last executing test programs: 16.042504204s ago: executing program 0 (id=268): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) select(0x40, &(0x7f0000000080)={0x8, 0x8000, 0x2, 0x7, 0x3, 0x9, 0xb8e, 0x101}, 0x0, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x8000000, 0x0, 0x6}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800040000fbdbdf250b00000008000300", @ANYRES32=r8, @ANYBLOB="02000087330788a1a57dde00"], 0x28}}, 0x40014) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0xd1) r9 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r9, 0x0, 0x0, 0x40000000, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xe6, 0xffffffffffffffff, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) 15.914115065s ago: executing program 0 (id=270): pwrite64(0xffffffffffffffff, &(0x7f0000000140)="3b562f2ffdb9f51035b8cc9f142b0c1edff90b5652749b871ce84a0d26c8dae66dd893206845526ddc1dd8d1d1b683a2f78b9e49182c8f557c5c4a048770b52d4a2568f8f3e41b355560da9db4ce7da0a0a4da31c24e9797825b33326d1a6dbbcf706fa89d751220644624679072aff8d93608da778aa78e47e2032b1c2eaa2ad58c9dd0de0f751c4c2e61763786d942c367b2826cbaf2c0c3114f89e727c3c23511fdc4633995da3a9272262d4cc9deb61ba770", 0xb4, 0x5) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="3b562f2ffdb9f51035b8cc9f142b0c1edff90b5652749b871ce84a0d26c8dae66dd893206845526ddc1dd8d1d1b683a2f78b9e49182c8f557c5c4a048770b52d4a2568f8f3e41b355560da9db4ce7da0a0a4da31c24e9797825b33326d1a6dbbcf706fa89d751220644624679072aff8d93608da778aa78e47e2032b1c2eaa2ad58c9dd0de0f751c4c2e61763786d942c367b2826cbaf2c0c3114f89e727c3c23511fdc4633995da3a9272262d4cc9deb61ba770", 0xb4, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xbe, 0x0, 0x3, 0xa, 0x8, 0x5}, &(0x7f0000000100)=0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x34}}, 0x20042000) 15.75046256s ago: executing program 0 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f0000000040)='cgroup2\x00', 0x820441, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @local}}}, 0x108) syz_emit_ethernet(0x35, &(0x7f0000000140)={@link_local, @random="225a3fa5110f", @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x6, 0x4, 0x2, 0x6, 0x1f, 0x65, 0x0, 0x3, 0x2, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4}]}}, "f5a311159726eb"}}}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 15.694425697s ago: executing program 0 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x60381, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0xb, 0xfffffffa, 0x8, 0x9, 0x505, r4}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x6, 0x5002) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) 15.624688983s ago: executing program 0 (id=275): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x80108907, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000600)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffff64}]) 15.253362075s ago: executing program 0 (id=280): mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x180) r1 = openat(r0, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x1b3202, 0x0) write(r1, &(0x7f00000000c0)='acpi_pm', 0x7) (async, rerun: 32) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000180)={0xa, 0x4}, 0xc) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) 15.198351955s ago: executing program 32 (id=280): mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x180) r1 = openat(r0, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x1b3202, 0x0) write(r1, &(0x7f00000000c0)='acpi_pm', 0x7) (async, rerun: 32) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000180)={0xa, 0x4}, 0xc) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) 7.444316071s ago: executing program 3 (id=413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/s\xf8:e[\a\x9d1\xfd2haref\xb5D\x8er=root,pass=root,port=445,') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x2400000, 0x1000ff, 0x0, 0x6, 0x9, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x36, 0x36e5, 0x7, 0x9, 0x1, 0x3, 0x2, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0x800d00, 0x4, 0xcd9, 0x84c7, 0x2, 0x1, 0xaa, 0xfff, 0x8, 0x5, 0x2, 0x2000a, 0x6, 0x10000, 0xd6, 0x0, 0x5, 0xffffffff, 0x8, 0x9a, 0x1, 0x0, 0x7f, 0x3, 0x7, 0x7, 0x6, 0x8, 0x8000, 0x800, 0xffffffff, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x0, 0xffffffff, 0x0, 0x9, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610b, 0x4, 0x7ff, 0x6ce1, 0x98, 0x404000, 0x5, 0x0, 0xfffffff9, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x2, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0x9a, 0x8, 0x3, 0x80000000, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0x2, 0x8, 0xfffffffb, 0x5f, 0x3, 0x2000000, 0x409, 0x6, 0x401, 0x7, 0x8, 0xffff7fff, 0x7, 0x5, 0x2, 0x80000801, 0x2, 0x6]}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010008506fe000000ff6122314a000800", @ANYRES32=r3, @ANYRESHEX=r2], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="800000f50528169b73b53fcbe40000ca46a61f8e1c3bbe7ee370", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000680)={0x8, 0x9, 0x0, 'queue0\x00', 0xc11}) r6 = accept(r0, 0x0, 0x0) write(r6, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100010000030000000000000000000000000000000000000000000000001000000010000000100000000000000000000000000000000000800000000000000000", 0x84) 7.384555247s ago: executing program 3 (id=415): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r3, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r3, r4, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='pvfs2\x00', 0x800004, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3c00000058001f000307f4f9002304000a04d649080001000201000204000380050000009ddb973b91aa05797251725df7", 0x31) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000305bfdd082e0c0007f4d40102030109022400016406200b0904ad8e02df30059e09050e124000fafa01090583"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) 4.340505458s ago: executing program 3 (id=458): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/smt/control\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0', 0x1) write(r4, &(0x7f0000000280)='0', 0x1) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r1, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x18}, 0x15, 0x3, 'none\x00', 0x19, 0x4, 0x10072}, 0x2c) 4.20368589s ago: executing program 3 (id=460): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="a18500000000000008001b0000000000136cb43da49f72bd93a19418c3dc5e046839c25da1442b26969799f53ded4f2d03fe0bcb284cdd03c88904fa0431dc8d7714e560ce8fa05b629455d0f0427c4efe0b3be931440f3103365686361fb2164b2d60548220cbf087752ff3247329702a619f38cf83905e48f7604fdafad0824947443e3ff4b0d5b952b42390af20dd2a9416a5626d98d1de6138968fc4635caab0d0b70666b6ca6049516909d8402681fe857b6d7d532aef7b45ec8a0cefd4ccd5b6bb1df72b32441136d13202ee39"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000380)) timer_settime(r4, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x3, 0x1a7a40) unshare(0x66000080) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x8000, 0x200) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab70102030109021200010000000009"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa8000066b8f7008ec0", 0x7e}], 0x1, 0x74, 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, 0x0, 0xfffffffe) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.179862826s ago: executing program 4 (id=465): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000200)={0x4bc, 0x1, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [{{0x254, 0x1, {{0x2}, 0x1, 0xf, 0x3ff, 0x5, 0x27, 'syz0\x00', "bb291a460f1d8cc793d2fea661ea93630047ebb67c2d0c4055a5e4ad0c31524e", "0b95ebf70eb1e282e0c14d612e3c0840f9613ec5ae4d63b12854af51e51ba44d", [{0x410, 0xdf, {0x0, 0xf807}}, {0x7fff, 0x3, {0x1, 0xfffffff7}}, {0x4, 0xa8, {0x2, 0x9}}, {0x6, 0x1, {0x2, 0x7}}, {0x7, 0x8009, {0x0, 0x10}}, {0x0, 0xb, {0x3, 0x9c1}}, {0x7, 0x0, {0x0, 0x8}}, {0x4, 0xa, {0x0, 0x7f}}, {0x2, 0x81, {0x1, 0x432ef7a5}}, {0x4bd3, 0x3, {0x3, 0x7}}, {0x935a, 0x60, {0x1, 0xb23}}, {0x0, 0x101, {0x1, 0x3ff}}, {0x7, 0x5, {0x2, 0x1}}, {0xfff8, 0x5, {0x0, 0x8}}, {0x9, 0x0, {0x0, 0x2}}, {0x0, 0xba, {0x1, 0x3}}, {0x3, 0x0, {0x0, 0x8}}, {0xc, 0x0, {0x1, 0xffff}}, {0x4, 0xfff7, {0x1, 0xcf31}}, {0x8, 0x7, {0x3}}, {0x400, 0x263, {0x3, 0x38cf}}, {0x9, 0x7, {0x3, 0x7fff}}, {0x80, 0x6, {0x3, 0x3}}, {0xef, 0x16, {0x0, 0x1}}, {0x325, 0x8000, {0x0, 0xbb}}, {0x1, 0xfffc, {0x2, 0xffff9713}}, {0xf57, 0x2, {0x3, 0x7d}}, {0x9, 0x7c83, {0x0, 0x25}}, {0x2, 0x757, {0x3, 0xffffff01}}, {0x4243, 0x2, {0x3, 0x45}}, {0x7, 0x4, {0x1, 0x1}}, {0x1, 0xffff, {0x2, 0x5}}, {0x1, 0x26e}, {0x7ff, 0x7, {0x3, 0x3}}, {0x8, 0x3, {0x1, 0x80000000}}, {0x9, 0x10, {0x0, 0x9}}, {0x2, 0x8, {0x2, 0x7}}, {0x8, 0x3}, {0x17, 0x4, {0x2, 0x1}}, {0x6, 0x3ff, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x7f}, 0x2c, 0x3, 0x4, 0xb, 0x1e, 'syz1\x00', "8e6a937343458996e91a14c486d09ecc0f026d4b987a72c2fded947950c0892e", "96026c754b2ec448c4dd7312681c1c1c3029a1f431716e2ab51e000aaf67bd80", [{0x360, 0x6, {0x1, 0x9}}, {0xa, 0x7ff, {0x1, 0x2000003}}, {0x1ff, 0x6, {0x3, 0x6e}}, {0x4, 0x0, {0x0, 0xfffffffd}}, {0xc444, 0x7, {0x1}}, {0x8, 0x8, {0x0, 0x2}}, {0x100, 0x2, {0x3, 0xae19}}, {0x2, 0x8, {0x3, 0x80}}, {0x2, 0xffff, {0x0, 0x22ee4cac}}, {0x3, 0xc32, {0x2, 0xdbc}}, {0xf801, 0x8, {0x2, 0x4}}, {0xf, 0x4, {0x0, 0x6}}, {0x4d6b, 0x17, {0x3, 0x3}}, {0x200, 0x1, {0x0, 0x40}}, {0xe, 0xfffd, {0x3, 0xa0}}, {0x1, 0x8, {0x0, 0x2}}, {0xf, 0x200, {0x0, 0xf0b}}, {0x3, 0x9, {0x1, 0x4}}, {0x4, 0x29, {0x3, 0x3}}, {0x8, 0x1, {0x3, 0x3}}, {0xa3, 0x800, {0x2, 0x5}}, {0x1, 0x9, {0x0, 0x8001}}, {0xcd6, 0x96, {0x1, 0x7}}, {0x1, 0x1ff, {0x1, 0x101}}, {0x1, 0x8, {0x2, 0x3}}, {0xc, 0xffc6, {0x2}}, {0xa, 0xb6fb, {0x0, 0x5}}, {0xc, 0xb2d, {0x2, 0xfffffffe}}, {0x1, 0x81, {0x1, 0x80000001}}, {0xe71, 0x9, {0x2, 0xfffffffc}}, {0x1, 0x1, {0x0, 0xdcc}}, {0x101, 0x2, {0x2, 0x8001}}, {0x7ff, 0x4, {0x0, 0xfffffff7}}, {0x2, 0xd0, {0x1, 0x6}}, {0x2, 0xfc7, {0x3, 0x5}}, {0x0, 0x4, {0x0, 0x7}}, {0x9, 0x40, {0x2, 0x3}}, {0x5, 0x3, {0x1, 0x200}}, {0x1, 0x0, {0x2, 0x8}}, {0x8, 0x1, {0x0, 0x3}}]}}}]}, 0x4bc}}, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, &(0x7f0000000100)) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) getpeername(r0, 0x0, &(0x7f0000000740)) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@broadcast, @random="0bf07984a02c", @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@canfd={0xd, {{0x4}, 0x2d, 0xc5f3c01b6f4da2e, 0x0, 0x0, "5242bd473671688798a8f50358b7c8398857b38161535d865cc77afd070c6902b437b43f65a9b949e4b9a055cf8bbd944bf758188ce9cb166a65b5e404ff48d6"}}}}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000200)={0x4bc, 0x1, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [{{0x254, 0x1, {{0x2}, 0x1, 0xf, 0x3ff, 0x5, 0x27, 'syz0\x00', "bb291a460f1d8cc793d2fea661ea93630047ebb67c2d0c4055a5e4ad0c31524e", "0b95ebf70eb1e282e0c14d612e3c0840f9613ec5ae4d63b12854af51e51ba44d", [{0x410, 0xdf, {0x0, 0xf807}}, {0x7fff, 0x3, {0x1, 0xfffffff7}}, {0x4, 0xa8, {0x2, 0x9}}, {0x6, 0x1, {0x2, 0x7}}, {0x7, 0x8009, {0x0, 0x10}}, {0x0, 0xb, {0x3, 0x9c1}}, {0x7, 0x0, {0x0, 0x8}}, {0x4, 0xa, {0x0, 0x7f}}, {0x2, 0x81, {0x1, 0x432ef7a5}}, {0x4bd3, 0x3, {0x3, 0x7}}, {0x935a, 0x60, {0x1, 0xb23}}, {0x0, 0x101, {0x1, 0x3ff}}, {0x7, 0x5, {0x2, 0x1}}, {0xfff8, 0x5, {0x0, 0x8}}, {0x9, 0x0, {0x0, 0x2}}, {0x0, 0xba, {0x1, 0x3}}, {0x3, 0x0, {0x0, 0x8}}, {0xc, 0x0, {0x1, 0xffff}}, {0x4, 0xfff7, {0x1, 0xcf31}}, {0x8, 0x7, {0x3}}, {0x400, 0x263, {0x3, 0x38cf}}, {0x9, 0x7, {0x3, 0x7fff}}, {0x80, 0x6, {0x3, 0x3}}, {0xef, 0x16, {0x0, 0x1}}, {0x325, 0x8000, {0x0, 0xbb}}, {0x1, 0xfffc, {0x2, 0xffff9713}}, {0xf57, 0x2, {0x3, 0x7d}}, {0x9, 0x7c83, {0x0, 0x25}}, {0x2, 0x757, {0x3, 0xffffff01}}, {0x4243, 0x2, {0x3, 0x45}}, {0x7, 0x4, {0x1, 0x1}}, {0x1, 0xffff, {0x2, 0x5}}, {0x1, 0x26e}, {0x7ff, 0x7, {0x3, 0x3}}, {0x8, 0x3, {0x1, 0x80000000}}, {0x9, 0x10, {0x0, 0x9}}, {0x2, 0x8, {0x2, 0x7}}, {0x8, 0x3}, {0x17, 0x4, {0x2, 0x1}}, {0x6, 0x3ff, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x7f}, 0x2c, 0x3, 0x4, 0xb, 0x1e, 'syz1\x00', "8e6a937343458996e91a14c486d09ecc0f026d4b987a72c2fded947950c0892e", "96026c754b2ec448c4dd7312681c1c1c3029a1f431716e2ab51e000aaf67bd80", [{0x360, 0x6, {0x1, 0x9}}, {0xa, 0x7ff, {0x1, 0x2000003}}, {0x1ff, 0x6, {0x3, 0x6e}}, {0x4, 0x0, {0x0, 0xfffffffd}}, {0xc444, 0x7, {0x1}}, {0x8, 0x8, {0x0, 0x2}}, {0x100, 0x2, {0x3, 0xae19}}, {0x2, 0x8, {0x3, 0x80}}, {0x2, 0xffff, {0x0, 0x22ee4cac}}, {0x3, 0xc32, {0x2, 0xdbc}}, {0xf801, 0x8, {0x2, 0x4}}, {0xf, 0x4, {0x0, 0x6}}, {0x4d6b, 0x17, {0x3, 0x3}}, {0x200, 0x1, {0x0, 0x40}}, {0xe, 0xfffd, {0x3, 0xa0}}, {0x1, 0x8, {0x0, 0x2}}, {0xf, 0x200, {0x0, 0xf0b}}, {0x3, 0x9, {0x1, 0x4}}, {0x4, 0x29, {0x3, 0x3}}, {0x8, 0x1, {0x3, 0x3}}, {0xa3, 0x800, {0x2, 0x5}}, {0x1, 0x9, {0x0, 0x8001}}, {0xcd6, 0x96, {0x1, 0x7}}, {0x1, 0x1ff, {0x1, 0x101}}, {0x1, 0x8, {0x2, 0x3}}, {0xc, 0xffc6, {0x2}}, {0xa, 0xb6fb, {0x0, 0x5}}, {0xc, 0xb2d, {0x2, 0xfffffffe}}, {0x1, 0x81, {0x1, 0x80000001}}, {0xe71, 0x9, {0x2, 0xfffffffc}}, {0x1, 0x1, {0x0, 0xdcc}}, {0x101, 0x2, {0x2, 0x8001}}, {0x7ff, 0x4, {0x0, 0xfffffff7}}, {0x2, 0xd0, {0x1, 0x6}}, {0x2, 0xfc7, {0x3, 0x5}}, {0x0, 0x4, {0x0, 0x7}}, {0x9, 0x40, {0x2, 0x3}}, {0x5, 0x3, {0x1, 0x200}}, {0x1, 0x0, {0x2, 0x8}}, {0x8, 0x1, {0x0, 0x3}}]}}}]}, 0x4bc}}, 0x4) (async) socket$igmp(0x2, 0x3, 0x2) (async) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, &(0x7f0000000100)) (async) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) (async) getpeername(r0, 0x0, &(0x7f0000000740)) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@broadcast, @random="0bf07984a02c", @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@canfd={0xd, {{0x4}, 0x2d, 0xc5f3c01b6f4da2e, 0x0, 0x0, "5242bd473671688798a8f50358b7c8398857b38161535d865cc77afd070c6902b437b43f65a9b949e4b9a055cf8bbd944bf758188ce9cb166a65b5e404ff48d6"}}}}, 0x0) (async) 3.179350981s ago: executing program 4 (id=467): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f00000002c0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=virtio,posixacl,noxattr,']) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x307, @local}, 0x48, {0x2, 0x0, @local}}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0009000d0000000005000000", 0x29}], 0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@s={0x5, @SEQ_MIDIPUTC=0xff}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0xf5}], 0x400000000000172, 0x4000000) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r3}, 0x18) ioctl$XFS_IOC_FREE_EOFBLOCKS(r5, 0x8080583a, &(0x7f0000000140)={0x1, 0x6, 0x7, 0x1, 0x7, 0x0, 0x1000}) read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) 3.179113845s ago: executing program 4 (id=468): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/smt/control\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0', 0x1) write(r4, &(0x7f0000000280)='0', 0x1) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r1, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x18}, 0x15, 0x3, 'none\x00', 0x19, 0x4, 0x10072}, 0x2c) 3.178671382s ago: executing program 4 (id=469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xa880}, 0x4040010) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x80, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x60, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x44, 0x18}) 3.102101787s ago: executing program 4 (id=471): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x9, 0x6, 0x0, 0x6, 0x19, "f44327189019f4ba9c2d666c378d75463e665e"}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000002100)={0x802, 0x0, 0x0, 0x7fffffff}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) dup3(r0, r3, 0x80000) setns(0xc9, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) read(r0, &(0x7f0000000040)=""/7, 0x7) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf2502", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 2.223472556s ago: executing program 4 (id=479): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/smt/control\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0', 0x1) write(r4, &(0x7f0000000280)='0', 0x1) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r1, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x18}, 0x15, 0x3, 'none\x00', 0x19, 0x4, 0x10072}, 0x2c) 2.060133095s ago: executing program 1 (id=481): mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newtclass={0x44, 0x28, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6, 0x6}, {0x2, 0xfff3}, {0x8}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e", 0x57, 0x0) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r6 = syz_open_dev$video(&(0x7f0000000480), 0x10001, 0xa0200) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000240)={0x9, {0x3, 0x2744000, 0x8, 0x45}, {0xda0, 0x2, 0x10000, 0x80000000}, {0x7, 0x9}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x0, &(0x7f00000001c0)={[{@lowerdir, 0x3a}], [], 0x3a}) 1.863036596s ago: executing program 1 (id=483): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x1234, 0x1000, 0x4, r3, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x40000000001234, 0x1000, 0x4, r3, 0x5}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f090000000000f5a72d866b0000000000f0ffdefe0000005a6d00"}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x80000000}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8}) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000040)=0x2) close_range(r11, 0xffffffffffffffff, 0x0) io_uring_setup(0x2f39, &(0x7f0000000440)={0x0, 0xe7b5, 0x2, 0x4, 0x12}) dup3(r4, r6, 0x80000) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r12, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet6_group_source_req(r13, 0x29, 0x2e, &(0x7f0000000080)={0x4, {{0xa, 0x4e21, 0xb11, @mcast2, 0xfffffff5}}, {{0xa, 0x4e1e, 0x5, @private0={0xfc, 0x0, '\x00', 0x20}}}}, 0x108) bind$inet6(r13, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) 1.254355057s ago: executing program 1 (id=484): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140)=0x8d2, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x40810, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x168, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff3e}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x98}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000000}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x22000014}, 0x4048044) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x6) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl(r7, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff0010") sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, r4, 0x40100}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1c0}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x30}}, 0x4000) r8 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000180)='v\x05%Jg1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o*\x00\x00\x00\x00\x00\x00\x00\xaa\x7f4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2\xe1\x00\x00\x00\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000340), 0x204d00, 0x0) ioctl$TIOCGSERIAL(r10, 0x541e, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/4096}) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TIOCVHANGUP(r11, 0x5437, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9034, 0x10}}, 0x20}}, 0x8000) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="c7fcffff0206010200000000000000000a00000105004100070000000500050004000000"], 0x24}}, 0x0) 1.184224141s ago: executing program 3 (id=486): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f00000004c0)=0x6) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 1.083444282s ago: executing program 3 (id=487): syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @random="008212924e1f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x7}}}}}, 0x0) r0 = syz_clone(0x4820000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FITRIM(r1, 0xff0a, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @void}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'tunl0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x7ff, 0xffffffff, {{0x10, 0x4, 0x2, 0x1d, 0x40, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp={0x44, 0x28, 0x20, 0x0, 0xb, [0x7ff, 0x1000, 0xc5, 0x4, 0x3ff, 0x2, 0x0, 0x8, 0x3]}]}}}}}) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000840), 0x10000, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@generic={0x1, 0x0, 0x5, 0x6}, @jmp={0x5, 0x1, 0xd, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xc7, &(0x7f0000000440)=""/199, 0x41000, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xd, 0x200, 0x30000}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000900)=[r6, r7], &(0x7f0000000940)=[{0x5, 0x2, 0x2, 0xb}, {0x1, 0x5, 0x9, 0x9}, {0x4, 0x1, 0xf, 0x3}, {0x5, 0x1, 0xd, 0x1}, {0x0, 0x4, 0x3, 0x9}, {0x2, 0x1, 0x2, 0xc}, {0x5, 0x1, 0x9}, {0x5, 0x4, 0xe, 0x9}], 0x10, 0x4}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x71bd28, 0x25dfdbfe, {0xa, 0x10, 0x71}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) file_setattr(0xffffffffffffffff, &(0x7f0000000a80)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', &(0x7f0000000ac0)={0x2000, 0x4, 0xfff, 0x4, 0x10001}, 0x18, 0x400) ioctl$VIDIOC_S_FBUF(r10, 0x402c560b, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)="bbf6e3f524ec28b878e95edca4a2b40f8938430f84a67915d0380e55597ba1e0a02c550422c411476ef514aa2515c2284b95c83ad71abd152ce2591586ec", {0x3, 0x1, 0x38416761, 0x2, 0x5, 0x16db, 0x6, 0x1ff}}) r11 = syz_usb_connect$uac3(0x5, 0x9c, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x4064, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x7e, 0x20, 0xf1, {0x8, 0xb, 0x1, 0x0, 0x1, 0x23, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9c}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x1, 0x5, {0xa, 0x25, 0x25, 0x9, 0x91, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x34}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x401, 0xa, 0x5, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x6, 0x16, {0xa, 0x25, 0x25, 0x1, 0x8, 0x8}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x7, 0x81, 0x9, 0x40, 0x37}, 0x28, &(0x7f0000000300)={0x5, 0xf, 0x28, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x9, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x3, 0x401, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x0, 0x9ee1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xa, 0x4, 0x6}]}, 0x6, [{0x8d, &(0x7f0000000380)=@string={0x8d, 0x3, "7f64bd858ec4c174fa9e5ada381c609dadb6fe607a96016afc5302596662de3cc1ec4e70a4aa9e0e28440131c9b6e0f4571d861b1f72a7ec603d38e2f42edcde520dee10a7a071752c99a1b3d22544e431ec0b17a8aaddcc9233fedef48a31ada990959c3dbc087ddccfb323eb4011b8aa0d49dec47f00bc766367f51f1f7631f39ca049a2cf5b0049747c"}}, {0x0, 0x0}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x48}}, {0xb, &(0x7f00000005c0)=@string={0xb, 0x3, "5a1c41342fec266888"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_disconnect(r11) write(r10, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) 881.10681ms ago: executing program 2 (id=492): r0 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nofsc']) (async) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nofsc']) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 794.635137ms ago: executing program 2 (id=493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0xf8}, @val={0x4, 0x3, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa0100fd, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="48006d6300001200"/20, @ANYRES32=0x0, @ANYBLOB="4848060000000000140012800a000100767863616e000000000002801400030070696d36726567310000000000000000"], 0x48}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd26, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x88e5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe5b7, 0x904, 0x5, 0x5e0, 0x2}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003280)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB="210201000000d8e664359dc400001400350064756d090000000000000000000000000500"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 664.39717ms ago: executing program 2 (id=494): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, &(0x7f0000000040)=""/216, 0xd8, 0x2003, &(0x7f0000000140)={0xa, 0x4e20, 0xa, @local, 0xc8}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000000000)="68000000320005050100000000000000000000005400018050000180090001006761746500000000400002801800020003000000000000000000000000000000000000001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 664.081649ms ago: executing program 2 (id=495): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000fa0000000000000000000004000000000a0060803b"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x80a0000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0xff, 0x0, 0xd}, {0xeeee0000, 0xeeee1000, 0xc, 0x3, 0x7, 0xc4, 0x3, 0x1, 0x48, 0x3, 0x5, 0x3}, {0x1, 0xffff1000, 0x9, 0x0, 0x1, 0x0, 0xb, 0x0, 0x8, 0x0, 0x4, 0xd}, {0x6000, 0xffff1000, 0x3, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x50000, 0x4, 0x0, 0x34, 0x5, 0x2, 0xd, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0x8, 0x4, 0x0, 0x2, 0xa1, 0x20, 0x0, 0x82}, {0x0, 0x6000, 0x10, 0xfc, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x1}, {0xeeef0000, 0x3}, {0x6000, 0x2}, 0x5df8ffe2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, [0x80000002, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 463.924154ms ago: executing program 2 (id=496): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b45, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@loopback}}}]}, 0x38}}, 0x40080) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCFLSH(r0, 0x4b45, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000002d350000000000006507000002000000070700004a0000007d75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b672d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@loopback}}}]}, 0x38}}, 0x40080) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) (async) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) (async) 463.316846ms ago: executing program 2 (id=497): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000000)) memfd_create(&(0x7f0000000040)='{\']\x1c![[h\x00', 0x2) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000180)={r3, 0x20000, 0x4, 0x7, 0x1, [0x0, r4], [0x4, 0x401, 0x80000001, 0x3], [0x5, 0x4, 0x81, 0x4], [0x7, 0x7, 0x2, 0x3]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x10b802, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000240)={0x1, 0x0, [{0x80000019, 0xa7, 0x2, 0x2, 0x2, 0x9, 0x9}]}) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000280)) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000680)={0x4, 0x3}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000700)={0x0, 0x8}, 0x8) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000740), 0x282200, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000008}, 0x20048080) connect$tipc(r8, &(0x7f00000008c0)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}, 0x4}}, 0x10) ioctl$sock_proto_private(r8, 0x89ea, &(0x7f0000000900)="677e44a569331446f4d35624da1dab0800ec2c0e403b7b384f4fe2b378815660ca5d2968ce") r9 = landlock_create_ruleset(&(0x7f0000000940)={0x8200, 0x4, 0x0, 0x418, 0x6, 0x2}, 0x30, 0x1) landlock_restrict_self(r9, 0x0) tee(r0, r6, 0x0, 0x1) tee(r9, 0xffffffffffffffff, 0x4a, 0x4) r10 = syz_usb_connect$midi(0x4, 0xf6, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x1, 0x1, 0x5, 0x70, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x4, [@midi_out_jack={0x13, 0x24, 0x3, 0x3, 0xb, 0x6, [{0x2, 0x9}, {0x3, 0x8}, {0x4, 0x1}, {0x1, 0x7f}, {0x3, 0x5}, {0x2, 0xe3}], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x7fff, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x400, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x10, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x0, 0x8}, @midi_out_jack={0x1b, 0x24, 0x3, 0x1, 0x1, 0xa, [{0x4, 0x7}, {0xa, 0xa}, {0x1, 0x4}, {0x8, 0x9}, {0x2, 0x4}, {0x9, 0xd1}, {0x2, 0xf}, {0x9, 0x4}, {0xbb, 0x47}, {0x40, 0xd6}], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x2, 0x80}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x6, 0x7f, 0x6, {0xf, 0x25, 0x1, 0xb, "eb47e533d71c5896dab093"}}}, {{0x9, 0x5, 0x85, 0x0, 0x8, 0x0, 0xb, 0x7, {0xd, 0x25, 0x1, 0x9, "6a9ad6410a630bb57c"}}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x0, 0x9, 0x4, {0xd, 0x25, 0x1, 0x9, "8b087e2346fa5ddb1d"}}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xfd, 0x0, 0x8, {0x9, 0x25, 0x1, 0x5, "cec8965665"}}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x9, 0x4, 0x9, {0x4}}}, {{0x9, 0x5, 0x82, 0x0, 0x20, 0xfe, 0x7, 0x2, {0x9, 0x25, 0x1, 0x5, "094dd9fffb"}}}]}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x110, 0x2, 0x7f, 0xe0, 0x40, 0x4}, 0x12, &(0x7f0000000ac0)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0xf8, 0xe}]}, 0x2, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1c09}}]}) syz_usb_control_io(r10, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x0, 0x8, 0xb7, {0xb7, 0x4, "93fa49f16f12bf38cfc62f09deed4c6a189be13b672bae965dd7d586a623123304db25bc65c34fe683ba0e1d2d300883736bd380395c2e8df39c122df18784cbebfb8f51fe61b73de5f8de5fee6b828ff746bc60e073b036918b293c8fc993d80d83563bf393a8e2a010bf94dae514fdc6ae6688e562deeac5b77a5a836bf9f6af071646ad5a8ea39848fc19685a8a150092172201aa6d3d399c3aca1d01eda54b6e0c11a6f5ee499f806480cb82e21063d31c0594"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}, &(0x7f0000000cc0)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x6c, 0x6, 0x9, 0xf00, 0xe, [0x0, 0xc000, 0xc0cf, 0x30, 0xfe80c0, 0x1bf00]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "34a9b80c2cd9c61b2ad07077835315b2"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x85, 0x8, 0x6, 0x52, 0xe}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x50, 0x0, 0x8, 0xc, "2186edcf", "8847705c"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x69, 0x4, 0xd, 0x34, 0xb, 0x0, 0x4}}}, &(0x7f0000001200)={0x84, &(0x7f0000000e00)={0x0, 0x14, 0x32, "9a85aa159bebcaf99c7c18cc7e22e9359288444f94183876beea481dca2647fc686bcde7c9e6357b0bda26f716aeb6904c41"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000f00)={0x20, 0x0, 0x8, {0x40, 0x0, [0x0]}}, &(0x7f0000000f40)={0x40, 0x7, 0x2, 0xfff8}, &(0x7f0000000f80)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "8abf"}, &(0x7f0000001000)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000001040)={0x40, 0x13, 0x6, @random="ef442c42c9f6"}, &(0x7f0000001080)={0x40, 0x17, 0x6, @random="68749ee96e16"}, &(0x7f00000010c0)={0x40, 0x19, 0x2, "0002"}, &(0x7f0000001100)={0x40, 0x1a, 0x2}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001180)={0x40, 0x1e, 0x1}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x4}}) fanotify_init(0xc, 0x101000) sendmsg$AUDIT_ADD_RULE(r8, &(0x7f00000017c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001780)={&(0x7f0000001300)={0x444, 0x3f3, 0x400, 0x70bd2d, 0x25dfdbfd, {0x6, 0x2, 0x33, [0x5, 0x0, 0xfffffffd, 0x1000, 0x9, 0x0, 0x80, 0x8000, 0x2, 0x2, 0x8000, 0x2, 0x4, 0x8, 0x5, 0xffffffff, 0x8, 0xb, 0xfffffdd7, 0x4, 0x5, 0x1000, 0x0, 0xffffffff, 0x2, 0x0, 0x8001, 0x5, 0x1, 0x9, 0x7, 0x5, 0x5, 0x0, 0x3, 0x1, 0x800, 0x475f, 0x4, 0x5, 0x200, 0x5, 0x4, 0xcf3d, 0x5, 0x6, 0x3, 0xd0, 0x7, 0xdd1f, 0xffffffc0, 0xfffffff7, 0xffff, 0xfffffffd, 0x5, 0x4, 0x6, 0x7, 0xad, 0x8, 0x3, 0x10001, 0xbe, 0xfffffff6], [0x9, 0x6, 0x10, 0x200, 0xffffffc0, 0x1, 0x20abc2f, 0x7fff, 0x7, 0x284, 0x3, 0x6, 0x1, 0xfffffffb, 0x8, 0xe, 0x9, 0x4, 0x9, 0x1, 0x8, 0x5, 0x90000000, 0x8001, 0x3, 0x5, 0x8, 0x3, 0x80000001, 0x4, 0x3, 0x9, 0x79b0, 0x0, 0x1, 0x7, 0x40, 0x3ff, 0xffff8000, 0xffffffff, 0x91, 0x8, 0x6a7, 0xfa, 0x4, 0x1, 0x401, 0x80000000, 0x1, 0x0, 0x4, 0x66bd, 0x3, 0x1, 0x5, 0x742, 0x2c8, 0x2, 0x10, 0xc0, 0xffffffff, 0x91c, 0x0, 0x2], [0x9, 0x9, 0x81, 0xfffffff9, 0x0, 0x1, 0x2, 0x1ff, 0x9, 0xfffffffb, 0xff, 0x98, 0x5, 0x8, 0x0, 0x6, 0x7ff, 0x9a, 0x0, 0xb, 0x5, 0x3, 0x8, 0x3, 0x2, 0x8, 0xa, 0x7f, 0x4, 0x8, 0x0, 0x79, 0x7c, 0x1, 0x1, 0x3, 0x7fff, 0x270, 0x3, 0x0, 0xd13c, 0xcc63, 0x800, 0x3, 0x4, 0x9, 0x5, 0x4, 0x2d7, 0x7fff, 0xc0, 0xffff, 0x8, 0x1, 0x1, 0x9, 0xa, 0x3, 0x10, 0xfffffff5, 0x1, 0x400, 0x71, 0x3], [0x27, 0x2, 0x80000000, 0x8, 0x3, 0x8, 0x100, 0x8000, 0x9, 0x1, 0x7916, 0xffffffff, 0x800, 0x7, 0x4, 0x7, 0x2, 0x4, 0x3, 0x4, 0x1c1, 0x4, 0x68, 0x20e5, 0x3, 0xfffffe00, 0x9, 0x10, 0xba3, 0x6, 0x776, 0xffffffff, 0xfffff001, 0x1f5, 0x4, 0x3, 0x2, 0x4, 0x4a2, 0x800, 0x2, 0xc54f, 0xa6a, 0x80000001, 0x10, 0x400, 0xffff, 0x36, 0x8001, 0x3, 0x7, 0x3e5985b9, 0x4, 0x340, 0x3ff, 0x0, 0xfffffff8, 0x5, 0x3, 0xe0c6, 0x0, 0x6b1, 0x1, 0x2], 0x23, ['/dev/btrfs-control\x00', '*^\x00', '^\x00', '{\']\x1c![[h\x00', '\xa7\x00']}, [""]}, 0x444}, 0x1, 0x0, 0x0, 0x4044010}, 0x40001) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r8, 0xc028644b, &(0x7f0000001800)={0x0, 0xe, 0x760000, 0x0, 0x4, 0x0, 0x100000000, 0xa}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r8, 0xc008644c, &(0x7f0000001840)={r11}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000001980)={&(0x7f0000001880)=[0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0], &(0x7f0000001940)=[0x0, 0x0, 0x0], 0x1, 0xa, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000001b40)={&(0x7f0000001b00)=[0x0, 0x0, r12, 0x0, 0x0], 0x5, r2, r3, 0xd, 0x2, 0xd, 0x80000000, {0x1, 0x8, 0x5, 0xffff, 0x5, 0x7ff, 0x333, 0x0, 0x2b, 0x3, 0xd7, 0x1, 0x3, 0x7fff, "ec7b41b499ec19190ce1610adc37bf1f73bb28b87a5504b394e7d0477504bc6b"}}) 74.73209ms ago: executing program 1 (id=498): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x17c, 0x1a, 0x1, 0xfffffffd, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@local, 0xfffc}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x1}, {0x3}, {0x0, 0x7}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x89, 0x1, {{'sha1\x00'}, 0x208, "3cbfd71c56bfe9361d559cf01c6654b099b32c0048344c16247c6463bfd17cae07092b5aa016ff5cecaf65f2a3f2b0bf5e52a5f316c7b7fa43647ee9c90faa33e5"}}]}, 0x17c}}, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) write(r1, &(0x7f0000000200)='1', 0x1) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000180)=0x7) (async) statx(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x400, &(0x7f0000000240)) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x5, 0x9, 0x100000000, 0x9, 0x4, 0xc, 0x0, 0x9, 0x416e8174, 0x1ff, 0x23, 0x3cb, 0x6, 0x8, 0x5], 0x4}) 74.357596ms ago: executing program 1 (id=499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) fgetxattr(r2, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = semget(0x3, 0x4, 0x39c) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000280)) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25170000000c00068008000600"], 0x20}}, 0x0) 0s ago: executing program 1 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x797) ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000000140)={{0xeeef0000, 0x58000, 0x4, 0x9, 0x7f, 0xe3, 0x81, 0x8, 0x0, 0xa8, 0x4, 0xb}, {0xd000, 0x10000, 0xb, 0x3, 0x1, 0x7, 0x5, 0x6, 0x1, 0x4, 0xfa, 0xa}, {0xe000, 0x8000000, 0x4, 0x4, 0x15, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0xc1}, {0x0, 0xeeef0000, 0x1b, 0x9, 0x1, 0xfa, 0x0, 0x7a, 0xfa, 0x29, 0x9, 0x9}, {0x6000, 0x70000, 0xe, 0x9, 0x1, 0x2, 0x7, 0x8, 0x41, 0x2, 0x0, 0x8}, {0x4000, 0x60000, 0xf, 0x2, 0xad, 0x2, 0x5, 0x1, 0x10, 0xe, 0x9, 0xa}, {0x10000, 0x10000, 0x10, 0x0, 0x1, 0x4, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0x41000, 0xeeef0000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0xfd, 0x5, 0x7, 0x2, 0x8}, {0x100000, 0x405}, {0xdddd1000, 0xff7e}, 0xe0000031, 0x0, 0x6000, 0x61, 0x5, 0xa800, 0x800f900, 0x1, [0x6257, 0x2, 0x8000000000000003, 0xc]}) close(r1) fcntl$setstatus(r1, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r1, 0x8, r5) io_setup(0x8, &(0x7f0000000b40)=0x0) io_pgetevents(r6, 0x6, 0x6, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa88a}]}}}]}, 0x3c}}, 0x4008080) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x24, 0x4, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @pid=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.702872][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 39.702891][ T42] audit: type=1400 audit(1787181627.797:119): avc: denied { write } for pid=5637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.774150][ T42] audit: type=1400 audit(1787181627.867:120): avc: denied { write } for pid=5640 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.858771][ T42] audit: type=1400 audit(1787181627.947:121): avc: denied { write } for pid=5643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.914749][ T42] audit: type=1400 audit(1787181628.007:122): avc: denied { write } for pid=5646 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.721279][ T42] audit: type=1400 audit(1787181628.817:123): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.782196][ T42] audit: type=1400 audit(1787181628.877:124): avc: denied { write } for pid=5654 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.981150][ T42] audit: type=1400 audit(1787181629.077:125): avc: denied { mounton } for pid=5636 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 40.990702][ T42] audit: type=1400 audit(1787181629.087:126): avc: denied { mount } for pid=5636 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.001278][ T5636] cgroup: Unknown subsys name 'net' [ 41.005550][ T42] audit: type=1400 audit(1787181629.097:127): avc: denied { unmount } for pid=5636 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.024077][ T42] audit: type=1400 audit(1787181629.117:128): avc: denied { write } for pid=5658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.154259][ T5636] cgroup: Unknown subsys name 'cpuset' [ 41.160491][ T5636] cgroup: Unknown subsys name 'rlimit' [ 41.422195][ T5664] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.174535][ T5636] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.018881][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 46.018895][ T42] audit: type=1400 audit(1787181634.107:159): avc: denied { execmem } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.208531][ T42] audit: type=1400 audit(1787181634.297:161): avc: denied { create } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.217251][ T42] audit: type=1400 audit(1787181634.297:160): avc: denied { create } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.226768][ T42] audit: type=1400 audit(1787181634.297:162): avc: denied { read write } for pid=5720 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.236674][ T42] audit: type=1400 audit(1787181634.297:163): avc: denied { read write } for pid=5721 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.245871][ T5722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.246853][ T42] audit: type=1400 audit(1787181634.297:164): avc: denied { open } for pid=5720 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.253962][ T5726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.258030][ T5724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.258628][ T42] audit: type=1400 audit(1787181634.317:165): avc: denied { ioctl } for pid=5720 comm="syz-executor" path="socket:[4078]" dev="sockfs" ino=4078 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.260259][ T5724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.261484][ T5724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.261731][ T5724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.263150][ T5724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.264609][ T5736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.265482][ T5726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.265783][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.266916][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.267928][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.268385][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.275377][ T5724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.276081][ T5736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.278876][ T5726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.279505][ T5726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.281666][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.281813][ T5724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.291964][ T42] audit: type=1400 audit(1787181634.377:166): avc: denied { read } for pid=5721 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.297117][ T5726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.297397][ T42] audit: type=1400 audit(1787181634.377:167): avc: denied { open } for pid=5721 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.328919][ T42] audit: type=1400 audit(1787181634.377:168): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.835111][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.838912][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.842374][ T5721] bridge_slave_0: entered allmulticast mode [ 46.846396][ T5721] bridge_slave_0: entered promiscuous mode [ 46.876527][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.879875][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.883098][ T5721] bridge_slave_1: entered allmulticast mode [ 46.887063][ T5721] bridge_slave_1: entered promiscuous mode [ 46.951412][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.972322][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.975446][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.978494][ T5731] bridge_slave_0: entered allmulticast mode [ 46.985026][ T5731] bridge_slave_0: entered promiscuous mode [ 46.991592][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.006943][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.009212][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.015430][ T5731] bridge_slave_1: entered allmulticast mode [ 47.018576][ T5731] bridge_slave_1: entered promiscuous mode [ 47.085167][ T5721] team0: Port device team_slave_0 added [ 47.088348][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.093371][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.096405][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.098865][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.101661][ T5729] bridge_slave_0: entered allmulticast mode [ 47.104573][ T5729] bridge_slave_0: entered promiscuous mode [ 47.108189][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.110868][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.113131][ T5729] bridge_slave_1: entered allmulticast mode [ 47.115832][ T5729] bridge_slave_1: entered promiscuous mode [ 47.126625][ T5721] team0: Port device team_slave_1 added [ 47.165167][ T5731] team0: Port device team_slave_0 added [ 47.192349][ T5731] team0: Port device team_slave_1 added [ 47.197132][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.204279][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.217631][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.220790][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.231559][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.246988][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.249281][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.257591][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.329366][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.332449][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.342958][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.349542][ T5729] team0: Port device team_slave_0 added [ 47.355794][ T5729] team0: Port device team_slave_1 added [ 47.358342][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.361806][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.364883][ T5720] bridge_slave_0: entered allmulticast mode [ 47.368835][ T5720] bridge_slave_0: entered promiscuous mode [ 47.374523][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.377676][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.381262][ T5720] bridge_slave_1: entered allmulticast mode [ 47.385273][ T5720] bridge_slave_1: entered promiscuous mode [ 47.390412][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.393473][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.404675][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.451054][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.454034][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.464699][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.483915][ T5721] hsr_slave_0: entered promiscuous mode [ 47.486522][ T5721] hsr_slave_1: entered promiscuous mode [ 47.491158][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.494125][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.504387][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.512777][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.545957][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.566519][ T5731] hsr_slave_0: entered promiscuous mode [ 47.569753][ T5731] hsr_slave_1: entered promiscuous mode [ 47.572871][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 47.576245][ T5731] Cannot create hsr debugfs directory [ 47.651708][ T5720] team0: Port device team_slave_0 added [ 47.702137][ T5720] team0: Port device team_slave_1 added [ 47.709635][ T5729] hsr_slave_0: entered promiscuous mode [ 47.713048][ T5729] hsr_slave_1: entered promiscuous mode [ 47.715949][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 47.718416][ T5729] Cannot create hsr debugfs directory [ 47.764022][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.766768][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.776449][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.804278][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.807334][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.817870][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.944435][ T5720] hsr_slave_0: entered promiscuous mode [ 47.948433][ T5720] hsr_slave_1: entered promiscuous mode [ 47.951149][ T5720] debugfs: 'hsr0' already exists in 'hsr' [ 47.953318][ T5720] Cannot create hsr debugfs directory [ 48.055052][ T5721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.062265][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.080470][ T5721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.085289][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.088150][ T5721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.092621][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.095711][ T5721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.099787][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.199813][ T5729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.204029][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.206991][ T5729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.213185][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.217039][ T5729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.221874][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.224880][ T5729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.230757][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.292287][ T5722] Bluetooth: hci0: command tx timeout [ 48.296662][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.300332][ T5722] Bluetooth: hci3: command tx timeout [ 48.304434][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.309096][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.314920][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.320879][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.324825][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.328393][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.333413][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.380384][ T5722] Bluetooth: hci1: command tx timeout [ 48.380548][ T5082] Bluetooth: hci2: command tx timeout [ 48.422024][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.425083][ T5720] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.428894][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.431854][ T5720] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.435542][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.450670][ T5720] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.456077][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.469720][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.473291][ T5720] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.478125][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.517281][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.535641][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.539159][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.546409][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.563750][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.566807][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.586101][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.588797][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.592713][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.594818][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.623652][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.708239][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.729133][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.732284][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.747445][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.750563][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.779800][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.823343][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.837831][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.840986][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.861762][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.864884][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.077284][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.124105][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.149826][ T5721] veth0_vlan: entered promiscuous mode [ 49.170653][ T5721] veth1_vlan: entered promiscuous mode [ 49.207712][ T5729] veth0_vlan: entered promiscuous mode [ 49.215239][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.227502][ T5729] veth1_vlan: entered promiscuous mode [ 49.245155][ T5721] veth0_macvtap: entered promiscuous mode [ 49.255695][ T5721] veth1_macvtap: entered promiscuous mode [ 49.282609][ T5729] veth0_macvtap: entered promiscuous mode [ 49.292649][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.300325][ T5729] veth1_macvtap: entered promiscuous mode [ 49.305225][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.320500][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.339612][ T5731] veth0_vlan: entered promiscuous mode [ 49.346881][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.364833][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.368585][ T5731] veth1_vlan: entered promiscuous mode [ 49.410408][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.468912][ T5720] veth0_vlan: entered promiscuous mode [ 49.469613][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.475954][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.506601][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.510331][ T5731] veth0_macvtap: entered promiscuous mode [ 49.510573][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.519650][ T5720] veth1_vlan: entered promiscuous mode [ 49.543788][ T5731] veth1_macvtap: entered promiscuous mode [ 49.568140][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.572663][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.578301][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.582523][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.594813][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.604606][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.615777][ T5720] veth0_macvtap: entered promiscuous mode [ 49.628309][ T5720] veth1_macvtap: entered promiscuous mode [ 49.640287][ T5576] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.643667][ T5729] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.643667][ T5721] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.661072][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.673559][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.682904][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.691648][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.707772][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.721592][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.750478][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.753246][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.757383][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.823982][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.826872][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.843250][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.846463][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.888103][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.895510][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.931980][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.934844][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.937615][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.942372][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.970781][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.975525][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.991349][ T5876] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 50.020207][ T5576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.024888][ T5576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.032233][ T5576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.285907][ T5898] kAFS: bad VL server IP address [ 50.345373][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 50.345783][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 50.357430][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13'. [ 50.359047][ T5906] xfrm1: entered promiscuous mode [ 50.362812][ T5905] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13'. [ 50.365650][ T5906] xfrm1: entered allmulticast mode [ 50.369685][ T5908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'. [ 50.370371][ T5082] Bluetooth: hci3: command tx timeout [ 50.370546][ T5722] Bluetooth: hci0: command tx timeout [ 50.381134][ T5906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14'. [ 50.386262][ T5908] team0: Device xfrm0 is of different type [ 50.413876][ T5908] tipc: Started in network mode [ 50.415603][ T5908] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 50.418587][ T5908] tipc: Enabled bearer , priority 0 [ 50.423055][ T5910] capability: warning: `syz.0.16' uses 32-bit capabilities (legacy support in use) [ 50.450773][ T5082] Bluetooth: hci1: command tx timeout [ 50.451387][ T5722] Bluetooth: hci2: command tx timeout [ 50.473265][ T5912] netlink: 56 bytes leftover after parsing attributes in process `syz.2.17'. [ 50.707196][ T5926] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 50.713726][ T5930] /dev/sg0: Can't lookup blockdev [ 50.732584][ T5930] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 50.835554][ T5722] Bluetooth: hci0: Malformed LE Event: 0x0b [ 50.916400][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'. [ 50.932750][ T5934] vlan2: entered promiscuous mode [ 50.935225][ T5934] erspan0: entered promiscuous mode [ 50.964800][ T5936] ieee802154 phy0 wpan0: encryption failed: -22 [ 50.980620][ T5940] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 51.004873][ T5940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.023477][ T5933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.029690][ T42] kauditd_printk_skb: 100 callbacks suppressed [ 51.029708][ T42] audit: type=1400 audit(1787181639.117:269): avc: denied { write } for pid=5941 comm="syz.0.26" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.321601][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.382337][ T5955] CIFS mount error: No usable UNC path provided in device string! [ 51.382337][ T5955] [ 51.386920][ T5955] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 51.392088][ T42] audit: type=1400 audit(1787181639.487:270): avc: denied { create } for pid=5954 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.399485][ T42] audit: type=1400 audit(1787181639.487:271): avc: denied { shutdown } for pid=5954 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.407657][ T42] audit: type=1400 audit(1787181639.487:272): avc: denied { getopt } for pid=5954 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.416096][ T42] audit: type=1400 audit(1787181639.487:273): avc: denied { connect } for pid=5954 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.423159][ T9] tipc: Node number set to 11578026 [ 51.423654][ T42] audit: type=1400 audit(1787181639.487:274): avc: denied { name_connect } for pid=5954 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 51.433276][ T42] audit: type=1400 audit(1787181639.487:275): avc: denied { setopt } for pid=5954 comm="syz.2.31" lport=41987 faddr=fc02:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.444420][ T42] audit: type=1400 audit(1787181639.537:276): avc: denied { read write } for pid=5956 comm="syz.2.32" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.445744][ T5957] sg_write: data in/out 32733/14 bytes for SCSI command 0x0-- guessing data in; [ 51.445744][ T5957] program syz.2.32 not setting count and/or reply_len properly [ 51.453311][ T42] audit: type=1400 audit(1787181639.537:277): avc: denied { open } for pid=5956 comm="syz.2.32" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.453338][ T42] audit: type=1400 audit(1787181639.537:278): avc: denied { create } for pid=5956 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.482457][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 51.489839][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.493813][ T24] usb 5-1: Product: syz [ 51.495551][ T24] usb 5-1: Manufacturer: syz [ 51.497485][ T24] usb 5-1: SerialNumber: syz [ 51.525001][ T5960] /dev/sg0: Can't lookup blockdev [ 51.547110][ T5869] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 51.609621][ T5962] FAULT_INJECTION: forcing a failure. [ 51.609621][ T5962] name fail_futex, interval 1, probability 0, space 0, times 1 [ 51.614062][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz.1.34 Not tainted syzkaller #0 PREEMPT(full) [ 51.614079][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.614087][ T5962] Call Trace: [ 51.614099][ T5962] [ 51.614104][ T5962] dump_stack_lvl+0x100/0x190 [ 51.614174][ T5962] should_fail_ex.cold+0x5/0xa [ 51.614193][ T5962] get_futex_key+0x1d0/0x14f0 [ 51.614223][ T5962] ? __pfx_get_futex_key+0x10/0x10 [ 51.614240][ T5962] ? ttwu_queue_wakelist+0x2fd/0x450 [ 51.614261][ T5962] ? __smp_call_single_queue+0x17e/0x450 [ 51.614280][ T5962] ? __pfx___smp_call_single_queue+0x10/0x10 [ 51.614299][ T5962] futex_wait_setup+0x91/0x540 [ 51.614318][ T5962] __futex_wait+0x19f/0x300 [ 51.614333][ T5962] ? __pfx___futex_wait+0x10/0x10 [ 51.614345][ T5962] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.614361][ T5962] ? futex_hash+0x311/0x400 [ 51.614377][ T5962] ? __pfx_futex_wake_mark+0x10/0x10 [ 51.614392][ T5962] ? find_held_lock+0x2b/0x80 [ 51.614403][ T5962] ? futex_wake+0x4ea/0x5e0 [ 51.614419][ T5962] futex_wait+0xe6/0x370 [ 51.614431][ T5962] ? __pfx_futex_wait+0x10/0x10 [ 51.614447][ T5962] ? rcu_read_lock_any_held+0x6a/0x90 [ 51.614459][ T5962] ? find_held_lock+0x2b/0x80 [ 51.614470][ T5962] ? ksys_write+0x190/0x250 [ 51.614489][ T5962] ? ksys_write+0x190/0x250 [ 51.614502][ T5962] do_futex+0x265/0x440 [ 51.614512][ T5962] ? __pfx_do_futex+0x10/0x10 [ 51.614531][ T5962] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 51.614569][ T5962] __x64_sys_futex+0x34f/0x4d0 [ 51.614582][ T5962] ? fput+0x7c/0x100 [ 51.614599][ T5962] ? __pfx___x64_sys_futex+0x10/0x10 [ 51.614610][ T5962] ? ksys_write+0x1ac/0x250 [ 51.614624][ T5962] ? __pfx_ksys_write+0x10/0x10 [ 51.614640][ T5962] do_syscall_64+0x123/0x790 [ 51.614653][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.614668][ T5962] RIP: 0033:0x7f95c0d9e0d9 [ 51.614680][ T5962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.614691][ T5962] RSP: 002b:00007f95c1bdb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 51.614710][ T5962] RAX: ffffffffffffffda RBX: 00007f95c1025fa8 RCX: 00007f95c0d9e0d9 [ 51.614717][ T5962] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f95c1025fa8 [ 51.614725][ T5962] RBP: 00007f95c1025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 51.614732][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.614739][ T5962] R13: 00007f95c1026038 R14: 00007ffc1c7f6f30 R15: 00007ffc1c7f7018 [ 51.614755][ T5962] [ 51.907437][ T5969] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 51.981311][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 51.981529][ T5974] i2c i2c-1: dvb_frontend_start: failed to start kthread (-4) [ 52.111747][ T5986] warning: `syz.2.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.305287][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.308905][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.450158][ T5722] Bluetooth: hci0: command tx timeout [ 52.450694][ T5082] Bluetooth: hci3: command tx timeout [ 52.530122][ T5722] Bluetooth: hci1: command tx timeout [ 52.530303][ T5082] Bluetooth: hci2: command tx timeout [ 52.611431][ T5869] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 52.615540][ T5869] ath9k_htc: Failed to initialize the device [ 52.637312][ T5869] usb 5-1: ath9k_htc: USB layer deinitialized [ 52.652804][ T5869] usb 5-1: USB disconnect, device number 2 [ 53.255089][ T6001] /dev/sg0: Can't lookup blockdev [ 53.314436][ T6001] socket: no more sockets [ 53.355399][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.46'. [ 53.362385][ T6005] netlink: 'syz.2.46': attribute type 3 has an invalid length. [ 53.392762][ T6009] Zero length message leads to an empty skb [ 53.465706][ T6021] program syz.2.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.470344][ T1474] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 53.498012][ T6023] hsr_slave_0: left promiscuous mode [ 53.506257][ T6023] hsr_slave_1: left promiscuous mode [ 53.600188][ T1474] usb 6-1: device descriptor read/64, error -71 [ 53.675456][ T6034] /dev/sg0: Can't lookup blockdev [ 53.701172][ T6039] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 53.765797][ T6044] fuse: Invalid rootmode [ 53.769084][ T6043] netlink: 'syz.2.61': attribute type 1 has an invalid length. [ 53.769084][ T6044] netlink: 'syz.2.61': attribute type 1 has an invalid length. [ 53.850068][ T1474] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 53.906008][ T6053] Bluetooth: MGMT ver 1.23 [ 53.908394][ T6053] Bluetooth: hci0: unsupported parameter 256 [ 53.911261][ T6053] Bluetooth: hci0: invalid len left 4, exp >= 7 [ 53.980160][ T1474] usb 6-1: device descriptor read/64, error -71 [ 54.092899][ T1474] usb usb6-port1: attempt power cycle [ 54.169889][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803573b000: rx timeout, send abort [ 54.340858][ T6055] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 54.355828][ T6055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.372906][ T6055] bond1: (slave geneve2): making interface the new active one [ 54.376451][ T6055] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 54.430085][ T1474] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 54.452453][ T1474] usb 6-1: device descriptor read/8, error -71 [ 54.530712][ T5082] Bluetooth: hci0: command tx timeout [ 54.530762][ T5722] Bluetooth: hci3: command tx timeout [ 54.559324][ T6060] netlink: 'syz.2.68': attribute type 2 has an invalid length. [ 54.562385][ T6060] netlink: 'syz.2.68': attribute type 2 has an invalid length. [ 54.610498][ T5082] Bluetooth: hci1: command tx timeout [ 54.610850][ T5722] Bluetooth: hci2: command tx timeout [ 54.670895][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888040b31800: rx timeout, send abort [ 54.674231][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803573b000: abort rx timeout. Force session deactivation [ 54.700085][ T1474] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 54.730571][ T1474] usb 6-1: device descriptor read/8, error -71 [ 54.852261][ T1474] usb usb6-port1: unable to enumerate USB device [ 55.172340][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888040b33000: rx timeout, send abort [ 55.176404][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888040b31800: abort rx timeout. Force session deactivation [ 55.274776][ T6081] dns_resolver: Unsupported server list version (0) [ 55.675837][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888040b33000: abort rx timeout. Force session deactivation [ 55.725527][ T6090] __nla_validate_parse: 2 callbacks suppressed [ 55.725546][ T6090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.76'. [ 55.857029][ T6092] overlayfs: workdir and upperdir must be separate subtrees [ 56.042659][ T42] kauditd_printk_skb: 65 callbacks suppressed [ 56.042671][ T42] audit: type=1400 audit(1787181644.137:344): avc: denied { unmount } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 56.054831][ T42] audit: type=1400 audit(1787181644.147:345): avc: denied { setopt } for pid=6102 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.079623][ T42] audit: type=1400 audit(1787181644.167:346): avc: denied { read write } for pid=6110 comm="syz.2.84" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 56.086978][ T42] audit: type=1400 audit(1787181644.167:347): avc: denied { open } for pid=6110 comm="syz.2.84" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 56.094238][ T42] audit: type=1400 audit(1787181644.177:348): avc: denied { map } for pid=6110 comm="syz.2.84" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 56.115466][ T42] audit: type=1400 audit(1787181644.207:349): avc: denied { create } for pid=6114 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.189671][ T42] audit: type=1400 audit(1787181644.277:350): avc: denied { watch } for pid=6119 comm="syz.0.87" path="/22/control" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.342926][ T42] audit: type=1400 audit(1787181644.437:351): avc: denied { read } for pid=6137 comm="syz.0.91" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.351488][ T42] audit: type=1400 audit(1787181644.437:352): avc: denied { open } for pid=6137 comm="syz.0.91" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.419302][ T42] audit: type=1400 audit(1787181644.507:353): avc: denied { create } for pid=6144 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.445318][ T6147] block nbd0: NBD_DISCONNECT [ 56.650044][ T34] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 56.654699][ T6156] syz.2.97: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 56.662308][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: syz.2.97 Not tainted syzkaller #0 PREEMPT(full) [ 56.662325][ T6156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.662334][ T6156] Call Trace: [ 56.662338][ T6156] [ 56.662343][ T6156] dump_stack_lvl+0x100/0x190 [ 56.662367][ T6156] warn_alloc.cold+0x94/0xa8 [ 56.662380][ T6156] ? __pfx_warn_alloc+0x10/0x10 [ 56.662399][ T6156] ? kasan_save_stack+0x3f/0x50 [ 56.662417][ T6156] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 56.662429][ T6156] ? xskq_create+0x52/0x1d0 [ 56.662446][ T6156] ? xsk_setsockopt+0x743/0xab0 [ 56.662459][ T6156] ? do_sock_setsockopt+0xf3/0x1d0 [ 56.662493][ T6156] ? __sys_setsockopt+0x195/0x220 [ 56.662505][ T6156] ? __x64_sys_setsockopt+0xbd/0x160 [ 56.662518][ T6156] ? do_syscall_64+0x123/0x790 [ 56.662530][ T6156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.662545][ T6156] ? xskq_create+0xfb/0x1d0 [ 56.662563][ T6156] __vmalloc_node_range_noprof+0x136c/0x1630 [ 56.662589][ T6156] ? xskq_create+0xfb/0x1d0 [ 56.662610][ T6156] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 56.662633][ T6156] ? kasan_save_track+0x14/0x30 [ 56.662648][ T6156] ? __kasan_kmalloc+0xaa/0xb0 [ 56.662662][ T6156] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 56.662675][ T6156] ? xskq_create+0xfb/0x1d0 [ 56.662689][ T6156] vmalloc_user_noprof+0x9e/0xe0 [ 56.662706][ T6156] ? xskq_create+0xfb/0x1d0 [ 56.662721][ T6156] xskq_create+0xfb/0x1d0 [ 56.662737][ T6156] xsk_setsockopt+0x743/0xab0 [ 56.662752][ T6156] ? __pfx_xsk_setsockopt+0x10/0x10 [ 56.662767][ T6156] ? find_held_lock+0x2b/0x80 [ 56.662780][ T6156] ? __fget_files+0x215/0x3d0 [ 56.662802][ T6156] ? selinux_socket_setsockopt+0x6a/0x80 [ 56.662828][ T6156] ? __pfx_xsk_setsockopt+0x10/0x10 [ 56.662847][ T6156] do_sock_setsockopt+0xf3/0x1d0 [ 56.662863][ T6156] __sys_setsockopt+0x195/0x220 [ 56.662877][ T6156] __x64_sys_setsockopt+0xbd/0x160 [ 56.662893][ T6156] ? do_syscall_64+0xae/0x790 [ 56.662903][ T6156] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.662923][ T6156] do_syscall_64+0x123/0x790 [ 56.662936][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.662948][ T6156] RIP: 0033:0x7febfb59e0d9 [ 56.662961][ T6156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.662973][ T6156] RSP: 002b:00007febfc42c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 56.662984][ T6156] RAX: ffffffffffffffda RBX: 00007febfb825fa0 RCX: 00007febfb59e0d9 [ 56.662991][ T6156] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 56.662998][ T6156] RBP: 00007febfb635024 R08: 0000000000000004 R09: 0000000000000000 [ 56.663004][ T6156] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.663010][ T6156] R13: 00007febfb826038 R14: 00007febfb825fa0 R15: 00007ffd83148b18 [ 56.663024][ T6156] [ 56.663028][ T6156] Mem-Info: [ 56.770591][ T6156] active_anon:17442 inactive_anon:0 isolated_anon:0 [ 56.770591][ T6156] active_file:0 inactive_file:61178 isolated_file:0 [ 56.770591][ T6156] unevictable:1000 dirty:1990 writeback:0 [ 56.770591][ T6156] slab_reclaimable:11591 slab_unreclaimable:66104 [ 56.770591][ T6156] mapped:33823 shmem:11373 pagetables:1110 [ 56.770591][ T6156] sec_pagetables:294 bounce:0 [ 56.770591][ T6156] kernel_misc_reclaimable:0 [ 56.770591][ T6156] free:437965 free_pcp:22273 free_cma:0 [ 56.790083][ T6156] Node 0 active_anon:71292kB inactive_anon:0kB active_file:0kB inactive_file:244544kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:136868kB dirty:7956kB writeback:0kB shmem:45052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12960kB pagetables:4352kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 56.801441][ T6156] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 56.803680][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 56.814991][ T6156] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 56.817525][ T34] usb 6-1: config 0 has no interfaces? [ 56.827684][ T6156] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 56.832516][ T6156] Node 0 DMA32 free:85256kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:74916kB inactive_anon:12kB active_file:0kB inactive_file:244628kB unevictable:2000kB writepending:7948kB zspages:0kB present:2080628kB managed:1254752kB mlocked:0kB bounce:0kB free_pcp:85524kB local_pcp:26308kB free_cma:0kB [ 56.833653][ T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 56.844231][ T6156] lowmem_reserve[]: 0 0 0 0 0 [ 56.847399][ T6156] Node 1 Normal free:1647032kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:2144kB local_pcp:0kB free_cma:0kB [ 56.857263][ T34] usb 6-1: Product: syz [ 56.859571][ T6156] lowmem_reserve[]: 0 0 0 0 0 [ 56.861795][ T6156] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 56.863444][ T34] usb 6-1: Manufacturer: syz [ 56.866823][ T6156] Node 0 DMA32: 101*4kB (UME) 69*8kB (U) 13*16kB (U) 4*32kB (UE) 2*64kB (U) 2*128kB (UE) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 18*4096kB (UM) = 84108kB [ 56.869917][ T34] usb 6-1: SerialNumber: syz [ 56.876690][ T6156] Node 1 Normal: 6*4kB (UM) 2*8kB (U) 6*16kB (UM) 16*32kB (UM) 7*64kB (UM) 7*128kB (UM) 2*256kB (U) 4*512kB (UM) 0*1024kB 2*2048kB (UM) 400*4096kB (UM) = 1647048kB [ 56.882719][ T6156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 56.885192][ T34] usb 6-1: config 0 descriptor?? [ 56.885733][ T6156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 56.890577][ T6156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 56.893757][ T6156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 56.897337][ T6156] 75509 total pagecache pages [ 56.898935][ T6156] 0 pages in swap cache [ 56.900407][ T6156] Free swap = 124996kB [ 56.901793][ T6156] Total swap = 124996kB [ 56.903109][ T6156] 1048443 pages RAM [ 56.904367][ T6156] 0 pages HighMem/MovableOnly [ 56.905857][ T6156] 285444 pages reserved [ 56.907200][ T6156] 0 pages cma reserved [ 56.947160][ T6163] bond1: entered promiscuous mode [ 56.949474][ T6163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.961970][ T6164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.965542][ T6164] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 56.971510][ T6164] bond1: (slave ipip1): Error -95 calling set_mac_address [ 57.037379][ T6164] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 57.042142][ T6164] bond1: (slave ipip1): Error -95 calling set_mac_address [ 57.098494][ T34] usb 6-1: USB disconnect, device number 6 [ 57.108337][ T6172] program syz.2.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.118307][ T6172] ======================================================= [ 57.118307][ T6172] WARNING: The mand mount option has been deprecated and [ 57.118307][ T6172] and is ignored by this kernel. Remove the mand [ 57.118307][ T6172] option from the mount to silence this warning. [ 57.118307][ T6172] ======================================================= [ 57.215166][ T6164] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 57.218759][ T6182] netlink: 'syz.2.103': attribute type 30 has an invalid length. [ 57.223216][ T6164] bond1: (slave ipip1): Error -95 calling set_mac_address [ 57.225547][ T6179] netlink: 'syz.2.103': attribute type 30 has an invalid length. [ 57.256329][ T6185] /dev/sg0: Can't lookup blockdev [ 57.284361][ T6164] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 57.288006][ T6164] bond1: (slave ipip1): Error -95 calling set_mac_address [ 57.365832][ T6187] process 'syz.2.107' launched './file0' with NULL argv: empty string added [ 57.385006][ T6164] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 57.388637][ T6164] bond1: (slave ipip1): Error -95 calling set_mac_address [ 57.455654][ T6164] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 57.459471][ T6164] bond1: (slave ipip1): Error -95 calling set_mac_address [ 57.535792][ T6164] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 57.539417][ T6164] bond1: (slave ipip1): Error -95 calling set_mac_address [ 57.585829][ T6164] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 57.589503][ T6164] bond1: (slave ipip1): Error -95 calling set_mac_address [ 57.640793][ T6201] FAT-fs (mtdblock0): bogus logical sector size 65535 [ 57.644281][ T6201] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 57.659814][ T6164] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 57.670356][ T6164] bond1: (slave ipip1): Error -95 calling set_mac_address [ 57.766648][ T6211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6211 comm=syz.1.113 [ 57.809353][ T6220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6220 comm=syz.0.116 [ 57.827079][ T1041] IPVS: starting estimator thread 0... [ 57.920059][ T6228] IPVS: using max 44 ests per chain, 105600 per kthread [ 57.929298][ T6234] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 57.976908][ T6235] socket: no more sockets [ 57.983593][ T6234] socket: no more sockets [ 58.101485][ T6239] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 58.166299][ T6243] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 58.469571][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'. [ 58.473277][ T6253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 58.506449][ T10] IPVS: starting estimator thread 0... [ 58.540877][ T6258] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 58.586541][ T6260] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 58.601161][ T6256] IPVS: using max 44 ests per chain, 105600 per kthread [ 58.638001][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.129'. [ 58.683844][ T6265] jffs2: notice: (6265) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 58.882484][ T5095] IPVS: starting estimator thread 0... [ 58.970428][ T6284] IPVS: using max 44 ests per chain, 105600 per kthread [ 59.099083][ T6290] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 59.103312][ T6289] [U] } [ 59.209012][ T6297] exfat: Unknown parameter '`isc`rd' [ 59.236875][ T6298] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.295504][ T6300] ehci-pci 0000:00:1d.7: remove, state 1 [ 59.300660][ T6300] usb usb1: USB disconnect, device number 1 [ 59.304035][ T6300] usb 1-1: USB disconnect, device number 2 [ 59.386594][ T6305] vicodec vicodec.0: Removing vicodec [ 59.387771][ T6300] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 59.428622][ T6306] SELinux: ebitmap: truncated map [ 59.431268][ T6306] SELinux: invalid class [ 59.436978][ T6306] SELinux: failed to load policy [ 59.680139][ T10] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 59.855307][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 59.858787][ T10] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 59.883397][ T10] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 59.886933][ T10] usb 2-1: Product: QEMU USB Tablet [ 59.889251][ T10] usb 2-1: Manufacturer: QEMU [ 59.892167][ T10] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 59.935021][ T10] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input8 [ 59.938587][ T6317] /dev/sg0: Can't lookup blockdev [ 59.957925][ T6317] debugfs: out of free dentries, can not create symlink 'device' qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 60.035273][ T10] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 60.059221][ T6303] usb 2-1: USB disconnect, device number 2 [ 60.122859][ T6322] fido_id[6322]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/report_descriptor': No such file or directory [ 60.160047][ T6324] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.295525][ T6303] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 60.303314][ T6303] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 60.314099][ T6303] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 60.330213][ T6303] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 60.332661][ T6328] overlayfs: missing 'workdir' [ 60.340416][ T6303] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 60.347502][ T6303] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 60.350959][ T6303] usb usb1: Product: EHCI Host Controller [ 60.353362][ T6303] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 60.356193][ T6303] usb usb1: SerialNumber: 0000:00:1d.7 [ 60.375851][ T6303] hub 1-0:1.0: USB hub found [ 60.379689][ T6303] hub 1-0:1.0: 6 ports detected [ 60.405989][ T6330] XFS (nbd0): SB validate failed with error -5. [ 60.453431][ T6303] hub 2-0:1.0: USB hub found [ 60.457270][ T6303] hub 2-0:1.0: 2 ports detected [ 60.503649][ T6303] hub 3-0:1.0: USB hub found [ 60.506668][ T6303] hub 3-0:1.0: 2 ports detected [ 60.531497][ T6337] nvme nvme0: failed to connect socket: -111 [ 60.557310][ T6303] hub 4-0:1.0: USB hub found [ 60.562042][ T6303] hub 4-0:1.0: 2 ports detected [ 60.598089][ T6341] netlink: 45 bytes leftover after parsing attributes in process `syz.0.153'. [ 60.619655][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 60.624532][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 60.632546][ T6343] gretap0: entered promiscuous mode [ 60.636017][ T6343] gretap0: left promiscuous mode [ 60.700052][ T56] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 60.740926][ T6345] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 60.753556][ T6348] /dev/sg0: Can't lookup blockdev [ 60.767417][ T6350] ata1.00: invalid cdb length 6 [ 60.776461][ T6351] ata1.00: invalid cdb length 6 [ 60.805599][ T6357] netlink: 'syz.0.159': attribute type 10 has an invalid length. [ 60.811516][ T6357] team0: Device vxcan0 is of different type [ 60.880785][ T56] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 60.900587][ T56] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 60.903471][ T56] usb 1-1: Product: QEMU USB Tablet [ 60.905157][ T56] usb 1-1: Manufacturer: QEMU [ 60.906749][ T56] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 60.949045][ T56] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0003/input/input9 [ 60.964674][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.032067][ T56] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 61.069164][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 61.076677][ T6382] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 61.087917][ T42] kauditd_printk_skb: 90 callbacks suppressed [ 61.087936][ T42] audit: type=1400 audit(1787181905.180:444): avc: denied { getopt } for pid=6377 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.132114][ T6385] GUP no longer grows the stack in syz.2.167 (6385): 200000007000-20000000a000 (200000004000) [ 61.148451][ T6385] CPU: 0 UID: 0 PID: 6385 Comm: syz.2.167 Not tainted syzkaller #0 PREEMPT(full) [ 61.148482][ T6385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.148495][ T6385] Call Trace: [ 61.148517][ T6385] [ 61.148526][ T6385] dump_stack_lvl+0x100/0x190 [ 61.148607][ T6385] gup_vma_lookup.cold+0x83/0x96 [ 61.148641][ T6385] __get_user_pages+0x241/0x32a0 [ 61.148690][ T6385] ? down_read_killable+0x35d/0x520 [ 61.148740][ T6385] ? __pfx___get_user_pages+0x10/0x10 [ 61.148779][ T6385] __gup_longterm_locked+0x87d/0x16f0 [ 61.148820][ T6385] ? __pfx___gup_longterm_locked+0x10/0x10 [ 61.148853][ T6385] ? lock_acquire+0x1b9/0x370 [ 61.148899][ T6385] gup_fast_fallback+0x16dc/0x2790 [ 61.148948][ T6385] ? __pfx_gup_fast_fallback+0x10/0x10 [ 61.148982][ T6385] ? __lock_acquire+0x4c5/0x1ec0 [ 61.149009][ T6385] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 61.149037][ T6385] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.149071][ T6385] get_user_pages_fast+0xa7/0xf0 [ 61.149105][ T6385] ? __pfx_get_user_pages_fast+0x10/0x10 [ 61.149143][ T6385] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 61.149179][ T6385] ? __mutex_lock+0x26c/0x1bc0 [ 61.149199][ T6385] ? pipe_lock+0x69/0x80 [ 61.149228][ T6385] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 61.149252][ T6385] ? __pfx___mutex_lock+0x10/0x10 [ 61.149272][ T6385] ? import_ubuf+0x1b6/0x220 [ 61.149307][ T6385] iov_iter_get_pages2+0xa3/0x100 [ 61.149326][ T6385] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 61.149345][ T6385] ? wait_for_space+0x2ca/0x3b0 [ 61.149385][ T6385] __do_sys_vmsplice+0x7dd/0x13c0 [ 61.149420][ T6385] ? __pfx_futex_hash+0x10/0x10 [ 61.149455][ T6385] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 61.149490][ T6385] ? __pfx_futex_wait+0x10/0x10 [ 61.149556][ T6385] ? do_syscall_64+0x123/0x790 [ 61.149573][ T6385] do_syscall_64+0x123/0x790 [ 61.149592][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.149613][ T6385] RIP: 0033:0x7febfb59e0d9 [ 61.149631][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.149649][ T6385] RSP: 002b:00007febfc42c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 61.149679][ T6385] RAX: ffffffffffffffda RBX: 00007febfb825fa0 RCX: 00007febfb59e0d9 [ 61.149693][ T6385] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000005 [ 61.149704][ T6385] RBP: 00007febfb635024 R08: 0000000000000000 R09: 0000000000000000 [ 61.149714][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.149726][ T6385] R13: 00007febfb826038 R14: 00007febfb825fa0 R15: 00007ffd83148b18 [ 61.149755][ T6385] [ 61.335282][ T6392] /dev/sg0: Can't lookup blockdev [ 61.494150][ T42] audit: type=1400 audit(1787181905.590:445): avc: denied { map } for pid=6395 comm="syz.1.171" path="/proc/68/numa_maps" dev="proc" ino=12882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 61.510404][ T42] audit: type=1400 audit(1787181905.590:446): avc: denied { execute } for pid=6395 comm="syz.1.171" path="/proc/68/numa_maps" dev="proc" ino=12882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 61.513911][ T6398] cifs: Unknown parameter 'pasers' [ 61.520370][ T6396] geneve2: entered promiscuous mode [ 61.527803][ T6396] geneve2: entered allmulticast mode [ 61.530085][ T42] audit: type=1400 audit(1787181905.600:447): avc: denied { name_bind } for pid=6397 comm="syz.2.172" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 61.540048][ T5576] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.542867][ T5576] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.545594][ T5576] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.548392][ T5576] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.590041][ T42] audit: type=1400 audit(1787181905.680:448): avc: denied { watch } for pid=6404 comm="syz.1.173" path="/23" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.831346][ T6410] kvm: kvm [6409]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 62.599367][ T6372] Set syz1 is full, maxelem 65536 reached [ 62.816260][ T6446] /dev/sg0: Can't lookup blockdev [ 62.923962][ T42] audit: type=1400 audit(1787181907.020:449): avc: denied { write } for pid=6450 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.940076][ T6451] netlink: 64 bytes leftover after parsing attributes in process `syz.2.185'. [ 62.944428][ T42] audit: type=1400 audit(1787181907.040:450): avc: denied { read append } for pid=6450 comm="syz.2.185" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.953358][ T42] audit: type=1400 audit(1787181907.040:451): avc: denied { open } for pid=6450 comm="syz.2.185" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.993136][ T6451] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.996369][ T6451] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.004736][ T6451] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.013972][ T6451] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 63.016531][ T6451] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 63.027898][ T6451] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 63.031648][ T6451] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.033354][ T6451] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.038734][ T6451] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.043807][ T6451] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.045834][ T6451] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.048670][ T6451] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.080431][ T5095] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.210647][ T6460] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.214631][ T6460] block device autoloading is deprecated and will be removed. [ 63.232753][ T5095] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 63.247725][ T5095] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 63.252804][ T5095] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 63.257404][ T5095] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 63.262119][ T5095] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 63.287552][ T6464] netlink: 'syz.2.190': attribute type 7 has an invalid length. [ 63.290315][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 63.293332][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 63.366710][ T42] audit: type=1400 audit(1787181907.460:452): avc: denied { create } for pid=6470 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.373239][ T42] audit: type=1400 audit(1787181907.460:453): avc: denied { setopt } for pid=6470 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.617326][ T6474] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 63.620530][ T6474] overlayfs: missing 'lowerdir' [ 63.661392][ T6476] /dev/sg0: Can't lookup blockdev [ 64.034777][ T6511] /dev/sg0: Can't lookup blockdev [ 64.052432][ T10] IPVS: starting estimator thread 0... [ 64.090145][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.140065][ T6512] IPVS: using max 44 ests per chain, 105600 per kthread [ 64.239116][ T6514] infiniband syz2: set down [ 64.242959][ T6514] infiniband syz2: added ipvlan0 [ 64.246085][ T56] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.253019][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.261328][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.270059][ T56] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.273540][ T6514] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 64.274756][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.281325][ T6514] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 64.285263][ T56] usb 7-1: config 0 descriptor?? [ 64.291911][ T6514] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 64.322721][ T6514] RDS/IB: syz2: added [ 64.324891][ T6514] smc: adding ib device syz2 with port count 1 [ 64.327777][ T6514] smc: ib device syz2 port 1 has no pnetid [ 64.571368][ T6517] binder: 6516:6517 ioctl 406855c9 2000000001c0 returned -22 [ 64.680526][ T6525] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 64.685936][ T6525] 9p: Unknown Cache mode or invalid value f [ 64.706024][ T56] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 64.709213][ T56] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 64.712613][ T56] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 64.715772][ T56] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 64.718830][ T56] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 64.723333][ T56] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 64.726946][ T56] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 64.730368][ T56] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 64.733556][ T56] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 64.736743][ T56] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 64.765246][ T56] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 64.983136][ T1041] usb 7-1: USB disconnect, device number 2 [ 64.999166][ T6541] /dev/sg0: Can't lookup blockdev [ 65.010177][ T5722] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.090610][ T5082] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.090938][ T5722] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.092675][ T5082] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.410187][ T6436] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 65.415583][ T6558] syzkaller0: entered promiscuous mode [ 65.418018][ T6558] syzkaller0: entered allmulticast mode [ 65.513996][ T6560] /dev/sg0: Can't lookup blockdev [ 65.563767][ T6436] usb 6-1: Using ep0 maxpacket: 8 [ 65.566211][ T6436] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 65.575654][ T6436] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.581151][ T6436] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.591166][ T6436] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 65.595420][ T6436] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 65.599114][ T6436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.606178][ T6436] hub 6-1:1.0: bad descriptor, ignoring hub [ 65.611089][ T6436] hub 6-1:1.0: probe with driver hub failed with error -5 [ 65.616533][ T6436] cdc_wdm 6-1:1.0: skipping garbage [ 65.619702][ T6436] cdc_wdm 6-1:1.0: skipping garbage [ 65.622443][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 65.632287][ T6436] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 65.634294][ T6436] cdc_wdm 6-1:1.0: Unknown control protocol [ 65.727647][ T6571] syzkaller0: entered promiscuous mode [ 65.729894][ T6571] syzkaller0: entered allmulticast mode [ 65.851887][ T5095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.854526][ T5095] usb 5-1: Product: ခ [ 65.855864][ T5095] usb 5-1: Manufacturer: ˗촀䉎ඇ쎉㾌ퟑӈ笝⨚૔맗䲃㷞昫闔⑼ꕪ针糕뾇闪盅瞃큑龨傝徶貕쮆ꟲꂞ敫囹䁅 [ 65.865685][ T5095] usb 5-1: can't set config #1, error -71 [ 65.874845][ T5095] usb 5-1: USB disconnect, device number 3 [ 65.886126][ T6585] /dev/sg0: Can't lookup blockdev [ 65.929806][ T6588] netlink: 5 bytes leftover after parsing attributes in process `syz.3.234'. [ 65.956026][ T5082] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 66.011368][ T6597] kvm: user requested TSC rate below hardware speed [ 66.041357][ T6597] bridge_slave_0: left allmulticast mode [ 66.043275][ T6597] bridge_slave_0: left promiscuous mode [ 66.046628][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.054013][ T6597] bridge_slave_1: left allmulticast mode [ 66.055888][ T6597] bridge_slave_1: left promiscuous mode [ 66.057879][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.067279][ T6597] bond0: (slave bond_slave_0): Releasing backup interface [ 66.074576][ T6597] bond0: (slave bond_slave_1): Releasing backup interface [ 66.082603][ T6597] team0: Port device team_slave_0 removed [ 66.087797][ T6597] team0: Port device team_slave_1 removed [ 66.090294][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.093238][ T6597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.098098][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.102748][ T6597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.106275][ T6597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 66.121275][ T1160] tipc: Resetting bearer [ 66.124402][ T6603] team0: Mode changed to "random" [ 66.133050][ T6597] vlan0: entered promiscuous mode [ 66.139704][ T6597] team0: Port device vlan0 added [ 66.151316][ T6609] can0: slcan on ttynull. [ 66.156758][ T6609] netlink: 'syz.0.241': attribute type 2 has an invalid length. [ 66.161844][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 66.161858][ T42] audit: type=1400 audit(1787181910.260:489): avc: denied { search } for pid=5435 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.173435][ T42] audit: type=1400 audit(1787181910.270:490): avc: denied { search } for pid=5435 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.183465][ T42] audit: type=1400 audit(1787181910.270:491): avc: denied { search } for pid=5435 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.232858][ T42] audit: type=1400 audit(1787181910.330:492): avc: denied { read } for pid=6613 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.240359][ T56] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.242864][ T42] audit: type=1400 audit(1787181910.330:493): avc: denied { read open } for pid=6613 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.251369][ T42] audit: type=1400 audit(1787181910.330:494): avc: denied { getattr } for pid=6613 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.259102][ T42] audit: type=1400 audit(1787181910.340:495): avc: denied { write } for pid=6612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.266028][ T42] audit: type=1400 audit(1787181910.340:496): avc: denied { add_name } for pid=6612 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.296135][ T42] audit: type=1400 audit(1787181910.390:497): avc: denied { write } for pid=6616 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.303475][ T42] audit: type=1400 audit(1787181910.400:498): avc: denied { remove_name } for pid=6616 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2947 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.354371][ T6626] xt_hashlimit: size too large, truncated to 1048576 [ 66.400460][ T56] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 66.405855][ T56] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 66.408857][ T56] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.412670][ T56] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 66.416077][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.423072][ T56] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 66.425757][ T56] usb 8-1: Product: syz [ 66.427106][ T56] usb 8-1: Manufacturer: syz [ 66.433308][ T56] cdc_wdm 8-1:1.0: skipping garbage [ 66.435015][ T56] cdc_wdm 8-1:1.0: skipping garbage [ 66.439307][ T56] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 66.442259][ T56] cdc_wdm 8-1:1.0: Unknown control protocol [ 66.502883][ T6631] /dev/sg0: Can't lookup blockdev [ 66.588647][ T6633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6633 comm=syz.2.246 [ 66.593086][ T6633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6633 comm=syz.2.246 [ 66.598675][ T6633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6633 comm=syz.2.246 [ 66.634128][ T6436] usb 8-1: USB disconnect, device number 2 [ 66.651971][ T6635] mmap: syz.2.247 (6635) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.722709][ T6638] netlink: 'syz.2.248': attribute type 63 has an invalid length. [ 66.725973][ T6638] netlink: 5 bytes leftover after parsing attributes in process `syz.2.248'. [ 66.729642][ T6638] gretap0: entered allmulticast mode [ 66.736502][ T6638] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 66.879705][ T6640] can0 (unregistered): slcan off ttynull. [ 66.932093][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 66.935682][ T6649] netlink: 'syz.2.250': attribute type 10 has an invalid length. [ 66.938862][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 66.997681][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 67.004380][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 67.008172][ T6656] netlink: 'syz.2.251': attribute type 6 has an invalid length. [ 67.040285][ T5576] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.044133][ T5576] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.047851][ T5576] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.058310][ T5576] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.078024][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 67.082504][ T5869] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.100174][ T5082] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.115110][ T6666] /dev/sg0: Can't lookup blockdev [ 67.180150][ T5082] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.181251][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.184694][ T5722] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.230846][ T5869] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 67.238044][ T5869] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 67.241946][ T5869] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.246235][ T5869] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 67.247402][ T6678] netlink: 60 bytes leftover after parsing attributes in process `syz.2.259'. [ 67.251378][ T5869] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.259389][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 67.262979][ T5869] usb 8-1: Product: syz [ 67.264764][ T5869] usb 8-1: Manufacturer: syz [ 67.276601][ T5869] cdc_wdm 8-1:1.0: skipping garbage [ 67.278859][ T5869] cdc_wdm 8-1:1.0: skipping garbage [ 67.281123][ T6679] No such timeout policy "syz1" [ 67.286778][ T5869] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 67.289369][ T5869] cdc_wdm 8-1:1.0: Unknown control protocol [ 67.291012][ T6679] kAFS: unable to lookup cell '1' [ 68.089340][ T6691] netlink: 80 bytes leftover after parsing attributes in process `syz.0.263'. [ 68.231782][ T6695] /dev/sg0: Can't lookup blockdev [ 68.282441][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 68.450253][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 68.494325][ T6703] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 68.533082][ T6707] bridge_slave_0: left allmulticast mode [ 68.535073][ T6707] bridge_slave_0: left promiscuous mode [ 68.536996][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.544156][ T6707] bridge_slave_1: left allmulticast mode [ 68.546016][ T6707] bridge_slave_1: left promiscuous mode [ 68.548664][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.554354][ T6707] bond0: (slave bond_slave_0): Releasing backup interface [ 68.558897][ T6707] bond0: (slave bond_slave_1): Releasing backup interface [ 68.569702][ T6707] team0: Port device team_slave_0 removed [ 68.575923][ T6707] team0: Port device team_slave_1 removed [ 68.579022][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.582755][ T6707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.587119][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.590654][ T6707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.612867][ T6708] team0: Port device xfrm0 added [ 68.615351][ T6707] tipc: Started in network mode [ 68.618265][ T6707] tipc: Node identity c667f3c9ebb1, cluster identity 7 [ 68.623721][ T6707] tipc: Enabled bearer , priority 0 [ 68.668507][ T6711] overlayfs: overlapping lowerdir path [ 68.678913][ T6711] overlayfs: conflicting lowerdir path [ 68.747176][ T6717] /dev/sg0: Can't lookup blockdev [ 69.146160][ T5819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.170568][ T5722] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.251916][ T5722] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.251955][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.273338][ T5819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.310054][ T5869] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.318621][ T1474] usb 8-1: USB disconnect, device number 3 [ 69.329563][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.336735][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.340207][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.346477][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.351497][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.372954][ T5819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.384466][ T5095] usb 6-1: USB disconnect, device number 7 [ 69.384796][ T6688] cdc_wdm 6-1:1.0: Error autopm - -16 [ 69.448558][ T5722] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 69.449519][ T5722] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 69.463862][ T5869] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 69.494681][ T5869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.499188][ T5819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.503490][ T6748] /dev/sg0: Can't lookup blockdev [ 69.503843][ T5869] usb 7-1: config 0 has no interfaces? [ 69.509848][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.525600][ T5869] usb 7-1: config 0 descriptor?? [ 69.684688][ T6746] netlink: 'syz.1.284': attribute type 2 has an invalid length. [ 69.744226][ T5722] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 69.756624][ T5095] usb 7-1: USB disconnect, device number 3 [ 69.854986][ T5819] team0: Port device xfrm0 removed [ 69.914976][ T5819] bond0 (unregistering): Released all slaves [ 69.921120][ T5819] bond1 (unregistering): Released all slaves [ 69.931956][ T29] tipc: Node number set to 769061833 [ 69.940446][ T48] tipc: Resetting bearer [ 70.050021][ T1474] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.053755][ T5819] tipc: Disabling bearer [ 70.056831][ T5819] tipc: Left network mode [ 70.128566][ T5435] 8021q: adding VLAN 0 to HW filter on device eth2 [ 70.209834][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.212367][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.216471][ T1474] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.219721][ T6730] bridge_slave_0: entered allmulticast mode [ 70.223410][ T1474] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 70.227604][ T1474] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.228462][ T6730] bridge_slave_0: entered promiscuous mode [ 70.232564][ T1474] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.237361][ T1474] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.240037][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.241721][ T1474] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.244939][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.248498][ T1474] usb 8-1: config 0 descriptor?? [ 70.258792][ T6730] bridge_slave_1: entered allmulticast mode [ 70.263372][ T6730] bridge_slave_1: entered promiscuous mode [ 70.298414][ T5435] 8021q: adding VLAN 0 to HW filter on device eth3 [ 70.315541][ T6730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.348013][ T6730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.386096][ T6730] team0: Port device team_slave_0 added [ 70.391168][ T6730] team0: Port device team_slave_1 added [ 70.418531][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.421521][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.431568][ T6730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.458148][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.461767][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.473668][ T6730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.577612][ T6730] hsr_slave_0: entered promiscuous mode [ 70.600734][ T6730] hsr_slave_1: entered promiscuous mode [ 70.630151][ T5435] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.644351][ T6804] /dev/sg0: Can't lookup blockdev [ 70.688606][ T1474] hid_parser_main: 5 callbacks suppressed [ 70.688627][ T1474] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 70.691953][ T6804] debugfs: out of free dentries, can not create symlink 'device' [ 70.692936][ T1474] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 70.702691][ T1474] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 70.705164][ T1474] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 70.707564][ T1474] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 70.710285][ T1474] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 70.712673][ T1474] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 70.715033][ T1474] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 70.717298][ T1474] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 70.719790][ T1474] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 70.724561][ T5819] veth1_macvtap: left promiscuous mode [ 70.728995][ T5819] veth0_macvtap: left promiscuous mode [ 70.730632][ T1474] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 70.732105][ T5819] veth1_vlan: left promiscuous mode [ 70.736723][ T5819] veth0_vlan: left promiscuous mode [ 70.858520][ T5868] usb 8-1: USB disconnect, device number 4 [ 71.083219][ T6816] omfs: Invalid superblock (0) [ 71.139682][ T6819] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 71.184963][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 71.184983][ T42] audit: type=1400 audit(1787181915.280:528): avc: denied { wake_alarm } for pid=6822 comm="syz.1.300" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.200941][ T6730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.211350][ T6730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.218592][ T6730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.225154][ T6730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.228679][ T6730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.241016][ T6730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.247228][ T6730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.252186][ T42] audit: type=1400 audit(1787181915.350:529): avc: denied { write } for pid=6824 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.268245][ T6730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.273872][ T6829] /dev/sg0: Can't lookup blockdev [ 71.312961][ T5435] 8021q: adding VLAN 0 to HW filter on device eth5 [ 71.336258][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.338958][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.375177][ T6730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.395577][ T6730] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.405755][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.408134][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.420525][ T5722] Bluetooth: hci0: command tx timeout [ 71.424854][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.427168][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.452364][ T42] audit: type=1400 audit(1787181915.540:530): avc: denied { listen } for pid=6844 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.526180][ T5819] IPVS: stop unused estimator thread 0... [ 71.728918][ T6730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.867693][ T6885] /dev/sg0: Can't lookup blockdev [ 71.885592][ T6885] debugfs: out of free dentries, can not create symlink 'device' [ 71.899174][ T6730] veth0_vlan: entered promiscuous mode [ 71.914106][ T6730] veth1_vlan: entered promiscuous mode [ 71.947880][ T6730] veth0_macvtap: entered promiscuous mode [ 71.953419][ T6730] veth1_macvtap: entered promiscuous mode [ 71.954261][ T42] audit: type=1400 audit(1787181916.050:531): avc: denied { mount } for pid=6887 comm="syz.1.311" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 71.968246][ T6730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.976661][ T6730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.002531][ T5576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.043734][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.047853][ T5819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.050146][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.051531][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.070298][ T5576] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.099127][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.104630][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.123107][ T42] audit: type=1400 audit(1787181916.220:532): avc: denied { mounton } for pid=6730 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.285113][ T42] audit: type=1400 audit(1787181916.380:533): avc: denied { mounton } for pid=6901 comm="syz.4.314" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 72.342506][ T6914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.344266][ T42] audit: type=1400 audit(1787181916.440:534): avc: denied { setopt } for pid=6913 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.363613][ T6921] /dev/sg0: Can't lookup blockdev [ 72.413797][ T42] audit: type=1400 audit(1787181916.510:535): avc: denied { ioctl } for pid=6924 comm="syz.2.322" path="/dev/input/event0" dev="devtmpfs" ino=940 ioctlcmd=0x4523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.430275][ T6927] xt_l2tp: invalid flags combination: c [ 72.497584][ T6938] netlink: 64 bytes leftover after parsing attributes in process `syz.3.327'. [ 72.514112][ T42] audit: type=1400 audit(1787181916.610:536): avc: denied { write } for pid=6934 comm="syz.1.326" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.515690][ T6930] syzkaller0: left promiscuous mode [ 72.523036][ T6930] syzkaller0: left allmulticast mode [ 72.585059][ T6952] geneve2: entered promiscuous mode [ 72.586888][ T6952] geneve2: entered allmulticast mode [ 72.621488][ T1130] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 72.624070][ T1130] ata1: failed to read log page 10h (errno=-5) [ 72.626678][ T1130] ata1.00: exception Emask 0x1 SAct 0x8 SErr 0x0 action 0x0 [ 72.629038][ T1130] ata1.00: irq_stat 0x40000000 [ 72.630805][ T1130] ata1.00: failed command: READ FPDMA QUEUED [ 72.632950][ T1130] ata1.00: cmd 60/01:18:00:00:00/00:00:fd:00:00/c0 tag 3 ncq dma 512 in [ 72.632950][ T1130] res 41/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 72.638185][ T1130] ata1.00: status: { DRDY ERR } [ 72.639736][ T1130] ata1.00: error: { ABRT } [ 72.645637][ T1130] ata1.00: configured for UDMA/100 [ 72.647642][ T1130] ata1: EH complete [ 72.678289][ T42] audit: type=1400 audit(1787181916.770:537): avc: denied { write } for pid=6964 comm="syz.2.332" name="cgroup.subtree_control" dev="cgroup2" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.681378][ T5722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 72.745363][ T6973] openvswitch: netlink: IP tunnel dst address not specified [ 72.747806][ T6973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.751970][ T6973] ip_tables: iptables: counters copy to user failed while replacing table [ 72.759276][ T6975] /dev/sg0: Can't lookup blockdev [ 72.763721][ T6973] option changes via remount are deprecated (pid=6972 comm=syz.2.335) [ 72.769821][ T6973] autofs: Unknown parameter '' [ 72.895335][ T6981] SELinux: failed to load policy [ 72.928447][ T6988] vlan2: entered allmulticast mode [ 72.930487][ T6988] bond0: entered allmulticast mode [ 72.932155][ T6988] bond_slave_0: entered allmulticast mode [ 72.934129][ T6988] bond_slave_1: entered allmulticast mode [ 72.950275][ T6990] netlink: 56 bytes leftover after parsing attributes in process `syz.4.342'. [ 72.987625][ T6992] netlink: 'syz.3.343': attribute type 1 has an invalid length. [ 73.050724][ T6434] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.054704][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 73.091552][ T6999] netlink: 908 bytes leftover after parsing attributes in process `syz.3.346'. [ 73.131268][ T7003] /dev/sg0: Can't lookup blockdev [ 73.161335][ T7005] netlink: 260 bytes leftover after parsing attributes in process `syz.1.348'. [ 73.196131][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 73.200101][ T6434] usb 7-1: Using ep0 maxpacket: 32 [ 73.208225][ T6434] usb 7-1: unable to get BOS descriptor or descriptor too short [ 73.212838][ T6434] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 73.218864][ T6434] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 73.223757][ T6434] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 73.228601][ T6434] usb 7-1: config 14 has no interface number 0 [ 73.230973][ T6434] usb 7-1: config 14 has no interface number 1 [ 73.232948][ T6434] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 73.236292][ T6434] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 73.240643][ T6434] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 73.246774][ T6434] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 73.255012][ T6434] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 73.259900][ T6434] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.265232][ T6434] usb 7-1: config 14 interface 57 has no altsetting 0 [ 73.268062][ T6434] usb 7-1: config 14 interface 228 has no altsetting 0 [ 73.274147][ T6434] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.277740][ T6434] usb 7-1: Product: syz [ 73.279588][ T6434] usb 7-1: Manufacturer: syz [ 73.281841][ T6434] usb 7-1: SerialNumber: syz [ 73.371388][ T7018] SELinux: failed to load policy [ 73.490317][ T5722] Bluetooth: hci0: command tx timeout [ 73.850184][ T6436] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 73.884463][ T7037] befs: (loop4): No write support. Marking filesystem read-only [ 73.888241][ T7037] befs: (loop4): unable to read superblock [ 73.904847][ T6434] legousbtower 7-1:14.57: interrupt endpoints not found [ 73.947258][ T7041] /dev/sg0: Can't lookup blockdev [ 74.010124][ T6436] usb 8-1: Using ep0 maxpacket: 32 [ 74.014625][ T6436] usb 8-1: unable to get BOS descriptor or descriptor too short [ 74.017157][ T6436] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 74.021220][ T6436] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 74.023880][ T6436] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 74.026497][ T6436] usb 8-1: config 14 has no interface number 0 [ 74.028578][ T6436] usb 8-1: config 14 has no interface number 1 [ 74.030713][ T6436] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 74.034351][ T6436] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 74.038056][ T6436] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 74.041963][ T6436] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 74.045849][ T6436] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 74.049357][ T6436] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.053891][ T6436] usb 8-1: config 14 interface 57 has no altsetting 0 [ 74.056077][ T6436] usb 8-1: config 14 interface 228 has no altsetting 0 [ 74.061251][ T6436] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.064074][ T6436] usb 8-1: Product: syz [ 74.065445][ T6436] usb 8-1: Manufacturer: syz [ 74.067011][ T6436] usb 8-1: SerialNumber: syz [ 74.101757][ T6434] legousbtower 7-1:14.228: get version request failed: -71 [ 74.104313][ T6434] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 74.116710][ T6434] usb 7-1: USB disconnect, device number 4 [ 74.169387][ T7050] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=7050 comm=syz.1.363 [ 74.359792][ T7067] syz.4.367 uses obsolete (PF_INET,SOCK_PACKET) [ 74.367533][ T7067] random: crng reseeded on system resumption [ 74.368620][ T7069] /dev/sg0: Can't lookup blockdev [ 74.383375][ T7067] openvswitch: netlink: Unknown key attributes 1 [ 74.476053][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.476840][ T6436] legousbtower 8-1:14.57: interrupt endpoints not found [ 74.482953][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.500258][ T6436] legousbtower 8-1:14.228: get version request failed: -71 [ 74.502755][ T6436] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 74.514728][ T6436] usb 8-1: USB disconnect, device number 5 [ 74.561298][ T7083] xt_nfacct: accounting object `' does not exist [ 74.573769][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 74.576605][ T7083] openvswitch: netlink: Flow actions attr not present in new flow. [ 74.604276][ T7091] netlink: 40 bytes leftover after parsing attributes in process `syz.1.373'. [ 74.610716][ T7092] program syz.3.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.627757][ T7091] netlink: 'syz.1.373': attribute type 11 has an invalid length. [ 74.686226][ T7096] /dev/sg0: Can't lookup blockdev [ 74.821014][ T7109] netlink: 'syz.3.381': attribute type 1 has an invalid length. [ 74.824672][ T7109] netlink: 228 bytes leftover after parsing attributes in process `syz.3.381'. [ 75.102307][ T7128] can0: slcan on ttyS3. [ 75.156194][ T7129] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 75.172776][ T7129] bond1: option mode: invalid value (9) [ 75.176690][ T7129] bond1 (unregistering): Released all slaves [ 75.203528][ T7128] can0 (unregistered): slcan off ttyS3. [ 75.345279][ T7137] /dev/sg0: Can't lookup blockdev [ 75.392601][ T7140] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 75.395513][ T7139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.389'. [ 75.404512][ T7140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.580432][ T5722] Bluetooth: hci0: command tx timeout [ 75.661597][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 75.830230][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 75.902299][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 75.905400][ T29] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.912724][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 75.916099][ T29] usb 8-1: can't read configurations, error -71 [ 75.970339][ T7156] unsupported nlmsg_type 40 [ 76.100061][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 76.210179][ T5576] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.213642][ T5576] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.217978][ T5576] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.221225][ T5576] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.239625][ T7161] /dev/sg0: Can't lookup blockdev [ 76.270518][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=70.6b [ 76.274238][ T10] usb 6-1: config 4 has an invalid interface number: 50 but max is 2 [ 76.276811][ T10] usb 6-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 76.279903][ T10] usb 6-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 76.283006][ T10] usb 6-1: config 4 has no interface number 0 [ 76.284938][ T10] usb 6-1: config 4 interface 50 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 76.288226][ T10] usb 6-1: config 4 interface 50 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.292480][ T10] usb 6-1: config 4 interface 50 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 76.296291][ T10] usb 6-1: config 4 interface 50 altsetting 0 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 76.300608][ T10] usb 6-1: config 4 interface 50 altsetting 0 endpoint 0x8A has an invalid bInterval 203, changing to 7 [ 76.304762][ T10] usb 6-1: config 4 interface 50 altsetting 0 endpoint 0x8A has invalid maxpacket 59193, setting to 1024 [ 76.308683][ T10] usb 6-1: config 4 interface 50 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 76.317679][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.320398][ T10] usb 6-1: Product: 㠊 [ 76.321969][ T10] usb 6-1: Manufacturer: 都帵ώ윬Ϣ荩⬟儜噳꾖寭屚땆툝ᬇ쟇鋇 [ 76.325148][ T10] usb 6-1: SerialNumber: Д [ 76.330989][ T7152] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 76.453055][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 76.453074][ T42] audit: type=1400 audit(1787181920.550:578): avc: denied { write } for pid=7169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.519627][ T42] audit: type=1400 audit(1787181920.610:579): avc: denied { write } for pid=7172 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.542411][ T10] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 76.544835][ T10] sonixb 6-1:4.50: Error reading register 00: -71 [ 76.553567][ T10] usb 6-1: USB disconnect, device number 8 [ 76.599915][ T7177] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 76.612186][ T42] audit: type=1400 audit(1787181920.710:580): avc: denied { write } for pid=7175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.669827][ T42] audit: type=1400 audit(1787181920.760:581): avc: denied { write } for pid=7185 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.728956][ T42] audit: type=1400 audit(1787181920.820:582): avc: denied { write } for pid=7189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.748257][ T7198] /dev/sg0: Can't lookup blockdev [ 76.764391][ T42] audit: type=1400 audit(1787181920.860:583): avc: denied { write } for pid=7199 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.816218][ T42] audit: type=1400 audit(1787181920.910:584): avc: denied { bind } for pid=7205 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.822769][ T42] audit: type=1400 audit(1787181920.920:585): avc: denied { name_bind } for pid=7205 comm="syz.3.408" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 76.832262][ T42] audit: type=1400 audit(1787181920.920:586): avc: denied { node_bind } for pid=7205 comm="syz.3.408" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 76.839759][ T42] audit: type=1400 audit(1787181920.920:587): avc: denied { getopt } for pid=7205 comm="syz.3.408" laddr=172.20.20.170 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.972364][ T7231] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 76.981892][ T7231] CIFS: Attempting to mount //127.0.0.1/s:e[12harefDr=root [ 77.033806][ T7232] CIFS: VFS: Invalid response size 256 for command 0 [ 77.037467][ T7231] CIFS: VFS: cifs_mount failed w/return code = -5 [ 77.076413][ T7241] /dev/sg0: Can't lookup blockdev [ 77.091289][ T7241] debugfs: out of free dentries, can not create symlink 'device' [ 77.124780][ T7246] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 77.460451][ T10] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 77.660387][ T5734] Bluetooth: hci0: command tx timeout [ 77.672856][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 77.676226][ T10] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 77.680276][ T10] usb 8-1: config 100 has an invalid interface number: 173 but max is 0 [ 77.683731][ T10] usb 8-1: config 100 has no interface number 0 [ 77.686350][ T10] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 77.690541][ T10] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 77.695071][ T10] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 77.698454][ T10] usb 8-1: config 100 interface 173 has no altsetting 0 [ 77.703322][ T10] usb 8-1: string descriptor 0 read error: -22 [ 77.705792][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.714488][ T7250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.722721][ T10] metro_usb 8-1:100.173: Metrologic USB to Serial converter detected [ 77.741270][ T10] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 77.924548][ T7250] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 77.993687][ T7274] ntfs3(sr0): Primary boot signature is not NTFS. [ 77.996682][ T7274] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 78.071778][ T7276] __nla_validate_parse: 14 callbacks suppressed [ 78.071791][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'. [ 78.077284][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'. [ 78.083181][ T7276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7276 comm=syz.2.425 [ 78.138285][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.426'. [ 78.254683][ T7280] /dev/sg0: Can't lookup blockdev [ 78.700258][ T5812] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 78.870490][ T5812] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 78.874411][ T5812] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.878662][ T5812] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.883682][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.886685][ T5812] usb 7-1: Product: syz [ 78.888209][ T5812] usb 7-1: Manufacturer: syz [ 78.889841][ T5812] usb 7-1: SerialNumber: syz [ 78.894613][ T5812] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 78.900729][ T5812] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 78.906036][ T5812] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 79.100202][ T7327] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 79.113777][ T5812] usb 7-1: USB disconnect, device number 5 [ 79.136117][ T5812] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 79.147091][ T5812] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 79.154697][ T5812] ti_usb_3410_5052 7-1:2.0: device disconnected [ 79.170119][ T5722] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 79.170188][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 79.256691][ T7346] /dev/sg0: Can't lookup blockdev [ 79.270369][ T7346] debugfs: out of free dentries, can not create symlink 'device' [ 79.333562][ T7350] netlink: 'syz.2.438': attribute type 12 has an invalid length. [ 79.339983][ T7350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.438'. [ 79.408107][ T7361] syzkaller1: entered promiscuous mode [ 79.410773][ T7361] syzkaller1: entered allmulticast mode [ 79.492053][ T7372] syzkaller0: entered promiscuous mode [ 79.494394][ T7372] syzkaller0: entered allmulticast mode [ 79.510941][ T7372] size and base must be multiples of 4 kiB [ 79.513442][ T7372] CPU: 1 UID: 0 PID: 7372 Comm: syz.1.444 Not tainted syzkaller #0 PREEMPT(full) [ 79.513469][ T7372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.513479][ T7372] Call Trace: [ 79.513495][ T7372] [ 79.513502][ T7372] dump_stack_lvl+0x100/0x190 [ 79.513642][ T7372] mtrr_del.cold+0x72/0x85 [ 79.513670][ T7372] mtrr_ioctl+0xbc8/0xcf0 [ 79.513708][ T7372] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 79.513783][ T7372] ? __pfx_mtrr_ioctl+0x10/0x10 [ 79.513803][ T7372] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 79.513843][ T7372] ? __pfx_mtrr_ioctl+0x10/0x10 [ 79.513864][ T7372] proc_reg_unlocked_ioctl+0x229/0x320 [ 79.513917][ T7372] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 79.513943][ T7372] __x64_sys_ioctl+0x18e/0x210 [ 79.513973][ T7372] do_syscall_64+0x123/0x790 [ 79.514053][ T7372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.514070][ T7372] RIP: 0033:0x7f95c0d9e0d9 [ 79.514092][ T7372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.514109][ T7372] RSP: 002b:00007f95c1bdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.514128][ T7372] RAX: ffffffffffffffda RBX: 00007f95c1025fa0 RCX: 00007f95c0d9e0d9 [ 79.514138][ T7372] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 000000000000000e [ 79.514148][ T7372] RBP: 00007f95c0e35024 R08: 0000000000000000 R09: 0000000000000000 [ 79.514158][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.514168][ T7372] R13: 00007f95c1026038 R14: 00007f95c1025fa0 R15: 00007ffc1c7f7018 [ 79.514190][ T7372] [ 79.609628][ T7376] vivid-000: ================= START STATUS ================= [ 79.613200][ T7376] vivid-000: Enable Output Cropping: true grabbed [ 79.616857][ T7376] vivid-000: Enable Output Composing: true grabbed [ 79.619627][ T7376] vivid-000: Enable Output Scaler: true grabbed [ 79.623140][ T7376] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 79.626209][ T7376] vivid-000: Transmit Mode: HDMI grabbed [ 79.628596][ T7376] vivid-000: Hotplug Present: 0x00000000 [ 79.631358][ T7376] vivid-000: RxSense Present: 0x00000000 [ 79.633798][ T7376] vivid-000: EDID Present: 0x00000000 [ 79.636090][ T7376] vivid-000: ================== END STATUS ================== [ 79.704704][ T7381] /dev/sg0: Can't lookup blockdev [ 79.723134][ T7381] debugfs: out of free dentries, can not create symlink 'device' [ 79.881336][ T7391] tipc: Started in network mode [ 79.883522][ T7391] tipc: Node identity 4004, cluster identity 4711 [ 79.886241][ T7391] tipc: Node number set to 16388 [ 79.943274][ T7391] overlayfs: conflicting lowerdir path [ 80.045755][ T7410] overlayfs: workdir and upperdir must reside under the same mount [ 80.067452][ T7239] orangefs_mount: mount request failed with -4 [ 80.087427][ T5812] usb 8-1: USB disconnect, device number 8 [ 80.088743][ T5722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 80.110531][ T5812] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 80.116032][ T5812] metro_usb 8-1:100.173: device disconnected [ 80.154592][ T7417] /dev/sg0: Can't lookup blockdev [ 80.223215][ T7421] lo: entered promiscuous mode [ 80.229732][ T7421] bond0: entered promiscuous mode [ 80.232675][ T7421] dummy0: entered promiscuous mode [ 80.236192][ T7421] eql: entered promiscuous mode [ 80.238732][ T7421] ifb0: entered promiscuous mode [ 80.241247][ T7421] ifb1: entered promiscuous mode [ 80.248317][ T7421] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 80.288873][ T7421] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 80.306351][ T7421] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 80.311297][ T7421] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 80.316427][ T7421] hwsim0: entered promiscuous mode [ 80.322905][ T7421] ieee802154 phy0 wpan0: entered promiscuous mode [ 80.325352][ T7421] ieee802154 phy1 wpan1: entered promiscuous mode [ 80.327654][ T7421] teql0: entered promiscuous mode [ 80.329399][ T7421] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 80.361153][ T7426] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 80.414098][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 80.459707][ T7429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.610686][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'. [ 80.660089][ T56] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 80.682052][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 80.824970][ T7446] netlink: 'syz.4.467': attribute type 9 has an invalid length. [ 80.830570][ T56] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 80.839554][ T56] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 80.845405][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.848634][ T56] usb 8-1: Product: syz [ 80.852782][ T56] usb 8-1: Manufacturer: syz [ 80.854300][ T56] usb 8-1: SerialNumber: syz [ 80.857666][ T56] usb 8-1: config 0 descriptor?? [ 81.018353][ T7450] /dev/sg0: Can't lookup blockdev [ 81.290794][ T7454] syz_tun: entered allmulticast mode [ 81.301625][ T7454] pimreg: entered allmulticast mode [ 81.363360][ T7457] netlink: 'syz.1.470': attribute type 11 has an invalid length. [ 81.366724][ T7457] netlink: 224 bytes leftover after parsing attributes in process `syz.1.470'. [ 81.596622][ T50] cfg80211: failed to load regulatory.db [ 81.816071][ T7467] devpts: Bad value for 'max' [ 81.819190][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 81.819202][ T42] audit: type=1400 audit(1787181925.910:618): avc: denied { write } for pid=7465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.895528][ T42] audit: type=1400 audit(1787181925.990:619): avc: denied { write } for pid=7469 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.116326][ T7452] syz_tun: left allmulticast mode [ 82.119226][ T7452] pimreg: left allmulticast mode [ 82.223170][ T7493] /dev/sg0: Can't lookup blockdev [ 82.234019][ T42] audit: type=1400 audit(1787181926.330:620): avc: denied { write } for pid=7491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.285810][ T42] audit: type=1400 audit(1787181926.380:621): avc: denied { write } for pid=7498 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.407340][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 82.418579][ T7504] syzkaller0: entered promiscuous mode [ 82.422111][ T7504] syzkaller0: entered allmulticast mode [ 82.467178][ T7507] futex_wake_op: syz.2.480 tries to shift op by -1; fix this program [ 82.471902][ T7506] futex_wake_op: syz.2.480 tries to shift op by -1; fix this program [ 82.483241][ T42] audit: type=1400 audit(1787181926.580:622): avc: denied { write } for pid=7505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.552404][ T42] audit: type=1400 audit(1787181926.650:623): avc: denied { write } for pid=7510 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.584976][ T42] audit: type=1326 audit(1787181926.680:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.483" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95c0d9e0d9 code=0x80000000 [ 82.810072][ T56] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 82.970597][ T56] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.974319][ T56] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.977892][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.981964][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.985052][ T56] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.988979][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.993049][ T56] usb 7-1: config 0 descriptor?? [ 83.200424][ T56] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 83.213865][ T56] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 83.225301][ T56] usb 7-1: USB disconnect, device number 6 [ 83.250904][ T5095] usb 8-1: USB disconnect, device number 9 [ 83.271353][ T7520] fido_id[7520]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 83.286529][ T7525] jffs2: notice: (7525) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.456663][ T42] audit: type=1400 audit(1787181927.550:625): avc: denied { write } for pid=7536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.462147][ T7539] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 83.539399][ T42] audit: type=1400 audit(1787181927.630:626): avc: denied { write } for pid=7542 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.583527][ T7539] bond1: option mode: invalid value (7) [ 83.588593][ T7555] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 83.606873][ T7539] bond1 (unregistering): Released all slaves [ 83.623586][ T7544] netlink: 'syz.1.484': attribute type 10 has an invalid length. [ 83.626529][ T7544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.484'. [ 83.631683][ T7544] dummy0: entered promiscuous mode [ 83.754437][ T7560] openvswitch: netlink: Missing key (keys=40, expected=100) [ 83.837036][ T56] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 83.842934][ T7562] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.977617][ T42] audit: type=1400 audit(1787181928.070:627): avc: denied { ioctl } for pid=7572 comm="syz.2.497" path="socket:[19299]" dev="sockfs" ino=19299 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.990064][ T56] usb 8-1: Using ep0 maxpacket: 16 [ 83.993331][ T56] usb 8-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 84.004199][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.006944][ T56] usb 8-1: Product: У [ 84.008248][ T56] usb 8-1: SerialNumber: H [ 84.216466][ T56] gspca_main: ov519-2.14.0 probing 041e:4064 [ 84.218962][ T56] ov519 8-1:1.0: reg_w 5a failed -71 [ 84.416051][ T7528] vhci_hcd vhci_hcd.0: remove, state 4 [ 84.423403][ T7528] usb usb38: USB disconnect, device number 1 [ 84.435343][ T7581] netlink: 'syz.1.500': attribute type 8 has an invalid length. [ 84.475303][ T12] vhci_hcd vhci_hcd.0: stop threads [ 84.475590][ T7528] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 84.476836][ T12] vhci_hcd vhci_hcd.0: release socket [ 84.476855][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 84.482958][ T12] vhci_hcd vhci_hcd.0: stop threads [ 84.484852][ T12] vhci_hcd vhci_hcd.0: release socket [ 84.486815][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 84.488890][ T7528] vhci_hcd vhci_hcd.0: remove, state 4 [ 84.488984][ T7528] usb usb37: USB disconnect, device number 1 [ 84.493458][ T12] ================================================================== [ 84.496203][ T12] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 84.499321][ T12] Read of size 1 at addr ffff8880280406c8 by task kworker/u32:0/12 [ 84.503187][ T12] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.504755][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.504783][ T12] Tainted: [L]=SOFTLOCKUP [ 84.504789][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.504803][ T12] Workqueue: usbip_event event_handler [ 84.504903][ T12] Call Trace: [ 84.504910][ T12] [ 84.504916][ T12] dump_stack_lvl+0x100/0x190 [ 84.504979][ T12] print_report+0x13d/0x4b0 [ 84.505023][ T12] ? __virt_addr_valid+0x239/0x430 [ 84.505076][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 84.505102][ T12] kasan_report+0xdf/0x1c0 [ 84.505154][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 84.505178][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 84.505200][ T12] __kasan_check_byte+0x36/0x50 [ 84.505225][ T12] lock_acquire+0x132/0x370 [ 84.505258][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.505283][ T12] ? _raw_spin_lock_irqsave+0x52/0x60 [ 84.505308][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 84.505330][ T12] ? event_handler+0x21e/0x570 [ 84.505354][ T12] event_handler+0x21e/0x570 [ 84.505380][ T12] process_one_work+0xa23/0x1940 [ 84.505420][ T12] ? __pfx_process_one_work+0x10/0x10 [ 84.505443][ T12] ? __pfx_event_handler+0x10/0x10 [ 84.505468][ T12] worker_thread+0x5ef/0xe50 [ 84.505492][ T12] ? kthread+0x13a/0x450 [ 84.505517][ T12] ? __pfx_worker_thread+0x10/0x10 [ 84.505534][ T12] kthread+0x373/0x450 [ 84.505551][ T12] ? __pfx_kthread+0x10/0x10 [ 84.505569][ T12] ret_from_fork+0x730/0xd60 [ 84.505607][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 84.505633][ T12] ? __switch_to+0x800/0x10f0 [ 84.505655][ T12] ? __pfx_kthread+0x10/0x10 [ 84.505674][ T12] ret_from_fork_asm+0x1a/0x30 [ 84.505710][ T12] [ 84.505716][ T12] [ 84.562769][ T7528] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 84.564376][ T12] Allocated by task 1: [ 84.564391][ T12] kasan_save_stack+0x30/0x50 [ 84.574101][ T12] kasan_save_track+0x14/0x30 [ 84.575875][ T12] __kasan_kmalloc+0xaa/0xb0 [ 84.577587][ T12] __kmalloc_noprof+0x324/0x820 [ 84.579453][ T12] __usb_create_hcd+0x5e/0xac0 [ 84.581241][ T12] vhci_hcd_probe+0x1a5/0x4e0 [ 84.582954][ T12] platform_probe+0x106/0x1d0 [ 84.584609][ T12] really_probe+0x241/0xa60 [ 84.586035][ T12] __driver_probe_device+0x20e/0x450 [ 84.587634][ T12] driver_probe_device+0x4a/0x140 [ 84.589168][ T12] __device_attach_driver+0x1df/0x320 [ 84.590861][ T12] bus_for_each_drv+0x159/0x1e0 [ 84.592393][ T12] __device_attach+0x1e4/0x4d0 [ 84.593832][ T12] device_initial_probe+0xaf/0xd0 [ 84.595374][ T12] bus_probe_device+0x64/0x160 [ 84.596831][ T12] device_add+0x121d/0x1970 [ 84.598289][ T12] platform_device_add+0x35a/0x800 [ 84.599892][ T12] platform_device_register_full+0x5cf/0x830 [ 84.601699][ T12] vhci_hcd_init+0x1a1/0x2f0 [ 84.603137][ T12] do_one_initcall+0x11c/0x6f0 [ 84.604647][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 84.606252][ T12] kernel_init+0x21/0x1e0 [ 84.607675][ T12] ret_from_fork+0x730/0xd60 [ 84.609165][ T12] ret_from_fork_asm+0x1a/0x30 [ 84.610653][ T12] [ 84.611409][ T12] Freed by task 7528: [ 84.612625][ T12] kasan_save_stack+0x30/0x50 [ 84.614093][ T12] kasan_save_track+0x14/0x30 [ 84.615545][ T12] kasan_save_free_info+0x3b/0x70 [ 84.617128][ T12] __kasan_slab_free+0x5f/0x80 [ 84.618685][ T12] kfree+0x22b/0x6c0 [ 84.619949][ T12] usb_put_hcd+0x149/0x1f0 [ 84.621294][ T12] vhci_hcd_remove+0xb5/0x1b0 [ 84.622756][ T12] platform_remove+0x5f/0x80 [ 84.624188][ T12] device_remove+0xcb/0x180 [ 84.625534][ T12] device_release_driver_internal+0x44e/0x620 [ 84.627320][ T12] unbind_store+0xf8/0x110 [ 84.628766][ T12] drv_attr_store+0x74/0xb0 [ 84.630113][ T12] sysfs_kf_write+0xf2/0x150 [ 84.631505][ T12] kernfs_fop_write_iter+0x3e0/0x5f0 [ 84.633058][ T12] vfs_write+0x6af/0x1050 [ 84.634422][ T12] ksys_write+0x12a/0x250 [ 84.636025][ T12] do_syscall_64+0x123/0x790 [ 84.637787][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.639667][ T12] [ 84.640408][ T12] Last potentially related work creation: [ 84.642062][ T12] kasan_save_stack+0x30/0x50 [ 84.643468][ T12] kasan_record_aux_stack+0xa7/0xc0 [ 84.644996][ T12] insert_work+0x36/0x230 [ 84.646439][ T12] __queue_work+0x9bc/0x12b0 [ 84.648074][ T12] queue_work_on+0x1a9/0x1e0 [ 84.649475][ T12] usb_hcd_giveback_urb+0x330/0x4a0 [ 84.651053][ T12] unlink1+0x418/0x510 [ 84.652275][ T12] usb_hcd_unlink_urb+0x131/0x210 [ 84.653836][ T12] usb_kill_urb+0x121/0x320 [ 84.655276][ T12] hub_quiesce+0x1e9/0x320 [ 84.656700][ T12] hub_suspend+0x4ab/0x9e0 [ 84.658091][ T12] usb_suspend_both+0x288/0x950 [ 84.659613][ T12] usb_runtime_suspend+0x49/0x120 [ 84.661153][ T12] __rpm_callback+0xc8/0x620 [ 84.662592][ T12] rpm_callback+0x11f/0x150 [ 84.664037][ T12] rpm_suspend+0x2f4/0x1220 [ 84.665414][ T12] __pm_runtime_suspend+0xba/0x1a0 [ 84.666978][ T12] usb_new_device.part.0+0x1653/0x1686 [ 84.668688][ T12] register_root_hub+0x4e6/0x639 [ 84.670189][ T12] usb_add_hcd.cold+0xccd/0x1158 [ 84.671658][ T12] vhci_hcd_probe+0x1c2/0x4e0 [ 84.673063][ T12] platform_probe+0x106/0x1d0 [ 84.674477][ T12] really_probe+0x241/0xa60 [ 84.675872][ T12] __driver_probe_device+0x20e/0x450 [ 84.677468][ T12] driver_probe_device+0x4a/0x140 [ 84.678985][ T12] __device_attach_driver+0x1df/0x320 [ 84.680572][ T12] bus_for_each_drv+0x159/0x1e0 [ 84.682040][ T12] __device_attach+0x1e4/0x4d0 [ 84.683532][ T12] device_initial_probe+0xaf/0xd0 [ 84.685104][ T12] bus_probe_device+0x64/0x160 [ 84.686595][ T12] device_add+0x121d/0x1970 [ 84.688011][ T12] platform_device_add+0x35a/0x800 [ 84.689557][ T12] platform_device_register_full+0x5cf/0x830 [ 84.691312][ T12] vhci_hcd_init+0x1a1/0x2f0 [ 84.692685][ T12] do_one_initcall+0x11c/0x6f0 [ 84.694154][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 84.695718][ T12] kernel_init+0x21/0x1e0 [ 84.697186][ T12] ret_from_fork+0x730/0xd60 [ 84.698695][ T12] ret_from_fork_asm+0x1a/0x30 [ 84.700290][ T12] [ 84.701051][ T12] Second to last potentially related work creation: [ 84.703289][ T12] kasan_save_stack+0x30/0x50 [ 84.705024][ T12] kasan_record_aux_stack+0xa7/0xc0 [ 84.706941][ T12] insert_work+0x36/0x230 [ 84.708504][ T12] __queue_work+0x9bc/0x12b0 [ 84.709935][ T12] queue_work_on+0x1a9/0x1e0 [ 84.711366][ T12] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 84.712894][ T12] usb_hcd_submit_urb+0xab7/0x2150 [ 84.714421][ T12] usb_submit_urb+0x827/0x19b0 [ 84.715898][ T12] usb_start_wait_urb+0x10e/0x580 [ 84.717663][ T12] usb_control_msg+0x328/0x4b0 [ 84.719188][ T12] hub_suspend+0x826/0x9e0 [ 84.720498][ T12] usb_suspend_both+0x288/0x950 [ 84.722014][ T12] usb_runtime_suspend+0x49/0x120 [ 84.723535][ T12] __rpm_callback+0xc8/0x620 [ 84.724938][ T12] rpm_callback+0x11f/0x150 [ 84.726286][ T12] rpm_suspend+0x2f4/0x1220 [ 84.728088][ T12] __pm_runtime_suspend+0xba/0x1a0 [ 84.729979][ T12] usb_new_device.part.0+0x1653/0x1686 [ 84.731947][ T12] register_root_hub+0x4e6/0x639 [ 84.733754][ T12] usb_add_hcd.cold+0xccd/0x1158 [ 84.735363][ T12] vhci_hcd_probe+0x1c2/0x4e0 [ 84.737095][ T12] platform_probe+0x106/0x1d0 [ 84.738786][ T12] really_probe+0x241/0xa60 [ 84.740475][ T12] __driver_probe_device+0x20e/0x450 [ 84.742193][ T12] driver_probe_device+0x4a/0x140 [ 84.743803][ T12] __device_attach_driver+0x1df/0x320 [ 84.745598][ T12] bus_for_each_drv+0x159/0x1e0 [ 84.747353][ T12] __device_attach+0x1e4/0x4d0 [ 84.749153][ T12] device_initial_probe+0xaf/0xd0 [ 84.751083][ T12] bus_probe_device+0x64/0x160 [ 84.752942][ T12] device_add+0x121d/0x1970 [ 84.754616][ T12] platform_device_add+0x35a/0x800 [ 84.756492][ T12] platform_device_register_full+0x5cf/0x830 [ 84.758621][ T12] vhci_hcd_init+0x1a1/0x2f0 [ 84.760261][ T12] do_one_initcall+0x11c/0x6f0 [ 84.761890][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 84.763770][ T12] kernel_init+0x21/0x1e0 [ 84.765342][ T12] ret_from_fork+0x730/0xd60 [ 84.766997][ T12] ret_from_fork_asm+0x1a/0x30 [ 84.768738][ T12] [ 84.769652][ T12] The buggy address belongs to the object at ffff888028040000 [ 84.769652][ T12] which belongs to the cache kmalloc-8k of size 8192 [ 84.774035][ T12] The buggy address is located 1736 bytes inside of [ 84.774035][ T12] freed 8192-byte region [ffff888028040000, ffff888028042000) [ 84.778062][ T12] [ 84.778819][ T12] The buggy address belongs to the physical page: [ 84.780740][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28040 [ 84.783398][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 84.785979][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 84.788319][ T12] page_type: f5(slab) [ 84.789547][ T12] raw: 00fff00000000040 ffff88801c043180 dead000000000122 0000000000000000 [ 84.792124][ T12] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 84.794743][ T12] head: 00fff00000000040 ffff88801c043180 dead000000000122 0000000000000000 [ 84.797395][ T12] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 84.799987][ T12] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 84.802502][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 84.805126][ T12] page dumped because: kasan: bad access detected [ 84.807109][ T12] page_owner tracks the page as allocated [ 84.808838][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6747637614, free_ts 6105909469 [ 84.814708][ T12] post_alloc_hook+0xfd/0x120 [ 84.816127][ T12] get_page_from_freelist+0xf46/0x3500 [ 84.817780][ T12] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 84.819538][ T12] new_slab+0xa2/0x660 [ 84.820749][ T12] refill_objects+0xe3/0x410 [ 84.822169][ T12] __pcs_replace_empty_main+0x372/0x680 [ 84.823807][ T12] __kmalloc_node_track_caller_noprof+0x677/0x830 [ 84.825693][ T12] devm_kmalloc+0xa5/0x2b0 [ 84.827086][ T12] __badblocks_init+0xb8/0x270 [ 84.828667][ T12] devm_init_badblocks+0x2b/0x50 [ 84.830249][ T12] devm_nsio_enable+0x180/0x300 [ 84.831791][ T12] pmem_attach_disk+0x180/0x12b0 [ 84.833283][ T12] nd_pmem_probe+0x1a9/0x1f0 [ 84.834661][ T12] nvdimm_bus_probe+0x17a/0x700 [ 84.836136][ T12] really_probe+0x241/0xa60 [ 84.837580][ T12] __driver_probe_device+0x20e/0x450 [ 84.839250][ T12] page last free pid 34 tgid 34 stack trace: [ 84.841084][ T12] free_pages_prepare+0x586/0xd80 [ 84.842560][ T12] __free_contig_range_common+0x14f/0x250 [ 84.844267][ T12] free_pages_bulk+0x12a/0x200 [ 84.845711][ T12] vm_area_free_pages+0xad/0x2b0 [ 84.847253][ T12] vfree+0x108/0x730 [ 84.848504][ T12] delayed_vfree_work+0x56/0x80 [ 84.849984][ T12] process_one_work+0xa23/0x1940 [ 84.851461][ T12] worker_thread+0x5ef/0xe50 [ 84.852880][ T12] kthread+0x373/0x450 [ 84.854157][ T12] ret_from_fork+0x730/0xd60 [ 84.855525][ T12] ret_from_fork_asm+0x1a/0x30 [ 84.857017][ T12] [ 84.857765][ T12] Memory state around the buggy address: [ 84.859511][ T12] ffff888028040580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.861990][ T12] ffff888028040600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.864289][ T12] >ffff888028040680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.866673][ T12] ^ [ 84.868620][ T12] ffff888028040700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.871015][ T12] ffff888028040780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.873400][ T12] ================================================================== [ 84.875881][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.877968][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.881193][ T12] Tainted: [L]=SOFTLOCKUP [ 84.882565][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.885603][ T12] Workqueue: usbip_event event_handler [ 84.887241][ T12] Call Trace: [ 84.888263][ T12] [ 84.889179][ T12] dump_stack_lvl+0x100/0x190 [ 84.890553][ T12] vpanic+0x553/0x970 [ 84.891790][ T12] ? __pfx_vpanic+0x10/0x10 [ 84.893182][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 84.894718][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 84.896685][ T12] panic+0xd1/0xe0 [ 84.898074][ T12] ? __pfx_panic+0x10/0x10 [ 84.899737][ T12] ? end_report.part.0+0x23/0x90 [ 84.901509][ T12] ? rcu_is_watching+0x13/0xc0 [ 84.903103][ T12] ? end_report.part.0+0x23/0x90 [ 84.904917][ T12] check_panic_on_warn.cold+0x19/0x34 [ 84.906730][ T12] end_report.part.0+0x3a/0x90 [ 84.908547][ T12] kasan_report.cold+0xe/0x18 [ 84.910233][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 84.912216][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 84.914151][ T12] __kasan_check_byte+0x36/0x50 [ 84.915850][ T12] lock_acquire+0x132/0x370 [ 84.917513][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.919544][ T12] ? _raw_spin_lock_irqsave+0x52/0x60 [ 84.921478][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 84.923304][ T12] ? event_handler+0x21e/0x570 [ 84.925027][ T12] event_handler+0x21e/0x570 [ 84.926600][ T12] process_one_work+0xa23/0x1940 [ 84.928127][ T12] ? __pfx_process_one_work+0x10/0x10 [ 84.930065][ T12] ? __pfx_event_handler+0x10/0x10 [ 84.931914][ T12] worker_thread+0x5ef/0xe50 [ 84.933424][ T12] ? kthread+0x13a/0x450 [ 84.934676][ T12] ? __pfx_worker_thread+0x10/0x10 [ 84.936269][ T12] kthread+0x373/0x450 [ 84.937537][ T12] ? __pfx_kthread+0x10/0x10 [ 84.939235][ T12] ret_from_fork+0x730/0xd60 [ 84.940813][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 84.942484][ T12] ? __switch_to+0x800/0x10f0 [ 84.944230][ T12] ? __pfx_kthread+0x10/0x10 [ 84.945801][ T12] ret_from_fork_asm+0x1a/0x30 [ 84.947535][ T12] [ 84.949251][ T12] Kernel Offset: disabled [ 84.950814][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:21:12 Registers: info registers vcpu 0 CPU#0 RAX=00000000000f73f5 RBX=ffffffff8ea91500 RCX=ffffffff8bbed115 RDX=0000000000000001 RSI=ffffffff8e3a92ac RDI=ffffffff8c602380 RBP=fffffbfff1d522a0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bbeb6bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5bd4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2a4983 CR3=00000000221b5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ff02fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4070e0f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4070e0f6 00007ffc4070e0fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ed2435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ed2435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ed24357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ed2435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000b0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffc90007223000 RDX=0000000000000000 RSI=ffffffff82c0067a RDI=ffffffff8cc5b520 RBP=ffffffff8cc5b520 RSP=ffffc90003c477a8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff8cc5b520 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bba6ae4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4bb3bdf6c0 ffffffff 00c00000 GS =0000 ffff8880d5cd4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4bb2ff3700 CR3=00000000252c1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcdf438b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcdf438b6 00007fffcdf438bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb2e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb2e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb2e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb2e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a55ae5 RDI=ffffffff9bbef2c0 RBP=ffffffff9bbef280 RSP=ffffc900000f7570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b8e11e4 R15=ffffffff85a55a80 RIP=ffffffff85a55b0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dd4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4bb2e08658 CR3=00000000252c1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000004 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb3bbde10 00007f4bb3bbde10 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb2ff2823 00007f4bb2ff2823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcdf438b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcdf438b6 00007fffcdf438bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb2e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb2e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb2e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb2e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e756f6d75004445 54504d4545525020 3a524f5455434558 452d5a5953000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b504a4850004445 54504d4545525005 1f524f5455434558 45085a5953000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb2ff25f8 00007f4bb2ff25c8 00007f4bb2ff2600 00007f4bb2ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c7449005bcfa249 a09cf331761f1ff5 676376bc007fc4de 490daab81140eb23 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b3cfdc7d08bc3d9c 9590a9ad318af4de fe3392ccddaaa817 0bec31e44425d2b3 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a1992c7571a0a710 ee0d52dedc2ef4e2 383d60eca7721f1b 861d57f4e0b6c931 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0144280e9eaaa470 4eecc13cde626659 0253fc6a01967a60 feb6ad9d601c38da ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000002 RDX=ffff888033f52580 RSI=ffffffff81fdf51e RDI=ffff888033f52580 RBP=ffff88806a543720 RSP=ffffc900032d7450 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed10067ea762 R13=0000000000000003 R14=ffffed100d4a86e5 R15=0000000000000001 RIP=ffffffff81fdf520 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbd83d57e20 CR3=0000000039cbc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebdd71d30 00007ffebdd71d30 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd831f2823 00007fbd831f2823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd831f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd831f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558f305368 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4804000d88033808 000d80030d800403 800303800404a003 0008000490030fff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030202000da00304 ddfeeff808000d98 030785f4ce08000d 90030804000d8c03 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100004800401 000000080606016c 9040808080080004 e00300100004d003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100004c0030210 0004b00338100003 90030000000a0806 0db0030010b88084 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000dae030010b080 84000dae031001e0 808084000dac0310 04000da803000400 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0da4030002000da2 030202000da00304 ddfeeff808000d98 030785f4ce08000d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000