown main item tag 0x0 [ 1188.780213][T17502] a4tech 0003:09DA:022B.0013: unknown main item tag 0x0 [ 1188.791065][T17502] a4tech 0003:09DA:022B.0013: unknown main item tag 0x0 [ 1188.799785][T17502] a4tech 0003:09DA:022B.0013: unknown main item tag 0x0 [ 1188.807576][T17502] a4tech 0003:09DA:022B.0013: unknown main item tag 0x0 [ 1188.818961][T17502] a4tech 0003:09DA:022B.0013: unknown global tag 0xe [ 1188.825990][T17502] a4tech 0003:09DA:022B.0013: item 0 4 1 14 parsing failed [ 1188.834206][T17502] a4tech 0003:09DA:022B.0013: parse failed [ 1188.840431][T17502] a4tech 0003:09DA:022B.0013: probe with driver a4tech failed with error -22 [ 1188.863040][T17502] usb 6-1: USB disconnect, device number 5 [ 1188.976314][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1189.281989][T12141] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1189.445860][T22658] syzkaller0: entered promiscuous mode [ 1189.453029][T12141] usb 2-1: Using ep0 maxpacket: 32 [ 1189.477989][T12141] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.537340][T12141] usb 2-1: config 0 has no interfaces? [ 1189.615601][T12141] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1189.689579][T12141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.736314][T12141] usb 2-1: Product: syz [ 1189.762970][T12141] usb 2-1: Manufacturer: syz [ 1189.796083][T22658] syzkaller0: entered allmulticast mode [ 1189.807476][T12141] usb 2-1: SerialNumber: syz [ 1189.815957][T12141] usb 2-1: config 0 descriptor?? [ 1190.425218][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1190.451031][ T24] usb 3-1: USB disconnect, device number 105 [ 1190.477821][T12141] usb 2-1: USB disconnect, device number 97 [ 1192.289231][T22703] tipc: Enabling of bearer rejected, failed to enable media [ 1192.398673][T22711] syzkaller0: entered promiscuous mode [ 1192.419398][T22711] syzkaller0: entered allmulticast mode [ 1192.450062][T22711] tipc: Enabled bearer , priority 0 [ 1192.479072][T22709] tipc: Resetting bearer [ 1192.535933][T22709] tipc: Disabling bearer [ 1193.699711][T22735] fuse: fd is not a fuse device [ 1195.322886][ T932] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1195.497447][ T932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.517321][ T932] usb 6-1: config 0 has no interfaces? [ 1195.531331][ T932] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1195.553556][ T932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.630440][ T932] usb 6-1: config 0 descriptor?? [ 1196.107167][T22780] netlink: 'syz.4.4613': attribute type 10 has an invalid length. [ 1196.122651][T22780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1196.133659][T22780] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1196.149341][T22780] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4613'. [ 1196.293262][T22788] fuse: fd is not a fuse device [ 1196.988445][T22793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.017183][T22793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.895190][T22819] netlink: 'syz.1.4625': attribute type 4 has an invalid length. [ 1197.903545][T22819] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1197.927008][T22816] 0x0000fffffffd-0x00010000fffd : "" [ 1197.938078][T22816] mtd: partition "" is out of reach -- disabled [ 1198.059613][T22816] ftl_cs: FTL header not found. [ 1198.275060][T22833] fuse: fd is not a fuse device [ 1198.526778][ T24] usb 6-1: USB disconnect, device number 6 [ 1199.692077][ T5710] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1200.436966][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1200.965322][ T24] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1200.996711][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1201.006802][ T5710] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1201.058222][ T5710] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1201.473268][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.493784][ T5710] usb 6-1: Product: syz [ 1201.497990][ T5710] usb 6-1: Manufacturer: syz [ 1201.505353][ T5710] usb 6-1: SerialNumber: syz [ 1201.513600][ T5710] usb 6-1: config 0 descriptor?? [ 1201.522936][ T5710] adutux 6-1:0.0: interrupt endpoints not found [ 1201.534568][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1201.550386][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1201.561575][ T24] usb 3-1: config 0 has no interface number 0 [ 1201.580163][ T24] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1201.599322][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.608051][ T24] usb 3-1: Product: syz [ 1201.612315][ T24] usb 3-1: Manufacturer: syz [ 1201.616958][ T24] usb 3-1: SerialNumber: syz [ 1201.629246][ T24] usb 3-1: config 0 descriptor?? [ 1201.771544][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1201.806361][ T5710] usb 6-1: USB disconnect, device number 7 [ 1205.010635][ T24] usb 3-1: USB disconnect, device number 106 [ 1205.734215][T22872] Process accounting paused [ 1205.824673][ T5736] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1206.002041][ T5736] usb 2-1: Using ep0 maxpacket: 16 [ 1206.053627][ T5736] usb 2-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 1206.620290][T22971] fuse: fd is not a fuse device [ 1206.743057][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1206.757402][ T5736] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1206.766565][ T5736] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1206.774611][ T5736] usb 2-1: Manufacturer: syz [ 1206.791115][ T5736] usb 2-1: config 0 descriptor?? [ 1207.185487][ T5736] usb 2-1: USB disconnect, device number 98 [ 1207.223822][T22986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1208.184422][ T29] audit: type=1326 audit(1782785996.665:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22996 comm="syz.5.4676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac2b9ce59 code=0x7ffc0000 [ 1208.212265][ T29] audit: type=1326 audit(1782785996.665:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22996 comm="syz.5.4676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac2b9ce59 code=0x7ffc0000 [ 1208.250631][ T29] audit: type=1326 audit(1782785996.665:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22996 comm="syz.5.4676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac2b9ce59 code=0x7ffc0000 [ 1208.374187][ T29] audit: type=1326 audit(1782785996.665:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22996 comm="syz.5.4676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac2b9ce59 code=0x7ffc0000 [ 1208.451284][ T29] audit: type=1326 audit(1782785996.665:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22996 comm="syz.5.4676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2ac2b9ce59 code=0x7ffc0000 [ 1208.598065][ T29] audit: type=1400 audit(1782785996.705:2725): avc: denied { read } for pid=22996 comm="syz.5.4676" path="socket:[87596]" dev="sockfs" ino=87596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1208.652206][ T29] audit: type=1326 audit(1782785996.705:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22996 comm="syz.5.4676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ac2b5d68e code=0x7ffc0000 [ 1208.812008][ T932] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1209.002076][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 1209.132144][ T29] audit: type=1326 audit(1782785996.705:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22996 comm="syz.5.4676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ac2b5d68e code=0x7ffc0000 [ 1209.161400][ T29] audit: type=1326 audit(1782785996.725:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22996 comm="syz.5.4676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ac2b5d68e code=0x7ffc0000 [ 1209.167170][ T932] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1209.199768][ T932] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1209.207533][ T932] usb 2-1: can't read configurations, error -71 [ 1209.237660][ T29] audit: type=1326 audit(1782785996.735:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22996 comm="syz.5.4676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ac2b5d68e code=0x7ffc0000 [ 1211.371703][T23078] syzkaller0: entered promiscuous mode [ 1211.382162][T23078] syzkaller0: entered allmulticast mode [ 1211.782296][T23091] syz_tun: entered allmulticast mode [ 1211.802956][T23090] syz_tun: left allmulticast mode [ 1212.141973][ T932] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1212.307540][ T932] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1212.336455][ T932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.362248][ T932] usb 6-1: Product: syz [ 1212.376620][ T932] usb 6-1: Manufacturer: syz [ 1212.386076][ T932] usb 6-1: SerialNumber: syz [ 1212.407088][ T932] usb 6-1: config 0 descriptor?? [ 1213.534335][ T932] usb 6-1: Firmware version (0.0) predates our first public release. [ 1213.569904][ T932] usb 6-1: Please update to version 0.2 or newer [ 1214.195194][ T932] usb 6-1: USB disconnect, device number 8 [ 1214.632232][T17502] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1215.032970][T17502] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.043475][T17502] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1215.069839][T17502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.125241][T17502] usb 2-1: config 0 descriptor?? [ 1215.172564][T17502] pwc: Askey VC010 type 2 USB webcam detected. [ 1215.619460][T17502] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1215.650836][T17502] pwc: recv_control_msg error -32 req 02 val 2700 [ 1215.700341][T17502] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1215.743115][T17502] pwc: recv_control_msg error -32 req 04 val 1000 [ 1215.773997][T17502] pwc: recv_control_msg error -32 req 04 val 1300 [ 1215.802412][T17502] pwc: recv_control_msg error -32 req 04 val 1400 [ 1215.829499][T17502] pwc: recv_control_msg error -32 req 02 val 2000 [ 1215.851456][T17502] pwc: recv_control_msg error -32 req 02 val 2100 [ 1215.877275][T17502] pwc: recv_control_msg error -32 req 04 val 1500 [ 1215.895979][T17502] pwc: recv_control_msg error -32 req 02 val 2500 [ 1215.923344][T17502] pwc: recv_control_msg error -32 req 02 val 2400 [ 1216.028286][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1216.145743][T17502] pwc: recv_control_msg error -71 req 02 val 2900 [ 1216.171191][T17502] pwc: recv_control_msg error -71 req 02 val 2800 [ 1216.188260][T17502] pwc: recv_control_msg error -71 req 04 val 1100 [ 1216.212077][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1216.224647][T17502] pwc: recv_control_msg error -71 req 04 val 1200 [ 1216.233433][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1216.265984][ T24] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1216.268625][T17502] pwc: Registered as video103. [ 1216.293529][ T24] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1216.326111][T17502] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input55 [ 1216.336109][ T24] usb 6-1: config 14 has no interface number 0 [ 1216.361938][ T24] usb 6-1: config 14 has no interface number 1 [ 1216.366464][T17502] usb 2-1: USB disconnect, device number 101 [ 1216.386131][ T24] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1216.435268][ T24] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1216.474726][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1216.515321][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1216.543841][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1216.573270][ T24] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1216.626286][ T24] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1216.643506][ T24] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1216.671221][ T24] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1216.701938][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.722066][ T24] usb 6-1: Product: syz [ 1216.743587][ T24] usb 6-1: Manufacturer: syz [ 1216.749451][ T24] usb 6-1: SerialNumber: syz [ 1217.257802][ T24] legousbtower 6-1:14.57: interrupt endpoints not found [ 1217.657959][ T24] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1217.832909][ T24] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1218.131481][T23226] fuse: fd is not a fuse device [ 1218.137688][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1218.137702][ T29] audit: type=1400 audit(1782786006.615:2739): avc: denied { mounton } for pid=23223 comm="syz.4.4743" path="/1037/file0" dev="tmpfs" ino=5508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1218.252017][T18956] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1218.540494][T18956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.638298][T18956] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1218.703294][ T24] usb 6-1: USB disconnect, device number 9 [ 1218.703346][ C1] usb 6-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 1218.757549][T18956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.783125][ T24] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1218.795336][T18956] usb 2-1: config 0 descriptor?? [ 1218.816571][T18956] pwc: Askey VC010 type 2 USB webcam detected. [ 1219.415000][T18956] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1219.439960][T18956] pwc: recv_control_msg error -32 req 02 val 2700 [ 1219.458720][T18956] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1219.468210][T18956] pwc: recv_control_msg error -32 req 04 val 1000 [ 1219.478390][T18956] pwc: recv_control_msg error -32 req 04 val 1300 [ 1219.496191][T18956] pwc: recv_control_msg error -32 req 04 val 1400 [ 1219.510219][T18956] pwc: recv_control_msg error -32 req 02 val 2000 [ 1219.525847][T18956] pwc: recv_control_msg error -32 req 02 val 2100 [ 1219.549049][T18956] pwc: recv_control_msg error -32 req 04 val 1500 [ 1219.779215][T18956] pwc: recv_control_msg error -71 req 02 val 2400 [ 1219.808527][T18956] pwc: recv_control_msg error -71 req 02 val 2600 [ 1219.824057][T18956] pwc: recv_control_msg error -71 req 02 val 2900 [ 1219.839116][T18956] pwc: recv_control_msg error -71 req 02 val 2800 [ 1219.859803][T18956] pwc: recv_control_msg error -71 req 04 val 1100 [ 1219.875497][T18956] pwc: recv_control_msg error -71 req 04 val 1200 [ 1219.921474][T18956] pwc: Registered as video103. [ 1219.954325][T18956] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input57 [ 1220.033852][T18956] usb 2-1: USB disconnect, device number 102 [ 1220.108924][T23262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4750'. [ 1220.167892][T23260] tipc: Enabled bearer , priority 0 [ 1220.200893][T23260] syzkaller0: entered promiscuous mode [ 1220.225794][T23260] syzkaller0: entered allmulticast mode [ 1220.297883][T23260] tipc: Resetting bearer [ 1220.314761][T23258] tipc: Resetting bearer [ 1220.359651][T23258] tipc: Disabling bearer [ 1220.556503][T23272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4752'. [ 1223.983430][T23242] syz.2.4747 (23242): drop_caches: 1 [ 1226.137510][ T29] audit: type=1400 audit(1782786014.625:2740): avc: denied { getattr } for pid=23311 comm="syz.2.4766" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1228.952834][T23340] tipc: Enabled bearer , priority 0 [ 1228.978455][T23340] syzkaller0: entered promiscuous mode [ 1229.007040][T23340] syzkaller0: entered allmulticast mode [ 1229.116396][T23340] tipc: Resetting bearer [ 1229.141099][T23345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1229.152323][T23339] tipc: Resetting bearer [ 1229.217377][T23339] tipc: Disabling bearer [ 1229.913249][T23362] syzkaller0: entered promiscuous mode [ 1229.949381][T23362] syzkaller0: entered allmulticast mode [ 1230.422037][T18962] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1230.552006][T17502] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1230.574802][T18962] usb 3-1: Using ep0 maxpacket: 16 [ 1230.584344][T18962] usb 3-1: config 0 has no interfaces? [ 1230.589971][T18962] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1230.603664][T18962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.614809][T18962] usb 3-1: config 0 descriptor?? [ 1230.726169][T17502] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1230.744060][T17502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.756206][T17502] usb 6-1: Product: syz [ 1230.760823][T17502] usb 6-1: Manufacturer: syz [ 1230.765738][T17502] usb 6-1: SerialNumber: syz [ 1230.915247][T18962] usb 3-1: USB disconnect, device number 107 [ 1231.492809][T17502] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1231.537497][T17502] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1231.903766][T23419] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1231.921623][T23419] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2583018472 (5166036944 ns) > initial count (2648882350 ns). Using initial count to start timer. [ 1232.664745][T23431] syzkaller0: entered promiscuous mode [ 1232.688394][T23431] syzkaller0: entered allmulticast mode [ 1232.884974][T17502] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1233.160747][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.167221][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.694903][T17502] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1233.727969][T17502] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1233.757658][T17502] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1233.777151][T17502] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1233.790763][T17502] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1233.815217][T17502] usb 6-1: USB disconnect, device number 10 [ 1233.919446][T23446] syzkaller0: entered promiscuous mode [ 1233.930052][T23446] syzkaller0: entered allmulticast mode [ 1236.630261][T23467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1236.675884][T23467] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1236.848634][T23467] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1237.590111][ T5736] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1237.900545][T23467] Process accounting resumed [ 1238.101992][T12649] Bluetooth: hci3: command 0x0405 tx timeout [ 1238.439194][ T5736] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.460726][ T5736] usb 6-1: config 0 has no interfaces? [ 1238.468735][ T5736] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1238.478054][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.486265][ T5736] usb 6-1: Product: syz [ 1238.490503][ T5736] usb 6-1: Manufacturer: syz [ 1238.495378][ T5736] usb 6-1: SerialNumber: syz [ 1238.511192][ T5736] usb 6-1: config 0 descriptor?? [ 1239.643314][T23513] xt_cgroup: invalid path, errno=-2 [ 1240.182380][T12649] Bluetooth: hci3: command 0x0405 tx timeout [ 1240.881422][T17502] usb 6-1: USB disconnect, device number 11 [ 1240.975041][T23536] fuse: fd is not a fuse device [ 1241.323780][T17502] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1241.561042][T17502] usb 6-1: Using ep0 maxpacket: 8 [ 1241.605135][T17502] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1241.646110][T17502] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1241.695236][T17502] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1241.726729][T17502] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1241.846828][T17502] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1242.291985][T12649] Bluetooth: hci3: command 0x0405 tx timeout [ 1242.319490][T17502] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1242.332841][T17502] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.169250][T17502] usb 6-1: usb_control_msg returned -32 [ 1243.175109][T17502] usbtmc 6-1:16.0: can't read capabilities [ 1243.439455][T23566] netlink: 'syz.2.4840': attribute type 10 has an invalid length. [ 1243.475552][T23566] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4840'. [ 1243.527578][T23569] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1243.554044][T17502] usb 6-1: USB disconnect, device number 12 [ 1246.204740][T23618] overlayfs: failed to clone upperpath [ 1247.035826][T23622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4860'. [ 1247.054095][ T3337] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1248.177726][T23638] syzkaller0: entered promiscuous mode [ 1248.194483][T23638] syzkaller0: entered allmulticast mode [ 1249.384197][T17502] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1249.561972][T17502] usb 3-1: Using ep0 maxpacket: 16 [ 1249.569174][T17502] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1249.581580][T17502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1249.595579][T17502] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1249.605100][T17502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.613250][T17502] usb 3-1: Product: syz [ 1249.617514][T17502] usb 3-1: Manufacturer: syz [ 1249.623174][T17502] usb 3-1: SerialNumber: syz [ 1249.640795][T17502] usb 3-1: config 0 descriptor?? [ 1249.649097][T17502] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1249.658535][T17502] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1250.264153][T17502] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1250.282723][T17502] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1250.911095][T17502] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1250.926352][T17502] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1250.934460][T17502] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1250.941851][T17502] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1250.949657][T17502] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1250.958877][T17502] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1251.173074][T17502] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1251.180063][T17502] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1251.195297][T17502] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1251.201660][T17502] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1251.208154][T17502] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1251.222053][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1251.226315][T17502] usb 3-1: USB disconnect, device number 108 [ 1251.557283][T23673] veth1_vlan: left promiscuous mode [ 1251.569190][T23673] veth0_vlan: left promiscuous mode [ 1251.576653][T23673] veth0_vlan: entered promiscuous mode [ 1251.586868][T23673] veth1_vlan: entered promiscuous mode [ 1251.597504][T23673] veth1_macvtap: left promiscuous mode [ 1251.615966][T23673] veth0_macvtap: left promiscuous mode [ 1251.640478][T23673] veth0_macvtap: entered promiscuous mode [ 1251.653180][T23673] veth1_macvtap: entered promiscuous mode [ 1251.665112][T23673] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1251.674068][T23673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1251.692212][T23673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1251.711279][T23673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1251.726433][T23673] gtp0: left promiscuous mode [ 1251.745279][T23673] bridge5: left promiscuous mode [ 1251.765359][T23673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1251.777096][T23673] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1252.094782][T16225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.121841][T16225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.163712][T16225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.178238][T16225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.410560][T23710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4884'. [ 1252.703341][T23717] xt_nat: multiple ranges no longer supported [ 1254.076970][T17502] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1254.476610][T17502] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.510145][T17502] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1254.546504][T17502] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1254.645187][T17502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.932122][T17502] usb 2-1: Product: syz [ 1254.937960][T17502] usb 2-1: Manufacturer: syz [ 1254.955926][T17502] usb 2-1: SerialNumber: syz [ 1254.969452][T17502] usb 2-1: config 0 descriptor?? [ 1257.915030][T23771] netlink: 'syz.2.4899': attribute type 10 has an invalid length. [ 1257.943323][T23771] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4899'. [ 1257.977457][T23776] fuse: fd is not a fuse device [ 1258.038222][ T24] usb 2-1: USB disconnect, device number 103 [ 1258.351216][T23787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4904'. [ 1259.382043][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1260.248705][T23801] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 1262.288527][T23835] netlink: 'syz.2.4915': attribute type 10 has an invalid length. [ 1262.417241][T23835] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4915'. [ 1262.652016][T23846] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1264.195803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 1264.216404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 1264.237315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 1265.279667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 1271.776603][ C0] sched: DL replenish lagged too much [ 1275.776700][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888054892000: Timeout. Failed to send simple message. [ 1276.032041][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1277.029235][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079c13400: Timeout. Failed to send simple message. [ 1277.247574][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e6c2800: Timeout. Failed to send simple message. [ 1280.816290][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802a05e800: Timeout. Failed to send simple message. [ 1309.302370][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1309.856022][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802a05cc00: Timeout. Failed to send simple message. [ 1313.389821][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.571404][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1319.038800][ T1314] aoe: packet could not be sent on bond_slave_0. consider increasing tx_queue_len [ 1332.823729][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055bb5c00: Timeout. Failed to send simple message. [ 1356.114057][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880339cb000: Timeout. Failed to send simple message. [ 1376.512179][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1381.925286][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1381.944899][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.409877][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.432444][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1452.241832][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1452.248792][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1119/1:b..l P5349/1:b..l [ 1452.258609][ C1] rcu: (detected by 1, t=10502 jiffies, g=141289, q=611 ncpus=2) [ 1452.266403][ C1] task:crond state:R running task stack:25128 pid:5349 tgid:5349 ppid:1 task_flags:0x400000 flags:0x00080000 [ 1452.281225][ C1] Call Trace: [ 1452.284504][ C1] [ 1452.287431][ C1] __schedule+0x125c/0x6730 [ 1452.291953][ C1] ? __pfx___schedule+0x10/0x10 [ 1452.296803][ C1] ? mark_held_locks+0x40/0x70 [ 1452.301567][ C1] preempt_schedule_irq+0x50/0x90 [ 1452.306591][ C1] irqentry_exit+0x205/0xa00 [ 1452.311186][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1452.317164][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 1452.322367][ C1] Code: 05 bb ef 4e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 06 a2 16 0f 0f 82 ac 02 00 00 8b 35 ce d5 16 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d ef 4e 12 0f 85 ec 02 00 00 48 83 c4 [ 1452.341966][ C1] RSP: 0018:ffffc9000320f500 EFLAGS: 00000206 [ 1452.348023][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 1452.355986][ C1] RDX: 0000000000000000 RSI: ffffffff8e137c0e RDI: ffffffff8c3e9b80 [ 1452.363947][ C1] RBP: ffffffff8e9e60c0 R08: 0000000068096c06 R09: 0000000000000007 [ 1452.371910][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1452.379870][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1452.387845][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1452.393041][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1452.398237][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1452.404383][ C1] unwind_next_frame+0xd1/0x2090 [ 1452.409315][ C1] ? unwind_next_frame+0xbd/0x2090 [ 1452.414418][ C1] ? vfs_statx+0x11f/0x3f0 [ 1452.418835][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1452.424982][ C1] arch_stack_walk+0x94/0xf0 [ 1452.429571][ C1] ? vfs_statx+0x11f/0x3f0 [ 1452.433983][ C1] stack_trace_save+0x8e/0xc0 [ 1452.438654][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1452.444022][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1452.448957][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1452.453888][ C1] save_stack+0x162/0x1e0 [ 1452.458217][ C1] ? __pfx_save_stack+0x10/0x10 [ 1452.463059][ C1] ? __free_frozen_pages+0x79f/0x1090 [ 1452.468429][ C1] ? qlist_free_all+0x47/0xf0 [ 1452.473096][ C1] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 1452.478722][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 1452.483739][ C1] ? __kmalloc_noprof+0x2bf/0x820 [ 1452.488757][ C1] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1452.494474][ C1] ? tomoyo_path_perm+0x276/0x460 [ 1452.499495][ C1] ? security_inode_getattr+0x116/0x280 [ 1452.505036][ C1] ? vfs_statx+0x11f/0x3f0 [ 1452.509449][ C1] ? page_ext_put+0x3e/0xd0 [ 1452.513954][ C1] __reset_page_owner+0x84/0x190 [ 1452.518898][ C1] __free_frozen_pages+0x79f/0x1090 [ 1452.524107][ C1] ? __free_slab+0xd0/0x220 [ 1452.528620][ C1] qlist_free_all+0x47/0xf0 [ 1452.533119][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1452.538576][ C1] __kasan_slab_alloc+0x69/0x90 [ 1452.543428][ C1] __kmalloc_noprof+0x2bf/0x820 [ 1452.548276][ C1] ? rcu_is_watching+0x12/0xc0 [ 1452.553045][ C1] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1452.558779][ C1] tomoyo_realpath_from_path+0xb6/0x690 [ 1452.564340][ C1] tomoyo_path_perm+0x276/0x460 [ 1452.569187][ C1] ? tomoyo_path_perm+0x262/0x460 [ 1452.574208][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1452.579605][ C1] ? find_held_lock+0x2b/0x80 [ 1452.584277][ C1] ? __might_fault+0xc5/0x140 [ 1452.588947][ C1] ? __might_fault+0xc5/0x140 [ 1452.593620][ C1] security_inode_getattr+0x116/0x280 [ 1452.599008][ C1] vfs_statx+0x11f/0x3f0 [ 1452.603250][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 1452.608009][ C1] ? do_getname+0x191/0x390 [ 1452.612516][ C1] vfs_fstatat+0x77/0xe0 [ 1452.616759][ C1] __do_sys_newfstatat+0x9d/0x120 [ 1452.621780][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 1452.627433][ C1] do_syscall_64+0x115/0x870 [ 1452.632021][ C1] ? clear_bhb_loop+0x40/0x90 [ 1452.636693][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.642579][ C1] RIP: 0033:0x7f75176e4b0a [ 1452.646985][ C1] RSP: 002b:00007ffdb771a608 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1452.655392][ C1] RAX: ffffffffffffffda RBX: 00007f7517894490 RCX: 00007f75176e4b0a [ 1452.663354][ C1] RDX: 00007ffdb771a628 RSI: 00007f751786d7e8 RDI: 00000000ffffff9c [ 1452.671316][ C1] RBP: 000000006a43280f R08: 0000000000000000 R09: 0000000000000000 [ 1452.679280][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.687240][ C1] R13: 000000000000003c R14: 0000000000000000 R15: 0000000000000028 [ 1452.695213][ C1] [ 1452.698221][ C1] task:kworker/u8:7 state:R running task stack:23176 pid:1119 tgid:1119 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1452.711786][ C1] Workqueue: krds_cp_wq#5/0 rds_connect_worker [ 1452.717946][ C1] Call Trace: [ 1452.721211][ C1] [ 1452.724137][ C1] __schedule+0x125c/0x6730 [ 1452.728655][ C1] ? __pfx___schedule+0x10/0x10 [ 1452.733502][ C1] ? mark_held_locks+0x40/0x70 [ 1452.738263][ C1] preempt_schedule_irq+0x50/0x90 [ 1452.743285][ C1] irqentry_exit+0x205/0xa00 [ 1452.747884][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1452.753856][ C1] RIP: 0010:write_comp_data+0x40/0x90 [ 1452.759220][ C1] Code: 2a 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 24 17 00 00 85 c0 74 f1 8b 87 f8 16 00 00 <83> f8 03 75 e6 48 8b 87 00 17 00 00 8b bf fc 16 00 00 48 8b 30 48 [ 1452.778820][ C1] RSP: 0018:ffffc900053376d8 EFLAGS: 00000246 [ 1452.784880][ C1] RAX: 0000000000000000 RBX: 000000000003ecef RCX: ffffffff828607bf [ 1452.792840][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888029c62540 [ 1452.800799][ C1] RBP: ffff88801c680000 R08: 0000000000000007 R09: 0000000000000000 [ 1452.808764][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1452.816723][ C1] R13: 0000000005e406f4 R14: 0000000000000000 R15: 00000000067006ff [ 1452.824696][ C1] ? lookup_page_ext+0x9f/0x100 [ 1452.829552][ C1] lookup_page_ext+0x9f/0x100 [ 1452.834224][ C1] __update_page_owner_free_handle.isra.0+0xa4/0x4d0 [ 1452.840901][ C1] __reset_page_owner+0x93/0x190 [ 1452.845837][ C1] __free_frozen_pages+0x79f/0x1090 [ 1452.851038][ C1] ? __free_slab+0xd0/0x220 [ 1452.855543][ C1] qlist_free_all+0x47/0xf0 [ 1452.860042][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1452.865496][ C1] __kasan_slab_alloc+0x69/0x90 [ 1452.870342][ C1] __kmalloc_noprof+0x2bf/0x820 [ 1452.875185][ C1] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1452.880641][ C1] ? lsm_blob_alloc+0x68/0x90 [ 1452.885315][ C1] lsm_blob_alloc+0x68/0x90 [ 1452.889810][ C1] security_sk_alloc+0x2d/0x290 [ 1452.894657][ C1] sk_prot_alloc+0x1d1/0x2a0 [ 1452.899246][ C1] sk_alloc+0x36/0xe80 [ 1452.903313][ C1] inet_create+0x3a0/0x1060 [ 1452.907818][ C1] ? inet_create+0x94/0x1060 [ 1452.912434][ C1] __sock_create+0x339/0x860 [ 1452.917028][ C1] rds_tcp_conn_path_connect+0x304/0xaa0 [ 1452.922669][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1452.927607][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1452.933764][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1452.939406][ C1] rds_connect_worker+0x1b4/0x2d0 [ 1452.944432][ C1] process_one_work+0xa23/0x1940 [ 1452.949373][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1452.954748][ C1] ? __pfx_rds_connect_worker+0x10/0x10 [ 1452.960293][ C1] worker_thread+0x5ef/0xe50 [ 1452.964988][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1452.970102][ C1] ? kthread+0x13a/0x450 [ 1452.974339][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1452.979444][ C1] kthread+0x370/0x450 [ 1452.983504][ C1] ? __pfx_kthread+0x10/0x10 [ 1452.988085][ C1] ret_from_fork+0x72b/0xd50 [ 1452.992673][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1452.997786][ C1] ? __switch_to+0x800/0x10f0 [ 1453.002455][ C1] ? __pfx_kthread+0x10/0x10 [ 1453.007039][ C1] ret_from_fork_asm+0x1a/0x30 [ 1453.011808][ C1] [ 1453.014818][ C1] rcu: rcu_preempt kthread starved for 1735 jiffies! g141289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1453.026002][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1453.035957][ C1] rcu: RCU grace-period kthread stack dump: [ 1453.041826][ C1] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1453.055309][ C1] Call Trace: [ 1453.058597][ C1] [ 1453.061521][ C1] __schedule+0x125c/0x6730 [ 1453.066035][ C1] ? __pfx___schedule+0x10/0x10 [ 1453.070879][ C1] ? find_held_lock+0x2b/0x80 [ 1453.075549][ C1] ? schedule+0x225/0x2c0 [ 1453.079876][ C1] schedule+0xdd/0x2c0 [ 1453.083942][ C1] schedule_timeout+0x127/0x280 [ 1453.088786][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1453.094152][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1453.099436][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1453.105237][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1453.110695][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1453.115455][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1453.120738][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1453.125681][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1453.130873][ C1] ? rcu_is_watching+0x12/0xc0 [ 1453.135635][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1453.141439][ C1] rcu_gp_kthread+0x179/0x230 [ 1453.146113][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1453.151305][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1453.157110][ C1] ? __kthread_parkme+0x18c/0x230 [ 1453.162137][ C1] ? kthread+0x13a/0x450 [ 1453.166369][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1453.171559][ C1] kthread+0x370/0x450 [ 1453.175619][ C1] ? __pfx_kthread+0x10/0x10 [ 1453.180201][ C1] ret_from_fork+0x72b/0xd50 [ 1453.184792][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1453.189903][ C1] ? __switch_to+0x800/0x10f0 [ 1453.194573][ C1] ? __pfx_kthread+0x10/0x10 [ 1453.199155][ C1] ret_from_fork_asm+0x1a/0x30 [ 1453.203920][ C1] [ 1453.206927][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1453.213243][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1453.223735][ C1] Tainted: [L]=SOFTLOCKUP [ 1453.228051][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1453.238095][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1453.243726][ C1] Code: b6 a4 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 b9 2e 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1453.263328][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 1453.269388][ C1] RAX: 0000000007fd0f61 RBX: ffff88801ea9a540 RCX: ffffffff8b9ce2d5 [ 1453.277348][ C1] RDX: 0000000000000000 RSI: ffffffff8e15d8c3 RDI: ffffffff8c3e9b80 [ 1453.285307][ C1] RBP: ffffed1003d534a8 R08: 0000000000000001 R09: ffffed10170a678d [ 1453.293270][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 1453.301230][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 1453.309191][ C1] FS: 0000000000000000(0000) GS:ffff8881241e0000(0000) knlGS:0000000000000000 [ 1453.318113][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1453.324693][ C1] CR2: 000020000002d000 CR3: 000000005c6b2000 CR4: 00000000003526f0 [ 1453.332657][ C1] Call Trace: [ 1453.335924][ C1] [ 1453.338846][ C1] default_idle+0x9/0x10 [ 1453.343079][ C1] default_idle_call+0x6c/0xb0 [ 1453.347833][ C1] do_idle+0x3a7/0x5b0 [ 1453.351900][ C1] ? __pfx_do_idle+0x10/0x10 [ 1453.356486][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1453.362385][ C1] cpu_startup_entry+0x4f/0x60 [ 1453.367150][ C1] start_secondary+0x21d/0x2d0 [ 1453.371912][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1453.377200][ C1] common_startup_64+0x13e/0x158 [ 1453.382145][ C1]