last executing test programs: 2.39937737s ago: executing program 2 (id=189): fsopen(&(0x7f0000000040)='romfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x9) (async) r0 = socket$netlink(0x10, 0x3, 0x9) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010040aa11f6bbf44d00000000008984", 0x9d}], 0x1) 2.398683625s ago: executing program 2 (id=190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000840) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1404, 0x20, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000840) (async) pipe(&(0x7f00000000c0)) (async) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x2) (async) fchdir(r3) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1404, 0x20, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) (async) 2.350901292s ago: executing program 2 (id=192): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000a000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1f7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000280)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) socket(0x10, 0x3, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)=0x40000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x2}, {0x1003, 0x0, 0x6, 0x93}]}) close_range(r11, 0xffffffffffffffff, 0x0) 1.460846445s ago: executing program 2 (id=201): shutdown(0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x4, 0x12) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x820b, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf25240000000a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08449400", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e31000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 1.460588563s ago: executing program 1 (id=202): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000001c0)="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", 0x198) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x2000a1) 1.400447959s ago: executing program 1 (id=204): syz_emit_ethernet(0x6c, &(0x7f0000000c40)=ANY=[@ANYBLOB="018040000000002f907800000000000000002480655800000000100008000005039e0fff000086dd080088be00000000100c00000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1.399357134s ago: executing program 1 (id=206): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x8) (async) r0 = syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000580)={{r0, &(0x7f00000001c0)='@\x00', 0x8000, &(0x7f0000000340)={@_ha_fsid={[0x4, 0x1]}, {0x400, 0x800, 0x8, 0x9}}, 0x900aabf, &(0x7f0000000400), &(0x7f0000000440)}, {[0x1, 0x9, 0x4, 0xa]}, 0x201, 0xfc, &(0x7f0000000480)=""/252}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000680)) r5 = syz_io_uring_setup(0x410e, &(0x7f0000000240)={0x0, 0xbd63, 0x80, 0x2, 0x334, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0)) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async) listen(r6, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) chdir(&(0x7f00000007c0)='./tracing/uprobe_events\x00') (async) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r8, &(0x7f0000000240)="703a812f70202e2f66696c65303a30ed16487d640fd986077e8e513645c56fbd1781d8b5f9dbf0376269dddaa36c13764cdf1248fd476826f8139c54ee3bd859a979d191bc07b9657b8976aa9cf3a77d11e5484c0557dcd52ef94f51f2646b7d2aed29ca663c0e7de7618ea2792587", 0x6f) (async) socket$inet(0x2, 0x3, 0x3) (async) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) (async, rerun: 64) accept4(r6, 0x0, 0x0, 0x80800) (rerun: 64) setns(r8, 0x80) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0}, 0x20) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000700)={[0x3, 0x8, 0x7fffffffffffffff, 0x10001, 0x1, 0x7fffffff, 0x101, 0x4, 0xfffffffffffffffb, 0x7f, 0x8000, 0x2, 0x7, 0x4, 0x5, 0x10001], 0x10000, 0x2080c0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_READV_FIXED={0x3c, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x28a7, 0x1, 0x80, 0x0, 0x0) 741.291191ms ago: executing program 0 (id=209): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r1, 0x6805, 0x400000000000002b) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'load '}, 0x1a, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB, @ANYBLOB="17552abd7000fedbdf250600000006000b"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) 741.166983ms ago: executing program 0 (id=210): mount(&(0x7f00000007c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000780)='romfs\x00', 0x20c401, 0x0) 670.049963ms ago: executing program 0 (id=212): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getgroups(0x2, &(0x7f0000000840)=[0xee01, 0xffffffffffffffff]) setresgid(r1, 0x0, 0x0) setregid(0x0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0x4) syz_emit_ethernet(0xae, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d97520", 0x78, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, [{0x2, 0x1, "fe906d17efe3"}, {0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0xea, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@delqdisc={0x24, 0x25, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0x2}, {0x8, 0x6}, {0x14, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x91) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x24, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000005c0)={r5, 0x40, 0x7, 0x9, 0xd, 0x1000, 0x40, 0x1e2c, {r5, @in6={{0xa, 0x4e24, 0x2573, @remote, 0x4}}, 0x80, 0x8001, 0x7, 0x800, 0x200}}, &(0x7f0000000680)=0xb0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x38}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 669.787602ms ago: executing program 0 (id=213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x801, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r2 = dup3(r1, r0, 0x80000) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x3}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 610.639499ms ago: executing program 0 (id=214): r0 = socket(0x10, 0x803, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000400)={{0x0}, 0x0, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000bf0400000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000000)='{#\')!\x00', 0x20000006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xfffffffffffffeda, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0xa, 0x3, 0x87) sendto$l2tp6(r5, &(0x7f0000000180)="1c67ba7dd21ece011542f054543c23287819b4b5a0672999c66a34b4f5a7240227a923c816ee924f6dc2aa94f92afce1147be0895508b35cc4e0f1552b897d93065ebb3b6f2ba33236df77fade89479d8be09ad282267865af9708cdcde2f34dcd8f96b3fbceb29ffb82d2fb5c86d901ef461934199c9aff903b3c51b6fc703f704f74e1277565cc40843512d39c9c24bf467fa098427a999451d0a54b528a2ccc3cce4cf3faf7c9f2e07b6c2c7dd3258e99bea7868fa88e8abc3bb842989dd4bd165c2cb6b8923d2edd00ad95f5c25261062f19d8c2237fb843df", 0xdb, 0x20004000, &(0x7f0000000280)={0xa, 0x0, 0x185, @private1, 0x3ddd0021, 0x3}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xc8, r6}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) 608.105441ms ago: executing program 2 (id=215): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) r0 = socket$unix(0x1, 0x3, 0x0) accept$unix(r0, 0x0, &(0x7f0000000080)) (async) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 607.607367ms ago: executing program 0 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000140)={{0x8, 0x2, 0x4, 0x5, 0x3}, [{0xb4, 0x1000000000, 0x7}, {0x8, 0x5, 0x0, 0x7}, {0x7, 0x9, 0x1, 0xfe}, {0x7, 0x0, 0x1, 0x7}, {0xf0, 0xa, 0x7, 0x7}, {0x81, 0xb7e, 0xa1, 0x4a}]}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0), 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7215919d990aa99b}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r5, 0x420, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x400c801) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x4, 0x40, 0x5, @vifc_lcl_addr=@local, @local}, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8, 0x0, 0x2b, "", [{{0x9, 0x4, 0x0, 0x13, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xdba3, 0x2f4, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 550.611435ms ago: executing program 2 (id=217): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d0000000000010902240001000000000904000001030102000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 548.820805ms ago: executing program 1 (id=220): setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x12) (async) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x12) syz_clone3(&(0x7f0000000780)={0x2002000, 0x0, 0x0, 0x0, {0x1000}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) (async) write(r1, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000001c0)="120000001200e7ef007b000000000000c300", 0x12, 0x48840, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000000)=""/150, 0x96}, {&(0x7f00000008c0)=""/148, 0x94}, {&(0x7f0000000fc0)=""/157, 0x9d}, {&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000001080)=""/4105, 0x1009}, {&(0x7f0000000380)=""/122, 0x7a}], 0x7}, 0x10001}], 0x1, 0x10120, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x6, 0x2, 0xd0a5, 0x7, 0xffffffffffffd8c4, 0x5, 0x0, 0x8000009657, 0x3f40, 0x80000003, 0xfffffffffffffffc, 0x10, 0x4, 0xffff, 0x6, 0x1, 0x5, 0x0, 0x2, 0x2000000000000000, 0x809, 0x0, 0x5, 0x6, 0x9}) (async) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x6, 0x2, 0xd0a5, 0x7, 0xffffffffffffd8c4, 0x5, 0x0, 0x8000009657, 0x3f40, 0x80000003, 0xfffffffffffffffc, 0x10, 0x4, 0xffff, 0x6, 0x1, 0x5, 0x0, 0x2, 0x2000000000000000, 0x809, 0x0, 0x5, 0x6, 0x9}) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x2) write(r2, &(0x7f0000000070)='syz0:12..0', 0xa) 430.968033ms ago: executing program 1 (id=221): userfaultfd(0x801) (async, rerun: 32) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000002240)=[{&(0x7f0000002040)=""/76, 0x4c}], 0x1, 0x8, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffcc, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd27, 0x25dfdbfe}, 0x18}}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) (async) setsockopt$sock_attach_bpf(r6, 0x6, 0x3, &(0x7f0000000080), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r9], 0x50}}, 0x0) 319.936641ms ago: executing program 3 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000300)={0x80, 0x2, 0x0, 0xdb1, 0x4, "f21059be8b65aca30f3dbbdf7065bfeea59c28", 0x9, 0x1}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) syz_open_dev$dri(&(0x7f0000007c00), 0xfffffffffffffffa, 0x8100) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dri/0/name\x00', 0x0, 0x0) read(r4, &(0x7f0000000100)=""/256, 0x100) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="8000010018000000180034801400350069703665727370616e", @ANYBLOB='4'], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) (async) mkdir(&(0x7f0000000000)='./cfg\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./cfg\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./cfg/usb_gadget/g1\x00', 0x1ff) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./cfg/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)={'#! ', './cfg/usb_gadget/g1'}, 0x17) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e22, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, @in6={0xa, 0x4e21, 0x4, @remote, 0x3214}]}, &(0x7f0000000180)=0x10) 319.682047ms ago: executing program 1 (id=224): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x800) 303.909362ms ago: executing program 3 (id=225): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = inotify_init() r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) inotify_init() (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 171.00523ms ago: executing program 3 (id=226): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5a}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0) mkdirat(r2, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r5 = open(&(0x7f0000000200)='.\x00', 0x301f00, 0x393) renameat2(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x2) 169.916552ms ago: executing program 3 (id=227): r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f00000002c0)={r1, &(0x7f00000001c0)='[}\x00', 0x8000, &(0x7f0000000200)={@align=0x4, {0x7a, 0x3, 0x0, 0x8000000000000000}}, 0x1, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x6}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x1000, 0x88d, 0x0) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x5, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x1, 0x5, 0x4, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r8, 0x5, 0x2000fffb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25ffdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r11, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r11, 0x5) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x0) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005"], 0x4a) 314.327µs ago: executing program 3 (id=228): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e657665000010000280060005004e2400000400060008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e657665000010000280060005004e2400000400060008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 3 (id=229): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0003424203"], 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) (rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x80008, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x3f, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000a40)={'ip_vti0\x00', {0x2, 0x4e21, @broadcast}}) (async, rerun: 64) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) prlimit64(r6, 0xc, &(0x7f0000000380)={0xfffffffffffff8f1, 0x5}, &(0x7f0000000440)) kernel console output (not intermixed with test programs): [ 30.822592][ T44] audit: type=1400 audit(1789956316.028:116): avc: denied { write } for pid=5637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:36071' (ED25519) to the list of known hosts. [ 30.877920][ T44] audit: type=1400 audit(1789956316.088:117): avc: denied { name_bind } for pid=5642 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.887443][ T44] audit: type=1400 audit(1789956316.098:118): avc: denied { write } for pid=5641 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.905300][ T44] audit: type=1400 audit(1789956316.118:119): avc: denied { execute } for pid=5643 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.905591][ T44] audit: type=1400 audit(1789956316.118:120): avc: denied { execute_no_trans } for pid=5643 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.349924][ T44] audit: type=1400 audit(1789956316.558:121): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.395764][ T44] audit: type=1400 audit(1789956316.608:122): avc: denied { write } for pid=5649 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.479065][ T44] audit: type=1400 audit(1789956316.688:123): avc: denied { write } for pid=5652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.536980][ T44] audit: type=1400 audit(1789956316.748:124): avc: denied { write } for pid=5655 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.625168][ T44] audit: type=1400 audit(1789956316.828:125): avc: denied { write } for pid=5658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.034157][ T5643] cgroup: Unknown subsys name 'net' [ 33.168508][ T5643] cgroup: Unknown subsys name 'cpuset' [ 33.172319][ T5643] cgroup: Unknown subsys name 'rlimit' [ 33.397970][ T5690] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.104277][ T5643] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.249784][ T44] kauditd_printk_skb: 36 callbacks suppressed [ 37.249802][ T44] audit: type=1400 audit(1789956322.458:162): avc: denied { execmem } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.422271][ T44] audit: type=1400 audit(1789956322.628:163): avc: denied { create } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.422783][ T44] audit: type=1400 audit(1789956322.628:164): avc: denied { read write } for pid=5722 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.423301][ T44] audit: type=1400 audit(1789956322.628:165): avc: denied { open } for pid=5722 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.441530][ T44] audit: type=1400 audit(1789956322.648:166): avc: denied { ioctl } for pid=5723 comm="syz-executor" path="socket:[3800]" dev="sockfs" ino=3800 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.451943][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.453079][ T5731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.453426][ T5731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.454081][ T5731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.455416][ T5731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.455516][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.456334][ T5734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.456989][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.458078][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.459604][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.459904][ T5735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.461664][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.461873][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.465680][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.466145][ T44] audit: type=1400 audit(1789956322.668:167): avc: denied { read } for pid=5722 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.466183][ T44] audit: type=1400 audit(1789956322.668:168): avc: denied { open } for pid=5722 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.466214][ T44] audit: type=1400 audit(1789956322.678:169): avc: denied { mounton } for pid=5722 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.467171][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.467478][ T5734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.470747][ T44] audit: type=1400 audit(1789956322.678:170): avc: denied { module_request } for pid=5722 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.471384][ T5736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.472143][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.473583][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.475952][ T5734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.508656][ T44] audit: type=1400 audit(1789956322.718:171): avc: denied { sys_module } for pid=5728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.052489][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.052579][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.052709][ T5722] bridge_slave_0: entered allmulticast mode [ 38.054077][ T5722] bridge_slave_0: entered promiscuous mode [ 38.057951][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.058059][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.058816][ T5722] bridge_slave_1: entered allmulticast mode [ 38.060169][ T5722] bridge_slave_1: entered promiscuous mode [ 38.076143][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.076186][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.076241][ T5728] bridge_slave_0: entered allmulticast mode [ 38.077040][ T5728] bridge_slave_0: entered promiscuous mode [ 38.105604][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.105722][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.105822][ T5728] bridge_slave_1: entered allmulticast mode [ 38.107138][ T5728] bridge_slave_1: entered promiscuous mode [ 38.137569][ T5722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.138828][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.139970][ T5722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.152888][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.231883][ T5722] team0: Port device team_slave_0 added [ 38.246383][ T5728] team0: Port device team_slave_0 added [ 38.253706][ T5722] team0: Port device team_slave_1 added [ 38.253876][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.253936][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.253995][ T5723] bridge_slave_0: entered allmulticast mode [ 38.254827][ T5723] bridge_slave_0: entered promiscuous mode [ 38.256562][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.256603][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.256685][ T5724] bridge_slave_0: entered allmulticast mode [ 38.257383][ T5724] bridge_slave_0: entered promiscuous mode [ 38.259435][ T5728] team0: Port device team_slave_1 added [ 38.274094][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.274170][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.274662][ T5723] bridge_slave_1: entered allmulticast mode [ 38.276450][ T5723] bridge_slave_1: entered promiscuous mode [ 38.277987][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.278043][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.278113][ T5724] bridge_slave_1: entered allmulticast mode [ 38.278948][ T5724] bridge_slave_1: entered promiscuous mode [ 38.293467][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.293478][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.293491][ T5722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.307592][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.307602][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.307615][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.314211][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.314223][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.314235][ T5722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.327765][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.328057][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.328065][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.328078][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.333683][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.336425][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.347699][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.386515][ T5724] team0: Port device team_slave_0 added [ 38.390644][ T5722] hsr_slave_0: entered promiscuous mode [ 38.391176][ T5722] hsr_slave_1: entered promiscuous mode [ 38.400474][ T5723] team0: Port device team_slave_0 added [ 38.403175][ T5728] hsr_slave_0: entered promiscuous mode [ 38.403616][ T5728] hsr_slave_1: entered promiscuous mode [ 38.404154][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 38.404207][ T5728] Cannot create hsr debugfs directory [ 38.405442][ T5724] team0: Port device team_slave_1 added [ 38.413194][ T5723] team0: Port device team_slave_1 added [ 38.446439][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.446451][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.446464][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.453876][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.453887][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.453899][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.459824][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.459840][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.459859][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.470552][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.470562][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.470575][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.529395][ T5724] hsr_slave_0: entered promiscuous mode [ 38.530284][ T5724] hsr_slave_1: entered promiscuous mode [ 38.530799][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 38.530815][ T5724] Cannot create hsr debugfs directory [ 38.585192][ T5723] hsr_slave_0: entered promiscuous mode [ 38.585663][ T5723] hsr_slave_1: entered promiscuous mode [ 38.585953][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 38.585965][ T5723] Cannot create hsr debugfs directory [ 38.758228][ T5728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.761528][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.766484][ T5728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.771769][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.779619][ T5728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.782059][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.789938][ T5728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.793340][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.814842][ T5722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.817575][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.818038][ T5722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.822059][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.826041][ T5722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.828067][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.835004][ T5722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.837239][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.846858][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.846913][ T5728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.847188][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.847233][ T5728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.876858][ T5724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.879083][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.890059][ T96] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.890549][ T96] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.904114][ T5724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.910443][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.914076][ T5724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.916113][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.916512][ T5724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.920746][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.988499][ T5723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.990717][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.991134][ T5723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.992906][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.998319][ T5723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.001200][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.001849][ T5723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.005699][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.051697][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.075018][ T5722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.102213][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.115622][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.115669][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.118194][ T5722] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.125390][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.125434][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.142944][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.156406][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.156498][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.158309][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.158379][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.173503][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.186258][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.203964][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.204045][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.209613][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.225659][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.225704][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.227473][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.227535][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.245941][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.246005][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.454298][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.489079][ T5728] veth0_vlan: entered promiscuous mode [ 39.495052][ T5728] veth1_vlan: entered promiscuous mode [ 39.516495][ T5726] Bluetooth: hci3: command tx timeout [ 39.516499][ T5734] Bluetooth: hci0: command tx timeout [ 39.517334][ T5732] Bluetooth: hci2: command tx timeout [ 39.524940][ T5732] Bluetooth: hci1: command tx timeout [ 39.531130][ T5722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.532819][ T5728] veth0_macvtap: entered promiscuous mode [ 39.539654][ T5728] veth1_macvtap: entered promiscuous mode [ 39.552680][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.561703][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.567229][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.584065][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.610255][ T5722] veth0_vlan: entered promiscuous mode [ 39.629219][ T5722] veth1_vlan: entered promiscuous mode [ 39.643824][ T5724] veth0_vlan: entered promiscuous mode [ 39.679573][ T5724] veth1_vlan: entered promiscuous mode [ 39.692224][ T5723] veth0_vlan: entered promiscuous mode [ 39.695359][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.695377][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.695645][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.695958][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.696084][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.696192][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.726008][ T5722] veth0_macvtap: entered promiscuous mode [ 39.732877][ T5723] veth1_vlan: entered promiscuous mode [ 39.741382][ T5722] veth1_macvtap: entered promiscuous mode [ 39.744313][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.744331][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.747497][ T5724] veth0_macvtap: entered promiscuous mode [ 39.759820][ T5724] veth1_macvtap: entered promiscuous mode [ 39.774260][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.782880][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.786965][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.793236][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.799017][ T5723] veth0_macvtap: entered promiscuous mode [ 39.808243][ T5723] veth1_macvtap: entered promiscuous mode [ 39.811519][ T5728] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.863832][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.865029][ T5801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.865055][ T5801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.865073][ T5801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.865090][ T5801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.865107][ T5801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.865125][ T5801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.865142][ T5801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.865159][ T5801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.878296][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.907281][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.907292][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.935121][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.935133][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.971318][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.971336][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.981846][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.981859][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.006036][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.006050][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.030381][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.030395][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.037437][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.037629][ T5801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.037647][ T5801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.037664][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.128525][ T5879] tipc: Started in network mode [ 40.128541][ T5879] tipc: Node identity fef8b01ffb57, cluster identity 4711 [ 40.128662][ T5879] tipc: Enabled bearer , priority 0 [ 40.129125][ T5880] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 40.129253][ T5879] syzkaller0: entered promiscuous mode [ 40.129262][ T5879] syzkaller0: entered allmulticast mode [ 40.131564][ T5882] tipc: Resetting bearer [ 40.133010][ T5875] tipc: Resetting bearer [ 40.141419][ T5875] tipc: Disabling bearer [ 40.219909][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.219923][ T5878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.220032][ T5878] netlink: 'syz.2.3': attribute type 7 has an invalid length. [ 40.275387][ T5893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 40.307330][ T5898] tipc: Cannot configure node identity twice [ 40.362778][ T5872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 40.534448][ T5700] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 40.686950][ T5700] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 40.691540][ T5700] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.691579][ T5700] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.694231][ T5922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=5922 comm=syz.2.15 [ 40.695114][ T5922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=5922 comm=syz.2.15 [ 40.695866][ T5700] usb 8-1: config 0 descriptor?? [ 40.721503][ T5925] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16'. [ 40.734932][ T5925] affs: No valid root block on device sr0 [ 40.739700][ T5925] affs: No valid root block on device sr0 [ 40.844104][ T5932] Zero length message leads to an empty skb [ 41.111015][ T5700] savu 0003:1E7D:2D5A.0002: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 41.181621][ T5944] ======================================================= [ 41.181621][ T5944] WARNING: The mand mount option has been deprecated and [ 41.181621][ T5944] and is ignored by this kernel. Remove the mand [ 41.181621][ T5944] option from the mount to silence this warning. [ 41.181621][ T5944] ======================================================= [ 41.283372][ T5952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 41.283804][ T5952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 41.321001][ T5957] FAULT_INJECTION: forcing a failure. [ 41.321001][ T5957] name failslab, interval 1, probability 0, space 0, times 1 [ 41.321022][ T5957] CPU: 0 UID: 0 PID: 5957 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(full) [ 41.321035][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.321042][ T5957] Call Trace: [ 41.321046][ T5957] [ 41.321051][ T5957] dump_stack_lvl+0x100/0x190 [ 41.321073][ T5957] should_fail_ex.cold+0x5/0xa [ 41.321090][ T5957] should_failslab+0xc2/0x120 [ 41.321106][ T5957] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 41.321120][ T5957] ? lock_acquire+0x1d1/0x380 [ 41.321132][ T5957] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 41.321150][ T5957] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 41.321170][ T5957] kstrdup+0x51/0xe0 [ 41.321188][ T5957] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 41.321206][ T5957] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 41.321220][ T5957] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 41.321235][ T5957] selinux_socket_post_create+0x368/0x7e0 [ 41.321254][ T5957] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 41.321272][ T5957] ? udpv6_init_sock+0x384/0x450 [ 41.321290][ T5957] ? inet6_create+0xb34/0x12b0 [ 41.321302][ T5957] security_socket_post_create+0xaf/0x270 [ 41.321322][ T5957] __sock_create+0x70b/0x860 [ 41.321342][ T5957] __sys_socket+0x14d/0x260 [ 41.321353][ T5957] ? __pfx___sys_socket+0x10/0x10 [ 41.321367][ T5957] __x64_sys_socket+0x72/0xb0 [ 41.321377][ T5957] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.321394][ T5957] do_syscall_64+0x123/0x790 [ 41.321412][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.321423][ T5957] RIP: 0033:0x7fd5be19e159 [ 41.321433][ T5957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.321444][ T5957] RSP: 002b:00007fd5bef98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 41.321456][ T5957] RAX: ffffffffffffffda RBX: 00007fd5be425fa0 RCX: 00007fd5be19e159 [ 41.321463][ T5957] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 41.321469][ T5957] RBP: 00007fd5be23506b R08: 0000000000000000 R09: 0000000000000000 [ 41.321476][ T5957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.321482][ T5957] R13: 00007fd5be426038 R14: 00007fd5be425fa0 R15: 00007ffd9f901ab8 [ 41.321496][ T5957] [ 41.326330][ T5957] mmap: syz.0.27 (5957) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.376210][ T5815] usb 8-1: USB disconnect, device number 2 [ 41.510805][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 41.510961][ T5963] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 41.519950][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 41.594942][ T5732] Bluetooth: hci1: command tx timeout [ 41.594963][ T5732] Bluetooth: hci0: command tx timeout [ 41.594986][ T5732] Bluetooth: hci3: command tx timeout [ 41.594988][ T5726] Bluetooth: hci2: command tx timeout [ 41.646285][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 41.707783][ T5969] dlm: no local IP address has been set [ 41.707796][ T5969] dlm: cannot start dlm midcomms -107 [ 41.738100][ T5974] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 41.738117][ T5974] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.30'. [ 41.738126][ T5974] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 41.738134][ T5974] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.30'. [ 41.984478][ T5700] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 42.114474][ T5700] usb 5-1: device descriptor read/64, error -71 [ 42.354547][ T5700] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 42.484503][ T5700] usb 5-1: device descriptor read/64, error -71 [ 42.529163][ T5969] block nbd2: shutting down sockets [ 42.576136][ T44] kauditd_printk_skb: 145 callbacks suppressed [ 42.576147][ T44] audit: type=1400 audit(1789956327.788:317): avc: denied { sqpoll } for pid=5989 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.595773][ T5700] usb usb5-port1: attempt power cycle [ 42.599629][ T5990] bond2: Unable to set up delay as MII monitoring is disabled [ 42.601561][ T5990] bond2 (unregistering): Released all slaves [ 42.645029][ T44] audit: type=1400 audit(1789956327.858:318): avc: denied { mount } for pid=5989 comm="syz.2.34" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.662645][ T44] audit: type=1400 audit(1789956327.868:319): avc: denied { getopt } for pid=5989 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.707541][ T44] audit: type=1400 audit(1789956327.918:320): avc: denied { getopt } for pid=5994 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.708587][ T44] audit: type=1400 audit(1789956327.918:321): avc: denied { read write } for pid=5994 comm="syz.2.35" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.708633][ T44] audit: type=1400 audit(1789956327.918:322): avc: denied { open } for pid=5994 comm="syz.2.35" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.766762][ T44] audit: type=1400 audit(1789956327.978:323): avc: denied { ioctl } for pid=5994 comm="syz.2.35" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x7513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.788521][ T44] audit: type=1400 audit(1789956327.998:324): avc: denied { setopt } for pid=5994 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.828688][ T5999] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 42.877154][ T44] audit: type=1400 audit(1789956328.088:325): avc: denied { append } for pid=6002 comm="syz.2.37" name="media2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.955971][ T5700] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 42.975242][ T5700] usb 5-1: device descriptor read/8, error -71 [ 43.108761][ T6011] overlay: Unknown parameter './file0/file2' [ 43.109244][ T6011] overlay: Unknown parameter './file0/file2' [ 43.110123][ T6011] overlay: Unknown parameter './file0/file2' [ 43.110436][ T6011] overlay: Unknown parameter './file0/file2' [ 43.110681][ T6011] overlay: Unknown parameter './file0/file2' [ 43.110897][ T6011] overlay: Unknown parameter './file0/file2' [ 43.111140][ T6011] overlay: Unknown parameter './file0/file2' [ 43.111391][ T6011] overlay: Unknown parameter './file0/file2' [ 43.111610][ T6011] overlay: Unknown parameter './file0/file2' [ 43.113385][ T6011] overlay: Unknown parameter './file0/file2' [ 43.113700][ T6011] overlay: Unknown parameter './file0/file2' [ 43.114017][ T6011] overlay: Unknown parameter './file0/file2' [ 43.116849][ T6011] overlay: Unknown parameter './file0/file2' [ 43.117179][ T6011] overlay: Unknown parameter './file0/file2' [ 43.119271][ T6011] overlay: Unknown parameter './file0/file2' [ 43.121218][ T6011] overlay: Unknown parameter './file0/file2' [ 43.123329][ T6011] overlay: Unknown parameter './file0/file2' [ 43.125681][ T6011] overlay: Unknown parameter './file0/file2' [ 43.127629][ T6011] overlay: Unknown parameter './file0/file2' [ 43.129727][ T6011] overlay: Unknown parameter './file0/file2' [ 43.131676][ T6011] overlay: Unknown parameter './file0/file2' [ 43.133620][ T6011] overlay: Unknown parameter './file0/file2' [ 43.135725][ T6011] overlay: Unknown parameter './file0/file2' [ 43.137535][ T6011] overlay: Unknown parameter './file0/file2' [ 43.139307][ T6011] overlay: Unknown parameter './file0/file2' [ 43.141294][ T6011] overlay: Unknown parameter './file0/file2' [ 43.143261][ T6011] overlay: Unknown parameter './file0/file2' [ 43.145273][ T6011] overlay: Unknown parameter './file0/file2' [ 43.148234][ T6011] overlay: Unknown parameter './file0/file2' [ 43.150013][ T6011] overlay: Unknown parameter './file0/file2' [ 43.151911][ T6011] overlay: Unknown parameter './file0/file2' [ 43.153767][ T6011] overlay: Unknown parameter './file0/file2' [ 43.155697][ T6011] overlay: Unknown parameter './file0/file2' [ 43.157556][ T6011] overlay: Unknown parameter './file0/file2' [ 43.160313][ T6011] overlay: Unknown parameter './file0/file2' [ 43.162832][ T6011] overlay: Unknown parameter './file0/file2' [ 43.164901][ T6011] overlay: Unknown parameter './file0/file2' [ 43.166570][ T6011] overlay: Unknown parameter './file0/file2' [ 43.168496][ T6011] overlay: Unknown parameter './file0/file2' [ 43.170383][ T6011] overlay: Unknown parameter './file0/file2' [ 43.172340][ T6011] overlay: Unknown parameter './file0/file2' [ 43.174278][ T6011] overlay: Unknown parameter './file0/file2' [ 43.176066][ T6011] overlay: Unknown parameter './file0/file2' [ 43.177951][ T6011] overlay: Unknown parameter './file0/file2' [ 43.179813][ T6011] overlay: Unknown parameter './file0/file2' [ 43.181668][ T6011] overlay: Unknown parameter './file0/file2' [ 43.183825][ T6011] overlay: Unknown parameter './file0/file2' [ 43.185766][ T6011] overlay: Unknown parameter './file0/file2' [ 43.189176][ T6011] overlay: Unknown parameter './file0/file2' [ 43.190301][ T6011] overlay: Unknown parameter './file0/file2' [ 43.192889][ T6011] overlay: Unknown parameter './file0/file2' [ 43.193622][ T6011] overlay: Unknown parameter './file0/file2' [ 43.195961][ T6011] overlay: Unknown parameter './file0/file2' [ 43.197815][ T6011] overlay: Unknown parameter './file0/file2' [ 43.200257][ T6011] overlay: Unknown parameter './file0/file2' [ 43.202473][ T6011] overlay: Unknown parameter './file0/file2' [ 43.204227][ T6011] overlay: Unknown parameter './file0/file2' [ 43.206278][ T6011] overlay: Unknown parameter './file0/file2' [ 43.207939][ T6011] overlay: Unknown parameter './file0/file2' [ 43.209850][ T6011] overlay: Unknown parameter './file0/file2' [ 43.211867][ T6011] overlay: Unknown parameter './file0/file2' [ 43.214147][ T6011] overlay: Unknown parameter './file0/file2' [ 43.216361][ T6011] overlay: Unknown parameter './file0/file2' [ 43.218728][ T6011] overlay: Unknown parameter './file0/file2' [ 43.220745][ T6011] overlay: Unknown parameter './file0/file2' [ 43.226044][ T5700] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 43.255105][ T5700] usb 5-1: device descriptor read/8, error -71 [ 43.288404][ T44] audit: type=1400 audit(1789956328.498:326): avc: denied { ioctl } for pid=6014 comm="syz.3.39" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10774 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.367706][ T5700] usb usb5-port1: unable to enumerate USB device [ 43.404339][ T6005] hid-generic 0001:00FD:0009.0003: unknown main item tag 0x1 [ 43.406418][ T6005] hid-generic 0001:00FD:0009.0003: item fetching failed at offset 12/16 [ 43.406675][ T6005] hid-generic 0001:00FD:0009.0003: probe with driver hid-generic failed with error -22 [ 43.471820][ T6026] tc action pedit offset must be on 32 bit boundaries [ 43.584487][ T5909] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.625875][ T6031] /dev/nullb0: Can't open blockdev [ 43.674501][ T5734] Bluetooth: hci2: command tx timeout [ 43.674523][ T5734] Bluetooth: hci3: command tx timeout [ 43.674535][ T5734] Bluetooth: hci1: command tx timeout [ 43.684480][ T5732] Bluetooth: hci0: command tx timeout [ 43.758156][ T5909] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 43.759302][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.759325][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.761270][ T5909] usb 6-1: config 0 descriptor?? [ 43.852774][ T6044] FAULT_INJECTION: forcing a failure. [ 43.852774][ T6044] name failslab, interval 1, probability 0, space 0, times 0 [ 43.852794][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT(full) [ 43.852807][ T6044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.852814][ T6044] Call Trace: [ 43.852818][ T6044] [ 43.852822][ T6044] dump_stack_lvl+0x100/0x190 [ 43.852843][ T6044] should_fail_ex.cold+0x5/0xa [ 43.852859][ T6044] should_failslab+0xc2/0x120 [ 43.852874][ T6044] __kmalloc_cache_noprof+0x91/0x6d0 [ 43.852892][ T6044] ? dev_ingress_queue_create+0x11e/0x1f0 [ 43.852910][ T6044] dev_ingress_queue_create+0x11e/0x1f0 [ 43.852926][ T6044] tc_modify_qdisc+0xad1/0x2120 [ 43.852943][ T6044] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 43.852968][ T6044] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 43.852983][ T6044] rtnetlink_rcv_msg+0x3c9/0xe90 [ 43.853000][ T6044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 43.853020][ T6044] ? ref_tracker_free+0x37e/0x6c0 [ 43.853038][ T6044] netlink_rcv_skb+0x159/0x420 [ 43.853051][ T6044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 43.853067][ T6044] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 43.853085][ T6044] ? netlink_deliver_tap+0x1ae/0xcc0 [ 43.853100][ T6044] netlink_unicast+0x585/0x850 [ 43.853114][ T6044] ? __pfx_netlink_unicast+0x10/0x10 [ 43.853131][ T6044] netlink_sendmsg+0x8b0/0xda0 [ 43.853146][ T6044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.853160][ T6044] ? selinux_socket_sendmsg+0x198/0x2f0 [ 43.853177][ T6044] ____sys_sendmsg+0xa4d/0xbe0 [ 43.853193][ T6044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.853207][ T6044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 43.853230][ T6044] ___sys_sendmsg+0x190/0x1e0 [ 43.853242][ T6044] ? __pfx____sys_sendmsg+0x10/0x10 [ 43.853253][ T6044] ? futex_wait+0x11e/0x370 [ 43.853269][ T6044] ? find_held_lock+0x2b/0x80 [ 43.853293][ T6044] __sys_sendmsg+0x160/0x210 [ 43.853307][ T6044] ? __pfx___sys_sendmsg+0x10/0x10 [ 43.853329][ T6044] do_syscall_64+0x123/0x790 [ 43.853347][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.853359][ T6044] RIP: 0033:0x7f29ca99e159 [ 43.853370][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.853380][ T6044] RSP: 002b:00007f29cb7a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.853393][ T6044] RAX: ffffffffffffffda RBX: 00007f29cac25fa0 RCX: 00007f29ca99e159 [ 43.853401][ T6044] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 43.853408][ T6044] RBP: 00007f29caa3506b R08: 0000000000000000 R09: 0000000000000000 [ 43.853416][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.853423][ T6044] R13: 00007f29cac26038 R14: 00007f29cac25fa0 R15: 00007ffe85396828 [ 43.853438][ T6044] [ 43.922825][ T6052] netlink: Setting conntrack mark requires 'commit' flag. [ 43.922840][ T6052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 43.969714][ T6055] Bluetooth: MGMT ver 1.23 [ 44.002450][ T6057] syzkaller0: entered promiscuous mode [ 44.002464][ T6057] syzkaller0: entered allmulticast mode [ 44.005048][ T6057] program syz.3.55 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.173362][ T5909] savu 0003:1E7D:2D5A.0004: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 44.426848][ T5098] usb 6-1: USB disconnect, device number 2 [ 44.494520][ T5909] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 44.644512][ T5909] usb 8-1: Using ep0 maxpacket: 16 [ 44.645374][ T5909] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 44.645405][ T5909] usb 8-1: too many configurations: 123, using maximum allowed: 8 [ 44.646517][ T5909] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.647808][ T5909] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.649323][ T5909] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.650346][ T5909] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.651366][ T5909] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.652373][ T5909] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.653389][ T5909] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.654525][ T5909] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.656266][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 44.656286][ T5909] usb 8-1: SerialNumber: syz [ 44.660325][ T5909] usb 8-1: config 0 descriptor?? [ 44.671699][ T5909] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input5 [ 44.729775][ T5732] Bluetooth: hci0: failed to read key size for handle 200 [ 44.871044][ T6062] input: syz0 as /devices/virtual/input/input6 [ 44.881403][ T6074] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 44.930535][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.931109][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.952312][ T6078] input: syz0 as /devices/virtual/input/input7 [ 45.123667][ T6089] program syz.0.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.131599][ T6090] syzkaller0: entered promiscuous mode [ 45.131612][ T6090] syzkaller0: entered allmulticast mode [ 45.764564][ T5734] Bluetooth: hci3: command tx timeout [ 45.764613][ T5732] Bluetooth: hci1: command tx timeout [ 46.014930][ T6110] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 46.018152][ T6108] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL) [ 46.018166][ T6108] device-mapper: ioctl: error adding target to table [ 46.093956][ T6121] __nla_validate_parse: 5 callbacks suppressed [ 46.093969][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 46.145833][ T6127] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 46.150684][ T6127] binder: Unknown parameter 'euid' [ 46.202886][ T6134] FAULT_INJECTION: forcing a failure. [ 46.202886][ T6134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 46.202906][ T6134] CPU: 2 UID: 0 PID: 6134 Comm: syz.1.79 Not tainted syzkaller #0 PREEMPT(full) [ 46.202919][ T6134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.202926][ T6134] Call Trace: [ 46.202930][ T6134] [ 46.202935][ T6134] dump_stack_lvl+0x100/0x190 [ 46.202956][ T6134] should_fail_ex.cold+0x5/0xa [ 46.202970][ T6134] ? prepare_alloc_pages+0x16d/0x5b0 [ 46.202988][ T6134] should_fail_alloc_page+0xeb/0x140 [ 46.203004][ T6134] prepare_alloc_pages+0x1f0/0x5b0 [ 46.203019][ T6134] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 46.203038][ T6134] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 46.203051][ T6134] ? rcu_is_watching+0x13/0xc0 [ 46.203068][ T6134] ? trace_kmem_cache_alloc+0xd1/0x100 [ 46.203084][ T6134] ? kmem_cache_alloc_lru_noprof+0x2d1/0x6a0 [ 46.203099][ T6134] ? __lock_acquire+0x5c0/0x1f40 [ 46.203110][ T6134] ? __css_rstat_updated+0x1ce/0x590 [ 46.203124][ T6134] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 46.203161][ T6134] ? rcu_is_watching+0x13/0xc0 [ 46.203179][ T6134] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 46.203194][ T6134] ? find_held_lock+0x2b/0x80 [ 46.203214][ T6134] ? __lock_acquire+0x5c0/0x1f40 [ 46.203227][ T6134] ? rcu_is_watching+0x13/0xc0 [ 46.203242][ T6134] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 46.203257][ T6134] ? policy_nodemask+0xed/0x4f0 [ 46.203274][ T6134] alloc_pages_mpol+0x201/0x550 [ 46.203290][ T6134] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 46.203306][ T6134] ? filemap_get_entry+0x22d/0x450 [ 46.203322][ T6134] ? filemap_get_entry+0x22d/0x450 [ 46.203352][ T6134] folio_alloc_noprof+0x22/0x250 [ 46.203370][ T6134] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 46.203384][ T6134] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 46.203397][ T6134] ? rcu_is_watching+0x13/0xc0 [ 46.203411][ T6134] ? trace_kmalloc+0xeb/0x110 [ 46.203427][ T6134] __filemap_get_folio_mpol+0x653/0x1280 [ 46.203446][ T6134] ioctx_alloc+0x7e1/0x21a0 [ 46.203469][ T6134] ? __pfx_ioctx_alloc+0x10/0x10 [ 46.203490][ T6134] __x64_sys_io_setup+0xc9/0x220 [ 46.203509][ T6134] do_syscall_64+0x123/0x790 [ 46.203527][ T6134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.203539][ T6134] RIP: 0033:0x7f82eef9e159 [ 46.203548][ T6134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.203559][ T6134] RSP: 002b:00007f82efe81028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 46.203570][ T6134] RAX: ffffffffffffffda RBX: 00007f82ef225fa0 RCX: 00007f82eef9e159 [ 46.203577][ T6134] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00000000000003ff [ 46.203584][ T6134] RBP: 00007f82ef03506b R08: 0000000000000000 R09: 0000000000000000 [ 46.203591][ T6134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.203597][ T6134] R13: 00007f82ef226038 R14: 00007f82ef225fa0 R15: 00007ffe83d7f0b8 [ 46.203611][ T6134] [ 46.216237][ T6138] input: syz0 as /devices/virtual/input/input8 [ 46.284453][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 46.445180][ T25] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 46.446108][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.446142][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.449179][ T25] usb 7-1: config 0 descriptor?? [ 46.859058][ T25] savu 0003:1E7D:2D5A.0005: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 46.972125][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.83'. [ 47.067979][ T6171] macvlan0: entered promiscuous mode [ 47.074200][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 47.074253][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85'. [ 47.084197][ T6177] netlink: 'syz.0.86': attribute type 10 has an invalid length. [ 47.100195][ T6177] veth0_vlan: entered allmulticast mode [ 47.111799][ T10] usb 7-1: USB disconnect, device number 2 [ 47.113243][ T6177] team0: Device veth0_vlan failed to register rx_handler [ 47.272448][ T5122] bcm5974 8-1:0.0: could not read from device [ 47.275847][ T5122] bcm5974 8-1:0.0: could not read from device [ 47.286927][ T5122] bcm5974 8-1:0.0: could not read from device [ 47.290608][ T5122] bcm5974 8-1:0.0: could not read from device [ 47.292725][ T5909] usb 8-1: USB disconnect, device number 3 [ 47.343650][ T6195] tmpfs: Bad value for 'mpol' [ 47.347904][ T6195] gfs2: path_lookup on c::: returned error -2 [ 47.403426][ T6195] svc: failed to register nfsdv3 RPC service (errno 111). [ 47.404176][ T6195] svc: failed to register nfsaclv3 RPC service (errno 111). [ 47.653308][ T44] kauditd_printk_skb: 86 callbacks suppressed [ 47.653320][ T44] audit: type=1400 audit(1789956332.858:413): avc: denied { ioctl } for pid=6224 comm="syz.2.97" path="socket:[12560]" dev="sockfs" ino=12560 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.681459][ T44] audit: type=1400 audit(1789956332.888:414): avc: denied { mount } for pid=6227 comm="syz.3.98" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.682813][ T44] audit: type=1400 audit(1789956332.888:415): avc: denied { ioctl } for pid=6227 comm="syz.3.98" path="socket:[11213]" dev="sockfs" ino=11213 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.692658][ T44] audit: type=1400 audit(1789956332.898:416): avc: denied { write } for pid=6227 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.720864][ T44] audit: type=1400 audit(1789956332.928:417): avc: denied { create } for pid=6221 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.720893][ T44] audit: type=1400 audit(1789956332.928:418): avc: denied { create } for pid=6221 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.721170][ T44] audit: type=1400 audit(1789956332.928:419): avc: denied { setopt } for pid=6221 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.894504][ T5815] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 47.982441][ T44] audit: type=1400 audit(1789956333.188:420): avc: denied { mounton } for pid=6240 comm="syz.3.101" path="/26/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.983120][ T6241] jffs2: notice: (6241) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 47.993441][ T44] audit: type=1400 audit(1789956333.198:421): avc: denied { mounton } for pid=6240 comm="syz.3.101" path="/26/file0" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.997230][ T6241] overlayfs: workdir and upperdir must be separate subtrees [ 48.046345][ T6183] ima: policy update completed [ 48.046460][ T44] audit: type=1802 audit(1789956333.258:422): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.0.88" res=1 errno=0 [ 48.055763][ T5815] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 48.057750][ T5815] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 48.057763][ T5815] usb 7-1: config 1 has no interface number 0 [ 48.057782][ T5815] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 48.059550][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.059562][ T5815] usb 7-1: Product: syz [ 48.059569][ T5815] usb 7-1: Manufacturer: syz [ 48.059576][ T5815] usb 7-1: SerialNumber: syz [ 48.061505][ T6225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 48.062549][ T5815] usb 7-1: Error in usbnet_get_endpoints (-22) [ 48.081127][ T6246] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 48.081143][ T6246] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 48.154165][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154174][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154216][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154222][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154270][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154274][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154313][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154317][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154354][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154358][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154574][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154579][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154617][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154621][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154660][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154664][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154703][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154707][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154744][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154748][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154786][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154790][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154829][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154833][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154871][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154874][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154913][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154917][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154955][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.154959][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.154999][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155003][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155040][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155044][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155082][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155086][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155125][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155128][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155167][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155171][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155208][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155212][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155259][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155263][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155301][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155304][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155343][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155347][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155386][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155390][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155427][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155431][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155468][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155472][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155510][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155514][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155552][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155556][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155592][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155596][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155634][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155638][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155677][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155680][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155718][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155722][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155760][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155763][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155801][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155805][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155844][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155848][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155885][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155889][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155927][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155931][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.155968][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.155972][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156011][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156014][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156052][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156056][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156094][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156098][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156136][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156139][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156178][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156182][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156219][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156223][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156265][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156269][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156306][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156310][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156349][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156353][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156391][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156394][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156432][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156436][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156474][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156478][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156516][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156520][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156558][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156562][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156624][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156628][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156666][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156670][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156708][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156712][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156749][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156753][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156790][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156794][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156831][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156835][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156875][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156879][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156927][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156931][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.156969][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.156973][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.157010][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.157014][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.157054][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 48.157058][ T6254] binder: 6252:6254 ioctl 4018620d 200000000100 returned -16 [ 48.317296][ T6259] fuse: Bad value for 'fd' [ 48.326073][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 48.700042][ T6263] jffs2: notice: (6263) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 48.921639][ T6248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 48.921722][ T6248] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 48.925627][ T6248] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 48.932174][ T6248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 48.932315][ T6248] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 48.933470][ T6248] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 48.936796][ T6248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 48.936828][ T6248] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 48.943152][ T6248] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 48.948138][ T6248] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 48.950903][ T6248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 48.950934][ T6248] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 48.962370][ T6248] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 48.965712][ T6248] hwrng_fill thread creation failed [ 49.034929][ T6249] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 49.035088][ T6249] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 49.035216][ T6249] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 49.035333][ T6249] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 49.035523][ T6249] hwrng_fill thread creation failed [ 49.041621][ T851] usb 7-1: USB disconnect, device number 3 [ 49.090561][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 49.090576][ T6277] openvswitch: netlink: ufid size 4580 bytes exceeds the range (1, 16) [ 49.090584][ T6277] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 49.106249][ T6277] ip_tables: iptables: counters copy to user failed while replacing table [ 49.116846][ T6277] netlink: 'syz.1.110': attribute type 9 has an invalid length. [ 49.125239][ T6277] ipvlan2: entered allmulticast mode [ 49.125260][ T6277] virt_wifi0: entered allmulticast mode [ 49.126583][ T6277] batman_adv: batadv0: Adding interface: ipvlan2 [ 49.126595][ T6277] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.126621][ T6277] batman_adv: batadv0: Interface activated: ipvlan2 [ 49.187031][ T6281] warning: `syz.0.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.284443][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 49.292628][ T6295] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 49.292640][ T6295] UDF-fs: Scanning with blocksize 2048 failed [ 49.294163][ T6295] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 49.294173][ T6295] UDF-fs: Scanning with blocksize 4096 failed [ 49.445288][ T10] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 49.446123][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.446146][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.447355][ T10] usb 8-1: config 0 descriptor?? [ 49.856210][ T10] savu 0003:1E7D:2D5A.0006: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 50.180962][ T5815] usb 8-1: USB disconnect, device number 4 [ 50.244508][ T6304] usb usb2: usbfs: process 6304 (syz.1.118) did not claim interface 46 before use [ 50.244977][ T6304] xt_cgroup: invalid path, errno=-2 [ 50.620033][ T6331] xt_hashlimit: max too large, truncated to 1048576 [ 50.621881][ T6331] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 50.666912][ T5732] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 50.749831][ T6343] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 50.790232][ T6346] lo: entered allmulticast mode [ 50.829410][ T6345] lo: left allmulticast mode [ 50.962743][ T6360] [U] v3f"S/4:XTzWtlW= [ 50.962766][ T6360] [U] J"e:" [ 50.995033][ T6363] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 50.995056][ T6363] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 50.995634][ T6363] vhci_hcd vhci_hcd.0: Device attached [ 51.016423][ T6367] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 51.016444][ T6367] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 51.016496][ T6367] vhci_hcd vhci_hcd.0: Device attached [ 51.017736][ T6364] vhci_hcd: connection closed [ 51.018233][ T6369] vhci_hcd: connection closed [ 51.019739][ T13] vhci_hcd vhci_hcd.2: stop threads [ 51.020037][ T13] vhci_hcd vhci_hcd.2: release socket [ 51.020064][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 51.020676][ T13] vhci_hcd vhci_hcd.2: stop threads [ 51.020685][ T13] vhci_hcd vhci_hcd.2: release socket [ 51.020694][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 51.115791][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 51.116301][ T5732] Bluetooth: hci3: command 0x0c1a tx timeout [ 52.256423][ T6395] team0 (unregistering): Port device team_slave_0 removed [ 52.258856][ T6395] team0 (unregistering): Port device team_slave_1 removed [ 52.300098][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 52.400107][ T6398] capability: warning: `syz.3.143' uses deprecated v2 capabilities in a way that may be insecure [ 52.403738][ T6398] fuse: Bad value for 'fd' [ 52.654717][ T44] kauditd_printk_skb: 10364 callbacks suppressed [ 52.654731][ T44] audit: type=1326 audit(1789956337.858:10787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.2.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f259e159 code=0x50000 [ 52.654753][ T44] audit: type=1326 audit(1789956337.868:10788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.2.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f259e159 code=0x50000 [ 52.654774][ T44] audit: type=1326 audit(1789956337.868:10789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.2.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f259e159 code=0x50000 [ 52.654794][ T44] audit: type=1326 audit(1789956337.868:10790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.2.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f259e159 code=0x50000 [ 52.654813][ T44] audit: type=1326 audit(1789956337.868:10791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.2.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f259e159 code=0x50000 [ 52.655047][ T44] audit: type=1326 audit(1789956337.868:10792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.2.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f259e159 code=0x50000 [ 52.655110][ T44] audit: type=1326 audit(1789956337.868:10793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.2.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f259e159 code=0x50000 [ 52.655180][ T44] audit: type=1326 audit(1789956337.868:10794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.2.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f259e159 code=0x50000 [ 52.655262][ T44] audit: type=1326 audit(1789956337.868:10795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.2.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f259e159 code=0x50000 [ 52.655335][ T44] audit: type=1326 audit(1789956337.868:10796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.2.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f259e159 code=0x50000 [ 52.954518][ T5732] Bluetooth: hci0: command 0x0c1a tx timeout [ 52.957431][ T6348] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 53.206176][ T5732] Bluetooth: hci3: command 0x0c1a tx timeout [ 53.726382][ T6423] fuse: Bad value for 'fd' [ 53.780352][ T6348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.780468][ T6348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.780533][ T6348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.863113][ T6429] raw_sendmsg: syz.1.152 forgot to set AF_INET. Fix it! [ 53.909249][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.153'. [ 53.909277][ T6428] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 54.214610][ T5700] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 54.364927][ T5700] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 54.365786][ T5700] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.365798][ T5700] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.367461][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.367474][ T5700] usb 6-1: Product: syz [ 54.367481][ T5700] usb 6-1: Manufacturer: syz [ 54.367488][ T5700] usb 6-1: SerialNumber: syz [ 54.572367][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.572854][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.614565][ T6448] tmpfs: Unknown parameter 'grpquota_blo7Tck_hardlIJvkS/s$T݂xUOx}V2l EN8͐SĤ-W2x'/~f#Z{٨sY]O2Not1O' [ 54.713783][ T6461] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 54.714038][ T6461] CIFS: Attempting to mount //127.0.0.1/share [ 54.767504][ T6463] CIFS: VFS: Invalid response size 0 for command 0 [ 54.767860][ T6463] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 54.771450][ T6461] CIFS: VFS: cifs_mount failed w/return code = -5 [ 54.902989][ T6474] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 54.914088][ T6474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.920601][ T6474] bond2: (slave gretap1): making interface the new active one [ 54.921493][ T6474] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 54.929710][ T6484] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 55.044583][ T5732] Bluetooth: hci1: command 0x0c1a tx timeout [ 55.044610][ T5732] Bluetooth: hci0: command 0x0c1a tx timeout [ 55.203865][ T6492] netlink: 32 bytes leftover after parsing attributes in process `syz.2.165'. [ 55.253229][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 55.280430][ T6517] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 55.347076][ T6493] cgroup: fork rejected by pids controller in /syz2 [ 55.834589][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 55.834612][ T5732] Bluetooth: hci2: command 0x2016 tx timeout [ 55.879643][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.880367][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.919051][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.921907][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.984553][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.984689][ T5801] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.984709][ T5801] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.984725][ T5801] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.552381][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 56.552402][ T6590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.552583][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 56.552596][ T6590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.552749][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 56.552762][ T6590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.552938][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 56.553001][ T6590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.553172][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 56.553192][ T6590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.553481][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 56.553495][ T6590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.553662][ T6590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.553819][ T6590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.553977][ T6590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.554166][ T6590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.866004][ T5700] usb 6-1: Unsupported UAC3 BADD profile [ 56.904101][ T5700] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 56.908750][ T5700] usb 6-1: USB disconnect, device number 3 [ 56.968071][ T5729] udevd[5729]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 57.114748][ T5732] Bluetooth: hci0: command 0x0c1a tx timeout [ 57.114777][ T5732] Bluetooth: hci1: command 0x0c1a tx timeout [ 57.143121][ T6611] sctp: [Deprecated]: syz.3.183 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 57.143121][ T6611] Use struct sctp_sack_info instead [ 57.341107][ T6638] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=6638 comm=syz.2.189 [ 57.384249][ T6630] 9pnet_virtio: no channels available for device syz [ 57.514269][ T6653] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 57.542357][ T6653] bridge1: entered promiscuous mode [ 57.547248][ T6653] bond3: (slave bridge1): making interface the new active one [ 57.547753][ T6653] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 57.644669][ T2318] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 57.779252][ T44] kauditd_printk_skb: 21346 callbacks suppressed [ 57.779264][ T44] audit: type=1800 audit(1789956342.988:32143): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 57.800511][ T44] audit: type=1800 audit(1789956343.008:32144): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=117875 res=0 errno=0 [ 57.805497][ T2318] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 57.806505][ T2318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.806541][ T2318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.815334][ T44] audit: type=1400 audit(1789956343.018:32145): avc: denied { write } for pid=6664 comm="syz.1.196" name="/" dev="9p" ino=75759733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.815929][ T44] audit: type=1400 audit(1789956343.028:32146): avc: denied { add_name } for pid=6664 comm="syz.1.196" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.816057][ T44] audit: type=1400 audit(1789956343.028:32147): avc: denied { associate } for pid=6664 comm="syz.1.196" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.816360][ T2318] usb 5-1: config 0 descriptor?? [ 57.818490][ T44] audit: type=1800 audit(1789956343.028:32148): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=117894 res=0 errno=0 [ 57.821371][ T44] audit: type=1400 audit(1789956343.028:32149): avc: denied { write } for pid=6664 comm="syz.1.196" name="file0" dev="9p" ino=75759739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.821689][ T44] audit: type=1400 audit(1789956343.028:32150): avc: denied { open } for pid=6664 comm="syz.1.196" path="/51/file0/file0" dev="9p" ino=75759739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.829036][ T44] audit: type=1800 audit(1789956343.028:32151): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=117923 res=0 errno=0 [ 57.829077][ T44] audit: type=1800 audit(1789956343.028:32152): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=117901 res=0 errno=0 [ 57.902481][ T6666] 9pnet_fd: Insufficient options for proto=fd [ 57.924515][ T5734] Bluetooth: hci2: command 0x2016 tx timeout [ 58.205469][ T6670] blktrace: Concurrent blktraces are not allowed on sg0 [ 58.223799][ T2318] savu 0003:1E7D:2D5A.0007: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 58.296944][ T6696] __nla_validate_parse: 29 callbacks suppressed [ 58.296956][ T6696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.201'. [ 58.358246][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.358405][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.358586][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.358728][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.358862][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.358993][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.359141][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.359286][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.359418][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.359550][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.359694][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.359825][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.359998][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.360134][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.360291][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.360422][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.360590][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.360733][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.360878][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.361009][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.361141][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.361278][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.361423][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.361556][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.361689][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.361860][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.362030][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.362307][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.362443][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.362574][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.362736][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.362896][ T6706] UBIFS error (pid: 6706): cannot open "ubi0_0", error -19 [ 58.379211][ T6713] Line length is too long: Should be less than 4094 [ 58.477069][ T2318] usb 5-1: USB disconnect, device number 6 [ 58.897102][ T6719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.207'. [ 58.929908][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 58.937847][ T6721] bond0: (slave macvlan0): Opening slave failed [ 58.981194][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.208'. [ 58.989821][ T6721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.208'. [ 59.010752][ T6725] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 59.039510][ T6728] romfs: unable to set blocksize [ 59.039510][ T6728] [ 59.130810][ T6738] netlink: 'syz.0.214': attribute type 12 has an invalid length. [ 59.130823][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 59.142968][ T6738] netlink: 'syz.0.214': attribute type 12 has an invalid length. [ 59.142982][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 59.164476][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.164504][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.164544][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.164564][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.179417][ T6745] netlink: 'syz.0.216': attribute type 4 has an invalid length. [ 59.186475][ T6745] netlink: 'syz.0.216': attribute type 4 has an invalid length. [ 59.203544][ T6750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.218'. [ 59.290653][ T6756] kAFS: bad VL server IP address [ 59.317163][ T6754] fuse: Bad value for 'fd' [ 59.342602][ T6762] vlan2: entered promiscuous mode [ 59.342615][ T6762] hsr0: entered promiscuous mode [ 59.342785][ T6762] vlan2: entered allmulticast mode [ 59.342793][ T6762] hsr0: entered allmulticast mode [ 59.342799][ T6762] hsr_slave_0: entered allmulticast mode [ 59.342807][ T6762] hsr_slave_1: entered allmulticast mode [ 59.377947][ T6767] overlay: Unknown parameter 'subj_type' [ 59.444474][ T62] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.444477][ T5700] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 59.462164][ T6772] ip6erspan0: entered allmulticast mode [ 59.605577][ T62] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 59.605674][ T5700] usb 5-1: not running at top speed; connect to a high speed hub [ 59.605700][ T5700] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.606532][ T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.606563][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.608501][ T62] usb 7-1: config 0 descriptor?? [ 59.609686][ T5700] usb 5-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.609702][ T5700] usb 5-1: config 1 interface 0 has no altsetting 0 [ 59.611618][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.611630][ T5700] usb 5-1: Product: syz [ 59.611637][ T5700] usb 5-1: Manufacturer: syz [ 59.611644][ T5700] usb 5-1: SerialNumber: syz [ 59.670249][ T6789] fuse: Bad value for 'fd' [ 59.742876][ T6797] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 59.757073][ T6797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.822207][ T5700] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 59.825988][ T5700] usb 5-1: USB disconnect, device number 7 [ 59.977850][ T6803] cgroup: fork rejected by pids controller in /syz3 [ 59.994480][ T5734] Bluetooth: hci2: command 0x2016 tx timeout [ 60.024754][ T62] savu 0003:1E7D:2D5A.0008: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 60.266839][ T62] usb 7-1: USB disconnect, device number 4 [ 60.272137][ T50] cfg80211: failed to load regulatory.db [ 60.275681][ T62] =========== ** replaying previous printk message ** [ 60.275681][ T62] ================================================================== [ 60.275688][ T62] BUG: KASAN: slab-use-after-free in roccat_disconnect+0x24f/0x2f0 [ 60.275723][ T62] Read of size 4 at addr ffff88802617d808 by task kworker/2:1/62 [ 60.275732][ T62] [ 60.275738][ T62] CPU: 2 UID: 0 PID: 62 Comm: kworker/2:1 Not tainted syzkaller #0 PREEMPT(full) [ 60.275750][ T62] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.275757][ T62] Workqueue: usb_hub_wq hub_event [ 60.275773][ T62] Call Trace: [ 60.275777][ T62] [ 60.275781][ T62] dump_stack_lvl+0x100/0x190 [ 60.275798][ T62] print_report+0x13d/0x4b0 [ 60.275814][ T62] ? __virt_addr_valid+0x239/0x430 [ 60.275825][ T62] ? roccat_disconnect+0x24f/0x2f0 [ 60.275838][ T62] kasan_report+0xdf/0x1c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 60.275856][ T62] ? roccat_disconnect+0x24f/0x2f0 [ 60.275870][ T62] roccat_disconnect+0x24f/0x2f0 [ 60.275884][ T62] savu_remove+0x150/0x190 [ 60.275894][ T62] ? __pfx_savu_remove+0x10/0x10 [ 60.275904][ T62] hid_device_remove+0xd1/0x200 [ 60.275920][ T62] ? __pfx_hid_device_remove+0x10/0x10 [ 60.275935][ T62] device_remove+0xcb/0x180 [ 60.275947][ T62] device_release_driver_internal+0x44e/0x620 [ 60.275962][ T62] bus_remove_device+0x2bc/0x560 [ 60.275973][ T62] ? __pfx_bus_remove_device+0x10/0x10 [ 60.275983][ T62] ? __pfx_device_remove_attrs+0x10/0x10 [ 60.275996][ T62] device_del+0x376/0x9b0 [ 60.276008][ T62] ? __pfx_device_del+0x10/0x10 [ 60.276019][ T62] ? do_raw_spin_lock+0x128/0x260 [ 60.276033][ T62] ? find_held_lock+0x2b/0x80 [ 60.276049][ T62] hid_destroy_device+0x19c/0x240 [ 60.276064][ T62] usbhid_disconnect+0xa0/0xe0 [ 60.276079][ T62] usb_unbind_interface+0x1dd/0x9e0 [ 60.276096][ T62] ? __pfx_usb_unbind_interface+0x10/0x10 [ 60.276112][ T62] device_remove+0x12a/0x180 [ 60.276124][ T62] device_release_driver_internal+0x44e/0x620 [ 60.276139][ T62] bus_remove_device+0x2bc/0x560 [ 60.276150][ T62] ? __pfx_bus_remove_device+0x10/0x10 [ 60.276160][ T62] ? __pfx_device_remove_attrs+0x10/0x10 [ 60.276173][ T62] device_del+0x376/0x9b0 [ 60.276184][ T62] ? __pfx_device_del+0x10/0x10 [ 60.276195][ T62] ? kobject_put+0xb9/0x640 [ 60.276211][ T62] usb_disable_device+0x367/0x810 [ 60.276227][ T62] usb_disconnect+0x2e2/0x9a0 [ 60.276260][ T62] hub_event+0x1bb1/0x4420 [ 60.276280][ T62] ? __lock_acquire+0x5c0/0x1f40 [ 60.276292][ T62] ? __pfx_hub_event+0x10/0x10 [ 60.276306][ T62] ? lockdep_count_backward_deps+0x1b0/0x200 [ 60.276318][ T62] ? lock_acquire+0x1d1/0x380 [ 60.276329][ T62] ? process_one_work+0xa2c/0x1b10 [ 60.276346][ T62] ? process_one_work+0x906/0x1b10 [ 60.276361][ T62] ? process_one_work+0x906/0x1b10 [ 60.276378][ T62] process_one_work+0xac7/0x1b10 [ 60.276396][ T62] ? __pfx_process_one_work+0x10/0x10 [ 60.276412][ T62] ? lock_acquire+0x1d1/0x380 [ 60.276424][ T62] ? __pfx_hub_event+0x10/0x10 [ 60.276439][ T62] worker_thread+0x5ef/0xe50 [ 60.276456][ T62] ? __pfx_worker_thread+0x10/0x10 [ 60.276472][ T62] ? kthread+0x13a/0x450 [ 60.276486][ T62] ? __pfx_worker_thread+0x10/0x10 [ 60.276501][ T62] kthread+0x373/0x450 [ 60.276533][ T62] ? __pfx_kthread+0x10/0x10 [ 60.276549][ T62] ret_from_fork+0x730/0xd60 [ 60.276561][ T62] ? __pfx_ret_from_fork+0x10/0x10 [ 60.276573][ T62] ? __switch_to+0x800/0x10f0 [ 60.276587][ T62] ? __pfx_kthread+0x10/0x10 [ 60.276602][ T62] ret_from_fork_asm+0x1a/0x30 [ 60.276616][ T62] [ 60.276620][ T62] [ 60.276622][ T62] Allocated by task 62: [ 60.276627][ T62] kasan_save_stack+0x30/0x50 [ 60.276638][ T62] kasan_save_track+0x14/0x30 [ 60.276649][ T62] __kasan_kmalloc+0xaa/0xb0 [ 60.276659][ T62] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 60.276674][ T62] roccat_connect+0x57/0x530 [ 60.276685][ T62] savu_probe+0x222/0x310 [ 60.276694][ T62] hid_device_probe+0x4fe/0x850 [ 60.276707][ T62] really_probe+0x241/0xa60 [ 60.276728][ T62] __driver_probe_device+0x210/0x460 [ 60.276742][ T62] driver_probe_device+0x4a/0x140 [ 60.276753][ T62] __device_attach_driver+0x1df/0x320 [ 60.276764][ T62] bus_for_each_drv+0x159/0x1e0 [ 60.276773][ T62] __device_attach+0x1e4/0x4d0 [ 60.276784][ T62] device_initial_probe+0xaf/0xd0 [ 60.276795][ T62] bus_probe_device+0x64/0x160 [ 60.276804][ T62] device_add+0x121d/0x1970 [ 60.276817][ T62] hid_add_device+0x2bf/0x440 [ 60.276830][ T62] usbhid_probe+0xa64/0x10b0 [ 60.276842][ T62] usb_probe_interface+0x386/0x9b0 [ 60.276857][ T62] really_probe+0x241/0xa60 [ 60.276867][ T62] __driver_probe_device+0x210/0x460 [ 60.276879][ T62] driver_probe_device+0x4a/0x140 [ 60.276890][ T62] __device_attach_driver+0x1df/0x320 [ 60.276901][ T62] bus_for_each_drv+0x159/0x1e0 [ 60.276909][ T62] __device_attach+0x1e4/0x4d0 [ 60.276920][ T62] device_initial_probe+0xaf/0xd0 [ 60.276932][ T62] bus_probe_device+0x64/0x160 [ 60.276941][ T62] device_add+0x121d/0x1970 [ 60.276953][ T62] usb_set_configuration+0xd97/0x1c60 [ 60.276967][ T62] usb_generic_driver_probe+0xa1/0xe0 [ 60.276978][ T62] usb_probe_device+0xef/0x400 [ 60.276992][ T62] really_probe+0x241/0xa60 [ 60.277002][ T62] __driver_probe_device+0x210/0x460 [ 60.277013][ T62] driver_probe_device+0x4a/0x140 [ 60.277024][ T62] __device_attach_driver+0x1df/0x320 [ 60.277035][ T62] bus_for_each_drv+0x159/0x1e0 [ 60.277044][ T62] __device_attach+0x1e4/0x4d0 [ 60.277054][ T62] device_initial_probe+0xaf/0xd0 [ 60.277066][ T62] bus_probe_device+0x64/0x160 [ 60.277075][ T62] device_add+0x121d/0x1970 [ 60.277088][ T62] usb_new_device.part.0+0xcc2/0x1686 [ 60.277103][ T62] hub_event.cold+0x1e3/0xe90 [ 60.277116][ T62] process_one_work+0xac7/0x1b10 [ 60.277131][ T62] worker_thread+0x5ef/0xe50 [ 60.277145][ T62] kthread+0x373/0x450 [ 60.277158][ T62] ret_from_fork+0x730/0xd60 [ 60.277168][ T62] ret_from_fork_asm+0x1a/0x30 [ 60.277178][ T62] [ 60.277180][ T62] Freed by task 6746: [ 60.277185][ T62] kasan_save_stack+0x30/0x50 [ 60.277196][ T62] kasan_save_track+0x14/0x30 [ 60.277206][ T62] kasan_save_free_info+0x3b/0x70 [ 60.277221][ T62] __kasan_slab_free+0x5f/0x80 [ 60.277236][ T62] kfree+0x22b/0x6d0 [ 60.277249][ T62] roccat_release+0x3b4/0x4c0 [ 60.277261][ T62] __fput+0x3ff/0xb50 [ 60.277273][ T62] task_work_run+0x150/0x240 [ 60.277287][ T62] exit_to_user_mode_loop+0x1d8/0x700 [ 60.277299][ T62] do_syscall_64+0x661/0x790 [ 60.277313][ T62] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.277323][ T62] [ 60.277325][ T62] The buggy address belongs to the object at ffff88802617d800 [ 60.277325][ T62] which belongs to the cache kmalloc-1k of size 1024 [ 60.277333][ T62] The buggy address is located 8 bytes inside of [ 60.277333][ T62] freed 1024-byte region [ffff88802617d800, ffff88802617dc00) [ 60.277342][ T62] [ 60.277345][ T62] The buggy address belongs to the physical page: [ 60.277349][ T62] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802617f000 pfn:0x26178 [ 60.277359][ T62] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 60.277367][ T62] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 60.277376][ T62] page_type: f5(slab) [ 60.277385][ T62] raw: 00fff00000000240 ffff88801c042dc0 ffffea000161f410 ffffea0000bbf610 [ 60.277394][ T62] raw: ffff88802617f000 0000000000100009 00000000f5000000 0000000000000000 [ 60.277403][ T62] head: 00fff00000000240 ffff88801c042dc0 ffffea000161f410 ffffea0000bbf610 [ 60.277412][ T62] head: ffff88802617f000 0000000000100009 00000000f5000000 0000000000000000 [ 60.277421][ T62] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 60.277429][ T62] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 60.277435][ T62] page dumped because: kasan: bad access detected [ 60.277439][ T62] page_owner tracks the page as allocated [ 60.277442][ T62] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6026, tgid 6025 (syz.3.43), ts 43473386030 [ 60.277459][ T62] post_alloc_hook+0xfd/0x120 [ 60.277474][ T62] get_page_from_freelist+0x110d/0x35d0 [ 60.277489][ T62] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 60.277499][ T62] new_slab+0xa9/0x6e0 [ 60.277513][ T62] refill_objects+0xe3/0x410 [ 60.277521][ T62] __pcs_replace_empty_main+0x35e/0x650 [ 60.277535][ T62] __kvmalloc_node_noprof+0x7bb/0x9b0 [ 60.277546][ T62] bucket_table_alloc.isra.0+0x88/0x460 [ 60.277561][ T62] __rhashtable_init_noprof+0x43a/0x890 [ 60.277576][ T62] __rhltable_init_noprof+0x28/0x70 [ 60.277591][ T62] nf_tables_newtable+0xf30/0x1a90 [ 60.277605][ T62] nfnetlink_rcv_batch+0x1410/0x2880 [ 60.277619][ T62] nfnetlink_rcv+0x3bd/0x440 [ 60.277632][ T62] netlink_unicast+0x585/0x850 [ 60.277642][ T62] netlink_sendmsg+0x8b0/0xda0 [ 60.277652][ T62] ____sys_sendmsg+0xa4d/0xbe0 [ 60.277667][ T62] page last free pid 6026 tgid 6025 ts 43471839852 stack trace: [ 60.277674][ T62] __free_frozen_pages+0x79f/0x10f0 [ 60.277687][ T62] __folio_put+0x3b4/0x5f0 [ 60.277700][ T62] skb_release_data+0x649/0x8e0 [ 60.277711][ T62] sk_skb_reason_drop+0x102/0x1b0 [ 60.277724][ T62] __tcf_kfree_skb_list+0x4c/0x320 [ 60.277737][ T62] __dev_queue_xmit+0x374e/0x4970 [ 60.277747][ T62] packet_xmit+0x243/0x310 [ 60.277758][ T62] packet_sendmsg+0x30bc/0x4ef0 [ 60.277769][ T62] ____sys_sendmsg+0xa4d/0xbe0 [ 60.277783][ T62] ___sys_sendmsg+0x190/0x1e0 [ 60.277791][ T62] __sys_sendmsg+0x160/0x210 [ 60.277803][ T62] do_syscall_64+0x123/0x790 [ 60.277817][ T62] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.277827][ T62] [ 60.277829][ T62] Memory state around the buggy address: [ 60.277834][ T62] ffff88802617d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.277841][ T62] ffff88802617d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.277848][ T62] >ffff88802617d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.277853][ T62] ^ [ 60.277858][ T62] ffff88802617d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.277865][ T62] ffff88802617d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.277870][ T62] ================================================================== [ 60.279246][ T62] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 60.598685][ T62] CPU: 2 UID: 0 PID: 62 Comm: kworker/2:1 Not tainted syzkaller #0 PREEMPT(full) [ 60.601499][ T62] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.604616][ T62] Workqueue: usb_hub_wq hub_event [ 60.606191][ T62] Call Trace: [ 60.607246][ T62] [ 60.608188][ T62] dump_stack_lvl+0x100/0x190 [ 60.609745][ T62] vpanic+0x553/0x970 [ 60.611003][ T62] ? __pfx_vpanic+0x10/0x10 [ 60.612442][ T62] ? mark_held_locks+0x40/0x70 [ 60.613938][ T62] ? roccat_disconnect+0x24f/0x2f0 [ 60.615543][ T62] panic+0xd1/0xe0 [ 60.616731][ T62] ? __pfx_panic+0x10/0x10 [ 60.618131][ T62] ? roccat_disconnect+0x24f/0x2f0 [ 60.619729][ T62] ? preempt_schedule_common+0x3c/0xb0 [ 60.621434][ T62] check_panic_on_warn.cold+0x19/0x34 [ 60.623093][ T62] end_report.part.0+0x3a/0x90 [ 60.624601][ T62] kasan_report.cold+0xe/0x18 [ 60.626078][ T62] ? roccat_disconnect+0x24f/0x2f0 [ 60.627673][ T62] roccat_disconnect+0x24f/0x2f0 [ 60.629238][ T62] savu_remove+0x150/0x190 [ 60.630630][ T62] ? __pfx_savu_remove+0x10/0x10 [ 60.632157][ T62] hid_device_remove+0xd1/0x200 [ 60.633644][ T62] ? __pfx_hid_device_remove+0x10/0x10 [ 60.635323][ T62] device_remove+0xcb/0x180 [ 60.636718][ T62] device_release_driver_internal+0x44e/0x620 [ 60.638550][ T62] bus_remove_device+0x2bc/0x560 [ 60.640046][ T62] ? __pfx_bus_remove_device+0x10/0x10 [ 60.641682][ T62] ? __pfx_device_remove_attrs+0x10/0x10 [ 60.643380][ T62] device_del+0x376/0x9b0 [ 60.644737][ T62] ? __pfx_device_del+0x10/0x10 [ 60.646263][ T62] ? do_raw_spin_lock+0x128/0x260 [ 60.647932][ T62] ? find_held_lock+0x2b/0x80 [ 60.649807][ T62] hid_destroy_device+0x19c/0x240 [ 60.651816][ T62] usbhid_disconnect+0xa0/0xe0 [ 60.653534][ T62] usb_unbind_interface+0x1dd/0x9e0 [ 60.655176][ T62] ? __pfx_usb_unbind_interface+0x10/0x10 [ 60.656959][ T62] device_remove+0x12a/0x180 [ 60.658410][ T62] device_release_driver_internal+0x44e/0x620 [ 60.660306][ T62] bus_remove_device+0x2bc/0x560 [ 60.661863][ T62] ? __pfx_bus_remove_device+0x10/0x10 [ 60.663552][ T62] ? __pfx_device_remove_attrs+0x10/0x10 [ 60.665298][ T62] device_del+0x376/0x9b0 [ 60.666652][ T62] ? __pfx_device_del+0x10/0x10 [ 60.668183][ T62] ? kobject_put+0xb9/0x640 [ 60.669612][ T62] usb_disable_device+0x367/0x810 [ 60.671182][ T62] usb_disconnect+0x2e2/0x9a0 [ 60.672665][ T62] hub_event+0x1bb1/0x4420 [ 60.674067][ T62] ? __lock_acquire+0x5c0/0x1f40 [ 60.675616][ T62] ? __pfx_hub_event+0x10/0x10 [ 60.677118][ T62] ? lockdep_count_backward_deps+0x1b0/0x200 [ 60.678979][ T62] ? lock_acquire+0x1d1/0x380 [ 60.680449][ T62] ? process_one_work+0xa2c/0x1b10 [ 60.682067][ T62] ? process_one_work+0x906/0x1b10 [ 60.683609][ T62] ? process_one_work+0x906/0x1b10 [ 60.685176][ T62] process_one_work+0xac7/0x1b10 [ 60.686700][ T62] ? __pfx_process_one_work+0x10/0x10 [ 60.688333][ T62] ? lock_acquire+0x1d1/0x380 [ 60.689829][ T62] ? __pfx_hub_event+0x10/0x10 [ 60.691320][ T62] worker_thread+0x5ef/0xe50 [ 60.692787][ T62] ? __pfx_worker_thread+0x10/0x10 [ 60.694377][ T62] ? kthread+0x13a/0x450 [ 60.695700][ T62] ? __pfx_worker_thread+0x10/0x10 [ 60.697292][ T62] kthread+0x373/0x450 [ 60.698570][ T62] ? __pfx_kthread+0x10/0x10 [ 60.700013][ T62] ret_from_fork+0x730/0xd60 [ 60.701464][ T62] ? __pfx_ret_from_fork+0x10/0x10 [ 60.703068][ T62] ? __switch_to+0x800/0x10f0 [ 60.704548][ T62] ? __pfx_kthread+0x10/0x10 [ 60.705991][ T62] ret_from_fork_asm+0x1a/0x30 [ 60.707489][ T62] [ 60.709178][ T62] Kernel Offset: disabled [ 60.710530][ T62] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:05:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888034ca0000 RSI=ffffffff81ff5e0e RDI=ffff888034ca0000 RBP=ffff88806a541900 RSP=ffffc900016bf4d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10069942b3 R13=0000000000000003 R14=ffffed100d4a8321 R15=0000000000000001 RIP=ffffffff81ff5e10 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f29c8bf66c0 ffffffff 00c00000 GS =0000 ffff8880d5b56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c392942 CR3=0000000031fb8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00306974765f7069 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe85396d16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe85396d16 00007ffe85396d1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29caa3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29caa3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29caa357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29caa35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29cabf2600 00007f29cabf25e0 00007f29cabf25e8 00007f29cabf2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29cabf25f8 00007f29cabf25c8 00007f29cabf2600 00007f29cabf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffff52000026fb6 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81ea46c3 RDI=ffff88801eee0000 RBP=ffffc90000137da8 RSP=ffffc90000137960 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=3d3d3d3d3d3d3d3d R12=ffffffff8fbd85c0 R13=ffffc90000137da8 R14=0000000000000000 R15=ffffc90000137db4 RIP=ffffffff81ea46cb RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f29c8bf5ff8 CR3=0000000031fb8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000003f Opmask02=00000000fffdffbf Opmask03=0000000008400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007fffa09bacc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb8e57f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 62642e79726f7461 6c756765722f6572 61776d7269662f79 726f74616c756765 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32c983f1567c9c7b 000000055d745116 0000000000000021 000000000062642e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb8e57f1c10 000055d74510e550 0000000000000101 0030757661737461 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7570635f6c6c61 5f6b7361745f676e 75682e6c656e7265 6b2e6c7463737973 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f632d666e206263 743d7963696c6f70 5f616d6920313d65 636172746b636162 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e6e6f632d666e 2030303030323d73 74726f702e707466 2d6b636172746e6e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b0fdd5 RDI=ffffffff9bc6eea0 RBP=ffffffff9bc6ee60 RSP=ffffc90000afeb60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000005b R14=0000000000000000 R15=ffffc90000afee78 RIP=ffffffff85b0fdff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc3f34fcff8 CR3=0000000052eac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000013f002f Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d74510fdf0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb8e57f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff00000000ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a5e44 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3544323a44374531 3a333030302f302e 303a312d372f312d 372f376273752f32 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3075766173746163 636f722f75766173 2f383030302e4135 44323a443745313a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333030302f302e30 3a312d372f312d37 2f376273752f322e 6463685f796d6d75 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d74510ac20 000055d745105220 0000000000000031 0030003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7570635f6c6c61 5f6b7361745f676e 75682e6c656e7265 6b2e6c7463737973 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f632d666e206263 743d7963696c6f70 5f616d6920313d65 636172746b636162 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e6e6f632d666e 2030303030323d73 74726f702e707466 2d6b636172746e6e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000518114930 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000017f929 RBX=ffff88802c410000 RCX=0000000000000080 RDX=0000000000000001 RSI=ffffffff8e38c98a RDI=ffffffff8c623580 RBP=ffffffff8bd44bc2 RSP=ffffc900051175b0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff888037978000 RIP=ffffffff8bd14bae RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb8e5e1d880 ffffffff 00c00000 GS =0000 ffff8880d5e56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f82efd556c8 CR3=00000000373dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000008400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d74511cd50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb8e57f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb8e57f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326a43663e483 737326a16aea2459 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 41baf082250fef08 737373762e072267 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d7451207e0 000055d74511cd50 000055d744ed1910 000055d74511e640 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333030302f302e30 3a312d372f312d37 2f376273752f322e 6463685f796d6d75 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d7451031d0 000055d74510ad50 0000000000000031 0030757661737461 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000