last executing test programs: 47.202917794s ago: executing program 2 (id=163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x14, 0x13, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0xff) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="4aeba762f86e", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x11, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) fcntl$setstatus(r0, 0x4, 0x6c00) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r4, 0x20, &(0x7f0000000480)={&(0x7f0000000180)=""/82, 0x52, 0x0, &(0x7f0000000380)=""/136, 0x88}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r5, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x14, 0x13, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) (async) fchdir(r3) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0xff) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="4aeba762f86e", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x11, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) (async) fcntl$setstatus(r0, 0x4, 0x6c00) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r4, 0x20, &(0x7f0000000480)={&(0x7f0000000180)=""/82, 0x52, 0x0, &(0x7f0000000380)=""/136, 0x88}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r5, 0x4) (async) 46.988142851s ago: executing program 2 (id=165): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 3) 46.061549537s ago: executing program 2 (id=168): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000004000000000000000300060000000000020000e0000001000000800000000002000100000000000000000000000000030005f180ec0009000000020000007f000001000000000000"], 0x50}}, 0x0) 46.009966851s ago: executing program 2 (id=171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100737200e67f0c002100f7ffffffffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x200, 0x716e) capset(0x0, &(0x7f0000000000)={0x1000, 0x10ffff, 0xfffffffd}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) ioctl$KVM_RUN(r5, 0xae80, 0x0) capget(&(0x7f0000019240)={0x20071026, r7}, &(0x7f0000019280)={0x7c6, 0x0, 0x10001, 0xd, 0xd2, 0x29b66c48}) 45.821974131s ago: executing program 2 (id=175): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_emit_ethernet(0x187, &(0x7f0000000540)={@remote, @random="caf6e222e6aa", @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x14d, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1f, 0x15, "916b28a1bd4263b15bc14b8910024f397fb7efee4a0cb53464959541b2f4ec01a2bc2846a5605ac309f89f5ba0f9f27c77b83b986d17a8828f8bc65395fa36a5fdd2f7b92dcfc779b85cfa829ba8196cbdb70dfd7c78bd82dbccac85b4453ba7d5ed8e6560a84afdb30a802608833d735002254643180c7953e0db3858e88a648ca06b73121f52581feaaa92028e4687308d0dbdf3ffd5d05e0bf17bf3ff640b54aff935f3e447"}, {0x2, 0x12, "90238110880766626cfe6a3eee4e120425229b67ac9300da4208f666cef75e8e43d4217d89edc703b399ec9bbc16e463fc48da5a44003c8ffa1d45b0af1ab1fca75129a7b79061e8a29c1ffe6cbf2eaf3af7b3b61649b0c5f1dec3ba0784dbd455b9b8bd504a86ce13768599067a8f99408d89bbb9079713ba2c3b5eb3a9cd768abfc4701751db7ec9231b2c5a92a5ed9fe9"}]}}}}}}, 0x0) 44.472476737s ago: executing program 2 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='9', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 999999999 test\n\x00', 0x1e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffd, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="a29f7acda0b77e", 0x0, 0x0, 0x14, 0x0, 0x0}) write(r2, &(0x7f0000000300)='1\n\x00', 0xfffffffffffffcd1) write$cgroup_devices(r0, 0x0, 0x0) 44.406974742s ago: executing program 32 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='9', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 999999999 test\n\x00', 0x1e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffd, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="a29f7acda0b77e", 0x0, 0x0, 0x14, 0x0, 0x0}) write(r2, &(0x7f0000000300)='1\n\x00', 0xfffffffffffffcd1) write$cgroup_devices(r0, 0x0, 0x0) 4.810819166s ago: executing program 4 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe8000"], 0xffdd) 4.810419103s ago: executing program 4 (id=779): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x1154, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1124, 0x2, [@TCA_CGROUP_EMATCHES={0x1120, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xff, 0x3, 0x4}, {0x10001, 0xfc, 0x3, 0x4}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x1}, {0x7, 0x3, 0x1, "30945b"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10d8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x200}, {0x5, 0x8, 0x7, 0x6}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x9}, {0x2, 0xf18a, 0x0, 0x80000000}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3ff, 0x7, 0x8}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xba}, {0x9, 0x7, 0x9, 0x1, 0xf, 0x1, 0x2}}}, @TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x1000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x89, 0x1}, {0x4, 0x40, 0x2}}}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="0145d03a", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="d58569828298e747", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="d4"]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x95, 0x8, 0x1}, {0x1, 0x5, 0x1}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x80, 0x0, 0x800}, "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"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x5}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x1154}}, 0x0) 4.722561624s ago: executing program 4 (id=780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301"], 0x428}}, 0x40088) r1 = syz_usb_connect$uac1(0x0, 0xc0, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x499, 0x103e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x3, 0x1, 0x2, 0x20, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x405, 0x6, 0x1, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x0, 0x4, 0x5, 0xb}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x101, 0x7, 0xbf, "384115"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x7, 0x6e, {0x7, 0x25, 0x1, 0xc, 0x8, 0x7558}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x62, 0x1, 0x3, 0x3, 'KjK', "9f"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x2, 0x0, "3d1325c8979b"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x3, 0xff, 0x6, "1443", "972e"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xa, 0x3, 0x10, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x440, 0x4, 0x1, 0x2, {0x7, 0x25, 0x1, 0x0, 0x6, 0x9}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x81, 0x60, 0xaa, 0x0, 0x7f}, 0x3d, &(0x7f0000000200)={0x5, 0xf, 0x3d, 0x2, [@generic={0x2e, 0x10, 0x3, "163a131f345b72142085bb1bc06b9864fa61be9326c34a09b2eb068527b4d3f3c56e65142406d3d65d2367"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5, 0x8}]}, 0x7, [{0xb0, &(0x7f0000000240)=@string={0xb0, 0x3, "273c2006938d951f871fae3c326c5a51f514e60e0b86be8e7f899cf378c9ddcea468fe9bb3ea55f8f6351157717dc1157a056c1947f2b43e4280fbc896df26a99c29634fb953dc6ab0449742dd56a6a9b560f0dff1165898474d8be63654bf886cf78c8cd75df31e3b19076e77689cc8c83f8c8ad593d5990248db1f5c88f95f0fbdc6d16358828c5e6a520ee38d2c5a73dad5c0b023a7c74987020d95aeb2f5b76e7aea494da1fac74302dbd935"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0xab, &(0x7f0000000340)=@string={0xab, 0x3, "e63af7d10d7bbd61bbbda4206f8783c2603e291f891c5bfffec95e05cbdf3ab4bcb4ca3a8fda317bf535eef344109a497b9a80ca2fc8f39820c9eca1692237811685967160c8194c0a792561c9b74f2bcc6c0ba3e0b5cce208c6808bc7805b838dedce609c341826526f237a0dc1e2d5646834310c8ce28111116e3b41ebdc0fa1f0606c44d3f564d8c7436127f25d1ab121b2ae19c065b404c9a7e28c573856a8bac5cf292b29ea80"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3409}}, {0x4f, &(0x7f0000000440)=@string={0x4f, 0x3, "2310ccd9b9a48fb79b2fdaa9f99e2dc3303260e29f09ce18702f3a9ca5de3d6f11cde570304eac2816c6c6f5360b789c929554028102e57d98ada1d7f00eec8a599e9b97c7d5286297373eb856"}}, {0x57, &(0x7f0000000580)=@string={0x57, 0x3, "0aad6a9ec0b708d761f8857385c6871a951ab201d8cab2db6b11cb16a83c77e63dc2628a727fa43ca803dfa906c0dc7e6ee03a5f2981e377e031b07d47a6fc325c3e8f30f4d473734c7be28cffa1409bd18480fd74"}}, {0xd, &(0x7f0000000600)=@string={0xd, 0x3, "1de478bac430676d6173dc"}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io(r1, &(0x7f0000000940)={0x2c, &(0x7f00000006c0)={0x0, 0xc, 0xfc, {0xfc, 0x23, "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"}}, &(0x7f0000000800)={0x0, 0x3, 0x66, @string={0x66, 0x3, "598b17444bcc0164c421bb4117f72b4d54e81d11577c74aa9a1d8b5f869c4e4f62dd020f51eb67b4b63888761d08e9936267512abe29eaa29e168a2847fec5151040ecb8645e1778b3bb27de18968bb006684ca5e6bec7c7c072a0d63a8f406494f19a9d"}}, &(0x7f0000000880)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0x1, 0x9, 'S.a\v', "5297626c"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x10, 0x2, 0xe3, 0x800, 0x76ca}}}, &(0x7f0000000e00)={0x84, &(0x7f0000000980)={0x20, 0x13, 0x8f, "6fd3a189bbb3e9f0888e69eda80bbc5f2b5311d22a963788b9ee6ed27b560726c19c39c3f87173aed99eb1819c086cab71e0fdd9216e1b3f20b2f100eefb532e2d5c4f1aab6b0ecf50d54949e450e02a12531330f37f95341a23f4d3c140428f9c7c7720ac30cbc94ec2d5c31ba7cd79c9eeb69022c3d62a7df2deeb08f552090df61a7da8b3fc126f0f37e4aed305"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x200, 0x40}}, &(0x7f0000000b40)={0x40, 0x7, 0x2}, &(0x7f0000000b80)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000bc0)={0x40, 0xb, 0x2, "151f"}, &(0x7f0000000c00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000c40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000c80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000cc0)={0x40, 0x19, 0x2, "8691"}, &(0x7f0000000d00)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f0000000d40)={0x40, 0x1c, 0x1, 0xf9}, &(0x7f0000000d80)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000dc0)={0x40, 0x21, 0x1, 0x72}}) 3.356029278s ago: executing program 4 (id=795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r3, 0x2, {0x2, 0x0, 0x2}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000100)) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4ee0, 0x0, 0x5, 0xb367}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 3.051815005s ago: executing program 4 (id=798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x7, 0x7, 0x2, 0xd, {{0x35, 0x4, 0x2, 0x15, 0xd4, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast2, @broadcast, {[@cipso={0x86, 0x30, 0x3, [{0x2, 0x3, 'B'}, {0x2, 0x3, 'O'}, {0x5, 0x11, "31b1d697f1be25a33adad7a9246ae1"}, {0x7, 0x4, "5eb2"}, {0x6, 0xa, "99406e3327c63546"}, {0x0, 0x2}, {0x6, 0x3, '?'}]}, @cipso={0x86, 0x2f, 0x0, [{0x5, 0x12, "9e9523e2fc995448f786706990f094ff"}, {0x2, 0xd, "08987075cd9b7df93e217e"}, {0x5, 0xa, "39b2a4fbbbf75d76"}]}, @rr={0x7, 0x13, 0x3e, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local]}, @lsrr={0x83, 0x17, 0xe4, [@remote, @empty, @remote, @remote, @private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0x6d, 0x3, 0x9, [{@empty, 0xffff7fff}]}, @timestamp_prespec={0x44, 0x1c, 0x28, 0x3, 0x3, [{@empty, 0x3}, {@multicast2, 0xf}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x5}]}, @generic={0x88, 0xc, "48a8e0ef1eae29565878"}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettfilter={0x3c, 0x2e, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0xfff2}, {0x9, 0x2}, {0x8, 0x4}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x200}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x888}, 0x4000000) syz_usb_disconnect(r2) r4 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB="1201100300000040440621802642010203010902"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 2.982994922s ago: executing program 3 (id=801): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000340)={'syz1\x00', {0xb790, 0xe, 0x6, 0x5}, 0x28, [0x6, 0x4, 0x3, 0x6, 0x1, 0x6, 0x3, 0x4, 0x4, 0x4, 0x9, 0x40, 0x9, 0x80000000, 0x6, 0xfff, 0x10000, 0x7, 0xd, 0x9, 0x8, 0x667, 0x1ff, 0x80000000, 0x6, 0x467fd6c3, 0xc, 0x8, 0x5, 0x0, 0x3, 0x1ff, 0xc8, 0xef, 0x9, 0x6, 0x7ff, 0xd, 0xfff, 0x9, 0x6, 0x6, 0x3, 0x7, 0x80, 0x2, 0x9, 0x1, 0x80000001, 0xb92, 0xff, 0x173, 0xab9, 0x8bc6, 0x1b41, 0x5, 0x3, 0x9, 0x50, 0xfffffff2, 0x6, 0x2, 0x2, 0x3], [0x1, 0x6, 0x25d8543e, 0x6, 0x9, 0x9, 0x3, 0x5, 0x1, 0x25, 0x4, 0x3, 0x0, 0xa, 0x3, 0x3, 0x4, 0x3ff, 0x4, 0x1, 0x81, 0x1, 0x1, 0xb, 0x2, 0x3, 0x4f13e106, 0x6, 0x101, 0x5, 0x0, 0xfff, 0x100, 0xffff, 0x3, 0x80000000, 0x0, 0x2, 0x9d, 0x1, 0x7ff, 0x2, 0x81, 0x1f, 0x81, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1ff, 0x3ff, 0xffffffff, 0x7, 0x10001, 0x1, 0x7fff, 0xfff, 0x2, 0x64, 0x10000, 0x0, 0x4], [0x3ff, 0x0, 0x4, 0x40, 0x2, 0x6, 0x5, 0xb1, 0xa7, 0x0, 0x7, 0x2, 0x5, 0xfffffffd, 0xee7a, 0x2, 0xfffffff7, 0x7, 0x6, 0x2, 0x1ba5, 0x1, 0x1, 0x5, 0x33d, 0x0, 0x7, 0x0, 0x6, 0x6, 0x2, 0x4, 0x0, 0x6, 0x9, 0x4d, 0x2, 0x9, 0xf, 0x3, 0x4, 0x1, 0x5, 0x40, 0x0, 0x9, 0x0, 0x2, 0x4, 0x101, 0x1, 0x3, 0x3, 0x7, 0x55, 0x1161, 0x8, 0x2, 0x101, 0x6, 0x4, 0x2, 0x2, 0x4], [0xbc8f, 0x6, 0x6, 0xc2, 0x5da, 0x8, 0x7, 0x7, 0x1, 0x0, 0x3, 0x4, 0xf7, 0x3, 0x1, 0x5, 0xf52, 0x4, 0x5, 0x0, 0xfffffffb, 0xf4, 0x0, 0x5, 0x3, 0x7, 0x400, 0x10001, 0x1, 0xfffff088, 0xadd, 0x7, 0x4, 0x9, 0x0, 0x100, 0x9, 0x0, 0x9, 0x4, 0x3, 0x1, 0x14000000, 0x2, 0x2, 0x0, 0x9cb, 0x6, 0x126, 0x6, 0x315, 0x1, 0x7, 0xfffff598, 0x8, 0xefcd, 0x9, 0xa0, 0x5, 0x6, 0x3, 0x5, 0x2, 0x9ad8]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000000c0)={0x1, 0x82, 0x803ff, 0x1, 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x9, 0xfffffffc, 0xffffffff, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.939526256s ago: executing program 3 (id=802): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x2, 0x7, 0x6, 0x2, 0x3, 0x3e, 0x4, 0x317, 0x40, 0x1eb, 0x6, 0x3, 0x38, 0x3, 0x80, 0x3, 0x8}, [{0x6, 0x4, 0xfffffffffffffffc, 0x0, 0x101, 0x0, 0x80000001, 0x8}, {0x4, 0x81, 0x10, 0x2, 0xcd, 0x5, 0x10, 0xfffffffffffffff8}, {0x2, 0x4, 0x5, 0x9, 0x1, 0x9, 0x2398, 0x650000000000}], "120a33fa3a5327d43890bacebb2b7519916df1ddbb605d6b2245601966195ce0c6d2999bf589f4903dee8465d2562c3147f3f4d7c0da84712d8e1653ef2edba8e36c4079e927cc4077525e1c5a47c9d0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb38) 2.934698864s ago: executing program 3 (id=804): socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a0095000000ff890000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.847633982s ago: executing program 3 (id=806): r0 = syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0xfffffffffffffe91, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x8, 0x91, {0x91, 0x5, "986c1bef8997fe398f91c8eaf9b85f4ca667a225e3e38cc666f94fe93aa1f67c7fbbbc7e8927466f928e66d42704029c6cee035663229b4f35cea195a32fc3b2fb94bd2758a3758ae862b2200dc04995047b7d37d7bfd1091ace113d3ba7e40e6845c7b878278221a82963e832a33f6d211966ded6f1feda9fbf3e42ea82c013b691bb0ea00d72b2267101015dc7c8"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x20, 0x3, 0x50, "0426424cae5ac78d52bf5db39dab2e269fd4c9c6627159a09c1d64fad64517a96248b9147b5d2287519deff4ea2f77d6aa618b3079ee73cbc4fcd5ec357d6950014b930601c8e58af0ff84ea70ce33f9"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x8, 0xffff, 0xfffffffa, 0x2, 0x5, 0xbd3, 0x0, 0xffff, 0x6, 0x3, 0x7e, 0x908}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.202871284s ago: executing program 0 (id=835): socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000002940000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.202579275s ago: executing program 0 (id=836): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000780)={0x6, &(0x7f0000000100)=""/95, &(0x7f00000006c0)=[{0x1, 0x60, 0x6, &(0x7f0000000340)=""/96}, {0xb, 0xa5, 0xa8, &(0x7f00000003c0)=""/165}, {0x9, 0xa3, 0x9, &(0x7f0000000480)=""/163}, {0x4, 0x32, 0x7, &(0x7f0000000540)=""/50}, {0xf, 0x6b, 0x100, &(0x7f0000000580)=""/107}, {0xb85, 0x89, 0x5, &(0x7f0000000600)=""/137}]}) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) unlink(&(0x7f0000000040)='./file1\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 932.65671ms ago: executing program 0 (id=837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000300)='devpts\x00', 0x1) r2 = fcntl$dupfd(r1, 0x406, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d022abd7700fedbdf2501000000050006008200000005000500040000000800030006000000080004"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='ceph\x00', 0x208004, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000080)={r6, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xff}}, 0x5, 0x4, 0x5cb9700, 0xfff, 0x1, 0xfffffff8, 0x7}, &(0x7f0000000280)=0x9c) 432.931998ms ago: executing program 1 (id=838): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f00000004c0)="84"}) 432.381393ms ago: executing program 1 (id=839): kexec_load(0x6, 0x1, &(0x7f00000005c0), 0x280002) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000600)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="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", 0x1b4}], 0x1, &(0x7f00000008c0)=ANY=[], 0xb8, 0x54800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000740)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}, {&(0x7f0000000b40)="86545d2157645a72b815818bfd0e1457556266898579380233e0e3853e4a6b2dc4fc32c3f81f9b1d06cd0000000000000000", 0x32}, {&(0x7f0000000b80)="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", 0x198}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x4c}, 0x20) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r2, 0x0, 0x0, 0x800) (async) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f20000000000000020000000add3e7c5", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347c4a6927e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a470dbf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x4c801) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x1, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f00000002c0)={0xc5, 0x0, r1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000500)="d35c43670f01c4660fba3c890f2394f30f52c3260f0866b9800000c00f326635002000000f300f79d5660f3a08fc44dce4", 0x31}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 243.141953ms ago: executing program 3 (id=840): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x1154, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1124, 0x2, [@TCA_CGROUP_EMATCHES={0x1120, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xff, 0x3, 0x4}, {0x10001, 0xfc, 0x3, 0x4}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x1}, {0x7, 0x3, 0x1, "30945b"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10d8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x200}, {0x5, 0x8, 0x7, 0x6}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x9}, {0x2, 0xf18a, 0x0, 0x80000000}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3ff, 0x7, 0x8}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xba}, {0x9, 0x7, 0x9, 0x1, 0xf, 0x1, 0x2}}}, @TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x1000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x89, 0x1}, {0x4, 0x40, 0x2}}}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="0145d03a", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="d58569828298e747", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="d4"]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x95, 0x8, 0x1}, {0x1, 0x5, 0x1}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x80, 0x0, 0x800}, "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"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x5}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x1154}}, 0x0) 242.729549ms ago: executing program 1 (id=841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0x202000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x254, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x76}}}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xc}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x14}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x54}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x10000}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xb}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_TX_RATES={0x48, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x36, 0x4, 0x30, 0x3, 0x12, 0x2c, 0x4, 0x60, 0x4, 0x3, 0x1b, 0x16, 0x1, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe7, 0x1, 0x8, 0x34a, 0x4, 0x401, 0x5]}}]}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0xff}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0xc}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}]}, @NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x0, 0x8}, {0x4, 0x4}, {0x5, 0x9}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x7}, {0x4, 0x6}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0x4}, {}, {0x0, 0x9}, {0x3}, {0x7, 0x1}, {0x0, 0x4}, {0x4, 0x1}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x3}, {0x1, 0x8}, {0x2}, {0x4, 0xa}, {0x3, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x9}, {0x5}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0x7}, {0x4, 0x1}, {}, {0x6, 0x6}, {0x3, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xf04c, 0x7f, 0x5, 0x1000, 0x6, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x7, 0x4}, {0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x1}, {0x2, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0xc, 0x48, 0x1b, 0x1, 0x2, 0xc, 0x3, 0x0, 0x30, 0x3, 0x2, 0x3f, 0x3, 0x36, 0x1, 0x30, 0x30, 0x48, 0x60, 0x16]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x3c93, 0x8, 0x4dd, 0x0, 0x3, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x36, 0x6c, 0x5, 0x5, 0x64, 0x16, 0xb, 0x16, 0x1b, 0x36, 0x5, 0x16, 0x1, 0xc, 0x6c, 0x3, 0x48, 0x36, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0xb, 0x16, 0x9, 0x5, 0x4, 0x60, 0x60, 0x12, 0x2, 0x5, 0x60, 0x30, 0x12, 0xd, 0x4, 0x1]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x60, 0x5, 0x48, 0x36, 0x3, 0xc, 0x18, 0x1b, 0x9, 0x1b, 0x24]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x1d, 0xfe00, 0x3, 0x40, 0x1, 0x7]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x7}, {0x5, 0x7}, {0x6, 0x1}, {0x3, 0x2}, {0x1, 0x6}, {0x2}, {0x7, 0x3}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0x4}, {0x7, 0x6}, {0x7}, {0x0, 0x4}, {0x3, 0x9}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x2}, {0x2}, {0x5, 0x4}, {0x3, 0x8}, {0x7, 0x4}, {0x5, 0x1}, {0x4, 0xa}, {0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x19}, {0x7, 0x4}, {0x2}]}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfe, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x0) 120.366113ms ago: executing program 3 (id=842): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100", @ANYBLOB='B'], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) landlock_restrict_self(0xffffffffffffffff, 0xc) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) (async) r4 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) fanotify_init(0x2, 0x400) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f00000004c0)={0x0, 0x0, 0x3002, 0x1}) (async) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x20044800) 120.049962ms ago: executing program 1 (id=843): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) (async, rerun: 64) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) (async, rerun: 64) r2 = inotify_init() r3 = inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x4400082f) write$binfmt_elf32(r1, &(0x7f0000000540)=ANY=[@ANYRES8=r3], 0xb0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r4, 0x5421, 0x0) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 63.157876ms ago: executing program 1 (id=844): lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x2, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000160051c31a2970000000000006"], 0x14}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20008800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a30000000002c000000030a0101000000fe00000000010000000900030073797a3100000073797a30000000004c000000060a010400000000000000000100000024000480200001800d796e70726f7879000000000c000280080003400000000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a0000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x104, 0x1, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_PAYLOAD={0xf0, 0xa, "134e3859cb1e41702e6003f149c226c84ea952e7546cb54225f4fff949d7e61a11bfea7bf8c4a35a13e52e64c5aed91caa2a39016ecd31094a9a9b4e163e9e0a3a48cd77e7340aa67ffda241cbfba3158272eea8c7d79f67cb53c4668b6c51d76c72975ae8b7adb7ba0d3f62b5d6a604ac2555485539b68baee8017324eb295cb57f690637934344c0a074ab440815c500f7749dcb02346958bf8ea57da7a1e96f88c078daf8ffff92162f937262fbbc5365a95a9dc77ffff6ed2880d2eabd20dbb23611fe7edab7f3e970a81a1e87c1b7eca2d2e68a450d5b0f49bfcfaff92a030c6e9ce2d301cefd3daaf0"}]}, 0x104}, 0x1, 0x0, 0x0, 0x48014}, 0x800) 62.392493ms ago: executing program 0 (id=845): socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a0095000000ff940000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 58.902427ms ago: executing program 1 (id=846): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)={0x20, r3, 0x303, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x8800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='/dev/kvm\x00', &(0x7f0000000180)='@$(D\x00', 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704e11e05000000000000009ff075475e4b94", 0x18) r4 = accept$alg(r0, 0x0, 0x0) readv(r4, &(0x7f0000000480)=[{&(0x7f0000000340)=""/27, 0x1b}], 0x1) sendmmsg$alg(r4, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000004c0)="9c98d425afe56f214f063263de94ff93031f0603", 0x14}, {&(0x7f0000000040)="0ac0d4f6e32e92", 0x7}], 0x2, 0x0, 0x0, 0x400c000}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000040)=0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005"], 0x100}}, 0x0) readv(r9, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/112, 0x70}, {0x0}], 0x2) readv(r8, &(0x7f0000000680)=[{&(0x7f0000000200)=""/117, 0x75}], 0x1) r10 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x202801, 0x20) openat(r10, &(0x7f0000000280)='./file0\x00', 0x200000, 0x40) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0xca}]}) 2.885945ms ago: executing program 0 (id=847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) (async) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, 0x0) (async) listen(r0, 0x0) (async) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB='\\('], 0x150) (async) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @random="53adea90150f", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "3c0200", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x1, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 2.549647ms ago: executing program 4 (id=848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r1, &(0x7f0000001400)=""/4076, 0xfffffeea) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000100)={0x2, 0x81}, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x2, [0xd0d, 0x3, 0x2, 0x800, 0x8, 0x7fffffffffffffff]}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x20, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x8, 0xbb, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0x4040000) 0s ago: executing program 0 (id=849): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) (async) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x20a280, 0x0) write(r0, &(0x7f0000000080)='44100,48000,88200,960400,192000,3', 0x21) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x802, 0x1104}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e1e}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x92}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061112c0000000000c6000000000001019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) kernel console output (not intermixed with test programs): at 0x00000044: 0x0101 instead [ 77.466526][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 77.470066][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 77.473980][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 77.477507][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 77.480977][ T6815] jffs2: Further such events for this erase block will not be printed [ 77.484507][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 77.488992][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 77.493674][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd5e3 instead [ 77.499068][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xfafc instead [ 77.504183][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 77.508597][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 77.513401][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 77.517920][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 77.522848][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 77.527264][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 77.531974][ T6815] jffs2: Further such events for this erase block will not be printed [ 77.535941][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 77.540301][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 77.545172][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd5e3 instead [ 77.549466][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xfafc instead [ 77.554185][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 77.559010][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 77.567024][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd5e3 instead [ 77.571397][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xfafc instead [ 77.575964][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 77.580274][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 77.584989][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd5e3 instead [ 77.589287][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xfafc instead [ 77.593862][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 77.598176][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 77.602510][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd5e3 instead [ 77.606834][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xfafc instead [ 77.611106][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 77.615789][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 77.620741][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd5e3 instead [ 77.625102][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xfafc instead [ 77.629368][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 77.633868][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 77.638120][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd5e3 instead [ 77.642552][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xfafc instead [ 77.646910][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 77.650920][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 77.655039][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd5e3 instead [ 77.659662][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xfafc instead [ 77.664618][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 77.668865][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 77.673083][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd5e3 instead [ 77.677375][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xfafc instead [ 77.681542][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 77.687423][ T5724] tipc: Node number set to 2886997007 [ 77.692445][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 77.696849][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd5e3 instead [ 77.701099][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xfafc instead [ 77.706447][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 77.710593][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 77.714941][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd5e3 instead [ 77.719187][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xfafc instead [ 77.723645][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 77.727963][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 77.732298][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd5e3 instead [ 77.736588][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xfafc instead [ 77.740851][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 77.745250][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 77.749521][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd5e3 instead [ 77.755351][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 77.759919][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xfafc instead [ 77.765460][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 77.769789][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 77.774090][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd5e3 instead [ 77.778265][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xfafc instead [ 77.782729][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 77.787340][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 77.791562][ T29] usb 6-1: device descriptor read/8, error -71 [ 77.794211][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd5e3 instead [ 77.798036][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xfafc instead [ 77.802853][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 77.808935][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 77.813354][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd5e3 instead [ 77.817666][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xfafc instead [ 77.822230][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 77.826483][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 77.830709][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd5e3 instead [ 77.835105][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xfafc instead [ 77.839462][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 77.843829][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 77.848143][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd5e3 instead [ 77.852482][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xfafc instead [ 77.856765][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 77.860983][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 77.865905][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd5e3 instead [ 77.870206][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xfafc instead [ 77.874503][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 77.878833][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 77.883330][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd5e3 instead [ 77.887654][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xfafc instead [ 77.892145][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 77.896476][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 77.900722][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd5e3 instead [ 77.905838][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xfafc instead [ 77.910235][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 77.914697][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 77.918970][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd5e3 instead [ 77.923969][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xfafc instead [ 77.928405][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 77.932725][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 77.937004][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd5e3 instead [ 77.941247][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xfafc instead [ 77.945708][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 77.949988][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 77.954305][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd5e3 instead [ 77.958577][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xfafc instead [ 77.963137][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 77.968307][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 77.976509][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd5e3 instead [ 77.981044][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xfafc instead [ 77.985725][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 77.990021][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 77.994383][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd5e3 instead [ 77.998615][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xfafc instead [ 78.003023][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 78.007343][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 78.011715][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd5e3 instead [ 78.016004][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xfafc instead [ 78.020293][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 78.025670][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 78.029945][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd5e3 instead [ 78.034336][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 78.037491][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xfafc instead [ 78.042185][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 78.046336][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 78.050361][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd5e3 instead [ 78.054528][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xfafc instead [ 78.058676][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 78.063066][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 78.067467][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd5e3 instead [ 78.072002][ T29] usb 6-1: device descriptor read/8, error -71 [ 78.076096][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xfafc instead [ 78.080430][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 78.084707][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 78.088112][ T6846] UHID_CREATE from different security context by process 59 (syz.4.237), this is not allowed. [ 78.088820][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd5e3 instead [ 78.088841][ T6815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xfafc instead [ 78.088877][ T6815] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 78.088886][ T6815] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 78.124445][ T5733] Bluetooth: hci3: command tx timeout [ 78.183107][ T29] usb usb6-port1: unable to enumerate USB device [ 78.228685][ T6853] xt_hashlimit: size too large, truncated to 1048576 [ 78.288061][ T6861] FAULT_INJECTION: forcing a failure. [ 78.288061][ T6861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.294033][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.3.239 Not tainted syzkaller #0 PREEMPT(full) [ 78.294059][ T6861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.294071][ T6861] Call Trace: [ 78.294077][ T6861] [ 78.294084][ T6861] dump_stack_lvl+0x100/0x190 [ 78.294111][ T6861] should_fail_ex.cold+0x5/0xa [ 78.294135][ T6861] _copy_to_user+0x32/0xd0 [ 78.294162][ T6861] bpf_test_finish.isra.0+0x4db/0x650 [ 78.294194][ T6861] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 78.294221][ T6861] ? eth_type_trans+0x2e3/0x720 [ 78.294242][ T6861] bpf_prog_test_run_skb+0x248e/0x3540 [ 78.294268][ T6861] ? __fget_files+0x211/0x3d0 [ 78.294291][ T6861] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 78.294312][ T6861] ? fput+0x79/0x100 [ 78.294335][ T6861] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 78.294354][ T6861] __sys_bpf+0x2a12/0x4e80 [ 78.294379][ T6861] ? __pfx___sys_bpf+0x10/0x10 [ 78.294397][ T6861] ? find_held_lock+0x2b/0x80 [ 78.294414][ T6861] ? get_pid_task+0xfc/0x250 [ 78.294430][ T6861] ? get_pid_task+0xfc/0x250 [ 78.294449][ T6861] ? find_held_lock+0x2b/0x80 [ 78.294467][ T6861] ? rcu_read_lock_any_held+0x6a/0xa0 [ 78.294484][ T6861] ? find_held_lock+0x2b/0x80 [ 78.294501][ T6861] ? ksys_write+0x190/0x250 [ 78.294516][ T6861] ? ksys_write+0x190/0x250 [ 78.294550][ T6861] ? fput+0x79/0x100 [ 78.294575][ T6861] ? __x64_sys_bpf+0xce/0x140 [ 78.294594][ T6861] __x64_sys_bpf+0xce/0x140 [ 78.294620][ T6861] ? do_syscall_64+0x90/0x870 [ 78.294645][ T6861] do_syscall_64+0x115/0x870 [ 78.294667][ T6861] ? clear_bhb_loop+0x70/0xc0 [ 78.294688][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.294706][ T6861] RIP: 0033:0x7f78ea99e0d9 [ 78.294720][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.294736][ T6861] RSP: 002b:00007f78eb901028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.294755][ T6861] RAX: ffffffffffffffda RBX: 00007f78eac26090 RCX: 00007f78ea99e0d9 [ 78.294767][ T6861] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 78.294777][ T6861] RBP: 00007f78eb901090 R08: 0000000000000000 R09: 0000000000000000 [ 78.294787][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.294798][ T6861] R13: 00007f78eac26128 R14: 00007f78eac26090 R15: 00007ffebdad0cc8 [ 78.294821][ T6861] [ 79.419591][ T6879] netlink: 'syz.0.247': attribute type 58 has an invalid length. [ 79.552843][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 79.555804][ T6900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.725755][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 79.730643][ T6913] overlayfs: failed to resolve './file0': -2 [ 79.823222][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 79.823235][ T42] audit: type=1400 audit(1786221442.123:613): avc: denied { remount } for pid=6915 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.853877][ T42] audit: type=1400 audit(1786221442.153:614): avc: denied { unmount } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.901722][ T5783] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 80.051730][ T5783] usb 9-1: Using ep0 maxpacket: 8 [ 80.056623][ T5783] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 80.060334][ T5783] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.071178][ T5783] pvrusb2: Hardware description: Terratec Grabster AV400 [ 80.074897][ T5783] pvrusb2: ********** [ 80.076478][ T5783] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 80.080367][ T5783] pvrusb2: Important functionality might not be entirely working. [ 80.083474][ T5783] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 80.087763][ T5783] pvrusb2: ********** [ 80.156871][ T42] audit: type=1400 audit(1786221442.453:615): avc: denied { create } for pid=6924 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.165087][ T42] audit: type=1400 audit(1786221442.453:616): avc: denied { setopt } for pid=6924 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.209080][ T42] audit: type=1400 audit(1786221442.503:617): avc: denied { bpf } for pid=6926 comm="syz.3.263" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.211685][ T5733] Bluetooth: hci3: command tx timeout [ 80.216721][ T42] audit: type=1400 audit(1786221442.503:618): avc: denied { read append } for pid=6926 comm="syz.3.263" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 80.228588][ T42] audit: type=1400 audit(1786221442.503:619): avc: denied { open } for pid=6926 comm="syz.3.263" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 80.277229][ T2508] pvrusb2: Invalid write control endpoint [ 80.288745][ T6927] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.292578][ T6927] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.307573][ T6927] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.342227][ T2508] pvrusb2: Invalid write control endpoint [ 80.346685][ T2508] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 80.352244][ T2508] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 80.355440][ T2508] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 80.359566][ T2508] pvrusb2: Device being rendered inoperable [ 80.364137][ T2508] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 80.368526][ T2508] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 80.376565][ T42] audit: type=1400 audit(1786221442.673:620): avc: denied { module_request } for pid=6931 comm="syz.3.264" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 80.378963][ T2508] pvrusb2: Attached sub-driver cx25840 [ 80.390158][ T2508] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 80.400128][ T2508] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 80.412900][ T6938] netlink: 'syz.1.265': attribute type 21 has an invalid length. [ 80.416216][ T6938] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.419724][ T6938] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.424183][ T6938] IPv6: NLM_F_CREATE should be set when creating new route [ 80.427273][ T6938] IPv6: NLM_F_CREATE should be set when creating new route [ 80.430337][ T6938] IPv6: NLM_F_CREATE should be set when creating new route [ 80.481368][ T42] audit: type=1400 audit(1786221442.773:621): avc: denied { ioctl } for pid=6941 comm="syz.0.266" path="socket:[12136]" dev="sockfs" ino=12136 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.506884][ T6911] pvrusb2: Attempted to execute control transfer when device not ok [ 80.604101][ T5724] usb 9-1: USB disconnect, device number 2 [ 80.675566][ T42] audit: type=1400 audit(1786221442.973:622): avc: denied { perfmon } for pid=6953 comm="syz.0.270" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.683436][ T6954] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 80.686920][ T6954] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 80.695640][ T6954] vhci_hcd vhci_hcd.0: Device attached [ 80.700320][ T6959] vhci_hcd: connection closed [ 80.702568][ T12] vhci_hcd vhci_hcd.0: stop threads [ 80.707142][ T12] vhci_hcd vhci_hcd.0: release socket [ 80.709085][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 80.945829][ T6971] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 80.948661][ T6971] netlink: 9186 bytes leftover after parsing attributes in process `syz.1.273'. [ 80.952213][ T6971] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 80.954595][ T6971] netlink: 9186 bytes leftover after parsing attributes in process `syz.1.273'. [ 81.010221][ T6973] loop5: detected capacity change from 0 to 7 [ 81.017058][ T6973] Dev loop5: unable to read RDB block 7 [ 81.018851][ T6973] loop5: AHDI p1 [ 81.020100][ T6973] loop5: partition table partially beyond EOD, truncated [ 81.260037][ T6998] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 81.275305][ T6998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6998 comm=syz.1.280 [ 81.298217][ T5733] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 81.301264][ T5733] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 81.403734][ T7017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.286'. [ 81.425127][ T6945] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.430484][ T6945] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 81.644319][ T7031] netlink: 'syz.1.291': attribute type 4 has an invalid length. [ 81.646984][ T7031] netlink: 224 bytes leftover after parsing attributes in process `syz.1.291'. [ 81.674568][ T24] cfg80211: failed to load regulatory.db [ 81.872053][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 81.875471][ T7046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.131763][ T5870] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 82.281791][ T5870] usb 8-1: Using ep0 maxpacket: 8 [ 82.284832][ T5870] usb 8-1: config 9 has an invalid interface number: 106 but max is 3 [ 82.288150][ T5870] usb 8-1: config 9 has an invalid interface number: 40 but max is 3 [ 82.291163][ T5870] usb 8-1: config 9 has an invalid interface number: 71 but max is 3 [ 82.293852][ T5870] usb 8-1: config 9 has an invalid interface number: 34 but max is 3 [ 82.296501][ T5870] usb 8-1: config 9 has no interface number 0 [ 82.298460][ T5870] usb 8-1: config 9 has no interface number 1 [ 82.300453][ T5870] usb 8-1: config 9 has no interface number 2 [ 82.302621][ T5870] usb 8-1: config 9 has no interface number 3 [ 82.304710][ T5870] usb 8-1: config 9 interface 106 altsetting 127 bulk endpoint 0x6 has invalid maxpacket 32 [ 82.307898][ T5870] usb 8-1: config 9 interface 106 altsetting 127 endpoint 0xA has an invalid bInterval 24, changing to 7 [ 82.311523][ T5870] usb 8-1: config 9 interface 106 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 82.315619][ T5870] usb 8-1: config 9 interface 106 altsetting 127 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 82.319373][ T5870] usb 8-1: config 9 interface 106 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 82.323017][ T5870] usb 8-1: config 9 interface 106 altsetting 127 endpoint 0xF has invalid maxpacket 9881, setting to 64 [ 82.326521][ T5870] usb 8-1: config 9 interface 106 altsetting 127 has a duplicate endpoint with address 0xC, skipping [ 82.329944][ T5870] usb 8-1: config 9 interface 71 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 82.334037][ T5870] usb 8-1: config 9 interface 71 altsetting 127 has an endpoint descriptor with address 0x15, changing to 0x5 [ 82.337736][ T5870] usb 8-1: config 9 interface 71 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 82.341189][ T5870] usb 8-1: config 9 interface 71 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 82.344686][ T5870] usb 8-1: config 9 interface 71 altsetting 127 bulk endpoint 0xD has invalid maxpacket 1023 [ 82.347900][ T5870] usb 8-1: config 9 interface 71 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 82.351383][ T5870] usb 8-1: config 9 interface 71 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 82.355060][ T5870] usb 8-1: config 9 interface 71 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 82.358345][ T5870] usb 8-1: config 9 interface 71 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 82.361686][ T5870] usb 8-1: config 9 interface 71 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 82.365259][ T5870] usb 8-1: config 9 interface 34 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 82.368511][ T5870] usb 8-1: config 9 interface 34 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 82.372057][ T5870] usb 8-1: config 9 interface 34 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 82.375875][ T5870] usb 8-1: config 9 interface 34 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 82.379634][ T5870] usb 8-1: config 9 interface 34 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 82.383760][ T5870] usb 8-1: config 9 interface 34 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 82.387765][ T5870] usb 8-1: config 9 interface 106 has no altsetting 0 [ 82.390344][ T5870] usb 8-1: config 9 interface 40 has no altsetting 0 [ 82.392824][ T5870] usb 8-1: config 9 interface 71 has no altsetting 0 [ 82.395209][ T5870] usb 8-1: config 9 interface 34 has no altsetting 0 [ 82.399696][ T5870] usb 8-1: language id specifier not provided by device, defaulting to English [ 82.403888][ T5870] usb 8-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=63.72 [ 82.406893][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.409916][ T5870] usb 8-1: Product: 술뙑 [ 82.411909][ T5870] usb 8-1: Manufacturer: ࠚ [ 82.413559][ T5870] usb 8-1: SerialNumber: syz [ 82.419230][ T7047] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.508146][ T7064] team0: No ports can be present during mode change [ 82.635901][ T5870] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.639119][ T5870] usb 8-1: invalid MIDI in EP 0 [ 82.642384][ T7070] netlink: 76 bytes leftover after parsing attributes in process `syz.0.305'. [ 82.644385][ T5870] snd-usb-audio 8-1:9.106: probe with driver snd-usb-audio failed with error -22 [ 82.658530][ T5870] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.662943][ T5870] snd-usb-audio 8-1:9.40: probe with driver snd-usb-audio failed with error -2 [ 82.677292][ T5870] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.679953][ T5870] snd-usb-audio 8-1:9.71: probe with driver snd-usb-audio failed with error -2 [ 82.692093][ T5870] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.727104][ T7082] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 82.744957][ T5870] snd-usb-audio 8-1:9.34: probe with driver snd-usb-audio failed with error -2 [ 82.761361][ T5870] usb 8-1: USB disconnect, device number 5 [ 82.766255][ T7089] overlayfs: failed to resolve './bus': -2 [ 82.769018][ T7088] overlayfs: failed to resolve './bus': -2 [ 82.807220][ T6404] udevd[6404]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:9.34/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.919410][ T7096] evm: overlay not supported [ 82.943995][ T7098] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 82.946439][ T7098] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 82.949500][ T7098] vhci_hcd vhci_hcd.0: Device attached [ 82.954267][ T7099] vhci_hcd: connection closed [ 82.956013][ T13] vhci_hcd vhci_hcd.4: stop threads [ 82.959880][ T13] vhci_hcd vhci_hcd.4: release socket [ 82.962056][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 83.586621][ T10] hid (null): unknown global tag 0xe [ 83.596333][ T10] hid-generic 0004:0002:80000001.0003: reserved main item tag 0xd [ 83.599827][ T10] hid-generic 0004:0002:80000001.0003: ignoring exceeding usage max [ 83.604178][ T10] hid-generic 0004:0002:80000001.0003: unknown global tag 0xe [ 83.606606][ T10] hid-generic 0004:0002:80000001.0003: item 0 4 1 14 parsing failed [ 83.610141][ T10] hid-generic 0004:0002:80000001.0003: probe with driver hid-generic failed with error -22 [ 83.667743][ T7123] netlink: 'syz.4.322': attribute type 4 has an invalid length. [ 84.329379][ T7139] capability: warning: `syz.0.328' uses 32-bit capabilities (legacy support in use) [ 84.556248][ T7154] 9pnet_virtio: no channels available for device syz [ 84.679871][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 84.692996][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 84.698914][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 84.705051][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 84.709120][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 84.712448][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 84.715511][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 84.718751][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 84.722786][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 84.740423][ T7167] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 84.850229][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 84.850247][ T42] audit: type=1400 audit(1786221447.143:662): avc: denied { write } for pid=7178 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.877989][ T42] audit: type=1400 audit(1786221447.173:663): avc: denied { block_suspend } for pid=7179 comm="syz.3.338" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.999357][ T7189] netlink: 'syz.3.340': attribute type 11 has an invalid length. [ 85.138639][ T7192] process 'syz.3.341' launched './file0' with NULL argv: empty string added [ 85.498267][ T7194] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.589324][ T42] audit: type=1400 audit(1786221447.883:664): avc: denied { read } for pid=7199 comm="syz.4.344" dev="nsfs" ino=4026532843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.598175][ T42] audit: type=1400 audit(1786221447.893:665): avc: denied { open } for pid=7199 comm="syz.4.344" path="net:[4026532843]" dev="nsfs" ino=4026532843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.606580][ T7200] sl0: compressed packet ignored [ 85.640680][ T42] audit: type=1400 audit(1786221447.933:666): avc: denied { name_bind } for pid=7204 comm="syz.0.345" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 85.680490][ T42] audit: type=1400 audit(1786221447.973:667): avc: denied { write } for pid=7205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.765109][ T42] audit: type=1400 audit(1786221448.063:668): avc: denied { write } for pid=7213 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.775526][ T7215] CIFS: VFS: UNC: path must begin with // or \\ [ 85.779952][ T7215] Malformed UNC in devname [ 85.779952][ T7215] [ 85.782816][ T7215] CIFS: VFS: Malformed UNC in devname [ 85.842793][ T7222] libceph: Failed to parse secret: -22 [ 85.904176][ T42] audit: type=1400 audit(1786221448.203:669): avc: denied { write } for pid=7223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.956771][ T42] audit: type=1400 audit(1786221448.253:670): avc: denied { write } for pid=7232 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.960839][ T7234] usb usb9: usbfs: process 7234 (syz.4.352) did not claim interface 10 before use [ 85.975658][ T7234] pim6reg9: entered allmulticast mode [ 86.013129][ T42] audit: type=1400 audit(1786221448.313:671): avc: denied { write } for pid=7236 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.061782][ T5724] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.126735][ T7264] fuse: Invalid rootmode [ 86.132441][ T7267] bridge_slave_0: left allmulticast mode [ 86.138967][ T7267] bridge_slave_0: left promiscuous mode [ 86.153197][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.176518][ T7267] bridge_slave_1: left allmulticast mode [ 86.178612][ T7267] bridge_slave_1: left promiscuous mode [ 86.180757][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.189021][ T7264] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 86.192670][ T7264] overlayfs: missing 'lowerdir' [ 86.197768][ T7267] bond0: (slave bond_slave_0): Releasing backup interface [ 86.208963][ T7267] bond0: (slave bond_slave_1): Releasing backup interface [ 86.211733][ T5724] usb 5-1: Using ep0 maxpacket: 32 [ 86.217245][ T5724] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.219127][ T7267] team0: Port device team_slave_0 removed [ 86.228627][ T7267] team0: Port device team_slave_1 removed [ 86.230310][ T5724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 520, setting to 64 [ 86.231161][ T7267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.240494][ T7267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.243058][ T5724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 86.247327][ T5724] usb 5-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 86.252392][ T7267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.255109][ T7267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.258692][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.266527][ T5724] usb 5-1: Product: 埧铻У₪긁ࣜᴋ㘍혆絍ᘾ⸽쌧だ甆君鶥燩儺쐠⇧힮冧ᛣ엉䂶擽퐓ấ鍉宵ᚮ [ 86.270610][ T5724] usb 5-1: Manufacturer: ည [ 86.272299][ T5724] usb 5-1: SerialNumber: 虘嬐⾘뛨莙䘧삓辀鯇㖨ᠫ覔ṅᒲꃴ詌홾♅섑㣉방⁂Տ딯꥕ഹ׻ꁲ椦祒桡쨃楼␲鋪왗࿻萛鴀㟾뼒厥ꕾ䘣⊖㗸忚䪔숉師⧎䰘⋍쩹Ꭓ郿蹐搘䌪☋췕⒑ㆋ辧뼵甡軇占榲采ᑳɪ㊓ [ 86.273345][ T7267] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.282791][ T7218] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.299301][ T7274] team0: Port device xfrm0 added [ 86.304977][ T7279] tipc: Enabled bearer , priority 0 [ 86.494614][ T5724] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.546024][ T5724] usb 5-1: USB disconnect, device number 4 [ 86.574521][ T5726] udevd[5726]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.709498][ T7300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7300 comm=syz.4.360 [ 87.284892][ T7324] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 87.288694][ T7324] ipvlan0: entered allmulticast mode [ 87.291107][ T7324] veth0_vlan: entered allmulticast mode [ 87.307071][ T7324] team0: Device ipvlan0 failed to register rx_handler [ 87.313646][ T7330] netlink: 'syz.4.368': attribute type 1 has an invalid length. [ 87.317315][ T7330] netlink: 'syz.4.368': attribute type 1 has an invalid length. [ 87.321333][ T7330] netlink: 'syz.4.368': attribute type 1 has an invalid length. [ 87.345403][ T7330] bond1: entered promiscuous mode [ 87.347454][ T7330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.368569][ T7316] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 87.407118][ T7340] loop0: detected capacity change from 0 to 131072 [ 88.581569][ T7412] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 88.639304][ T7417] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 88.641892][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 88.647906][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 88.648269][ T7417] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 88.654401][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd5e3 instead [ 88.659740][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xfafc instead [ 88.664190][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 88.667858][ T7421] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 88.668366][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 88.677333][ T7417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.690562][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 88.696641][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 88.703603][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 88.716304][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 88.720313][ T7419] jffs2: Further such events for this erase block will not be printed [ 88.725123][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 88.728538][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 88.732541][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd5e3 instead [ 88.736483][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xfafc instead [ 88.739809][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 88.743406][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 88.746814][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 88.750194][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 88.753676][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 88.757228][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 88.760552][ T7419] jffs2: Further such events for this erase block will not be printed [ 88.764568][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 88.768065][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 88.771415][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd5e3 instead [ 88.774973][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xfafc instead [ 88.778347][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 88.781694][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 88.785043][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd5e3 instead [ 88.788521][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xfafc instead [ 88.792819][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 88.797402][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 88.801655][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd5e3 instead [ 88.806204][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xfafc instead [ 88.810873][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 88.815677][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 88.819097][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd5e3 instead [ 88.822564][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xfafc instead [ 88.825932][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 88.829307][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 88.832720][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd5e3 instead [ 88.836707][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xfafc instead [ 88.841280][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 88.846054][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 88.850662][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd5e3 instead [ 88.855318][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xfafc instead [ 88.859994][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 88.864602][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 88.869131][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd5e3 instead [ 88.873854][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xfafc instead [ 88.878432][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 88.882148][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 88.885494][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd5e3 instead [ 88.888863][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xfafc instead [ 88.892404][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 88.895922][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 88.899253][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd5e3 instead [ 88.902754][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xfafc instead [ 88.904412][ T7428] __nla_validate_parse: 48 callbacks suppressed [ 88.904427][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 88.906254][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 88.914587][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 88.917960][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd5e3 instead [ 88.921254][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xfafc instead [ 88.925260][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 88.928706][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 88.932185][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd5e3 instead [ 88.935486][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xfafc instead [ 88.938849][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 88.942254][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 88.945753][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd5e3 instead [ 88.949086][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xfafc instead [ 88.952707][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 88.956085][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 88.959361][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd5e3 instead [ 88.963031][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xfafc instead [ 88.966558][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 88.969895][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 88.973493][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd5e3 instead [ 88.977526][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xfafc instead [ 88.981113][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 88.984765][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 88.988339][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd5e3 instead [ 88.992330][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xfafc instead [ 88.995899][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 88.999541][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 89.003297][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd5e3 instead [ 89.006876][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xfafc instead [ 89.010259][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 89.013865][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 89.017280][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd5e3 instead [ 89.020715][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xfafc instead [ 89.024352][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 89.027863][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 89.031231][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd5e3 instead [ 89.034859][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xfafc instead [ 89.038300][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 89.041790][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 89.045175][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd5e3 instead [ 89.048608][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xfafc instead [ 89.052083][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 89.055694][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 89.059288][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd5e3 instead [ 89.062831][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xfafc instead [ 89.066227][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 89.069642][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 89.073313][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd5e3 instead [ 89.076861][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xfafc instead [ 89.080253][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 89.084169][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 89.087575][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd5e3 instead [ 89.090878][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xfafc instead [ 89.094812][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 89.096466][ T7441] nvmet: adding nsid 1 to subsystem testnqn [ 89.098171][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 89.103910][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd5e3 instead [ 89.107435][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xfafc instead [ 89.110887][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 89.114552][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 89.118097][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd5e3 instead [ 89.121571][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xfafc instead [ 89.125511][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 89.129405][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 89.132976][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd5e3 instead [ 89.136642][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xfafc instead [ 89.140179][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 89.143792][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 89.145006][ T7443] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 89.147279][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd5e3 instead [ 89.153608][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xfafc instead [ 89.158640][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 89.162242][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 89.165860][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd5e3 instead [ 89.169370][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xfafc instead [ 89.172973][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 89.176753][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 89.180238][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd5e3 instead [ 89.184083][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xfafc instead [ 89.188161][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 89.191816][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 89.195077][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd5e3 instead [ 89.198372][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xfafc instead [ 89.204102][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 89.208189][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 89.212140][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd5e3 instead [ 89.216185][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xfafc instead [ 89.219795][ T7419] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 89.223206][ T7419] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 89.255663][ T7448] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 89.259397][ T7448] ipt_REJECT: ECHOREPLY no longer supported. [ 89.298475][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 89.325157][ T7453] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 89.335570][ T7454] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 89.340523][ T7453] netlink: 'syz.4.400': attribute type 1 has an invalid length. [ 89.392041][ T7463] x_tables: duplicate underflow at hook 2 [ 89.395542][ T7463] x_tables: duplicate underflow at hook 1 [ 90.279940][ T7484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.409'. [ 90.284427][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 90.295250][ T7484] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 90.431835][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 90.431849][ T42] audit: type=1400 audit(1786221452.723:709): avc: denied { read } for pid=7506 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.468334][ T42] audit: type=1400 audit(1786221452.763:710): avc: denied { recv } for pid=6951 comm="udevd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=35208 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 90.477957][ T42] audit: type=1400 audit(1786221452.763:711): avc: denied { recv } for pid=6951 comm="udevd" saddr=127.0.0.1 src=35208 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 90.516332][ T7513] netlink: 'syz.1.417': attribute type 4 has an invalid length. [ 90.572398][ T7515] netlink: 'syz.1.417': attribute type 4 has an invalid length. [ 90.956052][ T42] audit: type=1400 audit(1786221453.253:712): avc: denied { bind } for pid=7520 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 90.995234][ T42] audit: type=1400 audit(1786221453.293:713): avc: denied { listen } for pid=7520 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 91.035482][ T42] audit: type=1400 audit(1786221453.333:714): avc: denied { write } for pid=7529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.090472][ T42] audit: type=1400 audit(1786221453.383:715): avc: denied { write } for pid=7532 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.339854][ T42] audit: type=1400 audit(1786221453.633:716): avc: denied { write } for pid=7534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.377001][ T7536] bond3: ARP target 9.0.0.0 is already present [ 91.379580][ T7536] bond3: option arp_ip_target: invalid value (9) [ 91.396224][ T7536] bond3 (unregistering): Released all slaves [ 91.419218][ T42] audit: type=1400 audit(1786221453.713:717): avc: denied { write } for pid=7547 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.614924][ T7575] input: syz0 as /devices/virtual/input/input14 [ 91.632824][ T7575] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 92.538936][ T7585] xfrm1: entered allmulticast mode [ 92.600245][ T42] audit: type=1400 audit(1786221454.893:718): avc: denied { execute_no_trans } for pid=7586 comm="syz.4.432" path="/76/file0" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.687638][ T7594] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 93.071152][ T7599] nbd: must specify at least one socket [ 93.074617][ T7599] tmpfs: Bad value for 'mpol' [ 93.091780][ T3259] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 93.244304][ T3259] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.248795][ T3259] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 93.252945][ T3259] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 93.256912][ T3259] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.274877][ T3259] usb 9-1: config 0 descriptor?? [ 93.292454][ T3259] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 93.302110][ T3259] dvb-usb: bulk message failed: -22 (3/0) [ 93.361059][ T3259] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 93.365525][ T3259] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 93.371378][ T3259] usb 9-1: media controller created [ 93.381411][ T3259] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.395419][ T7611] netlink: 'syz.0.441': attribute type 1 has an invalid length. [ 93.404849][ T3259] dvb-usb: bulk message failed: -22 (6/0) [ 93.408356][ T3259] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 93.416883][ T3259] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input15 [ 93.430560][ T3259] dvb-usb: schedule remote query interval to 150 msecs. [ 93.432856][ T3259] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 93.510276][ T7607] dvb-usb: bulk message failed: -22 (2/0) [ 93.517458][ T34] usb 9-1: USB disconnect, device number 3 [ 93.540422][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 93.616410][ T7615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.442'. [ 93.649966][ T7617] netlink: 'syz.1.443': attribute type 4 has an invalid length. [ 93.652840][ T7617] netlink: 17 bytes leftover after parsing attributes in process `syz.1.443'. [ 93.657228][ T7617] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.443'. [ 93.776983][ T7625] No such timeout policy "syz1" [ 93.782511][ T7620] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 93.940821][ T7636] overlayfs: missing 'workdir' [ 94.005549][ T7645] loop5: detected capacity change from 0 to 2640 [ 94.011295][ T7645] buffer_io_error: 321 callbacks suppressed [ 94.011307][ T7645] Buffer I/O error on dev loop5, logical block 0, async page read [ 94.017640][ T7645] Buffer I/O error on dev loop5, logical block 0, async page read [ 94.018275][ T34] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 94.020152][ T7645] Buffer I/O error on dev loop5, logical block 0, async page read [ 94.025267][ T34] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 94.025494][ T7645] Buffer I/O error on dev loop5, logical block 0, async page read [ 94.030758][ T34] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 94.030931][ T7645] Buffer I/O error on dev loop5, logical block 0, async page read [ 94.036860][ T34] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 94.039842][ T7645] Buffer I/O error on dev loop5, logical block 0, async page read [ 94.043178][ T7645] Buffer I/O error on dev loop5, logical block 0, async page read [ 94.045958][ T7645] Buffer I/O error on dev loop5, logical block 0, async page read [ 94.047337][ T34] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 94.048521][ T7645] ldm_validate_partition_table(): Disk read failed. [ 94.053061][ T34] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 94.054502][ T7645] Buffer I/O error on dev loop5, logical block 0, async page read [ 94.057223][ T34] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 94.059734][ T7645] Buffer I/O error on dev loop5, logical block 0, async page read [ 94.062560][ T34] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 94.065685][ T7645] Dev loop5: unable to read RDB block 0 [ 94.068052][ T34] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 94.070128][ T7645] loop5: unable to read partition table [ 94.072136][ T34] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 94.075102][ T7645] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 94.093718][ T34] hid-generic 0000:0000:0004.0004: hidraw1: HID v0.03 Device [syz1] on syz0 [ 94.154641][ T7655] fido_id[7655]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.227569][ T7660] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 94.299366][ T7668] openvswitch: netlink: Missing key (keys=40, expected=100) [ 94.365522][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 94.372952][ T7672] ISOFS: Unable to identify CD-ROM format. [ 94.375937][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 94.375962][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd5e3 instead [ 94.375981][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xfafc instead [ 94.375996][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 94.376011][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 94.376025][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 94.376042][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 94.376069][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 94.376095][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 94.376109][ T7675] jffs2: Further such events for this erase block will not be printed [ 94.376396][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 94.385488][ T7671] ISOFS: Unable to identify CD-ROM format. [ 94.391872][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 94.424181][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 94.441724][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd5e3 instead [ 94.452879][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xfafc instead [ 94.462992][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 94.475655][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 94.491771][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 94.509307][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 94.513163][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 94.516541][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 94.519839][ T7675] jffs2: Further such events for this erase block will not be printed [ 94.539529][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 94.545663][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 94.549934][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd5e3 instead [ 94.554353][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xfafc instead [ 94.559726][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 94.571826][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 94.580857][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd5e3 instead [ 94.585631][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xfafc instead [ 94.590329][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 94.594328][ T7692] ALSA: seq fatal error: cannot create timer (-19) [ 94.595238][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 94.602732][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd5e3 instead [ 94.636097][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xfafc instead [ 94.646438][ T7702] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 94.652344][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 94.658457][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 94.673253][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd5e3 instead [ 94.677250][ T7700] ALSA: seq fatal error: cannot create timer (-19) [ 94.679216][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xfafc instead [ 94.694266][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 94.710873][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 94.729505][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd5e3 instead [ 94.734276][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xfafc instead [ 94.739568][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 94.745626][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 94.764640][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd5e3 instead [ 94.773130][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xfafc instead [ 94.776973][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 94.780000][ T7707] netlink: 104 bytes leftover after parsing attributes in process `syz.1.473'. [ 94.780799][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 94.787393][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd5e3 instead [ 94.790656][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xfafc instead [ 94.795493][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 94.798868][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 94.802933][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd5e3 instead [ 94.806261][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xfafc instead [ 94.809564][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 94.816972][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 94.821135][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd5e3 instead [ 94.828293][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xfafc instead [ 94.831728][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 94.834889][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 94.838466][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd5e3 instead [ 94.842373][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xfafc instead [ 94.845602][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 94.853366][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 94.856663][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd5e3 instead [ 94.859800][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xfafc instead [ 94.863183][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 94.866433][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 94.869666][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd5e3 instead [ 94.873119][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xfafc instead [ 94.876608][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 94.879785][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 94.883408][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd5e3 instead [ 94.886727][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xfafc instead [ 94.890020][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 94.894955][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 94.898465][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd5e3 instead [ 94.905432][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xfafc instead [ 94.908617][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 94.912044][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 94.915187][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd5e3 instead [ 94.918356][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xfafc instead [ 94.921460][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 94.925087][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 94.928278][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd5e3 instead [ 94.931351][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xfafc instead [ 94.934753][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 94.937938][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 94.941016][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd5e3 instead [ 94.944358][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xfafc instead [ 94.947467][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 94.950582][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 94.953924][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd5e3 instead [ 94.957011][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xfafc instead [ 94.960247][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 94.963772][ T7712] netlink: 348 bytes leftover after parsing attributes in process `syz.1.475'. [ 94.974996][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 94.978734][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd5e3 instead [ 94.982074][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xfafc instead [ 94.985213][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 94.988247][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 94.991353][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd5e3 instead [ 95.003978][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xfafc instead [ 95.007310][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 95.010385][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 95.013783][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd5e3 instead [ 95.017100][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xfafc instead [ 95.020203][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 95.025304][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 95.028520][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd5e3 instead [ 95.031890][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xfafc instead [ 95.036430][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 95.039971][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 95.043745][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd5e3 instead [ 95.046863][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xfafc instead [ 95.050003][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 95.053566][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 95.056869][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd5e3 instead [ 95.060049][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xfafc instead [ 95.063606][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 95.066861][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 95.070060][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd5e3 instead [ 95.073554][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xfafc instead [ 95.076866][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 95.080048][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 95.083854][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd5e3 instead [ 95.087087][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xfafc instead [ 95.090274][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 95.094114][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 95.097358][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd5e3 instead [ 95.100527][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xfafc instead [ 95.104066][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 95.107302][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 95.110522][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd5e3 instead [ 95.114048][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xfafc instead [ 95.117305][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 95.120703][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 95.124701][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd5e3 instead [ 95.128035][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xfafc instead [ 95.131290][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 95.137259][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 95.140531][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd5e3 instead [ 95.144840][ T7675] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xfafc instead [ 95.148142][ T7675] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 95.151035][ T7675] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 97.638059][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 97.638077][ T42] audit: type=1400 audit(1786221459.933:749): avc: denied { getopt } for pid=7726 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.676272][ T42] audit: type=1400 audit(1786221459.973:750): avc: denied { remount } for pid=7728 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.682641][ T42] audit: type=1400 audit(1786221459.973:751): avc: denied { execute } for pid=7728 comm="syz.3.481" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 97.825382][ T42] audit: type=1400 audit(1786221460.113:752): avc: denied { getopt } for pid=7745 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.854254][ T42] audit: type=1400 audit(1786221460.153:753): avc: denied { write } for pid=7749 comm="syz.4.488" name="os_desc" dev="configfs" ino=11337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 97.859542][ T7751] netlink: 'syz.1.485': attribute type 13 has an invalid length. [ 97.860933][ T42] audit: type=1400 audit(1786221460.153:754): avc: denied { write } for pid=7749 comm="syz.4.488" name="os_desc" dev="configfs" ino=11337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 97.911732][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 97.927411][ T7756] batadv0: entered promiscuous mode [ 97.931395][ T7756] macsec1: entered promiscuous mode [ 97.934200][ T7756] macsec1: entered allmulticast mode [ 97.936401][ T7756] batadv0: entered allmulticast mode [ 97.940743][ T7756] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 97.946669][ T7756] batadv0: left allmulticast mode [ 97.948858][ T7756] batadv0: left promiscuous mode [ 98.060689][ T42] audit: type=1400 audit(1786221460.353:755): avc: denied { create } for pid=7761 comm="syz.4.492" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 98.068958][ T42] audit: type=1400 audit(1786221460.363:756): avc: denied { mounton } for pid=7761 comm="syz.4.492" path="/94/file0" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 98.206511][ T7777] team0: Port device xfrm0 removed [ 98.208925][ T7777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.213765][ T5783] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 98.214483][ T7244] tipc: Resetting bearer [ 98.221998][ T7777] ALSA: mixer_oss: invalid OSS volume '' [ 98.224216][ T7777] ALSA: mixer_oss: invalid OSS volume '@' [ 98.226401][ T7777] ALSA: mixer_oss: invalid OSS volume '|' [ 98.228808][ T7777] ALSA: mixer_oss: invalid OSS volume '' [ 98.237105][ T7777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.242907][ T7777] team0: Port device netdevsim0 added [ 98.254596][ T7244] tipc: Resetting bearer [ 98.257251][ T7777] tipc: Enabling of bearer rejected, already enabled [ 98.351856][ T5783] usb 8-1: device descriptor read/64, error -71 [ 98.357085][ T7782] netlink: 32 bytes leftover after parsing attributes in process `syz.1.500'. [ 98.361274][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 98.365064][ T7782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7782 comm=syz.1.500 [ 98.452674][ T7786] ehci-pci 0000:00:1d.7: remove, state 1 [ 98.459902][ T7786] usb usb1: USB disconnect, device number 1 [ 98.462958][ T7786] usb 1-1: USB disconnect, device number 2 [ 98.503695][ T7789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.502'. [ 98.504143][ T42] audit: type=1400 audit(1786221460.803:757): avc: denied { watch watch_reads } for pid=7787 comm="syz.0.503" path="pipe:[19188]" dev="pipefs" ino=19188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 98.506504][ T7789] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 98.562376][ T42] audit: type=1400 audit(1786221460.863:758): avc: denied { relabelfrom } for pid=7787 comm="syz.0.503" name="" dev="pipefs" ino=18338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 98.586704][ T7786] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 98.603082][ T5783] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 98.741836][ T5783] usb 8-1: device descriptor read/64, error -71 [ 98.799630][ T7799] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.803691][ T7799] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.819776][ T7799] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 98.824457][ T7799] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 98.829403][ T7799] overlayfs: d_ino too big (96, ino=9223372036854776329, xinobits=3) [ 98.840458][ T7799] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 98.843630][ T7799] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 98.846536][ T7799] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 98.849198][ T7799] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 98.852324][ T7799] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 98.853607][ T5783] usb usb8-port1: attempt power cycle [ 98.856727][ T7799] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 98.860043][ T7799] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 98.866235][ T7804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.883756][ T5814] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 99.037622][ T5814] usb 2-1: not running at top speed; connect to a high speed hub [ 99.059338][ T5814] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 99.063483][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 99.066575][ T5814] usb 2-1: Product: QEMU USB Tablet [ 99.068667][ T5814] usb 2-1: Manufacturer: QEMU [ 99.070557][ T5814] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 99.097382][ T5814] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input16 [ 99.173941][ T5814] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 99.201732][ T5783] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 99.222620][ T5783] usb 8-1: device descriptor read/8, error -71 [ 99.251778][ T5870] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 99.424710][ T5870] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 99.428258][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.435052][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.439134][ T5870] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.444880][ T5870] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.448621][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.457404][ T5870] usb 9-1: config 0 descriptor?? [ 99.472386][ T5783] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 99.492582][ T5783] usb 8-1: device descriptor read/8, error -71 [ 99.602151][ T5783] usb usb8-port1: unable to enumerate USB device [ 100.070345][ T5870] plantronics 0003:047F:FFFF.0006: item fetching failed at offset 4/15 [ 100.074355][ T5870] plantronics 0003:047F:FFFF.0006: parse failed [ 100.077029][ T5870] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 100.678071][ T7832] usb 2-1: USB disconnect, device number 2 [ 100.864126][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 101.482100][ T5736] Bluetooth: hci4: command 0xfc11 tx timeout [ 101.484899][ T5733] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 101.555530][ T7873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.990294][ T3259] usb 9-1: USB disconnect, device number 4 [ 102.022634][ T7882] netlink: 'syz.4.532': attribute type 1 has an invalid length. [ 102.263177][ T7905] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 102.286190][ T7905] netlink: 'syz.1.539': attribute type 10 has an invalid length. [ 102.295476][ T7905] team0: Port device veth0 added [ 102.457279][ T3259] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 102.584356][ T7921] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 102.595140][ T7921] CIFS mount error: No usable UNC path provided in device string! [ 102.595140][ T7921] [ 102.600717][ T7921] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 102.645940][ T3259] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 102.651658][ T3259] usb 9-1: config 0 has no interface number 0 [ 102.653651][ T3259] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.658077][ T3259] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 102.661402][ T3259] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 102.668187][ T3259] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 102.671567][ T3259] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 102.675128][ T3259] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.679063][ T3259] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 102.680585][ T7938] kernel profiling enabled (shift: 63) [ 102.683519][ T3259] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.686869][ T7938] profiling shift: 63 too large [ 102.690209][ T3259] usb 9-1: config 0 descriptor?? [ 102.692919][ T7940] kernel profiling enabled (shift: 63) [ 102.694334][ T7886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 102.697518][ T7886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 102.701799][ T7940] profiling shift: 63 too large [ 102.703661][ T3259] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 102.716803][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 102.716826][ T42] audit: type=1400 audit(1786221465.013:771): avc: denied { connect } for pid=7939 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.904487][ T7886] ldusb 9-1:0.55: Write buffer overflow, 2 bytes dropped [ 102.927013][ T5814] usb 9-1: USB disconnect, device number 5 [ 102.933336][ T7966] pim6reg: entered allmulticast mode [ 102.938234][ T5814] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 102.940897][ T7966] program syz.1.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.959934][ T7969] openvswitch: netlink: Actions may not be safe on all matching packets [ 102.967396][ T7969] netlink: 'syz.3.558': attribute type 8 has an invalid length. [ 102.970425][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 102.996817][ T7969] bond0: entered promiscuous mode [ 103.001356][ T7969] gretap0: entered promiscuous mode [ 103.029238][ T7969] bond0: left promiscuous mode [ 103.035486][ T7969] gretap0: left promiscuous mode [ 103.054462][ T7971] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 103.609773][ T42] audit: type=1400 audit(1786221465.903:772): avc: denied { cmd } for pid=8001 comm="syz.0.571" path="socket:[22556]" dev="sockfs" ino=22556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.617402][ T42] audit: type=1400 audit(1786221465.913:773): avc: denied { setopt } for pid=8001 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.620688][ T8003] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 103.623094][ T8004] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 103.623660][ T42] audit: type=1400 audit(1786221465.913:774): avc: denied { read } for pid=8001 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.623701][ T42] audit: type=1400 audit(1786221465.913:775): avc: denied { accept } for pid=8001 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.629752][ T8007] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 103.768023][ T8019] program syz.1.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.774254][ T8019] netlink: 36 bytes leftover after parsing attributes in process `syz.1.577'. [ 103.923098][ T8037] netlink: 56 bytes leftover after parsing attributes in process `syz.1.583'. [ 104.029445][ T42] audit: type=1800 audit(1786221466.323:776): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.584" name="b_vendor_code" dev="configfs" ino=21039 res=0 errno=0 [ 104.065430][ T42] audit: type=1400 audit(1786221466.363:777): avc: denied { listen } for pid=8043 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 104.083907][ T42] audit: type=1400 audit(1786221466.373:778): avc: denied { read } for pid=8043 comm="syz.3.586" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.085668][ T8048] overlayfs: failed to resolve './file0': -2 [ 104.090991][ T42] audit: type=1400 audit(1786221466.373:779): avc: denied { open } for pid=8043 comm="syz.3.586" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.100691][ T42] audit: type=1400 audit(1786221466.373:780): avc: denied { ioctl } for pid=8043 comm="syz.3.586" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.283760][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 104.287122][ T8059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.302559][ T8059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.350347][ T8061] fuse: fd is not a fuse device [ 104.444448][ T7062] rpcbind: server 127.0.0.1 not responding, timed out [ 104.810736][ T8086] macvtap1: entered promiscuous mode [ 104.814642][ T8086] macvtap1: entered allmulticast mode [ 104.851939][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.603'. [ 104.855460][ T8089] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8089 comm=syz.0.603 [ 104.881254][ T8093] FAT-fs (nullb0): bogus number of reserved sectors [ 104.885285][ T8093] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 104.932568][ T8098] netlink: 'syz.0.608': attribute type 2 has an invalid length. [ 104.935072][ T8098] netlink: 232 bytes leftover after parsing attributes in process `syz.0.608'. [ 104.964850][ T8100] netlink: 'syz.1.607': attribute type 30 has an invalid length. [ 105.016346][ T8106] netlink: 'syz.1.607': attribute type 30 has an invalid length. [ 105.266074][ T8121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.617'. [ 105.307142][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 105.382422][ T3259] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 105.444132][ T8133] tmpfs: Cannot change global quota limit on remount [ 105.562426][ T3259] usb 8-1: Using ep0 maxpacket: 8 [ 105.565278][ T3259] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 105.571404][ T3259] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 105.577717][ T3259] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.582968][ T3259] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.593196][ T8148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'. [ 105.768087][ T8166] overlayfs: missing 'workdir' [ 106.356753][ T8208] xt_bpf: check failed: parse error [ 106.482030][ T8224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.502832][ T8225] xt_hashlimit: size too large, truncated to 1048576 [ 106.594775][ T8232] IPVS: set_ctl: invalid protocol: 0 100.1.0.255:20000 [ 106.599396][ T8228] orangefs: client-core tried to read wrong size [ 106.665896][ T8240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.653'. [ 106.669477][ T8240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.653'. [ 106.672806][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 106.675463][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 106.678294][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 106.680989][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 106.747703][ T8256] overlay: ./file0 is not a directory [ 107.131725][ T3259] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 107.293980][ T3259] usb 6-1: config 2 has an invalid interface number: 39 but max is 3 [ 107.297366][ T3259] usb 6-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 107.300843][ T3259] usb 6-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 107.304795][ T3259] usb 6-1: config 2 has an invalid interface number: 6 but max is 3 [ 107.307891][ T3259] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 107.311164][ T3259] usb 6-1: config 2 has an invalid interface number: 185 but max is 3 [ 107.313968][ T3259] usb 6-1: config 2 has an invalid interface number: 110 but max is 3 [ 107.316366][ T3259] usb 6-1: config 2 has no interface number 0 [ 107.318150][ T3259] usb 6-1: config 2 has no interface number 1 [ 107.319953][ T3259] usb 6-1: config 2 has no interface number 2 [ 107.322072][ T3259] usb 6-1: config 2 has no interface number 3 [ 107.324017][ T3259] usb 6-1: config 2 interface 39 altsetting 192 endpoint 0x8 has an invalid bInterval 64, changing to 4 [ 107.327651][ T3259] usb 6-1: config 2 interface 39 altsetting 192 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 107.331560][ T3259] usb 6-1: config 2 interface 39 altsetting 192 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 107.335421][ T3259] usb 6-1: config 2 interface 39 altsetting 192 has a duplicate endpoint with address 0xB, skipping [ 107.339405][ T3259] usb 6-1: config 2 interface 39 altsetting 192 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 107.343283][ T3259] usb 6-1: config 2 interface 39 altsetting 192 has a duplicate endpoint with address 0x8, skipping [ 107.347102][ T3259] usb 6-1: config 2 interface 39 altsetting 192 has a duplicate endpoint with address 0x2, skipping [ 107.350918][ T3259] usb 6-1: config 2 interface 39 altsetting 192 has a duplicate endpoint with address 0xE, skipping [ 107.354812][ T3259] usb 6-1: config 2 interface 6 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 107.358479][ T3259] usb 6-1: config 2 interface 6 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 107.362277][ T3259] usb 6-1: config 2 interface 6 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 107.366062][ T3259] usb 6-1: config 2 interface 6 altsetting 0 endpoint 0x9 has invalid maxpacket 768, setting to 64 [ 107.369255][ T3259] usb 6-1: config 2 interface 6 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 107.372683][ T3259] usb 6-1: config 2 interface 6 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 107.376140][ T3259] usb 6-1: config 2 interface 6 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 107.379519][ T3259] usb 6-1: config 2 interface 6 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 107.383274][ T3259] usb 6-1: config 2 interface 6 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 107.386780][ T3259] usb 6-1: config 2 interface 6 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 107.390469][ T3259] usb 6-1: config 2 interface 6 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 107.394158][ T3259] usb 6-1: config 2 interface 6 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 107.397771][ T3259] usb 6-1: config 2 interface 6 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 107.401955][ T3259] usb 6-1: config 2 interface 6 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 107.405839][ T3259] usb 6-1: config 2 interface 185 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 107.410590][ T3259] usb 6-1: config 2 interface 185 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 107.414295][ T3259] usb 6-1: config 2 interface 185 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 107.418180][ T3259] usb 6-1: config 2 interface 110 altsetting 13 has a duplicate endpoint with address 0xA, skipping [ 107.422161][ T3259] usb 6-1: config 2 interface 110 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 107.425967][ T3259] usb 6-1: config 2 interface 110 altsetting 13 has a duplicate endpoint with address 0xE, skipping [ 107.429752][ T3259] usb 6-1: config 2 interface 110 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 107.433891][ T3259] usb 6-1: config 2 interface 110 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 107.437715][ T3259] usb 6-1: config 2 interface 110 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 107.441723][ T3259] usb 6-1: config 2 interface 110 altsetting 13 has a duplicate endpoint with address 0xE, skipping [ 107.444913][ T3259] usb 6-1: config 2 interface 110 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 107.448010][ T3259] usb 6-1: config 2 interface 110 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 107.451138][ T3259] usb 6-1: config 2 interface 110 altsetting 13 has a duplicate endpoint with address 0xD, skipping [ 107.454351][ T3259] usb 6-1: config 2 interface 39 has no altsetting 0 [ 107.456321][ T3259] usb 6-1: config 2 interface 110 has no altsetting 0 [ 107.460198][ T3259] usb 6-1: New USB device found, idVendor=0b05, idProduct=9200, bcdDevice=b7.bd [ 107.463201][ T3259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.465593][ T3259] usb 6-1: Product: 騧ᾎ皞鹼Ύ瞀뤋쥟ȼۼ䍣煛豎⊚᷵逐잽劙ꃦ왰樱ᷕ⸶䉽῱뽥꭛쩺벦諏빸떍褞컌맙ஶﰁ㒑ᤧ☭鵨⇱絴労谚郏᜔笔礄枕ษନ혎셌㯷⽤ [ 107.471352][ T3259] usb 6-1: Manufacturer: М [ 107.472824][ T3259] usb 6-1: SerialNumber: Х [ 107.478955][ T8266] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.706744][ T3259] usb-storage 6-1:2.110: USB Mass Storage device detected [ 107.798971][ T3259] usb 6-1: USB disconnect, device number 9 [ 107.804117][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 107.804139][ T42] audit: type=1400 audit(1786221470.103:800): avc: denied { map } for pid=8286 comm="syz.4.667" path="pipe:[21410]" dev="pipefs" ino=21410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 107.815974][ T42] audit: type=1400 audit(1786221470.103:801): avc: denied { execute } for pid=8286 comm="syz.4.667" path="pipe:[21410]" dev="pipefs" ino=21410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 107.858753][ T8287] 9p: Bad value for 'version' [ 108.000588][ T8306] netlink: 'syz.4.674': attribute type 1 has an invalid length. [ 108.080150][ T5870] usb 8-1: USB disconnect, device number 10 [ 108.098092][ T8319] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 108.259158][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 108.266446][ T8338] netlink: 5 bytes leftover after parsing attributes in process `syz.1.686'. [ 108.309993][ T8340] CIFS: Attempting to mount //127.0.0.1/test [ 108.410187][ T8340] CIFS: VFS: Error connecting to socket. Aborting operation. [ 108.413323][ T8340] CIFS: VFS: cifs_mount failed w/return code = -4 [ 108.419501][ T8348] WARNING! power/level is deprecated; use power/control instead [ 108.450491][ T8352] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 108.454266][ T8352] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 108.573845][ T8350] tipc: Started in network mode [ 108.575944][ T8350] tipc: Node identity 7f000001, cluster identity 4711 [ 108.578861][ T8350] tipc: New replicast peer: 127.0.0.2 [ 108.584054][ T8350] tipc: Enabled bearer , priority 10 [ 108.632837][ T8364] option changes via remount are deprecated (pid=8362 comm=syz.1.697) [ 108.768284][ T42] audit: type=1400 audit(1786221471.063:802): avc: denied { ioctl } for pid=8375 comm="syz.3.702" path="socket:[23927]" dev="sockfs" ino=23927 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.777467][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'. [ 108.777517][ T42] audit: type=1400 audit(1786221471.063:803): avc: denied { listen } for pid=8375 comm="syz.3.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.828895][ T8378] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8378 comm=syz.0.703 [ 108.902527][ T42] audit: type=1400 audit(1786221471.193:804): avc: denied { setattr } for pid=8382 comm="syz.1.705" name="NETLINK" dev="sockfs" ino=23196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.990529][ T8378] veth5: entered allmulticast mode [ 109.062796][ T8383] kvm: pic: non byte write [ 109.084747][ T8378] bond3: (slave veth5): Enslaving as an active interface with an up link [ 109.189941][ T8378] bond3 (unregistering): (slave veth5): Releasing backup interface [ 109.200953][ T8378] bond3 (unregistering): Released all slaves [ 109.284793][ T8400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.711'. [ 109.343672][ T8407] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 109.441387][ T42] audit: type=1400 audit(1786221471.733:805): avc: denied { setattr } for pid=8414 comm="syz.1.715" name="/" dev="9p" ino=75524131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.453387][ T42] audit: type=1400 audit(1786221471.743:806): avc: denied { ioctl } for pid=8414 comm="syz.1.715" path="socket:[23216]" dev="sockfs" ino=23216 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.510014][ T42] audit: type=1400 audit(1786221471.803:807): avc: denied { write } for pid=8420 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.593639][ T42] audit: type=1400 audit(1786221471.893:808): avc: denied { write } for pid=8427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.646099][ T42] audit: type=1400 audit(1786221471.943:809): avc: denied { write } for pid=8430 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.692639][ T8434] tipc: Enabling of bearer rejected, already enabled [ 109.702898][ T5783] tipc: Node number set to 2130706433 [ 110.289547][ T8474] can0: slcan on ttyS3. [ 110.365026][ T8474] can0 (unregistered): slcan off ttyS3. [ 110.593359][ T5783] IPVS: starting estimator thread 0... [ 110.691802][ T8490] IPVS: using max 45 ests per chain, 108000 per kthread [ 110.873459][ T8516] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 110.917327][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=444 sclass=netlink_route_socket pid=8522 comm=syz.3.743 [ 110.925136][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=444 sclass=netlink_route_socket pid=8522 comm=syz.3.743 [ 110.930203][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=444 sclass=netlink_route_socket pid=8522 comm=syz.3.743 [ 110.936780][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=444 sclass=netlink_route_socket pid=8522 comm=syz.3.743 [ 110.944233][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=444 sclass=netlink_route_socket pid=8522 comm=syz.3.743 [ 110.949533][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=444 sclass=netlink_route_socket pid=8522 comm=syz.3.743 [ 110.955635][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=444 sclass=netlink_route_socket pid=8522 comm=syz.3.743 [ 110.961150][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=444 sclass=netlink_route_socket pid=8522 comm=syz.3.743 [ 110.966470][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=444 sclass=netlink_route_socket pid=8522 comm=syz.3.743 [ 110.971798][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=444 sclass=netlink_route_socket pid=8522 comm=syz.3.743 [ 111.381008][ T8559] netlink: 'syz.1.754': attribute type 1 has an invalid length. [ 111.402230][ T8559] bond3: entered allmulticast mode [ 111.413098][ T8559] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 111.416434][ T8559] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 111.423456][ T8559] bond3: (slave vti0): making interface the new active one [ 111.426361][ T8559] vti0: entered allmulticast mode [ 111.430006][ T8559] vti0: left allmulticast mode [ 111.520005][ T8559] netlink: 'syz.1.754': attribute type 1 has an invalid length. [ 111.643604][ T8570] CIFS: Attempting to mount //127.0.0.1/share [ 111.951674][ T5821] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.111702][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 112.115097][ T5821] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.117648][ T5821] usb 5-1: config 0 has no interface number 0 [ 112.117821][ T8598] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 112.119630][ T5821] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.126675][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.130847][ T5821] usb 5-1: config 0 descriptor?? [ 112.140115][ T5821] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 112.213194][ T8600] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.361252][ T12] IPv6: ipv6_create_tempaddr: regeneration time exceeded - disabled temporary address support [ 112.475432][ T8570] CIFS: VFS: cifs_mount failed w/return code = -512 [ 112.513266][ T8603] sit0: entered promiscuous mode [ 112.518628][ T8603] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 112.521907][ T8603] __nla_validate_parse: 5 callbacks suppressed [ 112.521916][ T8603] netlink: 1 bytes leftover after parsing attributes in process `syz.1.769'. [ 112.526797][ T8606] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 112.529230][ T8606] netlink: 1 bytes leftover after parsing attributes in process `syz.1.769'. [ 112.591521][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 112.605898][ T8626] netlink: 168 bytes leftover after parsing attributes in process `syz.4.776'. [ 112.763863][ T8636] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 112.766494][ T8636] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 112.808647][ T8638] mac80211_hwsim hwsim13 syzkaller0: left promiscuous mode [ 112.811499][ T8638] mac80211_hwsim hwsim13 syzkaller0: left allmulticast mode [ 112.848043][ T8640] netlink: 868 bytes leftover after parsing attributes in process `syz.4.780'. [ 113.101710][ T5821] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 113.249648][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 113.249661][ T42] audit: type=1400 audit(1786221475.543:839): avc: denied { create } for pid=8647 comm="syz.1.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 113.262426][ T5821] usb 9-1: Using ep0 maxpacket: 8 [ 113.270156][ T5821] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024 [ 113.277147][ T5821] usb 9-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice= 0.40 [ 113.281045][ T5821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.285542][ T5821] usb 9-1: Product: 㫦퇷笍憽붻₤蝯슃㹠ἩᲉ｛짾՞됺뒼㫊笱㗵၄䦚驻쪀젯飳줠ꇬ≩脷蔖熖졠䰙礊愥량⭏泌ꌋ뗠예讀胇荛惎㒜☘潒稣섍헢桤ㄴ谌臢ᄑ㭮࿜池퍄擵쟘慃ᩝ↱꺲쀙둥줄垌嘸모쿅⬩ [ 113.295768][ T5821] usb 9-1: SerialNumber: 㐉 [ 113.423459][ T5724] usb 5-1: USB disconnect, device number 5 [ 113.505515][ T42] audit: type=1400 audit(1786221475.803:840): avc: denied { create } for pid=8639 comm="syz.4.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 113.505837][ T42] audit: type=1400 audit(1786221475.803:841): avc: denied { bind } for pid=8639 comm="syz.4.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 113.509347][ T5821] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.509550][ T5821] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 113.511076][ T5821] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.511234][ T5821] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 113.513809][ T5821] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.533053][ T5821] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 113.563244][ T6951] udevd[6951]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.571167][ T42] audit: type=1400 audit(1786221475.863:842): avc: denied { load_policy } for pid=8653 comm="syz.3.785" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 113.581280][ T8655] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 113.584923][ T8655] SELinux: failed to load policy [ 113.715785][ T5783] usb 9-1: USB disconnect, device number 6 [ 113.735734][ T42] audit: type=1400 audit(1786221476.033:843): avc: denied { write } for pid=8660 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.996502][ T8676] program syz.0.790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.999852][ T8676] ata1.00: invalid transfer count 0 [ 114.104860][ T42] audit: type=1400 audit(1786221476.403:844): avc: denied { mounton } for pid=8677 comm="syz.0.791" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 114.134552][ T42] audit: type=1400 audit(1786221476.433:845): avc: denied { bind } for pid=8682 comm="syz.1.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.162314][ T42] audit: type=1400 audit(1786221476.463:846): avc: denied { write } for pid=8682 comm="syz.1.793" path="socket:[26872]" dev="sockfs" ino=26872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.171969][ T8684] tmpfs: Unknown parameter 'mpbl' [ 114.184034][ T42] audit: type=1400 audit(1786221476.483:847): avc: denied { setopt } for pid=8679 comm="syz.3.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.223601][ T8684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.230088][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.233685][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.351854][ T8680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.363190][ T8680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.511832][ T5800] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.514918][ T5800] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.518160][ T5800] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.520972][ T5800] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.571807][ T8706] IPv6: addrconf: prefix option has invalid lifetime [ 114.578310][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 114.956331][ T8731] netlink: 60 bytes leftover after parsing attributes in process `syz.1.809'. [ 114.959269][ T8731] unsupported nlmsg_type 40 [ 114.963615][ T8731] overlayfs: failed lookup in lower (newroot/223, name='file1', err=-40): overlapping layers [ 114.972007][ T5814] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 115.071915][ T8742] sctp: [Deprecated]: syz.0.810 (pid 8742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.071915][ T8742] Use struct sctp_sack_info instead [ 115.086656][ T42] audit: type=1400 audit(1786221477.383:848): avc: denied { read } for pid=8743 comm="syz.1.811" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.142247][ T5814] usb 8-1: Using ep0 maxpacket: 32 [ 115.153496][ T5814] usb 8-1: unable to get BOS descriptor or descriptor too short [ 115.157034][ T5814] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 115.159564][ T5814] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 115.162488][ T5814] usb 8-1: config 14 has no interface number 0 [ 115.164658][ T5814] usb 8-1: config 14 has no interface number 1 [ 115.166593][ T5814] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 115.169737][ T5814] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 115.170232][ T8747] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.171893][ T8748] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.173559][ T5814] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 115.182682][ T5814] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 115.186148][ T5814] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 115.189495][ T5814] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 115.194808][ T5814] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 115.198204][ T5814] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.202991][ T5814] usb 8-1: config 14 interface 57 has no altsetting 0 [ 115.205200][ T5814] usb 8-1: config 14 interface 228 has no altsetting 0 [ 115.209377][ T5814] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 115.212325][ T5814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.215299][ T5814] usb 8-1: Product: syz [ 115.216589][ T5814] usb 8-1: Manufacturer: syz [ 115.218081][ T5814] usb 8-1: SerialNumber: syz [ 115.236808][ T8751] xt_hl: Unknown Hop Limit match mode: 206 [ 115.285269][ T5870] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 115.455854][ T5870] usb 9-1: unable to get BOS descriptor or descriptor too short [ 115.460031][ T5870] usb 9-1: config 0 has no interfaces? [ 115.465103][ T5870] usb 9-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=42.26 [ 115.468979][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.472615][ T5870] usb 9-1: Product: syz [ 115.474416][ T5870] usb 9-1: Manufacturer: syz [ 115.476476][ T5870] usb 9-1: SerialNumber: syz [ 115.480608][ T5870] usb 9-1: config 0 descriptor?? [ 115.636379][ T5814] legousbtower 8-1:14.57: interrupt endpoints not found [ 116.042482][ T5814] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 174.90 build 36295 [ 116.049223][ T5814] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 116.155233][ T8827] netlink: 180 bytes leftover after parsing attributes in process `syz.1.831'. [ 116.158152][ T8827] netlink: 180 bytes leftover after parsing attributes in process `syz.1.831'. [ 116.187443][ T8834] IPVS: set_ctl: invalid protocol: 43 172.20.20.30:20000 [ 116.191071][ T8834] netlink: 68 bytes leftover after parsing attributes in process `syz.1.833'. [ 116.194949][ T8834] 9p: Bad value for 'rfdno' [ 116.801346][ T5783] usb 8-1: USB disconnect, device number 11 [ 116.808472][ T5783] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 116.829129][ T8857] ceph: Path missing in source [ 117.147402][ T8859] binder: 8858:8859 ioctl c0306201 200000000580 returned -14 [ 117.464447][ T8872] ipt_ECN: cannot use operation on non-tcp rule [ 117.467995][ T8872] selinux_netlink_send: 55 callbacks suppressed [ 117.468010][ T8872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8872 comm=syz.3.842 [ 117.532360][ T8880] xt_ecn: cannot match TCP bits for non-tcp packets [ 117.569152][ T3259] usb 9-1: USB disconnect, device number 7 [ 117.625747][ T8892] ================================================================== [ 117.628251][ T8892] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 117.631283][ T8892] Read of size 96 at addr ffffffff9ba43500 by task syz.0.849/8892 [ 117.634645][ T8892] [ 117.635810][ T8892] CPU: 0 UID: 0 PID: 8892 Comm: syz.0.849 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.635834][ T8892] Tainted: [L]=SOFTLOCKUP [ 117.635840][ T8892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.635858][ T8892] Call Trace: [ 117.635865][ T8892] [ 117.635871][ T8892] dump_stack_lvl+0x100/0x190 [ 117.635903][ T8892] print_report+0x13d/0x4b0 [ 117.635935][ T8892] ? __virt_addr_valid+0x239/0x430 [ 117.635964][ T8892] ? usb_copy_descriptors+0x18d/0x320 [ 117.635983][ T8892] kasan_report+0xdf/0x1c0 [ 117.636012][ T8892] ? usb_copy_descriptors+0x18d/0x320 [ 117.636029][ T8892] kasan_check_range+0x10f/0x1e0 [ 117.636045][ T8892] __asan_memcpy+0x23/0x60 [ 117.636056][ T8892] usb_copy_descriptors+0x18d/0x320 [ 117.636071][ T8892] usb_assign_descriptors+0xd2/0x470 [ 117.636085][ T8892] f_audio_bind+0x243a/0x3950 [ 117.636102][ T8892] ? __pfx_f_audio_bind+0x10/0x10 [ 117.636121][ T8892] usb_add_function+0x219/0x890 [ 117.636142][ T8892] ? composite_dev_prepare+0x1c1/0x420 [ 117.636165][ T8892] configfs_composite_bind+0xd83/0x1960 [ 117.636180][ T8892] ? kernfs_create_link+0x1bd/0x240 [ 117.636202][ T8892] gadget_bind_driver+0x28c/0xbf0 [ 117.636213][ T8892] ? __pfx_gadget_bind_driver+0x10/0x10 [ 117.636223][ T8892] really_probe+0x241/0xa60 [ 117.636238][ T8892] __driver_probe_device+0x20e/0x450 [ 117.636252][ T8892] driver_probe_device+0x4a/0x140 [ 117.636265][ T8892] __driver_attach+0x21f/0x5b0 [ 117.636278][ T8892] ? __pfx___driver_attach+0x10/0x10 [ 117.636291][ T8892] bus_for_each_dev+0x13e/0x1d0 [ 117.636301][ T8892] ? __pfx_bus_for_each_dev+0x10/0x10 [ 117.636313][ T8892] bus_add_driver+0x305/0x5b0 [ 117.636324][ T8892] driver_register+0x1e2/0x360 [ 117.636339][ T8892] usb_gadget_register_driver_owner+0x132/0x210 [ 117.636357][ T8892] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 117.636371][ T8892] configfs_write_iter+0x302/0x4e0 [ 117.636385][ T8892] vfs_write+0x6ac/0x1050 [ 117.636400][ T8892] ? __pfx_configfs_write_iter+0x10/0x10 [ 117.636414][ T8892] ? __pfx_vfs_write+0x10/0x10 [ 117.636427][ T8892] ksys_write+0x12a/0x250 [ 117.636436][ T8892] ? __pfx_ksys_write+0x10/0x10 [ 117.636447][ T8892] do_syscall_64+0x115/0x870 [ 117.636461][ T8892] ? clear_bhb_loop+0x70/0xc0 [ 117.636480][ T8892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.636491][ T8892] RIP: 0033:0x7f2b8679e0d9 [ 117.636501][ T8892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.636512][ T8892] RSP: 002b:00007f2b8758b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.636524][ T8892] RAX: ffffffffffffffda RBX: 00007f2b86a25fa0 RCX: 00007f2b8679e0d9 [ 117.636531][ T8892] RDX: 000000000000000c RSI: 0000200000000640 RDI: 0000000000000003 [ 117.636538][ T8892] RBP: 00007f2b86835024 R08: 0000000000000000 R09: 0000000000000000 [ 117.636544][ T8892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.636551][ T8892] R13: 00007f2b86a26038 R14: 00007f2b86a25fa0 R15: 00007ffff0adb3b8 [ 117.636560][ T8892] [ 117.636564][ T8892] [ 117.727251][ T8892] The buggy address belongs to the variable: [ 117.729067][ T8892] ac_header_desc+0x0/0x40 [ 117.730437][ T8892] [ 117.731189][ T8892] The buggy address belongs to the physical page: [ 117.733365][ T8892] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ba43 [ 117.736412][ T8892] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 117.739167][ T8892] raw: 00fff00000002000 ffffea00006e90c8 ffffea00006e90c8 0000000000000000 [ 117.742137][ T8892] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 117.745045][ T8892] page dumped because: kasan: bad access detected [ 117.747234][ T8892] page_owner info is not present (never set?) [ 117.749259][ T8892] [ 117.750124][ T8892] Memory state around the buggy address: [ 117.752021][ T8892] ffffffff9ba43400: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 [ 117.754790][ T8892] ffffffff9ba43480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 117.757571][ T8892] >ffffffff9ba43500: 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 117.760324][ T8892] ^ [ 117.761868][ T8892] ffffffff9ba43580: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 117.764559][ T8892] ffffffff9ba43600: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 117.767302][ T8892] ================================================================== [ 117.770805][ T8892] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 117.773353][ T8892] CPU: 0 UID: 0 PID: 8892 Comm: syz.0.849 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.777337][ T8892] Tainted: [L]=SOFTLOCKUP [ 117.778833][ T8892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.781905][ T8892] Call Trace: [ 117.782918][ T8892] [ 117.783869][ T8892] dump_stack_lvl+0x100/0x190 [ 117.785325][ T8892] vpanic+0x552/0x970 [ 117.786582][ T8892] ? __pfx_vpanic+0x10/0x10 [ 117.787978][ T8892] ? mark_held_locks+0x40/0x70 [ 117.789466][ T8892] ? usb_copy_descriptors+0x18d/0x320 [ 117.791106][ T8892] panic+0xd1/0xe0 [ 117.792287][ T8892] ? __pfx_panic+0x10/0x10 [ 117.793637][ T8892] ? usb_copy_descriptors+0x18d/0x320 [ 117.795256][ T8892] ? preempt_schedule_common+0x42/0xc0 [ 117.796903][ T8892] ? check_panic_on_warn+0x1f/0x90 [ 117.798486][ T8892] check_panic_on_warn.cold+0x19/0x34 [ 117.800081][ T8892] end_report.part.0+0x3a/0x90 [ 117.801509][ T8892] kasan_report.cold+0xe/0x18 [ 117.802996][ T8892] ? usb_copy_descriptors+0x18d/0x320 [ 117.804614][ T8892] kasan_check_range+0x10f/0x1e0 [ 117.806099][ T8892] __asan_memcpy+0x23/0x60 [ 117.807497][ T8892] usb_copy_descriptors+0x18d/0x320 [ 117.809058][ T8892] usb_assign_descriptors+0xd2/0x470 [ 117.810614][ T8892] f_audio_bind+0x243a/0x3950 [ 117.812039][ T8892] ? __pfx_f_audio_bind+0x10/0x10 [ 117.813558][ T8892] usb_add_function+0x219/0x890 [ 117.815092][ T8892] ? composite_dev_prepare+0x1c1/0x420 [ 117.816749][ T8892] configfs_composite_bind+0xd83/0x1960 [ 117.818415][ T8892] ? kernfs_create_link+0x1bd/0x240 [ 117.819996][ T8892] gadget_bind_driver+0x28c/0xbf0 [ 117.821484][ T8892] ? __pfx_gadget_bind_driver+0x10/0x10 [ 117.823467][ T8892] really_probe+0x241/0xa60 [ 117.824906][ T8892] __driver_probe_device+0x20e/0x450 [ 117.826608][ T8892] driver_probe_device+0x4a/0x140 [ 117.828324][ T8892] __driver_attach+0x21f/0x5b0 [ 117.830235][ T8892] ? __pfx___driver_attach+0x10/0x10 [ 117.832171][ T8892] bus_for_each_dev+0x13e/0x1d0 [ 117.833759][ T8892] ? __pfx_bus_for_each_dev+0x10/0x10 [ 117.835520][ T8892] bus_add_driver+0x305/0x5b0 [ 117.837045][ T8892] driver_register+0x1e2/0x360 [ 117.838586][ T8892] usb_gadget_register_driver_owner+0x132/0x210 [ 117.840557][ T8892] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 117.842401][ T8892] configfs_write_iter+0x302/0x4e0 [ 117.844086][ T8892] vfs_write+0x6ac/0x1050 [ 117.845485][ T8892] ? __pfx_configfs_write_iter+0x10/0x10 [ 117.847315][ T8892] ? __pfx_vfs_write+0x10/0x10 [ 117.848845][ T8892] ksys_write+0x12a/0x250 [ 117.850206][ T8892] ? __pfx_ksys_write+0x10/0x10 [ 117.851695][ T8892] do_syscall_64+0x115/0x870 [ 117.853176][ T8892] ? clear_bhb_loop+0x70/0xc0 [ 117.854630][ T8892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.856448][ T8892] RIP: 0033:0x7f2b8679e0d9 [ 117.857859][ T8892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.863744][ T8892] RSP: 002b:00007f2b8758b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.866292][ T8892] RAX: ffffffffffffffda RBX: 00007f2b86a25fa0 RCX: 00007f2b8679e0d9 [ 117.868801][ T8892] RDX: 000000000000000c RSI: 0000200000000640 RDI: 0000000000000003 [ 117.871320][ T8892] RBP: 00007f2b86835024 R08: 0000000000000000 R09: 0000000000000000 [ 117.874313][ T8892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.876859][ T8892] R13: 00007f2b86a26038 R14: 00007f2b86a25fa0 R15: 00007ffff0adb3b8 [ 117.879262][ T8892] [ 117.881079][ T8892] Kernel Offset: disabled [ 117.882414][ T8892] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:38:00 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a338b5 RDI=ffffffff9b9f7ec0 RBP=ffffffff9b9f7e80 RSP=ffffc900053bf1b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002f R14=ffffffff9b6ea231 R15=ffffffff85a33850 RIP=ffffffff85a338df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2b8758b6c0 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2b849d4ff8 CR3=000000005b07c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7372656c6c6f7274 6e6f632e70756f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff0adb8a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff0adb8a6 00007ffff0adb8ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b86835607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b86835647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b868357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b86835639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000044 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000044 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000046 RBX=ffffffff8ebe8200 RCX=ffffc9000067773c RDX=0000000000000001 RSI=ffffffff8e183008 RDI=ffffffff8c400380 RBP=ffffffff81b866be RSP=ffffc90000677730 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000c8e8 R12=ffff88801f69ca80 R13=ffffc900006777e8 R14=0000000000000202 R15=0000000000000002 RIP=ffffffff81e5fb41 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c326a44 CR3=000000005abe2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000080000000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 0000558959365ec0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc06ff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 0000000000ff0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b5e79445a107f 676f7b445c59101a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 041a5848102a181a 0775aeabcb2a5e44 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 0000558959365ec0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a9a8eea9ace285bf eca8aaebb898e58c 9ee5a78aee84a4ec a591eb9980ecb2ba ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eab186e29da9e1a7 88ef8385e6989fec b593e6848deda0b1 e6a182ef9cbfe081 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 adeeaeade39184e1 a287e88cb0e8b484 e3a4a1e6a297ed8d 84eca3a8e792bde6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9898e29c92e38e83 e68db6ee9b8de887 83e880aee88898ec 8c8beea097eb8b8c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696400644e2d4953 2f4554584500484f 49534e4554574544 485449575f242d57 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554500484e2d4945 2f45524144004449 0053242d5457452d 484e2d4953242d54 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000cdc91 RBX=ffff88801eed4a80 RCX=ffffffff8bbac335 RDX=0000000000000000 RSI=ffffffff8e1a8e56 RDI=ffffffff8c400380 RBP=ffffed1003dda950 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbaa8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000050496000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 657565757165642e 7166622e6f696b6c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebdad11b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebdad11b6 00007ffebdad11bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78eaa35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78eaa35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78eaa357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78eaa35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000e4cb5 RBX=ffff88801eed2540 RCX=ffffffff8bbac335 RDX=0000000000000000 RSI=ffffffff8e1a8e56 RDI=ffffffff8c400380 RBP=ffffed1003dda4a8 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bbaa8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2b849b3ff8 CR3=000000005b07c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff0adb8a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff0adb8a6 00007ffff0adb8ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b86835607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b86835647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b868357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b86835639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b869f25f8 00007f2b869f25c8 00007f2b869f2600 00007f2b869f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000044 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000