last executing test programs: 4.227936423s ago: executing program 3 (id=1006): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) (async, rerun: 64) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (rerun: 64) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x3, @pix={0x9, 0xe, 0x34324948, 0x6, 0x1, 0x7e2, 0xb, 0xffff, 0x1, 0x1, 0x0, 0x5}}) 4.08644978s ago: executing program 3 (id=1007): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000023, 0x0, 0xa4a}]}) 3.97777661s ago: executing program 3 (id=1010): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r2 = syz_ublk_setup_io_uring(0x5ca0, &(0x7f0000000ac0)={0x0, 0xa1cd, 0x800, 0x100006, 0x1e5}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmmsg$alg(r11, &(0x7f0000002f00)=[{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000004c0)="dbf41b0f13ee7c56e96722acb93485d25d14cfd0f02e38975733103352bc34f6d768b4b9d9b2108d1cbb35a5505a16f2469f2079f8b72a557c70137708c352e5dc6fe9af31a1d3e1a5f53c368525d815071724879dbb1e710ea1554948bd60b7713a78b53b0379ddb6688247e0bdc06348fc03046ed37a7a0719dea312814f5b6ce5619e0d8688ad27662af2644eedcb9f1caf95b21294c26671e80561a5d97b45edfb8e571cdb29acf5ca417f6ea5de4c12aa2c6021dc9894451b2abb55391bdac5a83104b9", 0xc6}, {&(0x7f00000005c0)="4d6fa59e9e3cef4ce86be433e85f72448eddd63d57bc46d6f82f18ab20032f4a8f62f757cfd9ef614af76c0af09a2c9df41993b3c155608cbd7f94595193032b6f0b82a7e00606ef8f8ba66226250c743660dc9e211422a3406f77e9de94c607bba1f45db54461991b6ad0440eac7f46c16888e47752d3064d466fd0309b904fd2965e54fdc1f117a46a2beef083f52b105dbdd6c9994a537399b6a51ab65e971e44c179758d91f092cb1915e6ceba25c0dadaaeb338a10ac32307980b967b76da8bacb6a47e5f77f63915d4a1eb6034ff1ebbc02755fcfa2d0715652ca37699feb06a7548f0", 0xe6}, {&(0x7f00000006c0)="ed0915f90b9587ff744b33ddffc034dca5a8ed18d13a2b3f0a0e547cb747dd3a449a354dd7b1de425c71f3e447eaf471352e93f5e26cc7020c267f0d41b6b4560d52352775ae35af0a", 0x49}, {&(0x7f0000000740)="fdd359b8bfc8d887a11ab78f6f4f57940e3d1ad20c1f70b575b1c3f7f778f2ba703f3d7f99024eca7aab555dd20694ea59864cc6d2ef23b08e8809baced56df00abdf9eb42f38c63c3b52db0b5cebdca535f0680cc30ffc20e50f402", 0x5c}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000b80)="77608b66b418865702e2f5cd3629ef385fdafee0e23e26b4a2425c866baaed66c9a2f035a90ff0bafc307970cdc7614f5657ab00edeadc79e11b770e4ab95d1475f31706c6429d22fd76959229c04d4cbf3ff38bc27f7d3b081c0c033a5905f15673391c9d15cad191dd3a1e084ce1acc5f4bf77f259d497596d6c87ffc359a58a2e4478622f6a935910910510c91f4aad2ff79270e464a6d4c191de4d518a0fc90ff50a11", 0xa5}, {&(0x7f00000023c0)="00e2c51e7fe380cb1b9be6699d5c7a9e8e82a5fe8ec9fce9cee149e1711b983098b78e53892e057d94f637e1f557a8d3bb36b58cf7f9bd83ff76c29b5f8c7f145601378118d429699c9ced8aa70922e08903831d7733818686ec227d5d0b15df5bf75f14694aaa6562d2224044605e2aa6f3a1ca5d259e620e873631d6695096ebc87bbaaf4c80e327d66b4e1420ad10c7eed1d2ce71e1c06a873746dca29c34deb7d772852b2ae75b6e3b5405fd64a882bcc6c0f7102bc9af5a40831e360ec04a0270a6", 0xc4}, {&(0x7f0000000300)="355e9b8a85a0cf574c55332824947503511955ae3a18555b2a92491ed2f96ab2b1bc965260db5d8e80ef649836f6f82b7c5ad80a7bd8cf44e24b50d5467ca6b1a2ca8e362d365fffb36ac20b", 0x4c}, {&(0x7f0000002540)="5c3e776ec2ea69bfb1971ad4ed8fe619ceb3dc55ecd7b417fb91cc26eb9d2d316cde1f62228e36054e944b9a609a084da035e184190b8c4dba98e8587a8f50c9c1d2464fb6ade7c2cc944123781f70645d0c4a05cf80796fb409a1e05df70c63502686683746abd81ed834de987bd225cbb39da4cc751408068fd9cb7bc26edc7f2ccce61befbe894c9fd05707034cfa7d35ae8c4153c77a0d230cca059fa60318a0e015430898b8a7d706cdaf5e37579b917ec8e1", 0xb5}, {&(0x7f0000000380)="e9d9655d40bbed4dc366e3aaed689168626df7ea8037858e10cab242e77fa46a660c4fc099fd", 0x26}], 0xa, 0x0, 0x0, 0x40000}, {0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002700)="c13f28e32bddb700218eee376538fa2846683748ce3c460a57688c577e27a5d39c19a379808cf684f6c2f64445ebbb4e63cdfb550b4cfe58540fa08198071504abd3420031353c905abf5dbf17213237e6b5433e560b04875ced5340bf58e221cd4f071fab55a25e2bfc664c7b1a0d16f492729bab2356dc79adec935c6a44d78e2b8d4511ba7bad77f973d094dd6d2db9530a61605b16e72106e86d", 0x9c}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x118, 0x100}, {0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002940)="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", 0xfe}, {&(0x7f0000002a40)="cd7705878af3a3269a9a0b5abd49a846d9dcaef3ab8be5add62d97508c4d25222d21961fb0fd8b663a7d842457e5", 0x2e}, {&(0x7f0000002a80)="037c4ec83bc376eda54b2ba44e47c5bcc2360dd6452fccc7f0424431e65b6169c8fc028cf1c948e00f024c4e2973ba04ec45ca9ea933ad93adfd163cd2bf1cdc103ed4ee1d6f073a7f0a62dd6ff8138b76a7b22d04146ef135d9ba26d272b9e5218c931a235b5232c0c95ff032", 0x6d}, {&(0x7f0000002b00)="60a82b7c6088fbb21e94ad2ed6e7530b62dd0096f297fbda1ab3b78f122da1db66f6822fb3ca36c3917c6a9fe06b8aca821916bf53c3ed6a82277767a0e514f88112f35568a6744828c922446152b73d0aa9d069059f52fe18cd40b6de942d1947897cf8e30d8c5d9a1b507f3b408721c0438e597af4721f6b5a3dc9e0547cc286d0cc7088209cebb0c377782e642d44306a54649ed0ad7430c380f6d9e99637c353ec4d426daf2ce448ebb5ef", 0xad}, {&(0x7f0000002bc0)="432a9ac2c57a90ddf86723b52ff1fac9531c", 0x12}, {&(0x7f0000000c40)="49ce3a5cff37cef7d6085a9fa5815fc09ec67669a116a70934759ad38469f7e3720d3c61788567a2fa850c07f32e843ab3e37dfd810ad249e62fb161519109224412735d41a3cb8b8c853719d355f8dd791bebb266d3f9ae08d43b03d74d830ad0acc16569f7235c8be9cee01c0123cd1023a150fefbd2f7653100767a3589a43757c8358b18c9eaaef9fbf4ca8b563f3ae0eb370c736b44c2da8654360cf3d438efdb5667b26bc49d9d938a2aa8af966183400dc839c2299bedfce50a171b78647278c6c85cc4007f6c734bfdc9889467ccf30a9f9d603989210c6c016370e1e33e", 0xe2}, {&(0x7f0000002d00)="ea144d5c197c428d950452bbc0c8fa78accb671ebe5818cbb48e66ec152ae853256c5e75cad67847c8ab428f1ffcd1ad8b85f31a032af1bf567fea26d943fb8ef8fb342ba27917224ca4bb595fb2888d1dd3ae68b7474214ca74b4077bd4c041b2f02eab50f7ae64dd83d36a252276a98fcd3f4690727de471fe2c8a0cc9e9c8a2a6b8cbe5e479d7c56af3110a2ccbc747661b6f166075934906383b01597b0b24ce44b14b528d0a9559e4f7691891947b4bb77e5c5aa32046ecde3bedff80e43a4a5398cd3d6454cdff8bd013098f0ef7c5996679038a0c5a5b7acd2414bc77681a2eb4666f15fbc96bdf65ce", 0xed}], 0x7, &(0x7f0000002e80)=[@assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0xe}, @assoc={0x18, 0x117, 0x4, 0x3a33}], 0x48, 0x8041}], 0x3, 0x4000) r12 = socket$unix(0x1, 0x1, 0x0) r13 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r13, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e62, @loopback}, {0x2, 0x4e24, @private=0xa010102}, 0x20, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)='sit0\x00', 0x7f, 0x0, 0x10}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xb, 0x0, 0xd, 0xa, 0x6, 0xf, 0x5, 0xf, 0x2, 0x1, 0x1, 0xc, 0x4, 0x0, 0x2, 0x4], 0x1, [0x9, 0xfc5, 0x9, 0xfbac, 0x2, 0x336, 0x101, 0x0, 0x0, 0x0, 0x8, 0x8, 0x9cc, 0x5, 0xc636], [0xf001, 0x5, 0xff05, 0x6, 0x10, 0x9, 0x200, 0x4, 0xe495, 0x2, 0x75, 0x7, 0x5, 0x4, 0xb, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x20044020) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000000000406a5e430b2dcb35f8b505d88df99a05840000000000000109022400010000f80b0904000001030002000921fd7f000122e301090581038936050e70"], 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000300000020732b1e004000010203010902120001010740030904e1ffff000300034b856ea2372e0481b80719aca30f6cb71195926d10f4e601319728c08e761b63c3313fa1ff1039bee11f26231d0d2283"], 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000d40)=ANY=[@ANYRESHEX=r14], 0x0) pread64(0xffffffffffffffff, &(0x7f00000007c0)=""/128, 0x80, 0x0) r15 = syz_io_uring_setup(0x1da9, &(0x7f0000000540)={0x0, 0x800069ea, 0x400, 0x0, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r16, r17, r18, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r15, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x2}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 744.517782ms ago: executing program 0 (id=1077): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80000001}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x24000) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x1402, 0x20, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4011) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x74}, 0x1, 0x0, 0x0, 0x48844}, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "d0be73934c1d448167df0314b870a4a9bc70d76ad865e0ff6f88f4bee5f803be"}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) ioctl$PPPIOCGIDLE32(r6, 0x8008743f, &(0x7f00000006c0)) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r0) write$nci(r4, &(0x7f0000000740)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x6}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r9, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x48}, 0x1, 0x0, 0x0, 0x89}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x4490) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x11, 0x1e, &(0x7f0000001e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}, [@jmp={0x5, 0x0, 0x1, 0x6, 0x7, 0x4, 0x4}, @ldst={0x3, 0x2, 0x4, 0x2, 0x4, 0xffffffffffffffc0, 0xfffffffffffffffc}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x66, 0x5, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000001f00)='GPL\x00', 0x5, 0x63, &(0x7f0000001f40)=""/99, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001fc0)={0x200040, 0x5}, 0x8, 0x10, &(0x7f0000002000)={0x0, 0x10, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002040)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x10}, 0x94) r14 = openat$null(0xffffffffffffff9c, &(0x7f0000002140), 0x14002, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x2, 0x0, 0x8, 0x9, 0x30418, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0xd, 0x18, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @ldst={0x0, 0x2, 0x3, 0x1, 0x7, 0x18, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @generic={0x5, 0xf, 0x2, 0x1ff, 0x4}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000d80)='GPL\x00', 0x3, 0x1000, &(0x7f0000000dc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000001dc0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r13, 0x7, &(0x7f0000002200)=[r14, r15], &(0x7f0000002240)=[{0x2, 0x1, 0xb, 0xc}, {0x4, 0x3, 0xf, 0xb}, {0x5, 0x1, 0xc}, {0x3, 0x3, 0xc, 0x3}, {0x3, 0x2, 0x5, 0xc}, {0x1, 0x2, 0x4, 0xc}, {0x3, 0x4, 0x5, 0x6}], 0x10, 0x8000}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000023c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000002400)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f00000027c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002780)={&(0x7f00000024c0)={0x29c, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x138, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x4}, {0x7, 0x1, '^!\xb0'}, {0xa, 0x1, 'wpan0\x00'}, {0x6, 0x1, '\\%'}]}, {0x20, 0x0, 0x0, 0x1, [{0x8, 0x1, 'GPL\x00'}, {0xa, 0x1, '$/$-{('}, {0x8, 0x1, '\\\'!\''}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '{'}]}, {0x20, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nfc\x00'}, {0x5, 0x1, '%'}, {0x7, 0x1, '{#('}, {0x4}]}, {0x3c, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x4}, {0xe, 0x1, '/dev/null\x00'}, {0x8, 0x1, '.+{!'}, {0x4}, {0x4}, {0xa, 0x1, '/$\\\xf2,!'}]}, {0x30, 0x0, 0x0, 0x1, [{0x8, 0x1, 'GPL\x00'}, {0x6, 0x1, '-*'}, {0x4}, {0x4}, {0x4}, {0x8, 0x1, 'GPL\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0x9, 0x1, '#\\:/\x12'}, {0xc, 0x1, 'geneve0\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, 'GPL\x00'}, {0x4}]}, {0x14, 0x0, 0x0, 0x1, [{0xf, 0x1, ':%\'$+/(:\xfc&%'}]}, {0x14, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nfc\x00'}, {0x7, 0x1, '+\x10!'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x128, 0x13, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [{0xa, 0x1, '&!(\xb0!^'}, {0x5, 0x1, '\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'wpan0\x00'}, {0x8, 0x1, 'GPL\x00'}, {0xd, 0x1, '/dev/ppp\x00'}, {0x9, 0x1, '#])#('}, {0x6, 0x1, '^{'}]}, {0x10, 0x0, 0x0, 0x1, [{0xb, 0x1, '@#%^)+-'}]}, {0x40, 0x0, 0x0, 0x1, [{0xb, 0x1, ',$*,\xfb!,'}, {0x10, 0x1, '.]-&-[(-+$.\xc0'}, {0x8, 0x1, 'GPL\x00'}, {0x5, 0x1, ']'}, {0xd, 0x1, '/dev/ppp\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0x7, 0x1, '{^*'}]}, {0x54, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xc, 0x1, 'geneve0\x00'}, {0x6, 0x1, '[*'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) 608.167821ms ago: executing program 3 (id=1080): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1, 0x40, 0x10000002, 0x27a}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 535.826354ms ago: executing program 1 (id=1081): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0xfceb51b9eb2444af) sendfile(0xffffffffffffffff, r0, &(0x7f0000000300)=0x1ff, 0x2) (async) sendfile(0xffffffffffffffff, r0, &(0x7f0000000300)=0x1ff, 0x2) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 535.072861ms ago: executing program 0 (id=1082): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r3}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0xee01, &(0x7f0000000080)={0xfffffffffffffffc, 0x5, 0x0, 0x5}) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15b64c082aec6e3c, 0x13, r0, 0x0) r5 = accept(0xffffffffffffffff, &(0x7f0000000180)=@ieee802154, 0x0) sendto$inet_nvme_pdu(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) close_range(r6, r5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) 534.700074ms ago: executing program 3 (id=1083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/100, 0x64}, {&(0x7f00000003c0)=""/160, 0xa0}], 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="cc0000001b0011012dbd7000fddbdf25fc020000000000000000000000000000fc0200000000000000000000000000004e2100004e2303ff0200602073000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) sendto$l2tp(r2, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) recvfrom$l2tp(r2, 0x0, 0x0, 0x162, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000280)={0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4c, 0x8, 0x17, 0x1b, 0xfe, 0xb, 0x4, 0x1, 0xd, 0x4, [0x4000000c, 0x10083, 0x1000000, 0x2, 0x2eea0afb, 0xb, 0x4000004d, 0xb9ad]}}) r6 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) writev(r0, &(0x7f0000000a00)=[{&(0x7f00000005c0)="9c05af2a54e92d152b3409e03bcfd33ab8663eb97ad2dc5325abf098646acecea6eda2cebe0e9c2baf78952e174cec4d6e67e433dbd6d7230dc6860e8424e70a8d6ac0da61047c0027b0d589bf196fbc3d13b903d2eced3ac83b46d8d4ef2a7541781e4a", 0x64}, {&(0x7f0000000780)="5d265e0f5c62ea22ff86cfb9fab8ece2d0e8a561ec48516f472244da2a3aafa3594131719dd5578fb1476466ad20e92e696aefb70267878e4bf5a7675b2a0681540deb429ca649e0ccff3668a1c2d6ac84e0e6b1732955df8db455bc9c84c3fc9cdb0a3fae8fef08d7e636aac84e696ada0e0087f3c1eb37ea616f67481f48fd635e272adb75d6a0998ee977b89defd252b9111cda7b205bd2a46d73ffc649cfa2015bc190526f2e8ebe015df8b8d947be77166dd113a6f491e9bb718bbdd054f53d677a0fcc36bcf4e576b5ca56b5cd4ad513b5fc238644f924e5e458f02a5c69d77211de1e1ef1d5f7f243fa99b82f9cd3255ff49bb3b18d36fd9917", 0xfd}, {&(0x7f0000000880)="c76084755e30ca5c00973d1a0ab9f7c65841d5b067d6f74acfb8dbb80630c0478667da4780f0aae02aad46ef073b8a55447cba25282105f69c0863bdb8f77d10d3e942ce26273fa044aec13f3df85d089d348202d0b2871ed7ca3a25e832c08b", 0x60}, {&(0x7f0000000900)="c8f5c8135cbd0c692b217a8917ccf3f695d01614785a5b4e54d405f59e4979f0d832a459a33a4328b587da9af5eb6146052edd3adaf0c3145d9c9f7417f8872b2131dd060b482708e0e7a0fe301d2c290287026cc682878ebe5dfe21d2b11d6bb2c8c4cd9cb7ce662e19596ddf625b313c4882c33f59799aee6e916b6fb92f59dd4ec91df2", 0x85}, {&(0x7f00000009c0)="6ef0bcfcfb319317199ddb00828ddaa61c97e4c7ce5bd1dd059bc46fee69f375b713e9acb1", 0x25}], 0x5) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 467.405652ms ago: executing program 1 (id=1084): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x123f82, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f0000000200)={0x0, 0x1000, 0xd}}) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (rerun: 64) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 466.69342ms ago: executing program 2 (id=1085): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x16, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x287c0acc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x2, 0x0, 0x4, 0x0, 0x4, 0xfffffffffffffff0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @exit]}, &(0x7f0000000740)='GPL\x00', 0x10000, 0x9a, &(0x7f0000000780)=""/154, 0x40f00, 0x65, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000840)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xc, 0x1, 0x9}, 0x10, 0xfe89, r3, 0x8, 0x0, &(0x7f00000008c0)=[{0x3, 0x2, 0x5, 0x5}, {0x0, 0x2, 0xe, 0xb}, {0x3, 0x4, 0x4, 0x7}, {0x4, 0x2, 0x10, 0xc}, {0x4, 0x1, 0x10, 0x4}, {0x3, 0x4, 0x8, 0x7}, {0x1, 0x3, 0x7, 0x9}, {0x3, 0x2, 0xc, 0x1}], 0x10, 0x101}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000002040)='/proc/self/clear_refs\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3fffff) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d000000140000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000000000)) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfe000000}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc000000}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8018) write$tun(r8, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x500, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 412.50825ms ago: executing program 0 (id=1086): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x8, 0x2, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8320, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x48000) 398.978591ms ago: executing program 3 (id=1087): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r1, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x2400c800) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000480)) sendto$inet(r1, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0x3, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x890) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffd, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r6, 0x8}, &(0x7f0000000100)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf2508000000050012000400000006001d0044fa000006001a004e20000008000a000400000006000e00ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x5a9fdb4901a5b1b2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7040010000000f00000008002c000b00000008000300", @ANYRES32=r10], 0x2c}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x68, 0xfffe, 0x2, 0x4, 0x0, @broadcast, @multicast1}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) 325.240161ms ago: executing program 0 (id=1088): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000e50000140003006970766c616e310000000000000000001c0012800b00010069707e6c610000000c0002800600020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x40440c5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000e50000140003006970766c616e310000000000000000001c0012800b00010069707e6c610000000c0002800600020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x40440c5}, 0x0) (async) 323.930887ms ago: executing program 2 (id=1089): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) semtimedop(0x0, &(0x7f0000003340)=[{0x4, 0x3d, 0x1000}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x600, 0x28, 0x20}, 0x18) openat(r1, &(0x7f0000000180)='./file0\x00', 0x240000, 0x80) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 205.138291ms ago: executing program 0 (id=1090): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0007ff", @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090018000000060002000100000008000a000000000008001700", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x418a4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x3c}}, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil) 204.777153ms ago: executing program 2 (id=1091): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) (async) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_getoverrun(r1) r2 = socket$inet(0x2, 0x1, 0x100) listen(r2, 0x9) 204.113065ms ago: executing program 2 (id=1092): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) r1 = socket(0x11, 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000001980)=0x9, 0x4) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x6, r4, 0x1, 0xe5}, 0x80, 0x0}, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00009b5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f0a41d941d9000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x50}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 203.912474ms ago: executing program 0 (id=1093): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc5f}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000280)={"f95e88f0", 0xf1, 0x3, 0x63, 0xfffffbff, 0xed, "564db516f90000000000a331646800", "11407a4a", "f01b9c4b", "3a194aab", ["592ad56aaba512aa7e7d4687", "f989528865de18686a614093", "f26907ac93194161884d4380", "8c4d4311bce397cadd7e6c2f"]}) 127.604948ms ago: executing program 1 (id=1094): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x8, 0xffff}, {0x0, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0x18}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x5, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000002140), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001ac0)={r10, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a85a056f5d759ded130e04d528539f3d328973747a75df8a69ea917deb7d6193b3e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) 125.351941ms ago: executing program 2 (id=1095): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) r0 = syz_open_procfs(0x0, &(0x7f0000001ec0)='sessionid\x00') readv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x100000, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x1883}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x7800, 0x1, 0x7, 0x1, {{0xd, 0x4, 0x0, 0x39, 0x34, 0x67, 0x0, 0x6, 0x29, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x20, 0x1, [{0x6, 0xf, "22be6582c9152aa26779d786d9"}, {0x7, 0xb, "aad7653b884639efda"}]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtclass={0xc0, 0x28, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff1, 0x8}, {0x7, 0xfff2}, {0xfff1, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0xffffff64, 0x7, 0x3}}, @TCA_HFSC_RSC={0x10, 0x1, {0x800, 0x9, 0x1000}}, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x2, 0x1}}, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0xf6f00000, 0x20000000}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xd}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_sfq={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00178008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 77.035575ms ago: executing program 1 (id=1096): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000940)=""/213) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi4\x00', 0x500, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000027680)={0x6000004, 0xfffffffffffffffc, 0x0, 0x3, 0x3}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x4, 0x4, 0x7ffe, "7fa0ff0000002af03298e1c9d27c0c00", 0x1, 0x56, 0x1, 0x1, 0x9, 0x1}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x66, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x4210, r4) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x41000, &(0x7f0000000340)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030322c6d61783d30303030303030303030303030303030303030312c6d61783d30303030303030303030303030303005303030312c73746174733d676c6f62616c2c66736e616d653d5d282c7063723d30303030303030303030303030303030303032322c00"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)={0x54, r6, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xfffffffffffffffa}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4090) dup3(r0, r3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1.019429ms ago: executing program 2 (id=1097): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) futex(&(0x7f0000002980)=0x2, 0x80, 0x2, &(0x7f00000029c0)={0x0, 0x989680}, 0x0, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) close(0x3) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000480)={r5, 0x7}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000002c0)={r7, 0xf}, 0x8) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) (async, rerun: 64) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='smb3\x00', 0x104400, &(0x7f00000000c0)='\b\x03m\x1f\xbaZ&\xfd\x87\xf4\xd5\xce\xd6_K1\f\x18\x13?{\x02\xcf\xfa\xb74X\x8eo\x9a\x0e\x96\x14\xaf\x87\x8d\xfa\xfaH{\xae\x13oa\x13\x17\xf1\f\xbb\xbc\xcec\x9b\xc2D\x00\x00\x00\x00\x00\x00\x00\x00\x00') (rerun: 64) 666.147Âĩs ago: executing program 1 (id=1098): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0xf88, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x70742a85, 0x7fffc, 0x0, 0xf0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1099): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f00000000c0)=[{0x1a, '\x00', @data=0x8, 0x7fffffff}]}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) sendmmsg(r1, &(0x7f0000001880)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast1}, 0x0, 0x0, 0x4, 0x1}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)="cbf1e55831bdb99ad7dc1dcc01a36c21b43cb93477291c4f1741", 0x1a}], 0x1}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)="91fafec4d83e07a087a24df0aecd18ed48de482c260b1124d14dd8d4cf9fae4d88412ed2c06e0a76330a7fad", 0x2c}, {&(0x7f0000000300)="cc6860e20a7e06ff97ba7f2adfcadd4a41fc136b84724af005cc40583b1c037439714c3c78863e1a87dab91d7bc74e41a513206db5eebd3ebc9dabc33bcc952b8aac1889e190831dd36d3459184d49ee3db4627ba46b65c7bdb936867974d553436d208d2254ea608964aeae40284c732e82914ce67d575c5580c2d5b8c69f20a02e105f89c852cc06f5adcc008be6b4b6ed", 0x92}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="a6ac950a9d00298e55266c533fc5c8506f968a10294941ddfc04350f05a3ddafe142dad8fa3e7ea7a57d3dc2d5a58f4ad2d52df94d59bbe61ffc37414737e35df2157ca1321d7fe54ebb926e61895a53955873", 0x53}, {&(0x7f0000001440)="fe45688f7653a3bcb925f3f0e121f690dd84fd66d2fd6a654ad4d86f776f14cfa4b044ac3ee55fe487504cc115d032212abf066dbfb94a17d59463b4e34954abba8934cf3da1f9f48ff25b06367b269fc9fca1f5b95ac3ac2e493f11bee35982979aaa68b36d9781b0a81b3ae7d5e03cbe9f18141da72d12d25398b1ee4bbcafc4864f11760ef32b742f42184f98d130d1171d0af71a3666dd4f6c7c10ed1a8c7d66c3e73511c3a8a846c96304f847cd38041c4a7356a928e28ebe5c461eaeb9f3c0bb4d323f5525f589fbffed511a5c0421968482267a6ceea9f6b53294cb7498a311c6aec8d81acd907ff5f61d164303", 0xf1}, {&(0x7f0000001540)="9b2112d852dbfe0ac0fbe79f96e23b8169d238b64e6c05ae7c28fadc585c2df8a066fb441e2eb8f5c77b95d4e875b02978b5786815eaa7fe74987da7ad5189c682dc00bb3d8ba07e5c0753c107798d8192704ede16f3ba66cc6616bda16e3c69237c3eac808b302e142ead5ebb17db896f088f04c6ce3f4b181d5e5f5162f906c8860dcd2d7df2ec9e289ca9cc7f1e07d8487114d9e6dc07626211a3a8ee06227945f10c54cae1e82e0839a0bda36a7d1b8247022b81cf876f0f9798f79fb25e7707ac5c90c013d14dc282", 0xcb}], 0x6, &(0x7f00000016c0)=[{0xf8, 0x10c, 0x3a30e306, "6f2ab89cf48086e169ffd26f0a3372155044183502a911f919c2deaf0ae66dfb4618af20038e90311315bc0c5c49b47d7ad04eece300be872bf98794155dfc112deb08a7d4a9980007bd0390bfa5713bb955606207a509d8f4007093cdc2b9137b8ef3eeeb4d5a07b3e8bfd4f7c2f2388dcc4ec007c913e3192fa11c208e24d2a756351ff0f4faa832ab4c2ed87558150209fdb2bdc639f8d2737c114f0bbf8ae3b87dad86da6ddad99f3db6bb2cec030f950f37eb286b941e7a3f07bdd14ac769d2eddec1236047a93c9bbf50b70ecb2dddbe43c4733981ffb0d0176455a7029c"}, {0xa8, 0x10c, 0x4, "8d6ac8922f33a20765cb0f885d04acfbfaa72dff40bc714b35657b749ad90ea63cff60c5ae67bf3b2eaae8abfb10ac172208dc63432d6e4f0f503910ef48853fee9c2573eb6109ffe531c6373878dc79c104a417ed82971bc2438d28a015e956cdb2c317efd1e9393ae62ace8d8a03bdf1e2d902755d4fd9e3898211f881eab5a227993651b68d55a2b7c467289832ddb6f1"}], 0x1a0}}], 0x2, 0x10) kernel console output (not intermixed with test programs): 5901] usb 7-1: Using ep0 maxpacket: 8 [ 466.507755][ T5901] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 466.512977][ T5901] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 466.518005][ T5901] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 466.523296][ T5901] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 466.528835][ T5901] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 466.536048][ T5901] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 466.541300][ T5901] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 466.550697][ T5901] usb 7-1: config 168 interface 0 has no altsetting 0 [ 466.556973][ T5901] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 466.560032][ T5901] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 466.565389][ T5901] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 466.570080][ T5901] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 466.576658][ T5901] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 466.580696][ T5901] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 466.584517][ T5901] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 466.589107][ T5901] usb 7-1: config 168 interface 0 has no altsetting 0 [ 466.599393][ T5901] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 466.601879][ T5901] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 466.605526][ T5901] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 466.609519][ T5901] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 466.614879][ T5901] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 466.619638][ T5901] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 466.623291][ T5901] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 466.628240][ T5901] usb 7-1: config 168 interface 0 has no altsetting 0 [ 466.633055][ T5901] usb 7-1: string descriptor 0 read error: -22 [ 466.635679][ T5901] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 466.639047][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.651386][ T5901] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 466.682382][ T1349] usb 5-1: USB disconnect, device number 5 [ 466.756076][ T7226] bond1: entered allmulticast mode [ 466.759560][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 466.911753][ T7235] netlink: 'syz.3.361': attribute type 12 has an invalid length. [ 466.915354][ T7235] netlink: 'syz.3.361': attribute type 29 has an invalid length. [ 466.921258][ T7235] netlink: 260 bytes leftover after parsing attributes in process `syz.3.361'. [ 466.924687][ T7235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=7235 comm=syz.3.361 [ 466.924698][ T7236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=7236 comm=syz.3.361 [ 466.925123][ T41] usb 7-1: USB disconnect, device number 8 [ 467.093429][ T7242] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 467.118473][ T7242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.149997][ T7237] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 467.153811][ T7237] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 467.208015][ T7242] bond1: (slave gretap1): making interface the new active one [ 467.218425][ T7242] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 467.271094][ T5901] tipc: Node number set to 2886997007 [ 467.440948][ T7265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.368'. [ 467.672827][ T7274] nbd0: detected capacity change from 0 to 63 [ 467.678353][ T1349] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 467.678809][ T5901] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 467.699119][ T65] block nbd0: Receive control failed (result -104) [ 467.852674][ T1349] usb 8-1: not running at top speed; connect to a high speed hub [ 467.862083][ T1349] usb 8-1: config 70 has an invalid interface number: 72 but max is 0 [ 467.865903][ T1349] usb 8-1: config 70 contains an unexpected descriptor of type 0x1, skipping [ 467.874283][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 467.874476][ T1349] usb 8-1: config 70 has no interface number 0 [ 467.879599][ T5901] usb 5-1: config 9 has an invalid interface number: 115 but max is 1 [ 467.883037][ T1349] usb 8-1: config 70 interface 72 altsetting 127 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 467.883944][ T5901] usb 5-1: config 9 has an invalid interface number: 170 but max is 1 [ 467.889964][ T1349] usb 8-1: config 70 interface 72 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 467.892441][ T5901] usb 5-1: config 9 has no interface number 0 [ 467.892465][ T5901] usb 5-1: config 9 has no interface number 1 [ 467.892515][ T5901] usb 5-1: config 9 interface 115 altsetting 4 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 467.897346][ T1349] usb 8-1: config 70 interface 72 altsetting 127 has a duplicate endpoint with address 0xE, skipping [ 467.899674][ T5901] usb 5-1: config 9 interface 115 altsetting 4 endpoint 0x8F has invalid maxpacket 2197, setting to 64 [ 467.899706][ T5901] usb 5-1: config 9 interface 115 altsetting 4 endpoint 0x1 has an invalid bInterval 64, changing to 10 [ 467.902407][ T1349] usb 8-1: config 70 interface 72 altsetting 127 has a duplicate endpoint with address 0xB, skipping [ 467.909784][ T5901] usb 5-1: config 9 interface 115 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 467.913907][ T1349] usb 8-1: config 70 interface 72 altsetting 127 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 467.918624][ T5901] usb 5-1: config 9 interface 115 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 467.923403][ T1349] usb 8-1: config 70 interface 72 altsetting 127 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 467.929668][ T5901] usb 5-1: config 9 interface 115 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 467.932743][ T1349] usb 8-1: config 70 interface 72 altsetting 127 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 467.937552][ T5901] usb 5-1: config 9 interface 115 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 467.937584][ T5901] usb 5-1: config 9 interface 115 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 467.937610][ T5901] usb 5-1: config 9 interface 115 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 467.937632][ T5901] usb 5-1: config 9 interface 115 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 467.937652][ T5901] usb 5-1: config 9 interface 115 altsetting 4 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 467.937675][ T5901] usb 5-1: config 9 interface 115 altsetting 4 has a duplicate endpoint with address 0x8F, skipping [ 467.937696][ T5901] usb 5-1: config 9 interface 115 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 467.941891][ T1349] usb 8-1: config 70 interface 72 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 467.946752][ T5901] usb 5-1: config 9 interface 115 altsetting 4 has 15 endpoint descriptors, different from the interface descriptor's value: 13 [ 467.950695][ T1349] usb 8-1: config 70 interface 72 altsetting 127 endpoint 0x2 has invalid maxpacket 80, setting to 64 [ 467.950724][ T1349] usb 8-1: config 70 interface 72 has no altsetting 0 [ 467.952998][ T1349] usb 8-1: New USB device found, idVendor=0458, idProduct=7007, bcdDevice=ee.c6 [ 467.957069][ T5901] usb 5-1: config 9 interface 170 altsetting 73 has a duplicate endpoint with address 0xC, skipping [ 467.961824][ T1349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.966723][ T5901] usb 5-1: config 9 interface 170 altsetting 73 has a duplicate endpoint with address 0x2, skipping [ 467.971022][ T1349] usb 8-1: Product: č–Ģ唨噎ė‚•îĒ”éŊé¸ŧéŋĒė‚ė°ŖįĄ ęŦã›—퇨ꊰå‚ļæƒĢčĸ›āģŸæ´‡æŧŧä§Ĩá•Žâ†ę˛¯ëģŋ蛒áŊ¸ė´ē攈푄܆äŧ­čŸŽãŸ§Ãāžįŧî„ŧīŧ–ã“ēī‹‹ãĄˆâŽŽé“ŽīģŸîŠžįˆ¯ę›ŊⰕ囐äĸ´ėąŗãŦąâŒ‹äƒęļžâ´žåĢ ëšî’ŒčŠ‹ë‰œįĩė°’ëĸ æĢ•í•Žė˜šė…ŠÄ™ęžˇá˜†îģä˜ĸ蟔ė˛ŽęšėŋƒčŦĄå‡ë¯¨įŖ—īļ˛îž—ęēˆįŽˇėˆĻᄹáĸĢ✌많į…ŋįĩ㗛ęŗĄî˛‚čžŗâ”Ē⍰āŧĻę¯”āŠšî–ž [ 467.971049][ T1349] usb 8-1: Manufacturer: ဇ [ 467.971059][ T1349] usb 8-1: SerialNumber: ë’ĻįŗŠīĒ„ęŠŠä­§ëŒîŽ¤î°ŗâĒ•ęŦĢīŠžįƒ§åŸ°á—ėŖß¤ë˛ŧ롚⤲įššæ¸ĸ䁇ëžĻīĩšį°Ąáĸ”į¨˛îĻᑟ᧴ī‘—å…ąëŠžâ•Œæ€šė†Ŋ䞎áĻ›į‰į´‹īŊ¤ę°žåž„Ⓤ㔞㧤áŊŧéŧŒéēŧ舀豂⴩â°ĸî„¯Đ‡äĄ˛éŗë€Œå‹“é„€ėĻ¨čĄŠä˜ƒâ“Šãž—刄敇áŋГæ™Ŗī¸˜ėšŅŠåąƒä‰’î“¯éąžęĸļæĩîŽĸퟑãƒŋᒂä‹Ē [ 467.974947][ T7270] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 467.977093][ T5901] usb 5-1: config 9 interface 115 has no altsetting 0 [ 467.984615][ T7270] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 467.987820][ T5901] usb 5-1: config 9 interface 170 has no altsetting 0 [ 468.083828][ T5901] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=ef.4e [ 468.088897][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.093397][ T5901] usb 5-1: Product: ᰁ [ 468.096240][ T5901] usb 5-1: Manufacturer: æŗâ•ĩäœŽč°‡ãš¨īŖŠâ‰č“˜æ‘ēčĨ­ę’’ëŠŒã‚Žîˆ ãžˇįŊä‘ĨęĻšã‰¨åŽ¯å‡Šã’šæ’†æĻœáĸžč§œæˆāŦ•æ”ŧâ‡Ŧã´ĻâĒ äŊėŽ“Ũ•į“§æŽĸíž—ãŠˇë‡¤ë¯ģ혎įėēƒėŽœęŒ†ážŽáąĨāŦ­é—ž [ 468.105278][ T5901] usb 5-1: SerialNumber: íģå”ąî‡ äą°äą•ä§ŋæŋę Ŗâ§ļä“Ŗ䷍芧䓷톉á‰ģ [ 468.114838][ T7271] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 468.223116][ T1349] gspca_main: gspca_zc3xx-2.14.0 probing 0458:7007 [ 468.231538][ T1349] gspca_zc3xx: reg_w_i err -71 [ 468.343762][ T7271] random: crng reseeded on system resumption [ 468.447536][ T5901] usb 5-1: unknown interface protocol 0x92, assuming v1 [ 468.453461][ T5901] usb 5-1: cannot find UAC_HEADER [ 468.458594][ T5901] snd-usb-audio 5-1:9.115: probe with driver snd-usb-audio failed with error -22 [ 468.479092][ T5901] usb 5-1: unknown interface protocol 0x46, assuming v1 [ 468.483334][ T5901] usb 5-1: cannot find UAC_HEADER [ 468.566960][ T5901] snd-usb-audio 5-1:9.170: probe with driver snd-usb-audio failed with error -22 [ 468.575571][ T5901] usb 5-1: USB disconnect, device number 6 [ 468.616959][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:9.170/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.820786][ T7292] program syz.3.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.826742][ T7293] program syz.3.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.865904][ T7297] 9pnet_virtio: no channels available for device syz [ 468.876032][ T7299] 9pnet_virtio: no channels available for device syz [ 468.879235][ T7297] 9pnet_virtio: no channels available for device syz [ 468.882700][ T1349] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 468.886126][ T1349] gspca_zc3xx 8-1:70.72: probe with driver gspca_zc3xx failed with error -71 [ 468.915456][ T1349] usb 8-1: USB disconnect, device number 6 [ 468.981460][ T7301] netlink: 'syz.3.377': attribute type 5 has an invalid length. [ 468.987482][ T7301] ip6erspan0: entered promiscuous mode [ 469.065790][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 469.065810][ T42] audit: type=1400 audit(1782808324.223:566): avc: denied { setopt } for pid=7304 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 469.082515][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.380'. [ 469.103089][ T42] audit: type=1400 audit(1782808324.270:567): avc: denied { write } for pid=7307 comm="syz.1.378" name="/" dev="9p" ino=74473723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.113357][ T42] audit: type=1400 audit(1782808324.270:568): avc: denied { unlink } for pid=7307 comm="syz.1.378" name="file0" dev="9p" ino=74473725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 469.124092][ T42] audit: type=1400 audit(1782808324.279:569): avc: denied { write } for pid=7307 comm="syz.1.378" name="/" dev="9p" ino=74473723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.133455][ T42] audit: type=1400 audit(1782808324.279:570): avc: denied { create } for pid=7307 comm="syz.1.378" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 469.142477][ T42] audit: type=1400 audit(1782808324.279:571): avc: denied { associate } for pid=7307 comm="syz.1.378" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 469.149206][ T42] audit: type=1400 audit(1782808324.288:572): avc: denied { write } for pid=7307 comm="syz.1.378" name="file0" dev="9p" ino=74473725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 469.159440][ T42] audit: type=1400 audit(1782808324.288:573): avc: denied { open } for pid=7307 comm="syz.1.378" path="/89/file0/file0" dev="9p" ino=74473725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 469.311256][ T42] audit: type=1400 audit(1782808324.455:574): avc: denied { append } for pid=7322 comm="syz.0.385" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 469.333483][ T42] audit: type=1400 audit(1782808324.474:575): avc: denied { mount } for pid=7326 comm="syz.2.386" name="/" dev="configfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 469.489011][ T7333] netlink: 168 bytes leftover after parsing attributes in process `syz.3.387'. [ 469.493297][ T7333] netlink: 168 bytes leftover after parsing attributes in process `syz.3.387'. [ 469.594515][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 469.650216][ T7348] 9pnet_fd: Insufficient options for proto=fd [ 469.702949][ T7351] pim6reg: entered allmulticast mode [ 470.192323][ T7375] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 470.195149][ T7375] syzkaller1: owner set to 805 [ 470.204216][ T7377] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 470.258385][ T7376] netlink: 'syz.2.400': attribute type 4 has an invalid length. [ 470.321214][ T5823] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 470.324298][ T7383] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 470.376642][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.403'. [ 470.388844][ T7387] fuse: Bad value for 'group_id' [ 470.391421][ T7387] fuse: Bad value for 'group_id' [ 470.417180][ T7388] netlink: 'syz.1.404': attribute type 5 has an invalid length. [ 470.427300][ T7389] netlink: 'syz.1.404': attribute type 5 has an invalid length. [ 470.632501][ T7402] comedi comedi2: comedi_config --init_data is deprecated [ 470.751719][ T7415] sctp: [Deprecated]: syz.1.414 (pid 7415) Use of int in max_burst socket option. [ 470.751719][ T7415] Use struct sctp_assoc_value instead [ 470.779108][ T7415] tmpfs: Bad value for 'mpol' [ 470.958128][ T7428] fuse: Bad value for 'user_id' [ 470.959986][ T7428] fuse: Bad value for 'user_id' [ 471.005065][ T7430] bridge0: port 3(syz_tun) entered blocking state [ 471.008954][ T7430] bridge0: port 3(syz_tun) entered disabled state [ 471.012815][ T7430] syz_tun: entered allmulticast mode [ 471.029888][ T7430] syz_tun: entered promiscuous mode [ 471.040287][ T7430] bridge0: port 3(syz_tun) entered blocking state [ 471.043699][ T7430] bridge0: port 3(syz_tun) entered forwarding state [ 471.069140][ T7430] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 471.075972][ T7430] batman_adv: batadv0: Adding interface: gretap2 [ 471.078199][ T7430] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.086467][ T7430] batman_adv: batadv0: Interface activated: gretap2 [ 471.304422][ T7444] IPv6: NLM_F_CREATE should be specified when creating new route [ 471.308974][ T7444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.314831][ T7444] IPv6: NLM_F_CREATE should be set when creating new route [ 471.327662][ T7444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.330989][ T7444] IPv6: NLM_F_CREATE should be set when creating new route [ 471.622081][ T7447] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 472.077808][ T7468] FAT-fs (nbd2): unable to read boot sector [ 472.146915][ T7475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.163434][ T7479] overlay: ./file0 is not a directory [ 472.269518][ T7490] binder: 7489:7490 ioctl c008561c 2000000001c0 returned -22 [ 472.460904][ T7500] Bluetooth: hci1: too big key_count value 26998 [ 472.561926][ T1349] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 472.654284][ T7511] ref_ctr increment failed for inode: 0x2a6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888033ae0000 [ 472.664608][ T7510] uprobe: syz.3.443:7510 failed to unregister, leaking uprobe [ 472.735281][ T1349] usb 5-1: config 6 has an invalid interface number: 128 but max is 0 [ 472.738878][ T1349] usb 5-1: config 6 has no interface number 0 [ 472.741105][ T1349] usb 5-1: config 6 interface 128 has no altsetting 0 [ 472.745894][ T1349] usb 5-1: New USB device found, idVendor=03f0, idProduct=5116, bcdDevice=27.3c [ 472.749558][ T1349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.752413][ T1349] usb 5-1: Product: Đ­ [ 472.754002][ T1349] usb 5-1: Manufacturer: īĄƒæŊšę™ŋî ˜åŒ‰âˇÛ¸čļ—ėąģꄔįĨî†ŸāŽší‡ŽęžšíŽĢ⤠뎏éĢ§ęļ­âˇė¨ŧãĄšč‹„įžē郸⾜áˆŦ䭛å¤Ēáĩ‚䋊槒丏éĢŸåļĒášąî§ŧęĩŗį‚ŊꅑėŋŗåŽĨá¯„ęŠ›áĩĢī˛ĸᘓėŒī—´įž [ 472.760537][ T1349] usb 5-1: SerialNumber: įęĄ¨ë—¸á­”áˇŊīĢŗÉąåŠčŽŸîŦ”í‹ļî“Ŗį¨ëž’įŖƒå•ī—ĩ嘎ėŽ†ę˜˛įŧ“㈕ė´ŧ⟞ãŦŦ [ 472.988889][ T7487] cgroup: Invalid name [ 473.009792][ T1349] usb 5-1: USB disconnect, device number 7 [ 473.251008][ T7527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.449'. [ 473.256002][ T7527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.449'. [ 473.260291][ T7527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.449'. [ 473.264061][ T7527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.449'. [ 473.268720][ T7527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.449'. [ 473.273469][ T7527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.449'. [ 473.274126][ T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 473.277402][ T7527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.449'. [ 473.283656][ T7527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.449'. [ 473.288240][ T7527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.449'. [ 473.293527][ T7527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.449'. [ 473.436272][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 473.440699][ T56] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 473.444133][ T56] usb 8-1: config 0 has no interface number 0 [ 473.446980][ T56] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 473.453613][ T56] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 473.458847][ T56] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 473.463362][ T56] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 473.468895][ T56] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 473.472683][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.474211][ T56] usb 8-1: config 0 descriptor?? [ 473.483501][ T56] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 473.490314][ T7081] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 473.662616][ T7541] overlayfs: failed lookup in lower (newroot/103, name='file0', err=-40): overlapping layers [ 473.679500][ T7081] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 473.683384][ T7081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.686979][ T7081] usb 6-1: Product: syz [ 473.689800][ T7081] usb 6-1: Manufacturer: syz [ 473.692655][ T7081] usb 6-1: SerialNumber: syz [ 473.701285][ T7081] usb 6-1: config 0 descriptor?? [ 473.715866][ T56] usb 8-1: USB disconnect, device number 7 [ 473.755482][ T56] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 473.859656][ T7548] openvswitch: netlink: Missing key (keys=40, expected=100) [ 473.927725][ T7529] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 473.953204][ T7529] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 473.990263][ T7081] usb 6-1: USB disconnect, device number 2 [ 474.092565][ T7569] binder: BINDER_SET_CONTEXT_MGR already set [ 474.098302][ T7569] binder: 7568:7569 ioctl 4018620d 200000000100 returned -16 [ 474.101991][ T7570] openvswitch: netlink: Actions may not be safe on all matching packets [ 474.123369][ T7569] binder: BINDER_SET_CONTEXT_MGR already set [ 474.143157][ T7569] binder: 7568:7569 ioctl 4018620d 200000000040 returned -16 [ 474.361012][ T7575] macsec1: entered promiscuous mode [ 474.374219][ T7575] macsec1: entered allmulticast mode [ 474.521772][ T5111] block nbd0: Connection timed out, retrying (0/1 alive) [ 474.527048][ T5111] block nbd0: Connection timed out, retrying (0/1 alive) [ 474.531279][ T5111] block nbd0: Dead connection, failed to find a fallback [ 474.540345][ T5111] block nbd0: shutting down sockets [ 474.545216][ T5111] blk_print_req_error: 10 callbacks suppressed [ 474.545233][ T5111] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 474.557283][ T5111] buffer_io_error: 10 callbacks suppressed [ 474.557305][ T5111] Buffer I/O error on dev nbd0, logical block 1, async page read [ 474.565287][ T5111] Buffer I/O error on dev nbd0, logical block 2, async page read [ 474.569683][ T5111] Buffer I/O error on dev nbd0, logical block 3, async page read [ 474.573352][ T5111] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.577261][ T5111] Buffer I/O error on dev nbd0, logical block 0, async page read [ 474.587034][ T5111] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.592927][ T5111] Buffer I/O error on dev nbd0, logical block 0, async page read [ 474.596864][ T5111] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 474.603273][ T5111] Buffer I/O error on dev nbd0, logical block 1, async page read [ 474.606719][ T5111] Buffer I/O error on dev nbd0, logical block 2, async page read [ 474.610181][ T5111] Buffer I/O error on dev nbd0, logical block 3, async page read [ 474.617834][ T5111] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.621791][ T5111] Buffer I/O error on dev nbd0, logical block 0, async page read [ 474.626891][ T5111] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.630750][ T5111] Buffer I/O error on dev nbd0, logical block 1, async page read [ 474.634743][ T5111] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.639677][ T5111] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.644443][ T2090] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.648132][ T2090] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.654946][ T5826] ldm_validate_partition_table(): Disk read failed. [ 474.660825][ T5826] Dev nbd0: unable to read RDB block 0 [ 474.664679][ T5826] nbd0: unable to read partition table [ 474.678084][ T5826] ldm_validate_partition_table(): Disk read failed. [ 474.682826][ T5826] Dev nbd0: unable to read RDB block 0 [ 474.686685][ T5826] nbd0: unable to read partition table [ 474.697918][ T42] kauditd_printk_skb: 215 callbacks suppressed [ 474.697934][ T42] audit: type=1400 audit(1782808329.447:791): avc: denied { read } for pid=7609 comm="syz.2.475" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 474.713400][ T42] audit: type=1400 audit(1782808329.447:792): avc: denied { open } for pid=7609 comm="syz.2.475" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 474.720299][ T5823] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 474.890253][ T7617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7617 comm=syz.1.477 [ 474.894791][ T7618] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 475.004584][ T7617] veth3: entered allmulticast mode [ 475.228684][ T7628] netlink: 'syz.3.480': attribute type 1 has an invalid length. [ 475.254669][ T7628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.488399][ T42] audit: type=1400 audit(1782808330.177:793): avc: denied { getopt } for pid=7641 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 475.535954][ T7638] netlink: 'syz.1.482': attribute type 4 has an invalid length. [ 475.989239][ T7654] tipc: Enabling of bearer rejected, already enabled [ 476.102328][ T7665] netlink: 'syz.3.491': attribute type 3 has an invalid length. [ 476.316671][ T5823] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 476.318377][ T7680] netlink: 'syz.2.494': attribute type 3 has an invalid length. [ 476.355461][ T7684] sctp: [Deprecated]: syz.3.495 (pid 7684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.355461][ T7684] Use struct sctp_sack_info instead [ 476.455976][ T7686] bond3 (unregistering): Released all slaves [ 476.526671][ T7690] syzkaller0: entered promiscuous mode [ 476.528998][ T7690] syzkaller0: entered allmulticast mode [ 476.595079][ T41] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 476.606641][ T42] audit: type=1400 audit(1782808331.212:794): avc: denied { setopt } for pid=7705 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 476.778906][ T41] usb 7-1: Using ep0 maxpacket: 16 [ 476.796931][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 476.812105][ T41] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 476.815545][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.818595][ T41] usb 7-1: Product: syz [ 476.820642][ T41] usb 7-1: Manufacturer: syz [ 476.823274][ T41] usb 7-1: SerialNumber: syz [ 476.828984][ T41] usb 7-1: config 0 descriptor?? [ 476.833425][ T41] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 476.837198][ T41] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 477.277337][ T41] em28xx 7-1:0.0: chip ID is em2874 [ 477.895184][ T41] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 477.898903][ T41] em28xx 7-1:0.0: board has no eeprom [ 477.971917][ T7724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7724 comm=syz.2.503 [ 478.002159][ T41] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 478.005630][ T41] em28xx 7-1:0.0: dvb set to bulk mode. [ 478.029994][ T5812] em28xx 7-1:0.0: Binding DVB extension [ 478.199405][ T41] usb 7-1: USB disconnect, device number 9 [ 478.203166][ T41] em28xx 7-1:0.0: Disconnecting em28xx [ 478.317274][ T5812] em28xx 7-1:0.0: Registering input extension [ 478.393564][ T5812] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 478.397144][ T5812] Registered IR keymap rc-empty [ 478.503467][ T5812] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 478.529832][ T5812] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input9 [ 478.653863][ T42] audit: type=1400 audit(1782808333.106:795): avc: denied { read } for pid=5131 comm="acpid" name="event4" dev="devtmpfs" ino=2941 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 478.664195][ T42] audit: type=1400 audit(1782808333.106:796): avc: denied { open } for pid=5131 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2941 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 478.667451][ T5812] em28xx 7-1:0.0: Input extension successfully initialized [ 478.686831][ T42] audit: type=1400 audit(1782808333.106:797): avc: denied { ioctl } for pid=5131 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2941 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 478.688294][ T41] em28xx 7-1:0.0: Closing input extension [ 479.151415][ T41] em28xx 7-1:0.0: Freeing device [ 479.234748][ T7730] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14096 sclass=netlink_xfrm_socket pid=7730 comm=syz.2.505 [ 479.322877][ T42] audit: type=1400 audit(1782808333.715:798): avc: denied { name_connect } for pid=7742 comm="syz.1.509" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 479.380569][ T42] audit: type=1400 audit(1782808333.780:799): avc: denied { read } for pid=7746 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 479.485888][ T7756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7756 comm=syz.3.513 [ 479.486977][ T7757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7757 comm=syz.3.513 [ 479.559241][ T7758] __nla_validate_parse: 60 callbacks suppressed [ 479.559256][ T7758] netlink: 72 bytes leftover after parsing attributes in process `syz.2.512'. [ 479.559505][ T42] audit: type=1400 audit(1782808333.937:800): avc: denied { mount } for pid=7755 comm="syz.2.512" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 479.622202][ T7762] netlink: 100 bytes leftover after parsing attributes in process `syz.2.512'. [ 479.637369][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.512'. [ 479.643906][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 479.657143][ T7762] tipc: Disabling bearer [ 479.831966][ T5901] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 479.996819][ T5901] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.002390][ T5901] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 480.006853][ T5901] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 480.010764][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.023177][ T5901] usb 8-1: config 0 descriptor?? [ 480.035224][ T5901] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 480.040836][ T5901] dvb-usb: bulk message failed: -22 (3/0) [ 480.051657][ T5901] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 480.058216][ T5901] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 480.065728][ T5901] usb 8-1: media controller created [ 480.071793][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 480.104980][ T5901] dvb-usb: bulk message failed: -22 (6/0) [ 480.109931][ T5901] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 480.117991][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input11 [ 480.136035][ T5901] dvb-usb: schedule remote query interval to 150 msecs. [ 480.139775][ T5901] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 480.175587][ T42] audit: type=1400 audit(1782808334.510:801): avc: denied { read } for pid=7769 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 480.189217][ T42] audit: type=1400 audit(1782808334.519:802): avc: denied { ioctl } for pid=7769 comm="syz.0.517" path="socket:[19066]" dev="sockfs" ino=19066 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 480.200803][ T42] audit: type=1400 audit(1782808334.519:803): avc: denied { getopt } for pid=7769 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 480.249467][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.262086][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.312753][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 480.317157][ T5901] dvb-usb: error while querying for an remote control event. [ 480.506297][ T5782] dvb-usb: bulk message failed: -22 (1/0) [ 480.508861][ T5782] dvb-usb: error while querying for an remote control event. [ 480.590492][ T42] audit: type=1400 audit(1782808334.897:804): avc: denied { perfmon } for pid=7784 comm="syz.2.522" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 480.600975][ T42] audit: type=1400 audit(1782808334.897:805): avc: denied { bpf } for pid=7784 comm="syz.2.522" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 480.631667][ T7788] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 480.634970][ T42] audit: type=1400 audit(1782808334.925:806): avc: denied { watch } for pid=7786 comm="syz.1.523" path="/120" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 480.638786][ T7788] overlay: ./file0 is not a directory [ 480.656013][ T7789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.522'. [ 480.660933][ T7789] netlink: 92 bytes leftover after parsing attributes in process `syz.2.522'. [ 480.678369][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 480.678932][ T5901] dvb-usb: error while querying for an remote control event. [ 480.812778][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 480.817200][ T7785] openvswitch: netlink: Flow actions attr not present in new flow. [ 480.849929][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 480.853768][ T5901] dvb-usb: error while querying for an remote control event. [ 481.027634][ T42] audit: type=1400 audit(1782808335.295:807): avc: denied { override_creds } for pid=7805 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 481.045180][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 481.047928][ T5901] dvb-usb: error while querying for an remote control event. [ 481.053309][ T42] audit: type=1400 audit(1782808335.313:808): avc: denied { module_request } for pid=7809 comm="syz.1.529" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 481.069828][ T42] audit: type=1400 audit(1782808335.341:809): avc: denied { read write } for pid=7799 comm="syz.0.526" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 æ[_ °A#cGû "ĄÅŽžƒ¸2Ą!×\Xjuü×ū›ŗdÅZb&xĒ_!Ų˜™ŒšOןOΖ[ 481.086624][ T42] audit: type=1400 audit(1782808335.341:810): avc: denied { open } for pid=7799 comm="syz.0.526" path="/120/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 481.114151][ T7811] random: crng reseeded on system resumption [ 481.185208][ T7815] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 481.210916][ T7819] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 481.216562][ T7820] SELinux: security_context_str_to_sid (5ũÆÉ] ÖS9q#“ë) failed with errno=-22 [ 481.221207][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 481.223234][ T5901] dvb-usb: error while querying for an remote control event. [ 481.233664][ T7819] ocfs2: Unknown parameter 'grpquotaū€' [ 481.318938][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 481.324427][ T7828] fuse: Bad value for 'rootmode' [ 481.398323][ T7834] netlink: 'syz.1.536': attribute type 13 has an invalid length. [ 481.404041][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 481.406961][ T5901] dvb-usb: error while querying for an remote control event. [ 481.442730][ T7834] gretap0: refused to change device tx_queue_len [ 481.447251][ T7834] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 481.458401][ T7834] netlink: 'syz.1.536': attribute type 13 has an invalid length. [ 481.462420][ T7834] gretap0: refused to change device tx_queue_len [ 481.466650][ T7834] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 481.571899][ T7845] usb 8-1: USB disconnect, device number 8 [ 481.575410][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 481.578352][ T5901] dvb-usb: error while querying for an remote control event. [ 481.634225][ T7850] usb usb9: usbfs: process 7850 (syz.1.539) did not claim interface 10 before use [ 481.654763][ T7845] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 481.768146][ T5901] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 481.786694][ T5901] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 481.792648][ T5901] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 481.798191][ T5901] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 481.801628][ T5901] rtc rtc0: __rtc_set_alarm: err=-22 [ 481.895109][ T7861] bond1: ARP target 9.0.0.0 is already present [ 481.899473][ T7861] bond1: option arp_ip_target: invalid value (9) [ 481.905628][ T7861] bond1 (unregistering): Released all slaves [ 482.278267][ T7886] use of bytesused == 0 is deprecated and will be removed in the future, [ 482.290055][ T7886] use the actual size instead. [ 482.310127][ T7886] macsec1: entered promiscuous mode [ 482.350213][ T7889] Bluetooth: hci4: Frame reassembly failed (-90) [ 482.519492][ T7910] tmpfs: Bad value for 'mpol' [ 482.811017][ T7761] [U]  [ 483.186364][ T7926] netlink: 76 bytes leftover after parsing attributes in process `syz.3.562'. [ 483.195861][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 483.213234][ T7926] qnx6: unable to read the first superblock [ 483.215518][ T7926] qnx6: unable to read the first superblock [ 483.217388][ T7926] qnx6: unable to read the first superblock [ 483.229415][ T7926] pim6reg99999999: entered allmulticast mode [ 483.350996][ T7928] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 483.355617][ T7928] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 483.359683][ T7928] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 483.362226][ T7928] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 483.838812][ T5782] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 483.925850][ T7938] block nbd1: Receive control failed (result -32) [ 484.001271][ T5782] usb 7-1: Using ep0 maxpacket: 16 [ 484.005668][ T5782] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 484.008939][ T5782] usb 7-1: config 0 interface 0 has no altsetting 0 [ 484.013631][ T5782] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 484.018356][ T5782] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.024513][ T5782] usb 7-1: Product: syz [ 484.026459][ T5782] usb 7-1: Manufacturer: syz [ 484.028575][ T5782] usb 7-1: SerialNumber: syz [ 484.034391][ T5782] usb 7-1: config 0 descriptor?? [ 484.047180][ T7952] tipc: Enabling of bearer rejected, failed to enable media [ 484.071813][ T7955] netlink: 'syz.3.570': attribute type 1 has an invalid length. [ 484.102322][ T7955] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.124681][ T7955] bond3: (slave ip6gretap1): making interface the new active one [ 484.129255][ T7955] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 484.267568][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 484.274410][ T7966] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 484.277732][ T5782] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input12 [ 484.279306][ T7966] overlayfs: failed to set xattr on upper [ 484.288369][ T7966] overlayfs: ...falling back to redirect_dir=nofollow. [ 484.292790][ T7966] overlayfs: ...falling back to index=off. [ 484.295195][ T7966] overlayfs: ...falling back to uuid=null. [ 484.307736][ T5782] imon:send_packet: packet tx failed (-71) [ 484.326216][ T5782] imon 7-1:0.0: panel buttons/knobs setup failed [ 484.380554][ T5782] rc_core: IR keymap rc-imon-pad not found [ 484.384823][ T5782] Registered IR keymap rc-empty [ 484.386994][ T5782] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 484.390297][ T5782] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 484.396033][ T5782] imon:send_packet: packet tx failed (-71) [ 484.413339][ T5782] imon 7-1:0.0: remote input dev register failed [ 484.418822][ T5782] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 484.442567][ T5782] imon 7-1:0.0: unable to initialize intf0, err 0 [ 484.444837][ T5782] imon:imon_probe: failed to initialize context! [ 484.447345][ T5782] imon 7-1:0.0: unable to register, err -19 [ 484.453330][ T5782] usb 7-1: USB disconnect, device number 10 [ 484.538817][ T7972] Invalid argument reading file caps for ./file0 [ 484.544255][ T7972] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 484.567851][ T5819] Bluetooth: hci4: command 0x1003 tx timeout [ 484.567852][ T5823] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 484.654784][ T5823] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 484.803416][ T5782] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 484.827831][ T7992] netlink: 'syz.3.580': attribute type 5 has an invalid length. [ 484.935537][ T8005] netlink: 'syz.1.583': attribute type 8 has an invalid length. [ 484.969615][ T5782] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 484.977543][ T5782] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 484.986903][ T5782] usb 7-1: config 0 interface 0 has no altsetting 0 [ 484.995259][ T5782] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 485.003315][ T5782] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.010167][ T5782] usb 7-1: Product: syz [ 485.018026][ T5782] usb 7-1: Manufacturer: syz [ 485.022180][ T5782] usb 7-1: SerialNumber: syz [ 485.028666][ T5782] usb 7-1: config 0 descriptor?? [ 485.032460][ T7935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 485.099391][ T8019] Invalid source name [ 485.101969][ T8019] UBIFS error (pid: 8019): cannot open "./file0", error -22 [ 485.104984][ T8019] netlink: 'syz.0.588': attribute type 2 has an invalid length. [ 485.111502][ T8019] netlink: 'syz.0.588': attribute type 2 has an invalid length. [ 485.159606][ T8025] __nla_validate_parse: 2 callbacks suppressed [ 485.159682][ T8025] netlink: 32 bytes leftover after parsing attributes in process `syz.3.590'. [ 485.264394][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 485.290741][ T5782] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input14 [ 485.293649][ T8043] netlink: 76 bytes leftover after parsing attributes in process `syz.1.595'. [ 485.310770][ T8043] Trying to write to read-only block-device nullb0 [ 485.367681][ T8045] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 485.529285][ T8046] random: crng reseeded on system resumption [ 485.550464][ T5782] rc_core: IR keymap rc-imon-pad not found [ 485.553419][ T5782] Registered IR keymap rc-empty [ 485.555542][ T5782] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 485.559606][ T5782] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 485.609325][ T8047] macsec1: entered promiscuous mode [ 485.621885][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 485.621905][ T42] audit: type=1400 audit(1782808339.533:853): avc: denied { audit_control } for pid=8054 comm="syz.3.598" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 485.635239][ T8055] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 485.652682][ T8057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48921 sclass=netlink_route_socket pid=8057 comm=syz.0.596 [ 485.656254][ T8055] bond4: entered promiscuous mode [ 485.662375][ T8055] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.674497][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.598'. [ 485.677517][ T8055] bond4: entered allmulticast mode [ 485.692843][ T8055] bond4: (slave bridge1): making interface the new active one [ 485.696161][ T8055] bridge1: entered promiscuous mode [ 485.698157][ T8055] bridge1: entered allmulticast mode [ 485.701405][ T8055] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 485.718618][ T5782] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 485.727145][ T5782] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input15 [ 485.736686][ T5782] imon 7-1:0.0: iMON device (15c2:0045, intf0) on usb<7:11> initialized [ 485.745183][ T7081] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 485.862846][ T8059] loop8: detected capacity change from 0 to 7 [ 485.874186][ T8059] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 485.876767][ T8059] loop8: partition table partially beyond EOD, truncated [ 485.880758][ T8059] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 485.888550][ T8059] loop8: p2 start 121280928 is beyond EOD, truncated [ 485.932620][ T7081] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 485.937365][ T7081] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 485.944424][ T7081] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 485.950243][ T7081] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 485.955579][ T7081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.959010][ T7081] usb 6-1: Product: syz [ 485.961760][ T7081] usb 6-1: Manufacturer: syz [ 485.964735][ T7081] usb 6-1: SerialNumber: syz [ 485.973649][ T7081] usb 6-1: config 0 descriptor?? [ 485.976778][ T8049] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 486.050777][ T7081] rc_core: IR keymap rc-streamzap not found [ 486.054335][ T7081] Registered IR keymap rc-empty [ 486.066278][ T7081] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1 [ 486.072963][ T7081] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1/input16 [ 486.141723][ T42] audit: type=1400 audit(1782808340.013:854): avc: denied { write } for pid=8065 comm="syz.3.601" path="socket:[22053]" dev="sockfs" ino=22053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 486.156921][ T5782] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 486.200753][ T8049] netlink: 'syz.1.597': attribute type 1 has an invalid length. [ 486.241847][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.597'. [ 486.249762][ T7081] usb 6-1: USB disconnect, device number 3 [ 486.275796][ T1349] usb 7-1: USB disconnect, device number 11 [ 486.321543][ T5782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.327823][ T5782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.337502][ T5782] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 486.346284][ T5782] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 486.349882][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.355781][ T5782] usb 5-1: config 0 descriptor?? [ 486.586745][ T42] audit: type=1400 audit(1782808340.428:855): avc: denied { lock } for pid=8061 comm="syz.0.600" path="socket:[20058]" dev="sockfs" ino=20058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 486.631355][ T5782] usbhid 5-1:0.0: can't add hid device: -71 [ 486.634200][ T5782] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 486.642072][ T5782] usb 5-1: USB disconnect, device number 8 [ 486.867729][ T8084] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 487.083760][ T42] audit: type=1400 audit(1782808340.890:856): avc: denied { mounton } for pid=8090 comm="syz.2.605" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 487.097979][ T8092] ntfs3(sr0): Primary boot signature is not NTFS. [ 487.101546][ T8092] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 489.289009][ T8066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.367102][ T1307] blk_print_req_error: 131 callbacks suppressed [ 489.367125][ T1307] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.374779][ T1307] buffer_io_error: 138 callbacks suppressed [ 489.374794][ T1307] Buffer I/O error on dev nbd0, logical block 0, async page read [ 489.381258][ T1307] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 489.385182][ T1307] Buffer I/O error on dev nbd0, logical block 1, async page read [ 489.391003][ T1307] Buffer I/O error on dev nbd0, logical block 2, async page read [ 489.393862][ T1307] Buffer I/O error on dev nbd0, logical block 3, async page read [ 489.402066][ T1307] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.406594][ T1307] Buffer I/O error on dev nbd0, logical block 0, async page read [ 489.410230][ T1307] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 489.413661][ T1307] Buffer I/O error on dev nbd0, logical block 1, async page read [ 489.418986][ T1307] Buffer I/O error on dev nbd0, logical block 2, async page read [ 489.425249][ T1307] Buffer I/O error on dev nbd0, logical block 3, async page read [ 489.428616][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 489.432657][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 489.434134][ T42] audit: type=1400 audit(1782808343.059:857): avc: denied { setopt } for pid=8102 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 489.435642][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 489.447796][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.453095][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.457135][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 489.462314][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.467879][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.478034][ T8099] ldm_validate_partition_table(): Disk read failed. [ 489.484318][ T8099] Dev nbd0: unable to read RDB block 0 [ 489.490565][ T8099] nbd0: unable to read partition table [ 489.572913][ T42] audit: type=1400 audit(1782808343.179:858): avc: denied { setopt } for pid=8119 comm="syz.2.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 489.594840][ T42] audit: type=1400 audit(1782808343.179:859): avc: denied { listen } for pid=8119 comm="syz.2.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 489.616067][ T42] audit: type=1400 audit(1782808343.226:860): avc: denied { set_context_mgr } for pid=8122 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 489.683277][ T42] audit: type=1400 audit(1782808343.290:861): avc: denied { write } for pid=8126 comm="syz.0.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 489.769298][ T42] audit: type=1400 audit(1782808343.364:862): avc: denied { listen } for pid=8121 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 489.813349][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 489.823256][ T8138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.618'. [ 489.835786][ T8138] geneve2: entered promiscuous mode [ 489.838197][ T8138] geneve2: entered allmulticast mode [ 490.046553][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 490.052733][ T8148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8148 comm=syz.1.621 [ 490.065333][ T8148] netlink: 'syz.1.621': attribute type 1 has an invalid length. [ 490.096354][ T8148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.156389][ T8148] netlink: 'syz.1.621': attribute type 10 has an invalid length. [ 490.159352][ T8148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.621'. [ 490.162441][ T8148] dummy0: entered promiscuous mode [ 490.550256][ T8158] netlink: 'syz.0.624': attribute type 1 has an invalid length. [ 490.602053][ T8163] SELinux: policydb version 65545 does not match my version range 15-35 [ 490.607790][ T8163] SELinux: failed to load policy [ 490.742155][ T8166] kvm: pic: non byte write [ 490.747831][ T8166] kvm: pic: non byte write [ 490.753058][ T8166] kvm: pic: non byte write [ 490.756797][ T8166] kvm: pic: non byte write [ 490.759653][ T8166] kvm: pic: non byte write [ 490.763037][ T8166] kvm: pic: non byte write [ 490.765941][ T8166] kvm: pic: non byte write [ 490.769222][ T8166] kvm: pic: non byte write [ 490.776125][ T8166] kvm: pic: non byte write [ 490.779009][ T8166] kvm: pic: non byte write [ 491.394884][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 491.394931][ T42] audit: type=1400 audit(1782808344.869:866): avc: denied { getopt } for pid=8183 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 491.409158][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.414823][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.659053][ T5782] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 491.844878][ T5782] usb 5-1: Using ep0 maxpacket: 32 [ 491.848871][ T5782] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 491.854733][ T5782] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 491.859951][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 491.864230][ T5782] usb 5-1: Product: syz [ 491.866076][ T5782] usb 5-1: Manufacturer: syz [ 491.867856][ T5782] usb 5-1: SerialNumber: syz [ 491.871782][ T5782] usb 5-1: config 0 descriptor?? [ 491.874563][ T8186] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 491.879061][ T5782] hub 5-1:0.0: bad descriptor, ignoring hub [ 491.882258][ T5782] hub 5-1:0.0: probe with driver hub failed with error -5 [ 492.519101][ T8184] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 492.709181][ T8184] usb 5-1: device firmware changed [ 492.716921][ T7081] usb 5-1: USB disconnect, device number 9 [ 492.873688][ T7081] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 492.949521][ T8190] veth1_macvtap: left promiscuous mode [ 492.951903][ T8190] macsec0: entered allmulticast mode [ 493.056606][ T7081] usb 5-1: Using ep0 maxpacket: 32 [ 493.061067][ T7081] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 493.067439][ T7081] usb 5-1: string descriptor 0 read error: -22 [ 493.069564][ T7081] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 493.072737][ T7081] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 493.076716][ T7081] usb 5-1: config 0 descriptor?? [ 493.079564][ T8186] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 493.083484][ T7081] hub 5-1:0.0: bad descriptor, ignoring hub [ 493.085989][ T7081] hub 5-1:0.0: probe with driver hub failed with error -5 [ 493.435829][ T5812] usb 5-1: USB disconnect, device number 10 [ 493.934616][ T8168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.004972][ T42] audit: type=1400 audit(1782808347.279:867): avc: denied { getopt } for pid=8197 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 494.016644][ T8198] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 494.198442][ T8218] autofs: Unknown parameter 'ķ' [ 494.272669][ T8220] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 494.368882][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 494.431879][ T42] audit: type=1400 audit(1782808347.666:868): avc: denied { accept } for pid=8229 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.445119][ T8228] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 494.452213][ T8228] block device autoloading is deprecated and will be removed. [ 494.477554][ T8230] 8021q: adding VLAN 0 to HW filter on device bond5 [ 494.847869][ T42] audit: type=1400 audit(1782808348.054:869): avc: denied { connect } for pid=8254 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 494.864418][ T42] audit: type=1400 audit(1782808348.063:870): avc: denied { name_bind } for pid=8256 comm="syz.0.649" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 495.437370][ T42] audit: type=1400 audit(1782808348.599:871): avc: denied { read } for pid=8281 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 497.873403][ T8238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.970127][ T42] audit: type=1400 audit(1782808350.934:872): avc: denied { ioctl } for pid=8293 comm="syz.1.656" path="socket:[20479]" dev="sockfs" ino=20479 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 498.021417][ T42] audit: type=1400 audit(1782808350.990:873): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 498.021637][ T8294] pimreg: entered allmulticast mode [ 498.117619][ T42] audit: type=1400 audit(1782808351.073:874): avc: denied { block_suspend } for pid=8307 comm="syz.0.661" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 498.126934][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 498.251070][ T42] audit: type=1400 audit(1782808351.193:875): avc: denied { create } for pid=8312 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 498.396684][ T5782] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 498.586457][ T5782] usb 5-1: Using ep0 maxpacket: 16 [ 498.596494][ T5782] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.601232][ T5782] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 498.605565][ T5782] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 498.611889][ T5782] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.616268][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.620011][ T5782] usb 5-1: Product: syz [ 498.622458][ T5782] usb 5-1: Manufacturer: syz [ 498.625974][ T5782] usb 5-1: SerialNumber: syz [ 498.737370][ T42] audit: type=1400 audit(1782808351.645:876): avc: denied { create } for pid=8322 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 498.756923][ T42] audit: type=1400 audit(1782808351.664:877): avc: denied { write } for pid=8322 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 498.756973][ T8323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'. [ 498.809671][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'. [ 499.015498][ T5901] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 499.025082][ T5782] cdc_ncm 5-1:1.0: bind() failure [ 499.037068][ T5782] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 499.040458][ T5782] cdc_ncm 5-1:1.1: bind() failure [ 499.046751][ T5782] usb 5-1: USB disconnect, device number 11 [ 499.198329][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 499.204643][ T5901] usb 7-1: config 128 has an invalid interface number: 23 but max is 1 [ 499.208116][ T5901] usb 7-1: config 128 has an invalid interface number: 58 but max is 1 [ 499.212043][ T5901] usb 7-1: config 128 has no interface number 0 [ 499.215001][ T5901] usb 7-1: config 128 has no interface number 1 [ 499.217657][ T5901] usb 7-1: config 128 interface 58 altsetting 51 has a duplicate endpoint with address 0x6, skipping [ 499.223871][ T5901] usb 7-1: config 128 interface 58 altsetting 51 endpoint 0xB has invalid wMaxPacketSize 0 [ 499.228331][ T5901] usb 7-1: config 128 interface 58 altsetting 51 has an invalid descriptor for endpoint zero, skipping [ 499.233166][ T5901] usb 7-1: config 128 interface 58 altsetting 51 has a duplicate endpoint with address 0x9, skipping [ 499.237862][ T5901] usb 7-1: config 128 interface 58 altsetting 51 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 499.244758][ T5901] usb 7-1: config 128 interface 58 altsetting 51 has a duplicate endpoint with address 0xB, skipping [ 499.249968][ T5901] usb 7-1: config 128 interface 58 altsetting 51 has an invalid descriptor for endpoint zero, skipping [ 499.254604][ T5901] usb 7-1: config 128 interface 58 altsetting 51 has a duplicate endpoint with address 0x2, skipping [ 499.259400][ T5901] usb 7-1: config 128 interface 58 altsetting 51 bulk endpoint 0x5 has invalid maxpacket 1023 [ 499.264898][ T5901] usb 7-1: config 128 interface 23 has no altsetting 0 [ 499.267852][ T5901] usb 7-1: config 128 interface 58 has no altsetting 0 [ 499.273160][ T5901] usb 7-1: New USB device found, idVendor=413c, idProduct=8129, bcdDevice=b8.be [ 499.277623][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.281978][ T5901] usb 7-1: Product: îĄ‘æ°œëŦ‹į˜ĸ㏐ėŋē栚釛īž‡ë­Ŋ⒗áŖ™å‡¯îŒĄę…ė’ƒīŽļ툓įĄ–á•ļäž›åˇ âĒŦėĨ„îˆĒėĸĩᕝęļĢčŽâ­ ä¤˜č¯ˆėĩŦčŦ™ī˜šë€ī­†įĨŸí‚ˇåŧ¤äģˆëŊîŖļį­¯ã”ŠÛ™é•›â‰Ēꚅāž¯é’ŧČĒåžēëēļëģ“åŧ“æŧŧ戰â ēčē›é…ŧ栙æŖ€ā˛Žčš‡ęąĻՁæŽĻėŦŗáĄ¯ė ŠĪ¸ [ 499.291805][ T5901] usb 7-1: Manufacturer: ėļĸīžæ°Ļä¨Ģáŗ•âī‘˜ė‰›á­ĄīĨžāą›â¨”ä˜ŧâŗģ⑜抔딧čĢ˜ęŋ˛į’…čĻŠâˆĢߝčŖ荞ëŸŋ蘆āšƒī­Œāˇ§ãŖ­âŸį§Ĩæ˜Ģî—ģá™ĩāŊēčŖ햛æģ•åĄ…āĸ¸é™Ŗ䏆៍˩âŋãŒ–â‰ŧå¸‰ę’ąáˇŠá€¸ä‚—áŸŒæŠį­›č°‰ãŊ˛ėŊŨŦ䟭āŊŒé˜îĨ¯ėŋā°†ÄēŪĩ뒋æĸ‰īĢ¯é´ŗīļ㧓䊉ܔīĻŒįŦŸčŒ‹ã¸Šë¨§éŗ™åŽÅ–æ“ģčŦŲŋꑂäē•æ—îēĨäĸžážĸåĄšæƒ° [ 499.305110][ T5901] usb 7-1: SerialNumber: č”ŋæĩ•åļŠęŒ’ã­ĢÄšī¤ģÅĒ똑혚č—Ŋ혮⒔ä”ēāŠ’捃âĸ›ęŗŋមãēá„¸æ›Žį”ļæ”ąîˇļ魗ėŽī ēīĒ‚醍éĄģ뙕éĨŧ芋닎âĸ¸čĄ‹ęšŦé—˛åœæ‚Šāžŋ⊮äŋžãŽŖčŧŖ퐄㕎ᐎ䘤ė˛•æēŽį›ąá‘šč†ä‰ļæ˛…é œæŦá•ŋ凋䓛 [ 499.562050][ T5901] option 7-1:128.23: GSM modem (1-port) converter detected [ 499.585607][ T5901] option 7-1:128.58: GSM modem (1-port) converter detected [ 499.601624][ T5901] usb 7-1: USB disconnect, device number 12 [ 499.605588][ T5901] option 7-1:128.23: device disconnected [ 499.615656][ T8349] netlink: 'syz.2.672': attribute type 9 has an invalid length. [ 499.618111][ T5901] option 7-1:128.58: device disconnected [ 499.688749][ T41] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 499.757129][ T8355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=8355 comm=syz.0.675 [ 499.780735][ T8355] qnx6: unable to set blocksize [ 499.837738][ T8361] netlink: 'syz.0.677': attribute type 2 has an invalid length. [ 499.840722][ T8361] netlink: 46 bytes leftover after parsing attributes in process `syz.0.677'. [ 499.858779][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 499.862518][ T41] usb 6-1: config 0 has no interfaces? [ 499.867434][ T41] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 499.871360][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.874485][ T41] usb 6-1: Product: syz [ 499.875948][ T41] usb 6-1: Manufacturer: syz [ 499.877914][ T41] usb 6-1: SerialNumber: syz [ 499.884793][ T41] usb 6-1: config 0 descriptor?? [ 500.097140][ T8364] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 500.109602][ T5901] usb 6-1: USB disconnect, device number 4 [ 500.849384][ T8376] syzkaller0: entered promiscuous mode [ 500.851498][ T8376] syzkaller0: entered allmulticast mode [ 501.146016][ T8389] IPVS: length: 120 != 24 [ 501.176616][ T8391] netlink: 232 bytes leftover after parsing attributes in process `syz.1.685'. [ 501.187329][ T8393] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 501.190783][ T8393] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 501.200761][ T8393] netlink: 'syz.0.686': attribute type 2 has an invalid length. [ 501.466247][ T42] audit: type=1400 audit(1782808354.166:878): avc: denied { setopt } for pid=8390 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 501.499206][ T8413] msdos: Unknown parameter 'deb&r)vúwDröabŽŒug´ŪąÎ?' [ 501.819305][ T5901] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 501.981857][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 501.985514][ T5901] usb 5-1: unable to get BOS descriptor or descriptor too short [ 501.989908][ T5901] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.994911][ T5901] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 502.000643][ T5901] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 502.004196][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.007670][ T5901] usb 5-1: Product: syz [ 502.009727][ T5901] usb 5-1: Manufacturer: syz [ 502.012145][ T5901] usb 5-1: SerialNumber: syz [ 502.096706][ T8416] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 502.376528][ T8456] netlink: 880 bytes leftover after parsing attributes in process `syz.3.693'. [ 502.381265][ T8459] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 502.442439][ T8469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=8469 comm=syz.3.696 [ 502.489667][ T8475] ceph: No source [ 502.539300][ T8477] usb usb7: usbfs: process 8477 (syz.3.698) did not claim interface 0 before use [ 502.601376][ T8479] netlink: 44 bytes leftover after parsing attributes in process `syz.3.699'. [ 502.606565][ T8479] netlink: 'syz.3.699': attribute type 6 has an invalid length. [ 502.614470][ T8479] netlink: 'syz.3.699': attribute type 5 has an invalid length. [ 502.619148][ T8479] netlink: 'syz.3.699': attribute type 4 has an invalid length. [ 502.626191][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'. [ 502.630415][ T42] audit: type=1400 audit(1782808355.237:879): avc: denied { setopt } for pid=8478 comm="syz.3.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.643111][ T8481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.703345][ T8484] overlayfs: failed to resolve './file1': -2 [ 502.712440][ T8484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.158604][ T8496] netlink: 'syz.1.706': attribute type 9 has an invalid length. [ 503.162148][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 503.221872][ T42] audit: type=1400 audit(1782808355.790:880): avc: denied { view } for pid=8497 comm="syz.1.707" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 503.289735][ T42] audit: type=1400 audit(1782808355.846:881): avc: denied { ioctl } for pid=8498 comm="syz.2.708" path="socket:[24749]" dev="sockfs" ino=24749 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 503.435306][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 503.435354][ T42] audit: type=1400 audit(1782808355.984:884): avc: denied { write } for pid=8516 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.512359][ T42] audit: type=1400 audit(1782808356.058:885): avc: denied { kexec_image_load } for pid=8520 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 503.567100][ T5823] Bluetooth: hci1: unexpected event for opcode 0x100c [ 503.584052][ T42] audit: type=1400 audit(1782808356.104:886): avc: denied { map } for pid=8522 comm="syz.3.713" path="socket:[25718]" dev="sockfs" ino=25718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 503.594276][ T42] audit: type=1400 audit(1782808356.104:887): avc: denied { read } for pid=8522 comm="syz.3.713" path="socket:[25718]" dev="sockfs" ino=25718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 503.604640][ T8525] EXT4-fs (nbd1): unable to read superblock [ 503.674221][ T8527] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 503.813340][ T42] audit: type=1400 audit(1782808356.326:888): avc: denied { write } for pid=8528 comm="syz.1.716" name="/" dev="9p" ino=74473723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 503.824901][ T42] audit: type=1400 audit(1782808356.335:889): avc: denied { create } for pid=8528 comm="syz.1.716" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 503.835869][ T42] audit: type=1400 audit(1782808356.344:890): avc: denied { write } for pid=8528 comm="syz.1.716" name="cpuset.effective_cpus" dev="9p" ino=74473939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 503.971666][ T42] audit: type=1400 audit(1782808356.474:891): avc: denied { getopt } for pid=8535 comm="syz.3.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 504.131821][ T8552] syzkaller0: entered promiscuous mode [ 504.133577][ T8552] syzkaller0: entered allmulticast mode [ 504.288196][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 504.297460][ T8554] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 504.308305][ T8554] bond2: (slave lo): Enslaving as an active interface with an up link [ 504.314716][ T8554] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 504.791815][ T5901] usb 5-1: USB disconnect, device number 12 [ 504.866479][ T8582] netlink: 'syz.2.735': attribute type 4 has an invalid length. [ 504.880734][ T8582] overlayfs: conflicting options: userxattr,redirect_dir=on [ 504.905689][ T8588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.737'. [ 505.109301][ T8599] xt_l2tp: unknown flags: 51 [ 505.741053][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 505.744348][ T8621] netlink: 14 bytes leftover after parsing attributes in process `syz.2.747'. [ 506.076261][ T7081] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 506.179589][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.750'. [ 506.239731][ T7081] usb 7-1: Using ep0 maxpacket: 32 [ 506.247466][ T7081] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 506.251493][ T7081] usb 7-1: config 0 has no interface number 0 [ 506.254240][ T7081] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 506.258880][ T7081] usb 7-1: config 0 interface 196 has no altsetting 0 [ 506.267409][ T7081] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 506.272382][ T7081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.276557][ T7081] usb 7-1: Product: syz [ 506.279295][ T7081] usb 7-1: Manufacturer: syz [ 506.281316][ T7081] usb 7-1: SerialNumber: syz [ 506.289633][ T8629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 506.295448][ T7081] usb 7-1: config 0 descriptor?? [ 506.295807][ T8629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 506.300640][ T8623] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 506.304311][ T8629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 506.469794][ T42] audit: type=1400 audit(1782808358.791:892): avc: denied { read } for pid=8640 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 506.782447][ T8657] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 506.839710][ T8664] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 506.904107][ T42] audit: type=1400 audit(1782810406.183:893): avc: denied { append } for pid=8622 comm="syz.2.748" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 506.933167][ T8623] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 506.974039][ T7081] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 506.977922][ T7081] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 506.996953][ T7081] usb 7-1: USB disconnect, device number 13 [ 507.070979][ T8674] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 507.077033][ T8674] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 507.181056][ T8685] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 507.184474][ T8685] netlink: 220 bytes leftover after parsing attributes in process `syz.2.766'. [ 507.390375][ T8686] overlayfs: failed to resolve './file0': -2 [ 507.577730][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 507.581534][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 507.606198][ T5892] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.610322][ T5892] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.620903][ T5892] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.624464][ T5892] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.651693][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 507.810478][ T5901] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 507.860838][ T8708] bond0: entered promiscuous mode [ 507.863073][ T8708] bond_slave_0: entered promiscuous mode [ 507.871659][ T8708] bond_slave_1: entered promiscuous mode [ 507.876786][ T8708] batadv0: entered promiscuous mode [ 507.962165][ T56] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 508.085363][ T8729] syzkaller1: entered promiscuous mode [ 508.087497][ T8729] syzkaller1: entered allmulticast mode [ 508.094844][ T8729] netlink: 'syz.1.777': attribute type 8 has an invalid length. [ 508.135122][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 508.140837][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.145330][ T56] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 508.154168][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.159908][ T56] usb 5-1: config 0 descriptor?? [ 508.383146][ T56] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 508.419584][ T7081] usb 5-1: USB disconnect, device number 13 [ 508.471189][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 508.471507][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 508.568771][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 510.553191][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.555900][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.937504][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 512.937521][ T42] audit: type=1400 audit(1782810411.756:902): avc: denied { write } for pid=8746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.994958][ T42] audit: type=1400 audit(1782810411.802:903): avc: denied { write } for pid=8749 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.564124][ T42] audit: type=1400 audit(1782810414.173:904): avc: denied { write } for pid=8751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.639554][ T42] audit: type=1400 audit(1782810414.247:905): avc: denied { write } for pid=8754 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.206098][ T8762] (syz.2.780,8762,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 518.210621][ T8762] (syz.2.780,8762,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 518.213628][ T8762] (syz.2.780,8762,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 518.217119][ T8762] (syz.2.780,8762,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 518.305299][ T8778] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 518.333580][ T8778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.691173][ T5901] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 518.865050][ T5901] usb 7-1: Using ep0 maxpacket: 32 [ 518.874170][ T5901] usb 7-1: config index 0 descriptor too short (expected 15270, got 18) [ 518.882590][ T5901] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 518.891513][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.896794][ T5901] usb 7-1: Product: syz [ 518.900176][ T8787] overlay: Unknown parameter 'smackfsdef' [ 518.902603][ T5901] usb 7-1: Manufacturer: syz [ 518.906930][ T5901] usb 7-1: SerialNumber: syz [ 518.924103][ T5901] usb 7-1: config 0 descriptor?? [ 518.927887][ T42] audit: type=1800 audit(1782810417.274:906): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.787" name="file0" dev="overlay" ino=1076 res=0 errno=0 [ 518.933899][ T5901] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 518.941514][ T5901] dvb-usb: bulk message failed: -22 (4/0) [ 518.944569][ T5901] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 518.952118][ T5901] dvb-usb: bulk message failed: -22 (5/0) [ 518.954687][ T5901] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 518.970130][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 518.979999][ T5901] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 518.984008][ T5901] usb 7-1: media controller created [ 519.014294][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.032740][ T5901] usb 7-1: selecting invalid altsetting 3 [ 519.035847][ T5901] ttusb2: set interface to alts=3 failed [ 519.056861][ T5901] DVB: Unable to find symbol tda10086_attach() [ 519.062892][ T5901] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 519.066934][ T5901] dvb-usb: bulk message failed: -22 (4/0) [ 519.068943][ T5901] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 519.073845][ T5901] dvb-usb: bulk message failed: -22 (5/0) [ 519.076528][ T5901] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 519.087093][ T5901] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 519.151411][ T8784] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 519.164495][ T8784] dvb-usb: bulk message failed: -22 (64/0) [ 519.168796][ T8784] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 519.172698][ T8784] ttusb2: i2c transfer failed. [ 519.175429][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 519.180760][ T5901] usb 7-1: USB disconnect, device number 14 [ 519.211579][ T5901] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 519.244570][ T5893] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 519.406419][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 519.412239][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 519.418593][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 519.424505][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 519.432293][ T5893] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 519.436098][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.439542][ T5893] usb 6-1: Product: syz [ 519.441242][ T5893] usb 6-1: Manufacturer: syz [ 519.443137][ T5893] usb 6-1: SerialNumber: syz [ 519.466728][ T5893] usb 6-1: config 0 descriptor?? [ 519.475979][ T5893] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input19 [ 519.492421][ C1] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 519.691184][ T8789] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 519.694608][ T8789] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 519.698119][ T8789] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 519.701526][ T8789] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 519.715187][ T5893] usb 6-1: USB disconnect, device number 5 [ 519.715291][ C1] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 519.768848][ T8802] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 519.841433][ T8805] netlink: 32 bytes leftover after parsing attributes in process `syz.2.792'. [ 519.872910][ T5819] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 519.973506][ T8809] overlayfs: missing 'lowerdir' [ 520.166549][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.795'. [ 520.173808][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.795'. [ 520.197563][ T8811] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 520.200205][ T8811] syzkaller1: group set to 0 [ 520.201812][ T8812] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 520.203741][ T8812] syzkaller1: group set to 0 [ 520.380043][ T8821] netlink: 'syz.0.798': attribute type 1 has an invalid length. [ 520.390617][ T8815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.796'. [ 520.401036][ T8821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 520.424137][ T8821] bond1: (slave ip6gretap1): making interface the new active one [ 520.429720][ T8821] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 520.463071][ T42] audit: type=1400 audit(1782810418.694:907): avc: denied { ioctl } for pid=8826 comm="syz.0.800" path="socket:[27186]" dev="sockfs" ino=27186 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 520.643771][ T42] audit: type=1400 audit(1782810418.870:908): avc: denied { read } for pid=8840 comm="syz.0.804" dev="nsfs" ino=4026533157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 520.656989][ T42] audit: type=1400 audit(1782810418.870:909): avc: denied { open } for pid=8840 comm="syz.0.804" path="net:[4026533157]" dev="nsfs" ino=4026533157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 520.990634][ T8858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8858 comm=syz.1.811 [ 521.033140][ T8866] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 521.073573][ T5819] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 521.131794][ T42] audit: type=1400 audit(1782810419.313:910): avc: denied { read } for pid=8868 comm="syz.1.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 521.248843][ T5901] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 521.274970][ T42] audit: type=1400 audit(1782810419.442:911): avc: denied { ioctl } for pid=8873 comm="syz.0.817" path="socket:[25164]" dev="sockfs" ino=25164 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 521.411375][ T5901] usb 7-1: Using ep0 maxpacket: 8 [ 521.416755][ T5901] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 521.420181][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.422934][ T5901] usb 7-1: Product: syz [ 521.424352][ T5901] usb 7-1: Manufacturer: syz [ 521.426047][ T5901] usb 7-1: SerialNumber: syz [ 521.430462][ T5901] usb 7-1: config 0 descriptor?? [ 521.549362][ T42] audit: type=1400 audit(1782810419.700:912): avc: denied { write } for pid=8879 comm="syz.3.819" name="/" dev="9p" ino=74473723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 521.653404][ T5901] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 521.655731][ T8852] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 521.878472][ T42] audit: type=1400 audit(1782810420.005:913): avc: denied { watch watch_reads } for pid=8891 comm="syz.3.823" path="pipe:[25175]" dev="pipefs" ino=25175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 522.075472][ T42] audit: type=1400 audit(1782810420.180:914): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 522.133784][ T5901] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 522.147348][ T5901] usb 7-1: USB disconnect, device number 15 [ 522.263771][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.833'. [ 522.270026][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.833'. [ 522.281172][ T8923] erspan0: entered promiscuous mode [ 522.283896][ T8923] gretap0: entered promiscuous mode [ 522.284103][ T42] audit: type=1400 audit(1782810420.374:915): avc: denied { bind } for pid=8924 comm="syz.3.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 522.288500][ T8923] hsr2: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 522.288765][ T8925] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 522.296151][ T8925] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 522.423728][ T8933] kernel read not supported for file /policy (pid: 8933 comm: syz.3.837) [ 522.506086][ T5893] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 522.681192][ T5893] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 522.684933][ T5893] usb 5-1: config 0 has no interface number 0 [ 522.687646][ T5893] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 522.699070][ T5893] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 522.703856][ T5893] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 522.707988][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 522.709981][ T5893] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 522.715073][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 522.715622][ T8948] l2tp_ppp: sess 2/0: no socket in recv [ 522.718651][ T5893] usb 5-1: Product: syz [ 522.718665][ T5893] usb 5-1: SerialNumber: syz [ 522.729273][ T5893] usb 5-1: config 0 descriptor?? [ 522.735825][ T5893] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 522.742966][ T5893] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input20 [ 522.763779][ T5901] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 522.771520][ T5901] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 522.779800][ T5901] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 522.789852][ T5901] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 522.794912][ T5901] rtc rtc0: __rtc_set_alarm: err=-22 [ 522.960309][ T8963] program syz.1.847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.960821][ T8921] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.973567][ T8921] bridge_slave_0 (unregistering): left allmulticast mode [ 522.976590][ T8921] bridge_slave_0 (unregistering): left promiscuous mode [ 522.979995][ T8921] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.986288][ T8963] netlink: 104 bytes leftover after parsing attributes in process `syz.1.847'. [ 523.071473][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 523.071799][ T5901] usb 5-1: USB disconnect, device number 14 [ 523.075504][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 523.114982][ T8967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.849'. [ 523.133804][ T5901] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 523.272738][ T8974] batman_adv: batadv0: Adding interface: dummy0 [ 523.275975][ T8974] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.283804][ T8974] batman_adv: batadv0: Interface activated: dummy0 [ 523.295830][ T8974] batadv0: mtu less than device minimum [ 523.298486][ T8974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 523.304582][ T8974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 523.308556][ T8974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 523.313413][ T8974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 523.317393][ T8974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 523.321427][ T8974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 523.325554][ T8974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 523.329313][ T8974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 523.333297][ T8974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 523.403286][ T8976] kvm: kvm [8975]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 523.407091][ T8976] kvm: kvm [8975]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 523.413662][ T8983] netlink: 'syz.1.853': attribute type 5 has an invalid length. [ 523.561552][ T8988] program syz.2.854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.748888][ T8998] gtp0: entered promiscuous mode [ 523.750773][ T8998] gtp0: entered allmulticast mode [ 524.235550][ T9010] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 524.240711][ T9010] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 524.246645][ T9010] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 524.316862][ T9014] No source specified [ 524.341069][ T9014] pim6reg1: entered promiscuous mode [ 524.343134][ T9014] pim6reg1: entered allmulticast mode [ 524.393203][ T9018] netlink: 'syz.2.865': attribute type 12 has an invalid length. [ 524.770532][ T9047] x_tables: duplicate underflow at hook 2 [ 524.959183][ T9063] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 525.100945][ T9069] overlayfs: overlapping lowerdir path [ 525.161434][ T3268] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 525.302149][ T41] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 525.335094][ T3268] usb 7-1: Using ep0 maxpacket: 8 [ 525.339982][ T3268] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 525.347360][ T3268] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.353432][ T3268] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 525.358059][ T3268] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 525.362609][ T3268] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.369280][ T3268] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 525.373386][ T3268] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.399678][ T5774] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 525.466529][ T41] usb 6-1: config 0 has no interfaces? [ 525.468868][ T41] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 525.472353][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.477119][ T41] usb 6-1: config 0 descriptor?? [ 525.562288][ T5774] usb 5-1: Using ep0 maxpacket: 32 [ 525.566743][ T5774] usb 5-1: unable to get BOS descriptor or descriptor too short [ 525.572615][ T5774] usb 5-1: string descriptor 0 read error: -22 [ 525.575531][ T5774] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 525.578650][ T5774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.590117][ T5774] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 525.594383][ T5774] dw2102: su3000_power_ctrl: 1, initialized 0 [ 525.597633][ T5774] dvb-usb: bulk message failed: -22 (2/0) [ 525.603519][ T3268] usb 7-1: usb_control_msg returned -32 [ 525.606003][ T5774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 525.609189][ T5774] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 525.610830][ T3268] usbtmc 7-1:16.0: can't read capabilities [ 525.618698][ T5774] usb 5-1: media controller created [ 525.621084][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 525.625093][ T5774] dw2102: i2c transfer failed. [ 525.627083][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 525.629063][ T5774] dw2102: i2c transfer failed. [ 525.630646][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 525.632453][ T5774] dw2102: i2c transfer failed. [ 525.633950][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 525.635827][ T5774] dw2102: i2c transfer failed. [ 525.637362][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 525.643462][ T5774] dw2102: i2c transfer failed. [ 525.646551][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 525.649135][ T5774] dw2102: i2c transfer failed. [ 525.651161][ T5774] dvb-usb: MAC address: 02:02:02:02:02:02 [ 525.664096][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.682174][ T5774] dvb-usb: bulk message failed: -22 (3/0) [ 525.685108][ T5774] dw2102: command 0x0e transfer failed. [ 525.688474][ T5774] dvb-usb: bulk message failed: -22 (3/0) [ 525.690870][ T5774] dw2102: command 0x0e transfer failed. [ 525.709931][ T41] usb 6-1: USB disconnect, device number 6 [ 525.732629][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 525.732648][ T42] audit: type=1400 audit(1782810423.557:923): avc: denied { write } for pid=9072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.805519][ T42] audit: type=1400 audit(1782810423.631:924): avc: denied { write } for pid=9075 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.031941][ T5774] dvb-usb: bulk message failed: -22 (3/0) [ 526.042827][ T5774] dw2102: command 0x0e transfer failed. [ 526.048625][ T5774] dvb-usb: bulk message failed: -22 (3/0) [ 526.051292][ T5774] dw2102: command 0x0e transfer failed. [ 526.053547][ T5774] dvb-usb: bulk message failed: -22 (1/0) [ 526.056184][ T5774] dw2102: command 0x51 transfer failed. [ 526.078959][ T5774] DVB: Unable to find symbol ds3000_attach() [ 526.081756][ T5774] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 526.147431][ T5774] rc_core: IR keymap rc-su3000 not found [ 526.150008][ T5774] Registered IR keymap rc-empty [ 526.156257][ T5774] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 526.183108][ T5774] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input21 [ 526.193851][ T5774] dvb-usb: schedule remote query interval to 150 msecs. [ 526.197370][ T5774] dw2102: su3000_power_ctrl: 0, initialized 1 [ 526.200362][ T5774] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 526.210637][ T5774] usb 5-1: USB disconnect, device number 15 [ 526.267255][ T5774] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 526.372929][ T5782] usb 7-1: USB disconnect, device number 16 [ 526.446593][ T9106] netlink: 'syz.2.890': attribute type 5 has an invalid length. [ 526.516714][ T9105] IPv6: NLM_F_CREATE should be specified when creating new route [ 526.531052][ T9118] netlink: 'syz.1.893': attribute type 29 has an invalid length. [ 526.575990][ T9123] overlayfs: overlapping lowerdir path [ 526.949549][ T3268] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 527.090432][ T5774] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 527.090512][ T41] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 527.122868][ T3268] usb 5-1: Using ep0 maxpacket: 8 [ 527.126902][ T3268] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.131674][ T3268] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.137234][ T3268] usb 5-1: config 0 interface 0 has no altsetting 0 [ 527.141256][ T3268] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 527.145322][ T3268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.153340][ T3268] usb 5-1: config 0 descriptor?? [ 527.242075][ T5774] usb 7-1: device descriptor read/64, error -71 [ 527.265471][ T41] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 527.269048][ T41] usb 6-1: config 0 has no interface number 0 [ 527.271686][ T41] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.279554][ T41] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 527.283928][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.287429][ T41] usb 6-1: Product: syz [ 527.289187][ T41] usb 6-1: Manufacturer: syz [ 527.291226][ T41] usb 6-1: SerialNumber: syz [ 527.296386][ T41] usb 6-1: config 0 descriptor?? [ 527.305243][ T41] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 527.502160][ T5774] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 527.522427][ T9131] nft_compat: unsupported protocol 0 [ 527.528992][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.532303][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.543750][ T5893] usb 6-1: USB disconnect, device number 7 [ 527.553525][ T5893] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 527.609814][ T3268] usbhid 5-1:0.0: can't add hid device: -71 [ 527.614094][ T3268] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 527.619673][ T3268] usb 5-1: USB disconnect, device number 16 [ 527.643136][ T5774] usb 7-1: device descriptor read/64, error -71 [ 527.773403][ T5774] usb usb7-port1: attempt power cycle [ 527.922905][ T9139] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 528.078787][ T42] audit: type=1326 audit(1782810425.725:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9143 comm="syz.3.901" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7053d9ce59 code=0x0 [ 528.141646][ T5774] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 528.167500][ T5774] usb 7-1: device descriptor read/8, error -71 [ 528.186243][ T9149] macsec1: entered promiscuous mode [ 528.385760][ T42] audit: type=1800 audit(1782810426.002:926): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.904" name="/newroot/230/bus/#1270//deleted" dev="tmpfs" ino=1270 res=0 errno=0 [ 528.423329][ T5774] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 528.445980][ T5774] usb 7-1: device descriptor read/8, error -71 [ 528.469620][ T9170] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 528.473163][ T9170] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 528.477320][ T9170] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 528.478721][ T9169] __nla_validate_parse: 3 callbacks suppressed [ 528.478734][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 528.565248][ T5774] usb usb7-port1: unable to enumerate USB device [ 528.578912][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 528.600815][ T42] audit: type=1400 audit(1782810426.205:927): avc: denied { accept } for pid=9176 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 528.665430][ T9187] ubi8: attaching mtd0 [ 528.674487][ T9187] ubi8: scanning is finished [ 528.676569][ T9187] ubi8: empty MTD device detected [ 528.709407][ T42] audit: type=1400 audit(1782810426.307:928): avc: denied { create } for pid=9191 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 528.810765][ T9197] tmpfs: Unknown parameter 'mpĪX/ol' [ 528.814848][ T9197] overlayfs: workdir and upperdir must reside under the same mount [ 528.883272][ T42] audit: type=1400 audit(1782810426.454:929): avc: denied { shutdown } for pid=9200 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 528.893393][ T42] audit: type=1400 audit(1782810426.454:930): avc: denied { accept } for pid=9200 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 528.902573][ T42] audit: type=1400 audit(1782810426.454:931): avc: denied { shutdown } for pid=9200 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 528.919891][ T9187] ubi8 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt8d", error -4 [ 528.935169][ T9203] netlink: 'syz.1.920': attribute type 10 has an invalid length. [ 528.938510][ T9203] batman_adv: batadv0: Interface deactivated: dummy0 [ 528.942382][ T9203] dummy0: left promiscuous mode [ 528.945192][ T9203] batman_adv: batadv0: Removing interface: dummy0 [ 528.957027][ T9203] team0: Port device dummy0 added [ 528.968992][ T9203] ip6t_REJECT: ECHOREPLY is not supported [ 528.971462][ T9203] netlink: 104 bytes leftover after parsing attributes in process `syz.1.920'. [ 529.038011][ T42] audit: type=1400 audit(1782810426.602:932): avc: denied { read } for pid=9206 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 529.077512][ T9216] netlink: 96 bytes leftover after parsing attributes in process `syz.3.924'. [ 529.116269][ T9219] netlink: 96 bytes leftover after parsing attributes in process `syz.3.924'. [ 529.329529][ T9236] lo: entered promiscuous mode [ 529.881353][ T9256] netlink: 48 bytes leftover after parsing attributes in process `syz.0.933'. [ 530.251425][ T9267] ptrace attach of "/syz-executor exec"[5811] was attempted by ""[9267] [ 530.327685][ T9269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.939'. [ 530.353286][ T9269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.939'. [ 530.360861][ T9269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.939'. [ 530.365554][ T9269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.939'. [ 530.889555][ T9304] netlink: 'syz.3.949': attribute type 1 has an invalid length. [ 530.945456][ T9304] 8021q: adding VLAN 0 to HW filter on device bond8 [ 530.949274][ T9304] bond7: (slave bond8): making interface the new active one [ 530.952400][ T9304] bond7: (slave bond8): Enslaving as an active interface with an up link [ 530.965953][ T9304] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 531.006043][ T9298] net_ratelimit: 10 callbacks suppressed [ 531.006066][ T9298] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 531.028631][ T9312] netlink: 'syz.1.950': attribute type 1 has an invalid length. [ 531.044451][ T9304] 8021q: adding VLAN 0 to HW filter on device bond7 [ 531.496451][ T9344] netlink: 'syz.2.963': attribute type 10 has an invalid length. [ 531.511576][ T9344] geneve3: entered promiscuous mode [ 531.513568][ T9344] geneve3: entered allmulticast mode [ 531.602651][ T9350] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 531.621633][ T9350] bond4: entered promiscuous mode [ 531.623649][ T9350] 8021q: adding VLAN 0 to HW filter on device bond4 [ 531.645263][ T9350] bond4: (slave bridge7): making interface the new active one [ 531.648072][ T9350] bridge7: entered promiscuous mode [ 531.650977][ T9350] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 531.660423][ T9342] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 531.691886][ T9356] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 531.697049][ T9356] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 531.701366][ T9356] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 531.703833][ T9356] UDF-fs: Scanning with blocksize 512 failed [ 531.706326][ T9356] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 531.709780][ T9356] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 531.712819][ T9356] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 531.713894][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 531.713917][ T42] audit: type=1400 audit(1782810429.075:942): avc: denied { create } for pid=9357 comm="syz.2.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 531.715438][ T9356] UDF-fs: Scanning with blocksize 1024 failed [ 531.715893][ T9356] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 531.731628][ T9356] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 531.734987][ T9356] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 531.735525][ T42] audit: type=1400 audit(1782810429.084:943): avc: denied { setopt } for pid=9357 comm="syz.2.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 531.737389][ T9356] UDF-fs: Scanning with blocksize 2048 failed [ 531.737739][ T9356] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 531.753065][ T9356] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 531.756315][ T9356] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 531.758973][ T9356] UDF-fs: Scanning with blocksize 4096 failed [ 531.761087][ T9356] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 531.832528][ T42] audit: type=1400 audit(1782810429.186:944): avc: denied { name_bind } for pid=9366 comm="syz.0.970" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 531.939953][ T9385] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 532.037845][ T9397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=9397 comm=syz.3.980 [ 532.072647][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.080363][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.147206][ T9414] netlink: 'syz.1.982': attribute type 10 has an invalid length. [ 532.238756][ T848] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 532.402900][ T848] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.406327][ T848] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 532.409408][ T848] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 532.415635][ T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.421705][ T848] usb 7-1: config 0 descriptor?? [ 532.427839][ T848] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 532.430123][ T848] dvb-usb: bulk message failed: -22 (3/0) [ 532.439854][ T848] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 532.443594][ T848] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 532.447816][ T848] usb 7-1: media controller created [ 532.451003][ T848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 532.460384][ T848] dvb-usb: bulk message failed: -22 (6/0) [ 532.462845][ T848] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 532.469241][ T848] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input22 [ 532.475511][ T848] dvb-usb: schedule remote query interval to 150 msecs. [ 532.478380][ T848] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 532.563400][ T5782] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 532.650279][ T848] dvb-usb: bulk message failed: -22 (1/0) [ 532.650832][ T9393] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 532.654181][ T848] dvb-usb: error while querying for an remote control event. [ 532.655377][ T9393] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.663781][ T9393] vhci_hcd vhci_hcd.0: Device attached [ 532.676929][ T9442] vhci_hcd: connection closed [ 532.677727][ T5812] usb 7-1: USB disconnect, device number 21 [ 532.681914][ T13] vhci_hcd vhci_hcd.2: stop threads [ 532.686089][ T13] vhci_hcd vhci_hcd.2: release socket [ 532.689040][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 532.706580][ T5812] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 532.726032][ T5782] usb 6-1: Using ep0 maxpacket: 8 [ 532.729302][ T5782] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.733067][ T5782] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 532.735938][ T5782] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 532.740365][ T5782] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 532.743805][ T5782] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 532.751115][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.776354][ T5782] hub 6-1:1.0: bad descriptor, ignoring hub [ 532.781518][ T5782] hub 6-1:1.0: probe with driver hub failed with error -5 [ 532.786660][ T5782] cdc_wdm 6-1:1.0: skipping garbage [ 532.788786][ T5782] cdc_wdm 6-1:1.0: skipping garbage [ 532.790556][ T5782] cdc_wdm 6-1:1.0: skipping garbage [ 532.793828][ T5782] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 532.797762][ T5782] cdc_wdm 6-1:1.0: Unknown control protocol [ 532.910650][ T3268] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 532.999380][ T42] audit: type=1400 audit(1782810430.265:945): avc: denied { read write } for pid=9430 comm="syz.1.987" name="cdc-wdm0" dev="devtmpfs" ino=3106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 533.008982][ T42] audit: type=1400 audit(1782810430.265:946): avc: denied { open } for pid=9430 comm="syz.1.987" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 533.085297][ T3268] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 533.088055][ T3268] usb 5-1: config 0 has no interface number 0 [ 533.090190][ T3268] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 533.096133][ T3268] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 533.100229][ T3268] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 533.104467][ T3268] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 533.107735][ T3268] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 533.110311][ T3268] usb 5-1: Product: syz [ 533.111771][ T3268] usb 5-1: SerialNumber: syz [ 533.116213][ T3268] usb 5-1: config 0 descriptor?? [ 533.120809][ T3268] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 533.123998][ T3268] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input23 [ 533.340549][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 533.340858][ T5782] usb 5-1: USB disconnect, device number 17 [ 533.343109][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 533.363021][ T5782] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 533.493613][ T9431] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 533.636732][ T9431] usb 6-1: device descriptor read/64, error -71 [ 533.901020][ T9431] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 533.986878][ T9462] netlink: 'syz.2.993': attribute type 4 has an invalid length. [ 534.032786][ T42] audit: type=1400 audit(1782810431.216:947): avc: denied { read } for pid=9465 comm="syz.0.997" name="file0" dev="tmpfs" ino=1364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 534.042619][ T42] audit: type=1400 audit(1782810431.216:948): avc: denied { open } for pid=9465 comm="syz.0.997" path="/249/file0" dev="tmpfs" ino=1364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 534.056892][ T9466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58274 sclass=netlink_route_socket pid=9466 comm=syz.0.997 [ 534.059266][ T42] audit: type=1400 audit(1782810431.216:949): avc: denied { ioctl } for pid=9465 comm="syz.0.997" path="/249/file0" dev="tmpfs" ino=1364 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 534.074772][ T9431] usb 6-1: device descriptor read/64, error -71 [ 534.075365][ T9464] Invalid ELF header type: 0 != 1 [ 534.075463][ T9466] netlink: 'syz.0.997': attribute type 20 has an invalid length. [ 534.083403][ T9464] Invalid ELF header type: 3 != 1 [ 534.085285][ T42] audit: type=1400 audit(1782810431.252:950): avc: denied { module_load } for pid=9463 comm="syz.3.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 534.126864][ T9478] netlink: 'syz.2.999': attribute type 4 has an invalid length. [ 534.141403][ T9479] CUSE: unknown device info "" [ 534.144718][ T9479] CUSE: DEVNAME unspecified [ 534.198318][ T9478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18306 sclass=netlink_route_socket pid=9478 comm=syz.2.999 [ 534.219131][ T42] audit: type=1400 audit(1782810431.391:951): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 534.330373][ T9431] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 534.363602][ T9431] usb 6-1: device descriptor read/8, error -71 [ 534.506183][ T9485] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.622907][ T9431] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 534.645120][ T9431] usb 6-1: device descriptor read/8, error -71 [ 534.767105][ T9431] cdc_wdm 6-1:1.0: Error autopm - -16 [ 534.767176][ T5774] usb 6-1: USB disconnect, device number 8 [ 534.926648][ T5774] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 535.067008][ T5774] usb 6-1: device descriptor read/64, error -71 [ 535.304778][ T9525] netlink: 'syz.0.1016': attribute type 5 has an invalid length. [ 535.313671][ T9525] ip6erspan0: entered promiscuous mode [ 535.319827][ T9525] netlink: 'syz.0.1016': attribute type 5 has an invalid length. [ 535.327126][ T5774] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 535.365104][ T9529] __nla_validate_parse: 54 callbacks suppressed [ 535.365122][ T9529] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.1017'. [ 535.371392][ T9529] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.1017'. [ 535.468018][ T5774] usb 6-1: device descriptor read/64, error -71 [ 535.514465][ T9536] Bluetooth: MGMT ver 1.23 [ 535.517385][ T9536] cgroup: subsys name conflicts with all [ 535.587847][ T5774] usb usb6-port1: attempt power cycle [ 535.672803][ T9545] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 535.701357][ T9547] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 536.018764][ T9573] can: request_module (can-proto-3) failed. [ 536.184263][ T9590] devtmpfs: Cannot change global quota limit on remount [ 536.275342][ T9594] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1037'. [ 536.371338][ T9604] netlink: 'syz.1.1039': attribute type 1 has an invalid length. [ 536.396656][ T9604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9604 comm=syz.1.1039 [ 536.457222][ T9609] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 536.473596][ T9609] 8021q: adding VLAN 0 to HW filter on device bond5 [ 536.488579][ T9592] Cannot find map_set index 3 as target [ 536.504330][ T9609] bond5: (slave veth7): Enslaving as an active interface with a down link [ 536.520422][ T9609] bond5: (slave macvlan1): making interface the new active one [ 536.525085][ T9609] bond5: (slave macvlan1): Enslaving as an active interface with an up link [ 536.529798][ T9609] netlink: 'syz.2.1040': attribute type 10 has an invalid length. [ 536.533063][ T9609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1040'. [ 536.539219][ T9609] dummy0: entered promiscuous mode [ 536.550661][ T9615] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 536.621381][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'. [ 536.622335][ T9619] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 536.829772][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 536.917622][ T5812] bridge0: entered promiscuous mode [ 536.956465][ T9655] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 537.122366][ T9674] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1049'. [ 537.173964][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 537.173979][ T42] audit: type=1400 audit(1782810434.113:962): avc: denied { getopt } for pid=9675 comm="syz.0.1056" lport=15183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 537.303927][ T9684] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 537.428580][ T9691] binder: 9690:9691 ioctl c0306201 200000000640 returned -14 [ 537.460060][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1063'. [ 537.465289][ T9695] nbd: must specify at least one socket [ 537.530859][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 537.649327][ T9712] loop8: detected capacity change from 0 to 7 [ 537.656124][ T9712] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 537.660769][ T9712] loop8: partition table partially beyond EOD, truncated [ 537.665815][ T9712] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 537.670653][ T9712] loop8: p2 start 121280928 is beyond EOD, truncated [ 537.711416][ T8771] udevd[8771]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 537.883385][ T9727] ip6tnl2: entered promiscuous mode [ 538.020867][ T9736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'. [ 538.061101][ T9738] macvtap1: entered promiscuous mode [ 538.070964][ T9738] team0: Device macvtap1 failed to register rx_handler [ 538.226620][ T42] audit: type=1400 audit(1782810435.091:963): avc: denied { append } for pid=9752 comm="syz.1.1084" name="pmem0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 538.381054][ T9753] bond6: entered promiscuous mode [ 538.383725][ T9753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 538.414266][ T9753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 538.417522][ T9753] bond6: (slave sit1): The slave device specified does not support setting the MAC address [ 538.422374][ T9753] bond6: (slave sit1): Error -95 calling set_mac_address [ 538.436006][ T9768] sctp: [Deprecated]: syz.3.1087 (pid 9768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.436006][ T9768] Use struct sctp_sack_info instead [ 538.436638][ T9770] binder: 9769:9770 ioctl c018620c 200000000000 returned -22 [ 538.490236][ T42] audit: type=1400 audit(1782810435.331:964): avc: denied { setopt } for pid=9777 comm="syz.2.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 538.628010][ T9790] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 538.633930][ T9790] openvswitch: netlink: Duplicate or invalid key (type 0). [ 538.636930][ T9790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.692406][ T42] audit: type=1400 audit(1782810435.515:965): avc: denied { write } for pid=9792 comm="syz.2.1097" lport=58328 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 538.701212][ T42] audit: type=1400 audit(1782810435.515:966): avc: denied { call } for pid=9794 comm="syz.1.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 538.715294][ T42] audit: type=1400 audit(1782810435.525:967): avc: denied { connect } for pid=9792 comm="syz.2.1097" lport=58328 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 538.727289][ T9799] ================================================================== [ 538.730106][ T9799] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 538.730489][ T42] audit: type=1400 audit(1782810435.525:968): avc: denied { name_connect } for pid=9792 comm="syz.2.1097" dest=20003 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 538.732602][ T9799] Read of size 8 at addr ffff88802d32ee18 by task syz.1.1099/9799 [ 538.732620][ T9799] [ 538.732663][ T9799] CPU: 1 UID: 0 PID: 9799 Comm: syz.1.1099 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.732688][ T9799] Tainted: [L]=SOFTLOCKUP [ 538.732694][ T9799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 538.732705][ T9799] Call Trace: [ 538.732712][ T9799] [ 538.732720][ T9799] dump_stack_lvl+0x100/0x190 [ 538.732740][ T9799] print_report+0x13d/0x4b0 [ 538.732761][ T9799] ? __virt_addr_valid+0x239/0x430 [ 538.732785][ T9799] ? dvb_device_open+0x33f/0x3b0 [ 538.732805][ T9799] kasan_report+0xdf/0x1c0 [ 538.732823][ T9799] ? dvb_device_open+0x33f/0x3b0 [ 538.732839][ T9799] ? __pfx_dvb_device_open+0x10/0x10 [ 538.732857][ T9799] dvb_device_open+0x33f/0x3b0 [ 538.732874][ T9799] ? __pfx_dvb_device_open+0x10/0x10 [ 538.732892][ T9799] chrdev_open+0x234/0x6a0 [ 538.732912][ T9799] ? __pfx_chrdev_open+0x10/0x10 [ 538.732930][ T9799] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 538.732949][ T9799] do_dentry_open+0x6ab/0x14d0 [ 538.732959][ T9799] ? __pfx_chrdev_open+0x10/0x10 [ 538.733002][ T9799] vfs_open+0x82/0x3f0 [ 538.733019][ T9799] path_openat+0x2873/0x4280 [ 538.733035][ T9799] ? __pfx_path_openat+0x10/0x10 [ 538.733052][ T9799] do_file_open+0x20e/0x430 [ 538.733065][ T9799] ? __pfx_do_file_open+0x10/0x10 [ 538.733085][ T9799] ? alloc_fd+0x471/0x7a0 [ 538.733098][ T9799] ? do_getname+0x191/0x390 [ 538.733113][ T9799] do_sys_openat2+0x10f/0x1e0 [ 538.733127][ T9799] ? __pfx_do_sys_openat2+0x10/0x10 [ 538.733143][ T9799] __x64_sys_openat+0x12d/0x210 [ 538.733157][ T9799] ? __pfx___x64_sys_openat+0x10/0x10 [ 538.733173][ T9799] do_syscall_64+0x115/0x870 [ 538.733190][ T9799] ? clear_bhb_loop+0x40/0x90 [ 538.733203][ T9799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.733215][ T9799] RIP: 0033:0x7fb52db5d68e [ 538.733244][ T9799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 538.733262][ T9799] RSP: 002b:00007fb52ea13b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 538.733276][ T9799] RAX: ffffffffffffffda RBX: 00007fb52ea146c0 RCX: 00007fb52db5d68e [ 538.733286][ T9799] RDX: 0000000000000002 RSI: 00007fb52ea13c00 RDI: ffffffffffffff9c [ 538.733293][ T9799] RBP: 00007fb52ea13c00 R08: 0000000000000000 R09: 0000000000000000 [ 538.733301][ T9799] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 538.733307][ T9799] R13: 00007fb52de16038 R14: 00007fb52de15fa0 R15: 00007fffd9da33b8 [ 538.733318][ T9799] [ 538.733322][ T9799] [ 538.835877][ T9799] Allocated by task 1: [ 538.837278][ T9799] kasan_save_stack+0x30/0x50 [ 538.838834][ T9799] kasan_save_track+0x14/0x30 [ 538.840433][ T9799] __kasan_kmalloc+0xaa/0xb0 [ 538.841987][ T9799] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 538.843670][ T9799] dvb_register_device+0x1d6/0x1e20 [ 538.845565][ T9799] dvb_register_frontend+0x552/0x820 [ 538.847311][ T9799] vidtv_bridge_probe+0x44b/0xa30 [ 538.848908][ T9799] platform_probe+0x106/0x1d0 [ 538.851129][ T9799] really_probe+0x241/0xa60 [ 538.853620][ T9799] __driver_probe_device+0x20e/0x450 [ 538.856297][ T9799] driver_probe_device+0x4a/0x140 [ 538.857919][ T9799] __driver_attach+0x21f/0x5b0 [ 538.859440][ T9799] bus_for_each_dev+0x13e/0x1d0 [ 538.860987][ T9799] bus_add_driver+0x305/0x5b0 [ 538.862501][ T9799] driver_register+0x1e2/0x360 [ 538.864054][ T9799] vidtv_bridge_init+0x52/0x80 [ 538.865549][ T9799] do_one_initcall+0x11d/0x700 [ 538.867041][ T9799] kernel_init_freeable+0x6ea/0x7b0 [ 538.868603][ T9799] kernel_init+0x1f/0x1e0 [ 538.870026][ T9799] ret_from_fork+0x72b/0xd50 [ 538.871592][ T9799] ret_from_fork_asm+0x1a/0x30 [ 538.873212][ T9799] [ 538.874170][ T9799] Freed by task 9722: [ 538.875729][ T9799] kasan_save_stack+0x30/0x50 [ 538.877730][ T9799] kasan_save_track+0x14/0x30 [ 538.879865][ T9799] kasan_save_free_info+0x3b/0x70 [ 538.882063][ T9799] __kasan_slab_free+0x5f/0x80 [ 538.884164][ T9799] kfree+0x22b/0x6c0 [ 538.885816][ T9799] dvb_device_put.part.0+0x57/0x90 [ 538.887922][ T9799] dvb_device_open+0x2ba/0x3b0 [ 538.889931][ T9799] chrdev_open+0x234/0x6a0 [ 538.892403][ T9799] do_dentry_open+0x6ab/0x14d0 [ 538.895034][ T9799] vfs_open+0x82/0x3f0 [ 538.896558][ T9799] path_openat+0x2873/0x4280 [ 538.898482][ T9799] do_file_open+0x20e/0x430 [ 538.900378][ T9799] do_sys_openat2+0x10f/0x1e0 [ 538.901884][ T9799] __x64_sys_openat+0x12d/0x210 [ 538.903474][ T9799] do_syscall_64+0x115/0x870 [ 538.905226][ T9799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.907297][ T9799] [ 538.908103][ T9799] The buggy address belongs to the object at ffff88802d32ee00 [ 538.908103][ T9799] which belongs to the cache kmalloc-256 of size 256 [ 538.914437][ T9799] The buggy address is located 24 bytes inside of [ 538.914437][ T9799] freed 256-byte region [ffff88802d32ee00, ffff88802d32ef00) [ 538.920188][ T9799] [ 538.921171][ T9799] The buggy address belongs to the physical page: [ 538.923903][ T9799] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d32e [ 538.927500][ T9799] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 538.931200][ T9799] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 538.935008][ T9799] page_type: f5(slab) [ 538.936950][ T9799] raw: 00fff00000000040 ffff88801bc42b40 dead000000000100 dead000000000122 [ 538.940612][ T9799] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 538.943727][ T9799] head: 00fff00000000040 ffff88801bc42b40 dead000000000100 dead000000000122 [ 538.946914][ T9799] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 538.951223][ T9799] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 538.954907][ T9799] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 538.958431][ T9799] page dumped because: kasan: bad access detected [ 538.961124][ T9799] page_owner tracks the page as allocated [ 538.963729][ T9799] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21105889641, free_ts 0 [ 538.971717][ T9799] post_alloc_hook+0xfd/0x120 [ 538.973776][ T9799] get_page_from_freelist+0xf48/0x3530 [ 538.976056][ T9799] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 538.978504][ T9799] new_slab+0xa2/0x650 [ 538.980561][ T9799] refill_objects+0xe3/0x410 [ 538.982995][ T9799] __pcs_replace_empty_main+0x376/0x680 [ 538.985637][ T9799] __kmalloc_cache_noprof+0x479/0x6c0 [ 538.987907][ T9799] bus_add_driver+0x92/0x5b0 [ 538.989468][ T9799] driver_register+0x1e2/0x360 [ 538.991044][ T9799] i2c_register_driver+0xd9/0x1f0 [ 538.992585][ T9799] do_one_initcall+0x11d/0x700 [ 538.994097][ T9799] kernel_init_freeable+0x6ea/0x7b0 [ 538.995757][ T9799] kernel_init+0x1f/0x1e0 [ 538.997307][ T9799] ret_from_fork+0x72b/0xd50 [ 538.998972][ T9799] ret_from_fork_asm+0x1a/0x30 [ 539.000487][ T9799] page_owner free stack trace missing [ 539.002260][ T9799] [ 539.003138][ T9799] Memory state around the buggy address: [ 539.005519][ T9799] ffff88802d32ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 539.009382][ T9799] ffff88802d32ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 539.012895][ T9799] >ffff88802d32ee00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 539.016243][ T9799] ^ [ 539.018222][ T9799] ffff88802d32ee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 539.021860][ T9799] ffff88802d32ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 539.025837][ T9799] ================================================================== [ 539.033594][ T9799] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 539.036976][ T9799] CPU: 0 UID: 0 PID: 9799 Comm: syz.1.1099 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.041754][ T9799] Tainted: [L]=SOFTLOCKUP [ 539.043665][ T9799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 539.047968][ T9799] Call Trace: [ 539.049441][ T9799] [ 539.050910][ T9799] dump_stack_lvl+0x100/0x190 [ 539.053224][ T9799] vpanic+0x552/0x970 [ 539.054944][ T9799] ? __pfx_vpanic+0x10/0x10 [ 539.056580][ T9799] ? mark_held_locks+0x40/0x70 [ 539.058268][ T9799] ? dvb_device_open+0x33f/0x3b0 [ 539.059953][ T9799] panic+0xd1/0xe0 [ 539.061319][ T9799] ? __pfx_panic+0x10/0x10 [ 539.062935][ T9799] ? dvb_device_open+0x33f/0x3b0 [ 539.064766][ T9799] ? preempt_schedule_common+0x42/0xc0 [ 539.066707][ T9799] check_panic_on_warn.cold+0x19/0x34 [ 539.068531][ T9799] end_report.part.0+0x3a/0x90 [ 539.070235][ T9799] kasan_report.cold+0xe/0x18 [ 539.071891][ T9799] ? dvb_device_open+0x33f/0x3b0 [ 539.073583][ T9799] ? __pfx_dvb_device_open+0x10/0x10 [ 539.075340][ T9799] dvb_device_open+0x33f/0x3b0 [ 539.076966][ T9799] ? __pfx_dvb_device_open+0x10/0x10 [ 539.078784][ T9799] chrdev_open+0x234/0x6a0 [ 539.080288][ T9799] ? __pfx_chrdev_open+0x10/0x10 [ 539.081997][ T9799] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 539.084251][ T9799] do_dentry_open+0x6ab/0x14d0 [ 539.085913][ T9799] ? __pfx_chrdev_open+0x10/0x10 [ 539.087616][ T9799] vfs_open+0x82/0x3f0 [ 539.089031][ T9799] path_openat+0x2873/0x4280 [ 539.090695][ T9799] ? __pfx_path_openat+0x10/0x10 [ 539.092500][ T9799] do_file_open+0x20e/0x430 [ 539.094338][ T9799] ? __pfx_do_file_open+0x10/0x10 [ 539.096177][ T9799] ? alloc_fd+0x471/0x7a0 [ 539.097685][ T9799] ? do_getname+0x191/0x390 [ 539.099606][ T9799] do_sys_openat2+0x10f/0x1e0 [ 539.101241][ T9799] ? __pfx_do_sys_openat2+0x10/0x10 [ 539.103109][ T9799] __x64_sys_openat+0x12d/0x210 [ 539.104889][ T9799] ? __pfx___x64_sys_openat+0x10/0x10 [ 539.106809][ T9799] do_syscall_64+0x115/0x870 [ 539.108406][ T9799] ? clear_bhb_loop+0x40/0x90 [ 539.110030][ T9799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.112175][ T9799] RIP: 0033:0x7fb52db5d68e [ 539.114026][ T9799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 539.122275][ T9799] RSP: 002b:00007fb52ea13b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 539.125662][ T9799] RAX: ffffffffffffffda RBX: 00007fb52ea146c0 RCX: 00007fb52db5d68e [ 539.129090][ T9799] RDX: 0000000000000002 RSI: 00007fb52ea13c00 RDI: ffffffffffffff9c [ 539.132473][ T9799] RBP: 00007fb52ea13c00 R08: 0000000000000000 R09: 0000000000000000 [ 539.135380][ T9799] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 539.138166][ T9799] R13: 00007fb52de16038 R14: 00007fb52de15fa0 R15: 00007fffd9da33b8 [ 539.141007][ T9799] [ 539.142802][ T9799] Kernel Offset: disabled [ 539.144408][ T9799] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:24:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fcea8d RDX=ffff88802e692540 RSI=ffffffff81fcea67 RDI=ffff88802e692540 RBP=ffff88806a541240 RSP=ffffc90003507878 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4a8249 R14=0000000000000001 R15=ffff88806a43c880 RIP=ffffffff81fcea6e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60e0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb52de17dac CR3=000000000e792000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52e94d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd9da38a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd9da38a6 00007fffd9da38ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52dc33452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52dc33492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52dc335f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52dc33484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52dded600 00007fb52dded5e0 00007fb52dded5e8 00007fb52dded618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52e94d020 00007fb52dded5c0 00007fb52dded5d0 00007fb52dded610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52dded5f8 00007fb52dded5c8 00007fb52dded600 00007fb52dded5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000003ddc7 RBX=0000000000000000 RCX=ffffc90007632000 RDX=0000000000080000 RSI=ffffffff81e7cefc RDI=ffff888026e7a540 RBP=0000000000000001 RSP=ffffc90003477630 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff9200068eec9 R13=0000000000000000 R14=ffff88801cf24a80 R15=ffffc90003477700 RIP=ffffffff82098084 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb52ea146c0 ffffffff 00c00000 GS =0000 ffff8880d61e0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb52db86480 CR3=00000000257d4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd9da38a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd9da38a6 00007fffd9da38ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52dc33452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52dc33492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52dc335f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52dc33484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52dded5f8 00007fb52dded5c8 00007fb52dded600 00007fb52dded5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85870585 RDI=ffffffff9b703640 RBP=ffffffff9b703600 RSP=ffffc900007af838 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b3f624f R15=ffffffff85870520 RIP=ffffffff858705af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d62e0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002b860000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056145c15d600 000056145c15d600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffceaa2d550 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6572662d72657466 612d6573752d6261 6c73203a4e415341 4b203a475542205d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7463656a626f3a75 5f6d65747379733d 747865746e6f6374 20745f6d64617379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 733a725f6d646173 79733a746f6f723d 747865746e6f6373 2031303030323d74 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726f706620302e31 2e312e3030313a66 6666663a3a3d7264 6461662038323338 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 353d74726f706c20 22373930312e322e 7a7973223d6d6d6f 6320323937393d64 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff8265ca92 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffea0001457240 RSP=ffffc900035774f8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=ffff888026247e00 R14=0000000000000000 R15=ffffea0001457270 RIP=ffffffff820978e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d63e0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c30267d CR3=000000003afe5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00306c6e747a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce7a98b46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce7a98b46 00007ffce7a98b4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7053e33452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7053e33492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7053e335f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7053e33484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff000e0006 00000004000a0008 0000204e001a0006 0000fa44001d0006 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7053fed5f8 00007f7053fed5c8 00007f7053fed600 00007f7053fed5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000