last executing test programs: 35.699029612s ago: executing program 3 (id=461): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000014000100e1ffffffffffffff02000000"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xfc, r1, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff81, 0x48}}}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="3a5aefdfb3c0"}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0x4, 0xfac14, 0xfac09, 0xfac04]}, @NL80211_ATTR_PMK={0x43, 0xfe, "f25542cda04716347fff98069f861de47c5c59e3c7576f328edfffc834a53b497725ba56142d059bc6a5231f91a3f9b2b1efa45bdc99ab53890951d81f6772"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0d, 0xfac0d]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @NL80211_ATTR_KEYS={0x4c, 0x51, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "ec5671d2ce29f35144b5feb69d"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "cfe68d011d"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "26e6803cdc382ebadec607d670"}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x400e880) 35.608041466s ago: executing program 3 (id=463): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) (async) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x44801) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='/'], 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES16=r2], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES16=r2], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) (async) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r5 = socket(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r4, 0x80306e85, &(0x7f0000000300)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue1\x00', 0x2}) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0x460}], 0x2) (async) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0x460}], 0x2) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x3c}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_BLACKHOLE={0x4}, @NHA_ID]}, 0xffffff6e}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x3c}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_BLACKHOLE={0x4}, @NHA_ID]}, 0xffffff6e}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 35.590068919s ago: executing program 3 (id=465): mkdir(&(0x7f0000000400)='./file0\x00', 0xa2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xe, {0x3, 0x0, 0xfffffffffffff8, 0x800, 0x0, 0x0, {0x0, 0x3, 0x1000000000000002, 0x5, 0x7, 0x46, 0xffff8702, 0x0, 0x2, 0x4000, 0x0, r2, r3, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) rename(&(0x7f00000001c0)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0xfffffffffffffffe, 0x0, {0x3, 0x1, 0x0, 0x0, 0x280000, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000000c0)=0x101, 0x4) 34.68059216s ago: executing program 3 (id=479): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x81000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file0\x00'}) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) close(r0) 34.529325123s ago: executing program 3 (id=481): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r2, r2, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) 34.269650843s ago: executing program 3 (id=484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x4002) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) mkdir(0x0, 0x1ff) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000500), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="f4b9150b00000f32c74424000001c0fec744240265320000c7442406000000000f01142466baf80c4c92cc5e2c8686660f3880a30c000080ed0f20c035000000400f22c0d21ef3a60fc75db50fc7b582000000", 0x53}], 0x1, 0x22, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xf63, r8, 0x2}) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 34.19520638s ago: executing program 32 (id=484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x4002) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) mkdir(0x0, 0x1ff) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000500), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="f4b9150b00000f32c74424000001c0fec744240265320000c7442406000000000f01142466baf80c4c92cc5e2c8686660f3880a30c000080ed0f20c035000000400f22c0d21ef3a60fc75db50fc7b582000000", 0x53}], 0x1, 0x22, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xf63, r8, 0x2}) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.936886607s ago: executing program 1 (id=913): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20400, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) 2.420650852s ago: executing program 1 (id=920): socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000040)={0x6, @pix={0xb78d0f0, 0x6, 0x47425247, 0x5, 0x6, 0x0, 0x5, 0x4, 0x0, 0x4, 0x2, 0x7}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 2.00055876s ago: executing program 2 (id=927): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (rerun: 32) setresuid(0x0, 0x0, 0xffffffffffffffff) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x204000, 0x2) (async, rerun: 32) setxattr$system_posix_acl(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [], {0x10, 0x4}, {0x20, 0x4}}, 0x24, 0x1) (rerun: 32) 1.890517815s ago: executing program 2 (id=929): mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/bus/platform/devices/QEMU0002:00/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='QEMU0002:00\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='mysys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='oxu210hp-hcd\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000cc0)={&(0x7f0000000040), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000940)=""/254, 0xfe}, {&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f0000000b40)=""/128, 0x80}], 0x3, &(0x7f0000000c00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x10000) write(r2, &(0x7f0000000900)='QEMU0002:00', 0xb) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) (async) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/bus/platform/devices/QEMU0002:00/driver/unbind\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000500)='QEMU0002:00\x00', 0xb) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='mysys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000700)='oxu210hp-hcd\x00', 0xc) (async) openat(0xffffffffffffff9c, &(0x7f0000000800)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000cc0)={&(0x7f0000000040), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000940)=""/254, 0xfe}, {&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f0000000b40)=""/128, 0x80}], 0x3, &(0x7f0000000c00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x10000) (async) write(r2, &(0x7f0000000900)='QEMU0002:00', 0xb) (async) 1.811083641s ago: executing program 2 (id=930): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) r2 = openat(r1, &(0x7f0000000340)='./file1\x00', 0x3cd0c0, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) unlink(&(0x7f0000000040)='./file1\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.810398871s ago: executing program 2 (id=931): r0 = socket(0x2c, 0x4, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0xf, 0xc9, 0x2, 0x9}}}, 0x9) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)="95dc84f5d93c1b921477177e51bf5d1404bd76d0eab89ff7c0ae49fb7e7828a97323ea8b7e838fc5b6262dba1d8cb91f12b87e9fda5f4281976d846cf35e07d7c40f9bf0c6d2d728a8cb5972ef7c14d0d970c0a192c3c21bdbc9511cae9629116a1d1f97c06f0edcd7116df71017de877abacb1ad5015c4e7b145c31883136d7556414f9b61bcffb9b5afa62eccd5cd4fea9b4e922cac2d82a0d68ddf30280a4dd1259786c48981b8b", &(0x7f0000000180)=@tcp=r0}, 0x20) connect$rds(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x58ee9e8a, 0x100) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x48000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) bind$xdp(r2, &(0x7f0000000280)={0x2c, 0x0, r6, 0x28, r0}, 0x10) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000440)=0x80, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000001c0)={0x2, r7, 0xd, 0x8, 0x27f, 0x607, 0x6}) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000340)={'tunl0\x00', 0x9, 0x101}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000540)=ANY=[@ANYBLOB="6b891c25d9ea9bc4e340f257e40d974c3e8a640c0905c7685a83b9014506c5e4e833fc95493f630420e629bfb186010526be6d29ec0e6741632c35ad5c813c069ce340611fa0675f627d53cde31780", @ANYRES64=r6], 0x0) 1.72923914s ago: executing program 2 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x80}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_MASTER={0x8, 0x9, 0x4}]}, 0x30}}, 0x0) 1.728735248s ago: executing program 2 (id=933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x171500, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x26) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket(0xa, 0xa, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r6, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) 1.541038264s ago: executing program 1 (id=934): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd27, 0x700, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x1806}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xeb210}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}}, 0x440b0) 1.404890551s ago: executing program 1 (id=935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x21c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x104, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c54}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c4a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf934997}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x759f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2c0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaff5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35e90385}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc53}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fee7648}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc951}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd80}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6015}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64b568f7}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xae03f99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x198}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f66c638}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e5a8701}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55d091d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34fc8034}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11f292cd}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52a20002}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6f4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a7d9da}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70fcc61d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ed}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23a61ded}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20560d30}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc490}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x190c6f78}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa79d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b8a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x382c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaac0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3794657b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29595a86}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58513359}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1efcd0fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3545777d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x26f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c9a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x589167c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x314a20d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf373}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf284}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c521c89}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8364}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x518ee3bf}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b0, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "404e900330ec498d5b05218b4d9366cb68774bec14767dced2b651ea5de307b87a2ac198a82f3fb21b057f1e0bb61fc042ec51b6ad77cedddd9dd1d5d7e12eeaedcadfda20532f2c05a78fd591eb5d9f205ec2db17b6e46c4823555a18d51db5f92aa3091795c081fad3cbecb7013b4a77df5f0da4f4112e2b29f3ada78c8cb677d83e91dd475da2604a005098fceb6fd4687ef8ccff759fb42ba4b830b9f9235e39850c0f18022b0f0a26960be5377a033f26687e4d13e5b19f4c184f2e22d417a55d649b66d957d0865e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40000000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf75}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9a01}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x39}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9be5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4844) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='1\n', 0x2) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd700cada713ad5f55c100f9dbdf250f0000001c0007800c00030000000000000000000c0004000300000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x800, 0x100, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x8800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000069412523ef000000000040000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 1.371901559s ago: executing program 1 (id=936): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) pwritev(r0, &(0x7f0000001780)=[{&(0x7f00000003c0)="38b313b77755", 0x6}], 0x1, 0x0, 0x9) ppoll(&(0x7f0000000480)=[{r0, 0x100}], 0x1, 0x0, &(0x7f0000000500)={[0x9]}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xd19, 0x5, 0x0, 0xfffffffffffffffb, 0x1000007ff, 0x9]}, &(0x7f0000000080)=0x78) 1.129680981s ago: executing program 4 (id=941): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44890}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000), 0x4) 1.039082216s ago: executing program 4 (id=942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000800000300000005"], 0x50) (rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000340), 0x0}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000000300)=0xe8) (async) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r4, r5}}, './file0\x00'}) (async) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, r6, &(0x7f0000000440)={0x401, 0xfffffffffffffffc, 0x9, 0xf8a, 0x5, 0x6, 0x0, 0xc, 0x3}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x100) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x20, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) 950.850795ms ago: executing program 0 (id=944): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0002000000000000020000000000370500000000060015000200000014001600100008800c000280080001"], 0x38}}, 0x0) (async) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$CDROMCLOSETRAY(r2, 0x5319) 950.197837ms ago: executing program 0 (id=945): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1404, 0x400, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600090001c57bec6460456720fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb591643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e0036e19228aadc0db70100c1deec1f42447a5ae735938634a43a000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xd8}], 0x1}, 0xc0) 880.847499ms ago: executing program 4 (id=946): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xfffffffffffffebc) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x7, 0x8001, &(0x7f0000000100)=0xb5}) prlimit64(r0, 0x7, &(0x7f0000000140)={0x0, 0x200000000004}, 0x0) setuid(0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r2, 0x124, 0x14, 0x17, 0x0, 0x0) 880.426972ms ago: executing program 0 (id=947): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000001700)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x81, "23a3ee", "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"}}, 0x110) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)="90f5537f255d87f918e212c605000000e4a0535dc51ce199c5e4e1c839eb622d9809a6bf3e17a3d285b92aa8667f2b0792cfbe05ace2e3dd1b495766debbd7afd78b63878850d38ed6d6889ee405fcdf03b2786839e518297f6bc0158d79bc8c26701762388c18d8491fd0819f08496cad78a5811965a0c3c6a0e0c8821330337de044b15b1bb87fc865201ba4535c099df464f09968d0559ab40a89ba87a749452b910921781f33aa6d", 0xaa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='7:0', 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006232696467655fe841c8c0b901bfc7736c617665000000000400058005000600000000001400030062726964549a90c8aa2d65a7f967655f736c6176655f30000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 770.603182ms ago: executing program 4 (id=948): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2503000000060001004e200000080006000a010101"], 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r0, 0x1, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x8090) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) 769.958609ms ago: executing program 0 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20800}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xec7}]}, 0x28}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async, rerun: 32) r1 = fsopen(&(0x7f0000000040)='rootfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='\x00', &(0x7f0000000180)='\x00', 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40)={[&(0x7f0000000500)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01\xe2\xb0I#\x8dZ\x8d\xf0\xa2\x97Q@\x0e^\x14\xe0\xbdv\xfd\xf2{\xda=\xfa\xca\x03\x10\xed\xd3\x96\xebUc\x88\x15\x05\xc7\x88u\x11R\x19P@z:\xc6<\xbb\x82\xa9\xcfU\x93\x85.Z#\x14 \n\xd9\xe3\xef\x15\xe8\x19\x92+\xe8\xb4[\xf8\xfb\xcfw\xbf\xab\x92\x01[\xc0\x9c\x94Q\x12\xdb\x1ai\x18\b\xd2\xd0\x8fD%\xfc\xe52\x18\x842\x19\x19V\x7f\xf8\x11I\x88\xb1\x9c\x7fl\nE}\x9d\xcbI\xdf\xa5\x90-w\x87\xbd\xc1\xa4\xaa\xfdf\xbe\xdf\xb5']}) 763.433204ms ago: executing program 4 (id=950): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r4 = socket(0x15, 0x800, 0x2000a) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$unix(r1, &(0x7f0000001040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x219}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012009703000000000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 560.759297ms ago: executing program 4 (id=951): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x119f02, 0x0) (async) r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x2, 0x0, 0x1}, 0xfe}, 0x18) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) write$cgroup_subtree(r1, 0x0, 0xfe33) (async) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) (async) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x45d41, 0x0) writev(r3, &(0x7f0000001600)=[{&(0x7f0000000000)="6047a707cc8209cca6cf4ff5f9eb4fca6e64f2eb9b15aef7be9a8dadb06700"/42, 0x2a}, {&(0x7f0000000180)="4f985c0ab8caa43d59814f1a5fd4cc6038a284ad66d567cbc4ca293a45efe0d1d1da852e0b17c27f56504c305534ffc207485c716bd33a11e20e23e5dc1990f002d1053f4985891795e91d1385257f8b14a668d1ece24ed4a75bf9789ceaf0fbd2d316731b05b8b4d7db190d04548ab0c7f2b82e7875737b689c5537f58dcd30e82ea4c9a65158949417e2baaf38c643b481f3868049fec34884bd1108c154", 0xfffffe9c}, {&(0x7f0000001640)="834987985bc560582d90c34e33a8791dacf93ffaca3bf0feb3093a7900704e81105767d56cdd8bc6205233f24ed3507afab6d38d411ff482bfb93e7124def2765f37fc3be4834242fbe6f85c856918cfd8ec46f47eb4233cd3bf8c807db58696c1a18c6fa4e19270ae4bc2f2a30ef78e642d6d3b6062743c2cb96e56702e2d32d1eb0db6020399b76c94629983d621d04e6b282400e126810681adad368d3dd015c8651e3059654d4ca5449f32f7d2831314b78def2813b776b6a0287a86897dad910695032f99d2507861724f25d4b8ae2684ec22e260efa63ac180cb964274684b90dca29fe5213937dc89cd5a30834a25875afd5c8d264cd062a7cdb188c6f9271b4e848491ad492a35bd8e16b7e92f6b7796b0fdddf0e4c9d8176347f936957a8589de1a88a594eb4898affd653f42424a6b219a56ab8d85e2be16afa287388ca961e7fa05463a1b1480940ae5cf3cec2ba30ff518a098a1e7518f8559ea283f1125f545f6d26c832b2eb481fc392c56561cc949ba2190c865630065491a7cfc8d4bc8e9157cc09cc40f09ed20c7a1ac7b43d95079362dff8813df097774f3b6e795cde88b0163b3b7d5de1b58dfce6ceab2e6d3b209702751673f818f2f8dccdf5ccb48a962d2d58b6d88b3280e2b14676d61c7fac30c9568424420ff59e7b93d476c7832ad1ffb6ec043d2df9fe6d41ecaed85ae090716516d79cf2c36c294ab10719346ab3ad2f5e132e257f198e50a69222ce08b25e51525b861e9ce5d4b712f4b87d9f6fee81d63c82b3ab1650eeff80447b7dedd8a7816c8972c0908e893a200b5b138653cbda801cb31950eb9d6a725307fc25743dd6945a1186818c48486696f4d46305cf01afa08a305e36739db61e644aadba7fc2c9e02030d90942bc2f95510da73c4bab33651e043d0508acf6bbc6cd435fe0de8edfb637fff9ee760c71b93751c265c0e7df7d94f613aab664af0245ec0f034358b64b11a805bdb8f93794361543319f4753610f45dfb073fbf3f84d51c402cfc9bb5e5faf938ca6970fa7e67586f2eeb1865f14ec40fde3d2892f9392fcda9a44e80a2f5674cf34e2452d2fbae4bb583654c53404a7a229a39844bbc62dbfa7067bc5f05839e7b0e99bcfe30048758644b8c1997f4e2379311ab767f31bf68e8f90ba0a3fcf5ea9298ea68f016ba134571f81a772f904390fe8edcfe09c7e38a5a8a912abd29075a2cb6ddc8ed8c016b7ffc8b48d4905a35834660310f08745462f43f397f68f018f6e98cd895243fab290442454fdbff4c5c50009d605682d163d9d818cf79b171c97002a6f04a7fa2f2d2cb9f6b2a42f755e0bc2c160378ec94d6e1018f7260a0ab41c291e1ec1ee9b6879ede70d677a5d84e9ad429b9971a59be508cf1eb47cf29d5bb4571e04f35e9bb7d87a6747ca4b9ea30ac66e0820ef58fdae505aca5ab26b3945dece7a387c0a75f706251fed922d65b4223ffb2f405f47ce00c2ad7ede3e2e61d92ed4883238fca8a19ea0bdcd5947f0bc66cc99d854ae601513129a30b4458967b9f80acbad9aa87771bbfd71747f36f0667288d159d2edd0bdaa1b423453917d0ffa8156cb27b2910c8932a870c4203ae02b2b9cd69cae89346c0a5bc5c3d5e1a2c6c3d7f9ca5a4476f61f55fadc869630e3b0743550d4b2ee27dff020e8966d91eff849c956ee7d2a521d6a249335aeacdb3c4430b3be363f0b1ab67a326ec88061e72f437dbc569c84ec187efeb9e38de18bdecba952f729c9971fbe9280e98e46dce6b3a0120dc7bbab28c95aaf0437fc83d314c3a7d258dd443c04d5f4dd2c2efff06cedf3c1fb013f09b4a12554d211c2eec72c1e0cb3de091526637b0763cf4272a15e9dadc1369962d68b8025ebfeae4390989c3c3e4537cd654fbd77bf457e2037699ab112f6f5135057d88642444cf2c5dce11d36b6ae329ea43a2bbbceb8dda68dd79582e75da396f019bf2cb6f10d2ccb8ffc78bd62de6863c468b0667fd46e600bfcacbdad25132dc6e1e831566482040a29a3101fae0c79ede247654ac005ecc3ddb71737c8edf0c922dbda9590e2ec02c10d9004d8d801121e7eb3933c0cf531074be2535f2c7d536f5fd5b806734705b2e59e044ab13c881c3788a42c12effe40a72e8f5c1fb8689651bb5d1a74353d19a8eed84238e3c9a3bc221bb0ffceca6a868852a237c7976514aae83d6e8cf6eaf7f51bf315edbf4416c0ad3b68a5031b743e3b9e0ed3b616a0d574ee67aa2dac523e3936ce9ad29e3aef4d4a0b79030383f880d67070061b8fd034c72dd5b9e58b6db9505c9626a6f07ac04768cce3163d1448cba852c66a16eb0f0825649e9a32f1c59bc1f8c93883a4e93a09c57d1e9d367abc1669102b355a4ec482de852f0f46ee616aac9570e9f2fd03ff3a7b8be59081841d437a5454c0469492e3cd8187c2597c1c7f6dd91d6d3160c8a58d0f4a4038859cf83c02399a5069c8bb7e7573464e1923025ef63613ada1d0cd9b7ca8f4f3ff2737c2c8ffe7fce97cf792dc78872eb034a625fa7649f5266162b2577bb6590cd57e92768ee8765c64be050965914eccd4a68027d6fbda3bab2ae3837fd40d8af1dfd14d25a29f68d4cbac3cd50b4dea209fcd445d8dbc288e79b7f567fd5702916daf1a9abeb2620db34b6be0d82495ac654d224a7fd0a1b521a7b4f6ca777e0171eb08b8b369876386d9a6e446397f3f136a3a39696da066b3025fd0dc649c27422ea53731f889c2a601ab63d4f3e00bc3e0df70b37a763e1d9f9816046a4eb94322d7b526e5c2d0e057a23283d32038576f26131daded127a794068e565e06c362e8a801e7a5e2c489205ccad2ea0e96160fc68a96eced9d4a82b23106b6146e9f437278c883fb5daf73e9cc8930079051a1a3e3ab7f2c640c549f3a0500ca10dc8f1d51beae8126423cff7709f310df78d013a22247341a5c540ebc8f06b3a2805e00d8f024d82b0ddc921742ebeb779fc08c5d9deb248d31c435b64675da289261f0fba98206dbb9360e4403f9ff66b115b4ca67fb220d81dc1f4337a6c5d43da61dd32ad4f2eac1c9faa12bd9d5bc0b601c955fed23c76a24dd52fd43842f52a1b0fae47c55a945f548e1a03232709e06984747bf3f2d5a99593f4ab646001ef60bfb58aa84bf8031b05cf64b6e4dffa1352857e5e9fb3f684b67b5f7b82fec186011215c351b104bc423e7137e9257eb23f79487423a9672f3c4769350a099c9646b77df19d5ef3b7721171d60dec5ade3a2480776a3166dcdf1e5cb043e3597eda74df4ae683d25d1c4d1c7c7c0ed6e66f067cb38d9f736e003ff62c2949f9c69b9a9bfd3ec02b388739d2137d992e3c03ab30d31b2e3d76ce257355f68a42ebf0c2b35ba9ebbf84da8a14abf3c883ac68f4d1098310030f273d4d150e88d19033b2f2d47035d1835332f04f12ed7ba15db77e586a023f8c73b79daf6d3d0debb468ced39dd8b38759130a04c810397798bbd6c64f1289c751e51ca490c6148b1846e689a73e418a6dc88a57d9ad3439e080573fc9f3acf9d57d3d7638dfd8a2d6cc0cd1e5695aeacafffa9e9eed38faef7ec28c765400e588b6ca988a17daa5e427f31b1a2544caf430276508ead90d59c12dbc0f3ce719cbdc502b1920b410052fe76167b1d39960a24e8507a3197c8c8861e1c56fd44b32823d88a29a9966f4d954a8fc1f95301b2ed0ef9d9a3662700a5975c1d6fb4e48f29b290d61d055c88beae6be125cca3f5125ec5b00947126a8b5899c7f25a3352a86c5a9ccba68b843ece37db6d00a8fc66e4b0c9b8a1bc26836448a3576cd4c53ae3a7728cd79205ff5011937db6100a27655295945c3c5832b07a6aa2c0efbb060ac9dfe2f393220ec3481d2837e079185030fa221512197f91751c4f035cdd834d7aba41f116c8ddf85ebe683570c830a9936fed1a208c59e495887b7201aaf284d83b8f838a927342d10d5b89f0f9be9f1927a716f2a602be5f0b3bae8cfafa48776e85b88c2d46979a41247ecd92093350b03441695737e77156e369a14b02dc173d9291a9ea24bb3a2da1c2679a3ba26be214cd8e04d4d7842633ed1777463dae92a307d19edfbf6c4c59e6d6fbac8a91568400a7a58f3451814ef2be88c1169dfb47f7ee5f5f3ac0d7ecc41f05196f2c480a3296f24f76a82e114e03a75f29784f65225a65e556504a56e0df72e671bc3a564c1146133102f46be998683f86cdf6c45468678ded4e3563ef699005c6475219a883e033a7f4494e1baab44a6938be1426514247c694d23485368be2747c517556cc8eae639981b62f70eaa3277d634da961ac7993c220c1f004314a3f05dcd3080f47ffd834faa9d1a841c307ac7b6f599a600e9c314324e28a149f77e34bb123c192a04336d510c2d6a1696cc04e3b61ad2a25563e07059019a0f5ebcbeacc40899612eb217a3bf94dd444c443e88c73100d35857ad873e3301aee96cc5c2378a3e379a0b23bbdf5a49bfe5d1c9c978552a61ba6b06fbae5fde2711290ce9310bf747e7b90be1b9fec43dda499d5de7a7f2b3cdf37a1821301f0b558031bb58c22fffc4274bfff3b6f09247648da3fb2d4cff47e1227c10fdfaac70436d73dd7bef4c027b4418f964111fc606212f8a52dc1af6a836249f6171198fa32f15fd04cd4a68f69ec3e084a716f8ae60928085cccdec0f71637c739974ff5bd11c08a02935df3fd64e1b0ac0a3c131ee8cf662b1e0a47f55d31894ac092f401ce9182721af284b8814780c00e621a32243dc8ec9e8aff019e0a818b064bfcdbae685bed060fbadeb979063a0b25cd275b6e57d3fcd8e4f97d042bf20b735eebebff7f1912cc9591b686ffdd2a6366055114afa6ea7a14e1d7ba8b88adcf4e0e50dd01dc8a8e8dfc94d95c30ffbf894f22603cfae330b8a83280833a28e54886aea36c7e5403c1056b8e9a8b472e64eba723872b02bf698ecda6d5361b93b5cdcddae65764044600601a7f98a0c164007ece2c371e2f81ffa106af9b5b8129a86d458e987d37579994b04c9d763b104a9813b936312bf7dac0cc1e7a31e22cc43c553a4e70fde0b46200d02f781d1deb816528f29080ab2961534a40b1d18366379053475fc6ff914378dc3d942acbb215f4e2c5b9e08656ed067e0ca382df6ba77b09579a022480b8ce7a6c2e2dc8602958ca08679ad1db9fa97d37844a2aa9fa647d9ed2d50ddea24eac6db6131fda5b449ae028affed8b59811147da246b2b774d642462db0e9f299902cf11a8f9c4ab28a2c02e0cc940124f2fd26eb8a731b63e9d20dcf5133e42ccd577fed29311321b37ab4d97d99784ebfb47addfbc00e1fc76aa5a271a54bc34a713579b05265522d8d730bb4b6bb46186209b25133938f8ea0b599c03f1a41f3f278ff1aff87e7c4bad55c6ff81ba8b13d53ce3f2c002535b932739fb6d9fb3b289fa72b0603ef2a0a43ee0f087572df7bf77d54f42859241db2b735edb9f7955b3d1234965edd", 0xf37}], 0x3) (async) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="a7ed91775c001aafe300794b5c62b40000000004000061141c2b01ab646b5abdd8f82a80785d447e0000000000a6000896c8d8c221fb2166a6c46cb123a2f73ba20b181ccf32d571beea2b069bae601ab722671b1ac16cc44b6d5a5dfe4631afcfb99ca743445645d55d8462482ebbb7cb9a1a9103f1da6014c5377ed31e04963766e752ce8c798f64da688b1b2ae9b0756b664a21eab209d7441ede535e"], &(0x7f0000003ff6)='GPL\x00', 0xffff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002400000"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2.483357ms ago: executing program 0 (id=952): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) (async) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r0, r0, 0x0, 0x7) (async) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)="31b025b3a2", 0x5) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x660, 0x1b8, 0x2e8, 0x1b8, 0x1b8, 0x418, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x100, 0x8, 0xb34f, 0x57c1, 0xffff, 0x6, 0xb561a16a5759827b}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@frag={{0x30}}, @common=@ah={{0x30}, {[0x4d2, 0x4d4], 0x6, 0x2, 0x2}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x67]}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x840) 2.200365ms ago: executing program 1 (id=953): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)={0x710187eb61617618, 0x80, 0x30}, 0x18) recvfrom$l2tp(r1, &(0x7f0000000280)=""/56, 0x38, 0x0, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0xa8}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000040)=0xcb, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat2(0xffffffffffffffff, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)={0x710187eb61617618, 0x80, 0x30}, 0x18) (async) recvfrom$l2tp(r1, &(0x7f0000000280)=""/56, 0x38, 0x0, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0xa8}}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async) write(r2, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) (async) socket(0x40000000015, 0x5, 0x0) (async) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000300), 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000040)=0xcb, 0x4) (async) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) (async) 0s ago: executing program 0 (id=954): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @broadcast, @empty, @remote}}}}, &(0x7f0000000100)={0x1, 0x3, [0xd05, 0x176, 0xe57, 0xa47]}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r1, 0x1, 0x48, &(0x7f00000002c0)=""/174, &(0x7f0000000100)=0xae) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) getxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file1\x00', &(0x7f0000000b80), 0x1804008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) kernel console output (not intermixed with test programs): e [ 77.613601][ T6629] pci 0000:00:01.0: vgaarb: bridge control possible [ 77.616111][ T6629] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 77.628470][ T6629] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 77.644625][ T6629] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 77.654514][ T6629] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 77.715351][ T6629] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 77.718524][ T6629] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 77.723515][ T6629] [drm] features: -virgl +edid -resource_blob -host_visible [ 77.723538][ T6629] [drm] features: -context_init -blob_alignment [ 77.747093][ T6629] [drm] number of scanouts: 1 [ 77.748566][ T6629] [drm] number of cap sets: 0 [ 77.767983][ T6629] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 77.806663][ T6629] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 77.823708][ T6651] loop8: detected capacity change from 0 to 7 [ 77.833605][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.836838][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.840504][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.843731][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.847112][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.851124][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.860724][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.863857][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.869112][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.873244][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.887622][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.890644][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.897130][ T6651] ldm_validate_partition_table(): Disk read failed. [ 77.901511][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.905233][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.909487][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.912432][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.915335][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.919027][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.921933][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.925446][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.925902][ T6665] 9pnet_virtio: no channels available for device syz [ 77.927911][ T6651] Dev loop8: unable to read RDB block 0 [ 77.928803][ T6651] loop8: unable to read partition table [ 77.929826][ T6663] bridge: RTM_NEWNEIGH with invalid ether address [ 77.930436][ T6663] bridge: RTM_NEWNEIGH with invalid ether address [ 77.932288][ T6651] loop8: partition table beyond EOD, [ 77.936706][ T6663] netlink: 'syz.0.216': attribute type 29 has an invalid length. [ 77.936794][ T6651] truncated [ 77.948499][ T6651] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 78.038273][ T6671] hsr_slave_1 (unregistering): left promiscuous mode [ 78.077088][ T6672] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 78.121728][ T6677] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 78.133374][ T6677] warning: `syz.3.221' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.135173][ T6680] input: syz0 as /devices/virtual/input/input7 [ 78.255878][ T6683] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.277267][ T6683] block device autoloading is deprecated and will be removed. [ 78.472894][ T6734] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 78.484128][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.493547][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.783763][ T6778] openvswitch: netlink: IP tunnel dst address not specified [ 78.786506][ T6779] openvswitch: netlink: IP tunnel dst address not specified [ 78.852331][ T6779] fuse: Bad value for 'user_id' [ 78.854942][ T6779] fuse: Bad value for 'user_id' [ 78.993896][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.367108][ T5831] usb 7-1: USB disconnect, device number 4 [ 79.370613][ T5831] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 79.971175][ T42] kauditd_printk_skb: 73 callbacks suppressed [ 79.971198][ T42] audit: type=1400 audit(1785552122.719:626): avc: denied { bind } for pid=6832 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.981099][ T42] audit: type=1400 audit(1785552122.729:627): avc: denied { write } for pid=6832 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.987041][ T42] audit: type=1400 audit(1785552122.729:628): avc: denied { create } for pid=6832 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 79.993065][ T42] audit: type=1400 audit(1785552122.729:629): avc: denied { write } for pid=6832 comm="syz.3.259" path="socket:[17576]" dev="sockfs" ino=17576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 80.091340][ T42] audit: type=1400 audit(1785552122.839:630): avc: denied { write } for pid=6835 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.214727][ T42] audit: type=1400 audit(1785552122.959:631): avc: denied { read } for pid=6846 comm="syz.1.263" name="fb1" dev="devtmpfs" ino=2909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 80.230498][ T42] audit: type=1400 audit(1785552122.969:632): avc: denied { open } for pid=6846 comm="syz.1.263" path="/dev/fb1" dev="devtmpfs" ino=2909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 80.230528][ T42] audit: type=1400 audit(1785552122.979:633): avc: denied { ioctl } for pid=6846 comm="syz.1.263" path="/dev/fb1" dev="devtmpfs" ino=2909 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 80.338452][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.339026][ T847] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 80.347383][ T847] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 80.382851][ T6858] No source specified [ 80.424833][ T42] audit: type=1400 audit(1785552123.169:634): avc: denied { mount } for pid=6861 comm="syz.3.270" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 80.670721][ T6867] IPv6: NLM_F_REPLACE set, but no existing node found! [ 80.677095][ T921] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 80.832217][ T921] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 80.835928][ T921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.839097][ T921] usb 8-1: Product: syz [ 80.840808][ T921] usb 8-1: Manufacturer: syz [ 80.842688][ T921] usb 8-1: SerialNumber: syz [ 80.852296][ T921] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 80.861786][ T921] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 80.871051][ T921] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 80.937041][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 81.097018][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 81.100155][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 81.103929][ T29] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 81.106741][ T29] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 81.108022][ T42] audit: type=1400 audit(1785552123.859:635): avc: denied { read write } for pid=6861 comm="syz.3.270" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 81.109345][ T29] usb 7-1: config 14 has no interface number 0 [ 81.118950][ T29] usb 7-1: config 14 has no interface number 1 [ 81.120911][ T29] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 81.124274][ T29] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 81.127943][ T29] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 81.131394][ T29] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 81.135497][ T29] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 81.142819][ T29] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.146817][ T29] usb 7-1: config 14 interface 57 has no altsetting 0 [ 81.148959][ T29] usb 7-1: config 14 interface 228 has no altsetting 0 [ 81.152553][ T29] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 81.155316][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.157884][ T29] usb 7-1: Product: syz [ 81.159190][ T29] usb 7-1: Manufacturer: syz [ 81.160848][ T29] usb 7-1: SerialNumber: syz [ 81.276316][ T6872] binder: 6871:6872 ioctl 40585883 2000000001c0 returned -22 [ 81.280294][ T6872] binder: 6871:6872 ioctl c0306201 200000000680 returned -14 [ 81.399108][ T6874] __nla_validate_parse: 17 callbacks suppressed [ 81.399126][ T6874] netlink: 56 bytes leftover after parsing attributes in process `syz.1.275'. [ 81.405609][ T6874] netlink: 56 bytes leftover after parsing attributes in process `syz.1.275'. [ 81.470670][ T56] cfg80211: failed to load regulatory.db [ 81.552341][ T5816] usb 8-1: USB disconnect, device number 6 [ 81.563270][ T5816] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 81.569579][ T29] legousbtower 7-1:14.57: interrupt endpoints not found [ 81.572943][ T5816] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 81.578673][ T5816] ti_usb_3410_5052 8-1:2.0: device disconnected [ 81.975683][ T29] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 220.150 build 37188 [ 81.980620][ T29] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 82.398885][ T6889] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 82.418464][ T6889] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 82.421181][ T6889] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 82.423961][ T6889] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 82.426266][ T6889] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 82.427092][ T847] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 82.429396][ T6889] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 82.430542][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.431288][ T847] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 82.460173][ T6889] pci 0000:00:01.0: Adding to iommu group 1 [ 82.469168][ T6889] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 82.471623][ T6889] pci 0000:00:01.0: vgaarb: bridge control possible [ 82.473997][ T6889] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 82.483687][ T6889] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 82.486448][ T6889] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 82.498445][ T6889] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 82.514840][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 82.565630][ T6889] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 82.568196][ T6889] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 82.571677][ T6889] [drm] features: -virgl +edid -resource_blob -host_visible [ 82.571689][ T6889] [drm] features: -context_init -blob_alignment [ 82.593090][ T6889] [drm] number of scanouts: 1 [ 82.594704][ T6889] [drm] number of cap sets: 0 [ 82.624834][ T6889] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 82.697786][ T6889] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 82.756657][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 83.110769][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.283'. [ 83.113997][ T6919] netlink: 144 bytes leftover after parsing attributes in process `syz.3.283'. [ 83.152337][ T6919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.172335][ T6920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.283'. [ 83.177940][ T6920] netlink: 144 bytes leftover after parsing attributes in process `syz.3.283'. [ 83.218876][ T6869] usb 7-1: LEGO USB Tower reset control request failed [ 83.250127][ T10] usb 7-1: USB disconnect, device number 5 [ 83.260839][ T6919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.262037][ T10] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 83.340589][ T6919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.490348][ T6919] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.627047][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.629974][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.637069][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.640106][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.700462][ T6930] comedi comedi3: No hardware detected at I/O base 0x200 [ 84.738036][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 84.817043][ T5751] Bluetooth: hci4: command 0x1003 tx timeout [ 84.817072][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.372905][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 88.372935][ T42] audit: type=1400 audit(1785552131.119:650): avc: denied { write } for pid=6934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.434014][ T42] audit: type=1400 audit(1785552131.179:651): avc: denied { write } for pid=6937 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.934588][ T42] audit: type=1400 audit(1785552133.679:652): avc: denied { write } for pid=6942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.979500][ T42] audit: type=1400 audit(1785552133.729:653): avc: denied { write } for pid=6945 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.213920][ T6957] netlink: 'syz.2.289': attribute type 39 has an invalid length. [ 96.272507][ T42] audit: type=1400 audit(1785552139.019:654): avc: denied { create } for pid=6963 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.278564][ T42] audit: type=1400 audit(1785552139.019:655): avc: denied { write } for pid=6963 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.284522][ T42] audit: type=1400 audit(1785552139.029:656): avc: denied { ioctl } for pid=6955 comm="syz.2.289" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.354906][ T42] audit: type=1400 audit(1785552139.099:657): avc: denied { read } for pid=6971 comm="syz.3.292" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.361177][ T42] audit: type=1400 audit(1785552139.099:658): avc: denied { read } for pid=6971 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.410923][ T6980] random: crng reseeded on system resumption [ 96.437092][ T847] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 96.588401][ T847] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 96.591140][ T847] usb 6-1: config 1 has no interface number 0 [ 96.593199][ T847] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 96.599081][ T847] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 96.602318][ T847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.604812][ T847] usb 6-1: Product: syz [ 96.606037][ T847] usb 6-1: Manufacturer: syz [ 96.607437][ T847] usb 6-1: SerialNumber: syz [ 96.612197][ T6954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.617338][ T847] usb 6-1: Error in usbnet_get_endpoints (-22) [ 97.127442][ T6989] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.135658][ T6989] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.175969][ T6990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.179954][ T6990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.197185][ T6990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.201496][ T6990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.342323][ T7002] syzkaller0: entered promiscuous mode [ 97.344191][ T7002] syzkaller0: entered allmulticast mode [ 97.383560][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 97.387235][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 97.401567][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 97.404824][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 97.407462][ T6990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.414241][ T6990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.422176][ T7013] ucma_write: process 234 (syz.2.304) changed security contexts after opening file descriptor, this is not allowed. [ 97.446443][ T7017] netlink: 'syz.0.306': attribute type 39 has an invalid length. [ 98.018422][ T7039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.312'. [ 98.149050][ T7048] random: crng reseeded on system resumption [ 98.310342][ T42] audit: type=1400 audit(1785552141.059:659): avc: denied { map } for pid=7055 comm="syz.2.317" path="/dev/ublkc0" dev="devtmpfs" ino=2963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.368245][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 98.454345][ T7069] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 98.469310][ T42] audit: type=1400 audit(1785552141.219:660): avc: denied { sqpoll } for pid=7065 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.490965][ T7062] mmap: syz.2.318 (7062) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.553518][ T42] audit: type=1400 audit(1785552141.299:661): avc: denied { read } for pid=7081 comm="syz.0.324" name="nullb" dev="configfs" ino=5016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.561482][ T42] audit: type=1400 audit(1785552141.299:662): avc: denied { read open } for pid=7081 comm="syz.0.324" path="/72/my_configfs/nullb" dev="configfs" ino=5016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.570479][ T42] audit: type=1400 audit(1785552141.299:663): avc: denied { read } for pid=7061 comm="syz.2.318" lport=40002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.573816][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 99.072565][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 99.211582][ T10] usb 6-1: USB disconnect, device number 2 [ 99.342076][ T7114] 9pnet_virtio: no channels available for device syz [ 99.416089][ T7118] fuse: Bad value for 'fd' [ 99.458026][ T7120] Cache volume key already in use (9p,syz,) [ 99.629968][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 99.644497][ T7127] team0: Port device team_slave_0 removed [ 99.797543][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 99.956986][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 99.959881][ T24] usb 6-1: config index 0 descriptor too short (expected 15270, got 18) [ 99.964039][ T24] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 99.966758][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.970300][ T24] usb 6-1: Product: syz [ 99.971646][ T24] usb 6-1: Manufacturer: syz [ 99.973128][ T24] usb 6-1: SerialNumber: syz [ 99.976788][ T24] usb 6-1: config 0 descriptor?? [ 99.980649][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 99.983053][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 99.984759][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 99.988001][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 99.989741][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 99.997141][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.000308][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 100.002759][ T24] usb 6-1: media controller created [ 100.010609][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.019580][ T24] usb 6-1: selecting invalid altsetting 3 [ 100.021327][ T24] ttusb2: set interface to alts=3 failed [ 100.048708][ T24] DVB: Unable to find symbol tda10086_attach() [ 100.050642][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 100.053895][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 100.056011][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 100.060184][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 100.063683][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 100.066659][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 100.184197][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.190152][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.251583][ T7146] exFAT-fs (nbd1): unable to read boot sector [ 100.254497][ T7146] exFAT-fs (nbd1): failed to read boot sector [ 100.256413][ T7146] exFAT-fs (nbd1): failed to recognize exfat type [ 100.264125][ T7146] dvb-usb: bulk message failed: -22 (7/0) [ 100.265914][ T7146] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 100.268952][ T7146] ttusb2: i2c transfer failed. [ 100.535836][ T7155] netlink: 'syz.3.348': attribute type 4 has an invalid length. [ 100.540136][ T7155] netlink: 36 bytes leftover after parsing attributes in process `syz.3.348'. [ 101.399326][ T7199] hfs: can't find a HFS filesystem on dev sr0 [ 101.641699][ T7207] EXT4-fs: Conflicting test_dummy_encryption options [ 101.645521][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 101.645533][ T42] audit: type=1400 audit(1785552144.389:689): avc: denied { module_request } for pid=7206 comm="syz.3.363" kmod="crypto-ccm(camellia-generic)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 101.752417][ T7213] : renamed from vlan0 (while UP) [ 101.837749][ T42] audit: type=1400 audit(1785552144.589:690): avc: denied { search } for pid=7217 comm="syz.2.366" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.845694][ T42] audit: type=1400 audit(1785552144.589:691): avc: denied { search } for pid=7217 comm="syz.2.366" name="events" dev="tracefs" ino=3091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.852787][ T42] audit: type=1400 audit(1785552144.589:692): avc: denied { search } for pid=7217 comm="syz.2.366" name="task" dev="tracefs" ino=18877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.860971][ T42] audit: type=1400 audit(1785552144.589:693): avc: denied { search } for pid=7217 comm="syz.2.366" name="task_rename" dev="tracefs" ino=18879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.869191][ T42] audit: type=1400 audit(1785552144.589:694): avc: denied { write } for pid=7217 comm="syz.2.366" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 101.876301][ T42] audit: type=1400 audit(1785552144.589:695): avc: denied { open } for pid=7217 comm="syz.2.366" path="/104/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 101.884845][ T42] audit: type=1400 audit(1785552144.589:696): avc: denied { getopt } for pid=7217 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.931767][ T7220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 102.007057][ T41] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 102.029831][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.033341][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.049788][ T7228] netlink: 'syz.2.367': attribute type 10 has an invalid length. [ 102.071703][ T42] audit: type=1400 audit(1785552144.819:697): avc: denied { ioctl } for pid=7229 comm="syz.0.369" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 102.092480][ T7225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.102081][ T7225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.170924][ T41] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 102.174575][ T41] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 102.182984][ T41] usb 8-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 102.186052][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.190181][ T41] usb 8-1: Product: syz [ 102.191651][ T41] usb 8-1: Manufacturer: syz [ 102.193230][ T41] usb 8-1: SerialNumber: syz [ 102.199559][ T7215] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 102.202965][ T7215] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 102.208886][ T41] kl5kusb105 8-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 102.215372][ T41] usb 8-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 102.216253][ T7228] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 102.237820][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.241691][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.245410][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.249283][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.291002][ T24] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 102.408540][ T42] audit: type=1400 audit(1785552145.159:698): avc: denied { write } for pid=7239 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.559286][ T24] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 102.572575][ T24] usb 6-1: USB disconnect, device number 3 [ 102.606641][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 103.077915][ T24] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 103.085090][ T7273] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 103.093542][ T7235] ceph: No mds server is up or the cluster is laggy [ 103.265216][ T7282] __nla_validate_parse: 1 callbacks suppressed [ 103.265247][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 103.441540][ T7288] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 103.447195][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.511522][ T7295] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 103.590374][ T7297] netlink: 'syz.2.386': attribute type 2 has an invalid length. [ 103.592837][ T7297] netlink: 'syz.2.386': attribute type 2 has an invalid length. [ 103.597466][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 103.602430][ T29] usb 5-1: config index 0 descriptor too short (expected 15270, got 18) [ 103.610199][ T29] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 103.617152][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.621972][ T29] usb 5-1: Product: syz [ 103.623320][ T29] usb 5-1: Manufacturer: syz [ 103.624728][ T29] usb 5-1: SerialNumber: syz [ 103.630657][ T29] usb 5-1: config 0 descriptor?? [ 103.637565][ T29] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 103.639962][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 103.641719][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.645235][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 103.647437][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.654613][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.658067][ T29] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 103.660463][ T29] usb 5-1: media controller created [ 103.668682][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.680337][ T29] usb 5-1: selecting invalid altsetting 3 [ 103.682094][ T29] ttusb2: set interface to alts=3 failed [ 103.698967][ T29] DVB: Unable to find symbol tda10086_attach() [ 103.700957][ T29] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 103.704156][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 103.705862][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.709435][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 103.711191][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.714225][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 103.719950][ T7309] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 103.722264][ T7310] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 103.722612][ T7309] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 103.728895][ T7309] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 103.731600][ T7309] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 103.734172][ T7309] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 103.736646][ T7309] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 103.739133][ T7309] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 103.840027][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.844001][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.855573][ T7320] coredump: 348(syz.2.393): Core dump to core aborted: cannot preserve file permissions [ 103.909791][ T7322] exFAT-fs (nbd0): unable to read boot sector [ 103.911803][ T7322] exFAT-fs (nbd0): failed to read boot sector [ 103.913716][ T7322] exFAT-fs (nbd0): failed to recognize exfat type [ 103.926050][ T7322] dvb-usb: bulk message failed: -22 (7/0) [ 103.928137][ T7322] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 103.931306][ T7322] ttusb2: i2c transfer failed. [ 104.029109][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 104.704513][ T7365] netlink: 6060 bytes leftover after parsing attributes in process `syz.1.406'. [ 104.746028][ T41] usb 8-1: USB disconnect, device number 7 [ 104.747432][ T7244] kl5kusb105d ttyUSB0: Enabling read failed (error = -71) [ 104.762765][ T41] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 104.766124][ T41] kl5kusb105 8-1:1.0: device disconnected [ 104.839822][ T7374] I!q: renamed from lo (while UP) [ 104.889236][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'. [ 104.990057][ T7391] bond0: entered allmulticast mode [ 104.991785][ T7391] bond_slave_0: entered allmulticast mode [ 104.993549][ T7391] bond_slave_1: entered allmulticast mode [ 105.477113][ T5847] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 105.537582][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 105.629844][ T5847] usb 6-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 105.632566][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.635107][ T5847] usb 6-1: Product: syz [ 105.636493][ T5847] usb 6-1: Manufacturer: syz [ 105.638050][ T5847] usb 6-1: SerialNumber: syz [ 105.646269][ T5847] ums-datafab 6-1:1.0: USB Mass Storage device detected [ 105.651511][ T5847] ums-datafab 6-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 105.651511][ T5847] Please send a copy of this message to and [ 105.660001][ T5847] scsi host6: usb-storage 6-1:1.0 [ 105.687023][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 105.689867][ T29] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 105.692518][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.695465][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.698718][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.701724][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.705632][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.709372][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.914499][ T29] usb 8-1: usb_control_msg returned -32 [ 105.917116][ T29] usbtmc 8-1:16.0: can't read capabilities [ 105.937647][ T29] usb 8-1: USB disconnect, device number 8 [ 105.950490][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.958478][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.969847][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.978530][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.010099][ T7428] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 106.012876][ T7428] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.019004][ T7428] vhci_hcd vhci_hcd.0: Device attached [ 106.024185][ T7429] vhci_hcd: connection closed [ 106.026511][ T13] vhci_hcd vhci_hcd.2: stop threads [ 106.031570][ T13] vhci_hcd vhci_hcd.2: release socket [ 106.033711][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 106.184992][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.188783][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.193052][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.200400][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.206981][ T1493] usb 5-1: USB disconnect, device number 5 [ 106.242494][ T1493] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 106.357165][ T7445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.430'. [ 106.737050][ T1493] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.751928][ T36] scsi 6:0:0:0: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 106.757757][ T36] scsi 6:0:0:1: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 106.800369][ T36] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 106.813738][ T36] sd 6:0:0:1: Attached scsi generic sg3 type 0 [ 106.888850][ T1493] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 106.893120][ T1493] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 106.899404][ T1493] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 106.903236][ T1493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.906461][ T1493] usb 5-1: Product: syz [ 106.908336][ T1493] usb 5-1: Manufacturer: syz [ 106.910245][ T1493] usb 5-1: SerialNumber: syz [ 106.915501][ T7447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.918827][ T7447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.923307][ T1493] kl5kusb105 5-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 106.932193][ T1493] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 107.030140][ T42] kauditd_printk_skb: 1459 callbacks suppressed [ 107.030165][ T42] audit: type=1400 audit(1785552149.779:2158): avc: denied { read } for pid=7451 comm="syz.3.433" dev="sockfs" ino=20689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.140462][ T7460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.144160][ T7460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.307140][ T1493] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 107.461934][ T1493] usb 8-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 107.465600][ T1493] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.467173][ T42] audit: type=1400 audit(1785552150.209:2159): avc: denied { create } for pid=7461 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 107.468532][ T7462] fuseblk: Unknown parameter 'MsI?[fd' [ 107.468912][ T1493] usb 8-1: Product: 祳z [ 107.472174][ T7462] size and base must be multiples of 4 kiB [ 107.472202][ T7462] CPU: 1 UID: 0 PID: 7462 Comm: syz.2.435 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.472228][ T7462] Tainted: [L]=SOFTLOCKUP [ 107.472235][ T7462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.472246][ T7462] Call Trace: [ 107.472262][ T7462] [ 107.472270][ T7462] dump_stack_lvl+0x100/0x190 [ 107.472312][ T7462] mtrr_del.cold+0x72/0x85 [ 107.472335][ T7462] mtrr_ioctl+0xbc8/0xcf0 [ 107.472362][ T7462] ? __pfx_mtrr_ioctl+0x10/0x10 [ 107.472398][ T7462] ? __pfx_mtrr_ioctl+0x10/0x10 [ 107.472422][ T7462] proc_reg_unlocked_ioctl+0x229/0x320 [ 107.472456][ T7462] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 107.472481][ T7462] __x64_sys_ioctl+0x18e/0x210 [ 107.472520][ T7462] do_syscall_64+0x115/0x870 [ 107.472542][ T7462] ? clear_bhb_loop+0x40/0x90 [ 107.472566][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.472592][ T7462] RIP: 0033:0x7fa57a79e019 [ 107.472607][ T7462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.472624][ T7462] RSP: 002b:00007fa57b587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.472659][ T7462] RAX: ffffffffffffffda RBX: 00007fa57aa25fa0 RCX: 00007fa57a79e019 [ 107.472672][ T7462] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000008 [ 107.472683][ T7462] RBP: 00007fa57a83500c R08: 0000000000000000 R09: 0000000000000000 [ 107.472694][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.472704][ T7462] R13: 00007fa57aa26038 R14: 00007fa57aa25fa0 R15: 00007ffd12749eb8 [ 107.472729][ T7462] [ 107.475116][ T42] audit: type=1400 audit(1785552150.219:2160): avc: denied { getopt } for pid=7461 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 107.477487][ T1493] usb 8-1: Manufacturer: 祳z [ 107.477502][ T1493] usb 8-1: SerialNumber: 祳z [ 107.487408][ T1493] etas_es58x 8-1:1.0: Starting 祳z 祳z (Serial Number 祳z) [ 107.489923][ T42] audit: type=1400 audit(1785552150.219:2161): avc: denied { mounton } for pid=7461 comm="syz.2.435" path="/133/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 107.601195][ T7465] wg0: entered allmulticast mode [ 107.663290][ T7473] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 107.667652][ T7473] capability: warning: `syz.2.438' uses 32-bit capabilities (legacy support in use) [ 107.750400][ T7478] 0x20000000,0x20000000 overlaps existing 0x20000000,0x20000 [ 107.785193][ T7481] loop5: detected capacity change from 0 to 7 [ 107.791158][ T7481] loop5: p1 < > p3 p4 [ 107.792483][ T7481] loop5: partition table partially beyond EOD, truncated [ 107.799408][ T7481] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 107.839685][ T7145] udevd[7145]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 107.841253][ T7485] syzkaller0: entered promiscuous mode [ 107.844448][ T6950] udevd[6950]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 107.847024][ T7485] syzkaller0: entered allmulticast mode [ 107.849153][ T7487] udevd[7487]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 107.863290][ T7485] tipc: Started in network mode [ 107.864928][ T7485] tipc: Node identity 8adf0dc71093, cluster identity 4711 [ 107.870233][ T7485] tipc: Enabled bearer , priority 0 [ 107.879452][ T7485] tipc: Resetting bearer [ 107.886186][ T7484] tipc: Resetting bearer [ 107.895005][ T7484] tipc: Disabling bearer [ 107.910187][ T5847] usb 6-1: USB disconnect, device number 4 [ 107.949544][ T177] sd 6:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 107.952447][ T1167] sd 6:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 107.952787][ T177] sd 6:0:0:0: [sdb] Sense not available. [ 107.960995][ T1167] sd 6:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 107.961054][ T177] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 107.965488][ T1167] sd 6:0:0:1: [sdc] Sense not available. [ 107.968139][ T177] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 107.972741][ T1167] sd 6:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 107.972832][ T177] sd 6:0:0:0: [sdb] Write Protect is off [ 107.974930][ T1167] sd 6:0:0:1: [sdc] 0-byte physical blocks [ 107.975045][ T1167] sd 6:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 107.980823][ T177] sd 6:0:0:0: [sdb] Asking for cache data failed [ 107.981747][ T1167] sd 6:0:0:1: [sdc] Asking for cache data failed [ 107.982783][ T177] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 107.991930][ T1167] sd 6:0:0:1: [sdc] Assuming drive cache: write through [ 107.998407][ T177] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 108.041445][ T1167] sd 6:0:0:1: [sdc] Attached SCSI removable disk [ 108.045948][ T7487] sd 6:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 108.515648][ T7504] validate_nla: 28 callbacks suppressed [ 108.515663][ T7504] netlink: 'syz.1.446': attribute type 1 has an invalid length. [ 108.529222][ T7504] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.535162][ T7504] netlink: 56 bytes leftover after parsing attributes in process `syz.1.446'. [ 108.567827][ T42] audit: type=1400 audit(1785552151.319:2162): avc: denied { read } for pid=7507 comm="syz.1.447" dev="nsfs" ino=4026533097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.574168][ T42] audit: type=1400 audit(1785552151.319:2163): avc: denied { open } for pid=7507 comm="syz.1.447" path="net:[4026533097]" dev="nsfs" ino=4026533097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.694187][ T1493] etas_es58x 8-1:1.0: could not retrieve the product info string [ 108.714017][ T1493] usb 8-1: USB disconnect, device number 9 [ 108.717302][ T1493] etas_es58x 8-1:1.0: Disconnecting 祳z 祳z [ 108.791639][ T42] audit: type=1400 audit(1785552151.539:2164): avc: denied { write } for pid=7511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.809160][ T921] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 108.841017][ T42] audit: type=1400 audit(1785552151.589:2165): avc: denied { write } for pid=7514 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.900943][ T42] audit: type=1400 audit(1785552151.649:2166): avc: denied { write } for pid=7517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.943236][ T42] audit: type=1400 audit(1785552151.689:2167): avc: denied { write } for pid=7521 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.967104][ T921] usb 6-1: Using ep0 maxpacket: 8 [ 108.970984][ T921] usb 6-1: config index 0 descriptor too short (expected 438, got 36) [ 108.974269][ T921] usb 6-1: config 33 has too many interfaces: 97, using maximum allowed: 32 [ 108.980568][ T921] usb 6-1: config 33 has an invalid descriptor of length 236, skipping remainder of the config [ 108.984210][ T921] usb 6-1: config 33 has 0 interfaces, different from the descriptor's value: 97 [ 108.990980][ T921] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 108.994610][ T921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.203952][ T7509] netlink: 52 bytes leftover after parsing attributes in process `syz.1.447'. [ 109.324092][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'. [ 109.327124][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'. [ 109.394230][ T41] usb 5-1: USB disconnect, device number 6 [ 109.409391][ T41] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 109.417583][ T41] kl5kusb105 5-1:1.0: device disconnected [ 109.426826][ T7537] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.487936][ T921] usb 6-1: string descriptor 0 read error: -71 [ 109.494802][ T921] usb 6-1: USB disconnect, device number 5 [ 109.794316][ T7556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.453'. [ 109.991444][ T7571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.458'. [ 109.994261][ T7571] netlink: 'syz.0.458': attribute type 3 has an invalid length. [ 110.022835][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.028016][ T7571] bridge_slave_0 (unregistering): left allmulticast mode [ 110.030301][ T7571] bridge_slave_0 (unregistering): left promiscuous mode [ 110.032599][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.163897][ T7582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7582 comm=syz.3.461 [ 110.203248][ T7584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.212273][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.217643][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.262324][ T7591] netlink: 76 bytes leftover after parsing attributes in process `syz.0.464'. [ 110.345962][ T7607] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 111.002161][ T7632] bdc PNP0103:00: error -ENXIO: IRQ index 0 not found [ 111.230769][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 111.233714][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 111.254675][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 111.575757][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.650723][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.715109][ T5751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.722913][ T5751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.728778][ T5751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.732619][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.739761][ T5751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.740250][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.756505][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.762036][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.766006][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.769513][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.773179][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.803394][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.951724][ T13] bridge_slave_1: left allmulticast mode [ 111.954238][ T13] bridge_slave_1: left promiscuous mode [ 111.957492][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.046271][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 112.046293][ T42] audit: type=1400 audit(1785552154.789:2179): avc: denied { write } for pid=7671 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.075397][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.082624][ T13] bond_slave_0: left allmulticast mode [ 112.086192][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.090348][ T13] bond_slave_1: left allmulticast mode [ 112.094792][ T13] bond0 (unregistering): Released all slaves [ 112.100730][ T5449] 8021q: adding VLAN 0 to HW filter on device eth1 [ 112.108282][ T42] audit: type=1400 audit(1785552154.859:2180): avc: denied { bind } for pid=7668 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.168819][ T13] tipc: Disabling bearer [ 112.179922][ T13] tipc: Left network mode [ 112.195586][ T42] audit: type=1400 audit(1785552154.939:2181): avc: denied { write } for pid=7679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.248201][ T42] audit: type=1400 audit(1785552154.999:2182): avc: denied { write } for pid=7689 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.255440][ T7691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.314936][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 112.342391][ T7654] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.344733][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.347481][ T7654] bridge_slave_0: entered allmulticast mode [ 112.350235][ T7654] bridge_slave_0: entered promiscuous mode [ 112.353495][ T7654] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.355818][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.359438][ T7654] bridge_slave_1: entered allmulticast mode [ 112.362166][ T7654] bridge_slave_1: entered promiscuous mode [ 112.378481][ T7654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.383079][ T7654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.403644][ T7654] team0: Port device team_slave_0 added [ 112.410696][ T7654] team0: Port device team_slave_1 added [ 112.435139][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.443671][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.452497][ T7654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.455364][ T42] audit: type=1400 audit(1785552155.199:2183): avc: denied { write } for pid=7700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.459651][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.464976][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.473205][ T7654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.507958][ T42] audit: type=1400 audit(1785552155.259:2184): avc: denied { write } for pid=7707 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.519525][ T42] audit: type=1400 audit(1785552155.269:2185): avc: denied { create } for pid=7708 comm="syz.0.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 112.527883][ T42] audit: type=1400 audit(1785552155.269:2186): avc: denied { sys_admin } for pid=7708 comm="syz.0.491" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 112.571511][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 112.572925][ T7718] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 112.575910][ T7718] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.577751][ T7654] hsr_slave_0: entered promiscuous mode [ 112.580684][ T7718] vhci_hcd vhci_hcd.0: Device attached [ 112.581848][ T7654] hsr_slave_1: entered promiscuous mode [ 112.585918][ T7654] debugfs: 'hsr0' already exists in 'hsr' [ 112.589948][ T7719] vhci_hcd: cannot find the pending unlink 26 [ 112.590061][ T7654] Cannot create hsr debugfs directory [ 112.592877][ T7719] vhci_hcd: connection closed [ 112.593928][ T7711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.606713][ T5788] vhci_hcd vhci_hcd.2: stop threads [ 112.609676][ T5788] vhci_hcd vhci_hcd.2: release socket [ 112.619253][ T5788] vhci_hcd vhci_hcd.2: disconnect device [ 112.651640][ T13] hsr_slave_0: left promiscuous mode [ 112.654228][ T13] hsr_slave_1: left promiscuous mode [ 112.657349][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.660074][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.671377][ T13] veth1_macvtap: left promiscuous mode [ 112.673785][ T13] veth0_macvtap: left promiscuous mode [ 112.675635][ T13] veth1_vlan: left promiscuous mode [ 112.677474][ T13] veth0_vlan: left promiscuous mode [ 112.809743][ T13] team0 (unregistering): Port device team_slave_1 removed [ 112.931906][ T7725] qnx4: no qnx4 filesystem (no root dir). [ 112.994687][ T42] audit: type=1400 audit(1785552155.739:2187): avc: denied { write } for pid=7729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.039116][ T42] audit: type=1400 audit(1785552155.779:2188): avc: denied { write } for pid=7734 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.062071][ T7738] dlm: plock device version mismatch: kernel (1.2.0), user (0.131081.813332851) [ 113.116967][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 113.169449][ T7654] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.175717][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.181653][ T7654] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.185521][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.190435][ T7654] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.201687][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.204689][ T7654] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.231578][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.360669][ T7654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.369577][ T7654] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.379476][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.381925][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.388768][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.391591][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.448242][ T7766] usb usb9: usbfs: process 7766 (syz.0.501) did not claim interface 10 before use [ 113.545157][ T7773] loop5: detected capacity change from 0 to 7 [ 113.548729][ T7773] Dev loop5: unable to read RDB block 7 [ 113.550604][ T7773] loop5: AHDI p2 p4 [ 113.551533][ T7771] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.551911][ T7773] loop5: partition table partially beyond EOD, truncated [ 113.562783][ T7773] loop5: p4 start 1677722366 is beyond EOD, truncated [ 113.575478][ T7773] overlayfs: workdir and upperdir must be separate subtrees [ 113.728792][ T7654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.849036][ T7790] hpfs: hpfs_map_sector(): read error [ 113.867164][ T5751] Bluetooth: hci2: command tx timeout [ 113.920146][ T7654] veth0_vlan: entered promiscuous mode [ 113.927500][ T7654] veth1_vlan: entered promiscuous mode [ 113.942295][ T7654] veth0_macvtap: entered promiscuous mode [ 113.946501][ T7654] veth1_macvtap: entered promiscuous mode [ 113.956600][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.966444][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.001888][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.005262][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.008869][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.072633][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.075875][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.094442][ T7797] sch_tbf: peakrate 6 is lower than or equals to rate 666 ! [ 114.106719][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.107187][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.113895][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.304004][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.317732][ T7829] bridge_slave_0 (unregistering): left allmulticast mode [ 114.319998][ T7829] bridge_slave_0 (unregistering): left promiscuous mode [ 114.323800][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.412775][ T7838] 9pnet: Found fid 0 not clunked [ 114.727927][ T7867] input: syz0 as /devices/virtual/input/input10 [ 114.812009][ T7873] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.827348][ T41] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 114.987114][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 114.993691][ T41] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 114.997254][ T41] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 115.001758][ T41] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.005613][ T41] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 115.009894][ T41] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 115.013368][ T41] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.017756][ T41] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.020705][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.052602][ T7881] __nla_validate_parse: 2 callbacks suppressed [ 115.052622][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 115.227346][ T41] usb 6-1: GET_CAPABILITIES returned 0 [ 115.229190][ T41] usbtmc 6-1:16.0: can't read capabilities [ 115.307388][ T7894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'. [ 115.445329][ T5816] usb 6-1: USB disconnect, device number 6 [ 115.470638][ T7909] team0: Device vlan0 is up. Set it down before adding it as a team port [ 115.485073][ T29] IPVS: starting estimator thread 0... [ 115.514019][ T7897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 115.518312][ T7905] netlink: 48 bytes leftover after parsing attributes in process `syz.0.533'. [ 115.588193][ T7910] IPVS: using max 44 ests per chain, 105600 per kthread [ 115.649571][ T7917] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 115.654944][ T7917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.666499][ T7916] netlink: 'syz.0.535': attribute type 4 has an invalid length. [ 115.677882][ T7916] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 115.682540][ T7916] qnx6: wrong signature (magic) in superblock #1. [ 115.684990][ T7916] qnx6: unable to read the first superblock [ 115.794897][ T7928] Bluetooth: MGMT ver 1.23 [ 115.938381][ T5751] Bluetooth: hci2: command tx timeout [ 116.025137][ T7938] bond0: entered promiscuous mode [ 116.037121][ T7938] bond_slave_0: entered promiscuous mode [ 116.039271][ T7938] bond_slave_1: entered promiscuous mode [ 116.041185][ T7938] bridge0: entered promiscuous mode [ 116.046808][ T7938] batadv0: entered promiscuous mode [ 116.055878][ T7938] xt_l2tp: wrong L2TP version: 0 [ 116.058383][ T7938] netlink: 'syz.2.542': attribute type 10 has an invalid length. [ 116.170746][ T7944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.545'. [ 116.200247][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'. [ 116.230892][ T7952] raw_sendmsg: syz.2.547 forgot to set AF_INET. Fix it! [ 116.557102][ T1493] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 116.707344][ T1493] usb 7-1: Using ep0 maxpacket: 32 [ 116.711975][ T1493] usb 7-1: unable to get BOS descriptor or descriptor too short [ 116.719937][ T1493] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 116.723392][ T1493] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 116.726851][ T1493] usb 7-1: config 14 has no interface number 0 [ 116.730619][ T1493] usb 7-1: config 14 has no interface number 1 [ 116.733174][ T1493] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 116.738826][ T1493] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 116.744456][ T1493] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 116.750462][ T1493] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 116.755544][ T1493] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 116.761230][ T1493] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.767164][ T1493] usb 7-1: config 14 interface 57 has no altsetting 0 [ 116.770122][ T1493] usb 7-1: config 14 interface 228 has no altsetting 0 [ 116.776842][ T1493] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 116.781248][ T1493] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.784674][ T1493] usb 7-1: Product: syz [ 116.786412][ T1493] usb 7-1: Manufacturer: syz [ 116.788707][ T1493] usb 7-1: SerialNumber: syz [ 116.845380][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 116.849247][ T7970] netlink: 'syz.0.554': attribute type 10 has an invalid length. [ 116.852495][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'. [ 117.012004][ T1493] legousbtower 7-1:14.57: interrupt endpoints not found [ 117.026003][ T1493] legousbtower 7-1:14.228: get version request failed: -71 [ 117.031274][ T1493] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 117.038451][ T1493] usb 7-1: USB disconnect, device number 6 [ 117.073913][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 117.073944][ T42] audit: type=1400 audit(1785552159.819:2209): avc: denied { bind } for pid=7985 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.086086][ T42] audit: type=1400 audit(1785552159.839:2210): avc: denied { listen } for pid=7985 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.100017][ T42] audit: type=1400 audit(1785552159.849:2211): avc: denied { getopt } for pid=7985 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.158224][ T7990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29522 sclass=netlink_route_socket pid=7990 comm=syz.1.560 [ 117.210252][ T42] audit: type=1400 audit(1785552159.959:2212): avc: denied { write } for pid=7991 comm="syz.1.561" name="configs" dev="configfs" ino=18098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.212077][ T7992] input: syz1 as /devices/virtual/input/input11 [ 117.221641][ T7992] input: failed to attach handler leds to device input11, error: -6 [ 117.390952][ T7994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.562'. [ 117.565669][ T8009] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8009 comm=syz.0.565 [ 117.669478][ T8016] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 117.677206][ T42] audit: type=1400 audit(1785552160.429:2213): avc: denied { write } for pid=8015 comm="syz.0.569" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.689270][ T42] audit: type=1400 audit(1785552160.439:2214): avc: denied { name_bind } for pid=8015 comm="syz.0.569" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 117.897125][ T10] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 117.938895][ T42] audit: type=1400 audit(1785552160.689:2215): avc: denied { watch } for pid=8024 comm="syz.2.572" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 117.947436][ T42] audit: type=1400 audit(1785552160.689:2216): avc: denied { watch_sb watch_reads } for pid=8024 comm="syz.2.572" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 117.957372][ T5831] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 118.017144][ T5751] Bluetooth: hci2: command tx timeout [ 118.048895][ T10] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 118.052285][ T10] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 118.055441][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 118.059024][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 118.063271][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 118.067628][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 118.071498][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 118.080174][ T10] usb 6-1: string descriptor 0 read error: -22 [ 118.082764][ T10] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 118.086284][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.094484][ T10] usb 6-1: config 0 descriptor?? [ 118.098703][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 118.101206][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 118.112559][ T8028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 118.114917][ T5831] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 118.115689][ T8028] netlink: 'syz.2.573': attribute type 7 has an invalid length. [ 118.119774][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input12 [ 118.121611][ T8028] netlink: 'syz.2.573': attribute type 8 has an invalid length. [ 118.125579][ T5831] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 118.131397][ T8028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.132203][ T5831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.160254][ T5831] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 118.165413][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 118.169097][ T5831] usb 5-1: Product: syz [ 118.171474][ T5831] usb 5-1: Manufacturer: syz [ 118.173490][ T5831] usb 5-1: SerialNumber: syz [ 118.184023][ T42] audit: type=1400 audit(1785552160.929:2217): avc: denied { read } for pid=8029 comm="syz.2.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.190985][ T5831] usb 5-1: config 0 descriptor?? [ 118.196237][ T5831] hub 5-1:0.0: bad descriptor, ignoring hub [ 118.198282][ T5831] hub 5-1:0.0: probe with driver hub failed with error -5 [ 118.202465][ T5831] usb 5-1: selecting invalid altsetting 0 [ 118.374139][ T5847] usb 6-1: USB disconnect, device number 7 [ 118.410085][ T8040] random: crng reseeded on system resumption [ 118.420617][ T8040] FAULT_INJECTION: forcing a failure. [ 118.420617][ T8040] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.425019][ T8040] CPU: 3 UID: 0 PID: 8040 Comm: syz.2.577 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.425044][ T8040] Tainted: [L]=SOFTLOCKUP [ 118.425050][ T8040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.425069][ T8040] Call Trace: [ 118.425084][ T8040] [ 118.425096][ T8040] dump_stack_lvl+0x100/0x190 [ 118.425249][ T8040] should_fail_ex.cold+0x5/0xa [ 118.425299][ T8040] _copy_from_user+0x2e/0xd0 [ 118.425351][ T8040] snapshot_ioctl+0x5ac/0xe20 [ 118.425396][ T8040] ? __pfx_snapshot_ioctl+0x10/0x10 [ 118.425415][ T8040] ? selinux_file_ioctl+0xb6/0x290 [ 118.425456][ T8040] ? __pfx_snapshot_ioctl+0x10/0x10 [ 118.425474][ T8040] __x64_sys_ioctl+0x18e/0x210 [ 118.425504][ T8040] do_syscall_64+0x115/0x870 [ 118.425523][ T8040] ? clear_bhb_loop+0x40/0x90 [ 118.425542][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.425559][ T8040] RIP: 0033:0x7fa57a79e019 [ 118.425575][ T8040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.425591][ T8040] RSP: 002b:00007fa57b587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.425613][ T8040] RAX: ffffffffffffffda RBX: 00007fa57aa25fa0 RCX: 00007fa57a79e019 [ 118.425620][ T8040] RDX: 0000200000000040 RSI: 00000000400c330d RDI: 0000000000000003 [ 118.425627][ T8040] RBP: 00007fa57b587090 R08: 0000000000000000 R09: 0000000000000000 [ 118.425634][ T8040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.425643][ T8040] R13: 00007fa57aa26038 R14: 00007fa57aa25fa0 R15: 00007ffd12749eb8 [ 118.425667][ T8040] [ 118.553577][ T8048] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.228461][ T8079] random: crng reseeded on system resumption [ 119.239147][ T8079] FAULT_INJECTION: forcing a failure. [ 119.239147][ T8079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.245543][ T8079] CPU: 3 UID: 0 PID: 8079 Comm: syz.4.586 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.245570][ T8079] Tainted: [L]=SOFTLOCKUP [ 119.245576][ T8079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.245595][ T8079] Call Trace: [ 119.245603][ T8079] [ 119.245610][ T8079] dump_stack_lvl+0x100/0x190 [ 119.245711][ T8079] should_fail_ex.cold+0x5/0xa [ 119.245752][ T8079] _copy_to_user+0x32/0xd0 [ 119.245805][ T8079] simple_read_from_buffer+0xcb/0x170 [ 119.245847][ T8079] proc_fail_nth_read+0x1af/0x230 [ 119.245881][ T8079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.245907][ T8079] ? rw_verify_area+0xce/0x6d0 [ 119.245938][ T8079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.245962][ T8079] vfs_read+0x1e4/0xb40 [ 119.245989][ T8079] ? __pfx_vfs_read+0x10/0x10 [ 119.246017][ T8079] ? __fget_files+0x215/0x3d0 [ 119.246040][ T8079] ? __fget_files+0x21f/0x3d0 [ 119.246063][ T8079] ksys_read+0x12a/0x250 [ 119.246087][ T8079] ? __pfx_ksys_read+0x10/0x10 [ 119.246117][ T8079] do_syscall_64+0x115/0x870 [ 119.246163][ T8079] ? clear_bhb_loop+0x40/0x90 [ 119.246185][ T8079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.246203][ T8079] RIP: 0033:0x7f1e74d5e84e [ 119.246218][ T8079] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.246234][ T8079] RSP: 002b:00007f1e75ca6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.246313][ T8079] RAX: ffffffffffffffda RBX: 00007f1e75ca76c0 RCX: 00007f1e74d5e84e [ 119.246323][ T8079] RDX: 000000000000000f RSI: 00007f1e75ca70a0 RDI: 0000000000000004 [ 119.246333][ T8079] RBP: 00007f1e75ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.246343][ T8079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.246353][ T8079] R13: 00007f1e75026038 R14: 00007f1e75025fa0 R15: 00007fff73d1e6b8 [ 119.246376][ T8079] [ 119.314158][ T5816] usb 5-1: USB disconnect, device number 7 [ 119.370570][ T8081] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 119.706316][ T65] block nbd0: Receive control failed (result -32) [ 119.708380][ T8093] block nbd0: Receive control failed (result -32) [ 119.753732][ T8096] xt_limit: Overflow, try lower: 271964/0 [ 119.801664][ T42] audit: type=1400 audit(1785552162.549:2218): avc: denied { getopt } for pid=8099 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.108278][ T5751] Bluetooth: hci2: command tx timeout [ 120.488283][ T8132] loop3: detected capacity change from 0 to 7 [ 120.491050][ T8134] ip6t_srh: unknown srh match flags 4015 [ 120.494331][ C3] blk_print_req_error: 10 callbacks suppressed [ 120.494344][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.499401][ C3] buffer_io_error: 10 callbacks suppressed [ 120.499419][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 120.504089][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.507450][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 120.513918][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.517009][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 120.521407][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.524569][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 120.529377][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.532457][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 120.535345][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.538393][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 120.547363][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.551410][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 120.554134][ T8132] ldm_validate_partition_table(): Disk read failed. [ 120.556702][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.560616][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 120.566298][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.569349][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 120.573388][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.576442][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 120.580194][ T8132] Dev loop3: unable to read RDB block 0 [ 120.584129][ T8132] loop3: unable to read partition table [ 120.586086][ T8132] loop3: partition table beyond EOD, truncated [ 120.589368][ T8132] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 120.601494][ T8147] __nla_validate_parse: 4 callbacks suppressed [ 120.601507][ T8147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.608'. [ 120.637335][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 120.693516][ T8152] pi3usb30532 0-0059: Error reading config register -6 [ 120.701417][ T8152] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x59 [ 120.707132][ T8154] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 121.200470][ T8177] netlink: 'syz.1.619': attribute type 4 has an invalid length. [ 121.220757][ T8177] netlink: 104 bytes leftover after parsing attributes in process `syz.1.619'. [ 121.230996][ T8177] /dev/sg0: Can't lookup blockdev [ 121.265993][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.621'. [ 121.272336][ T8182] nbd: must specify at least one socket [ 121.311888][ T8188] ufs: You didn't specify the type of your ufs filesystem [ 121.311888][ T8188] [ 121.311888][ T8188] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 121.311888][ T8188] [ 121.311888][ T8188] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 121.355090][ T8195] random: crng reseeded on system resumption [ 121.430330][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.629'. [ 121.439250][ T8207] Cannot find set identified by id 65534 to match [ 121.446224][ T8207] netlink: 'syz.0.630': attribute type 49 has an invalid length. [ 121.460150][ T8207] bond0: (slave bond_slave_0): Releasing backup interface [ 121.526070][ T8207] bond_slave_0: entered promiscuous mode [ 121.528312][ T8207] bond_slave_0: entered allmulticast mode [ 121.567828][ T8220] fuse: Unknown parameter '' [ 122.762923][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 122.762937][ T42] audit: type=1400 audit(1785552421.512:2247): avc: denied { write } for pid=8264 comm="syz.2.642" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 123.068827][ T8275] random: crng reseeded on system resumption [ 123.167914][ T8279] tipc: Can't bind to reserved service type 2 [ 123.169659][ T42] audit: type=1400 audit(1785552421.922:2248): avc: denied { bind } for pid=8278 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.176211][ T8277] kvm: user requested TSC rate below hardware speed [ 123.271320][ T8294] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 123.351588][ T8299] overlayfs: failed to get inode (-116) [ 123.353853][ T8299] overlayfs: failed to get inode (-116) [ 123.447856][ T8306] netlink: 44 bytes leftover after parsing attributes in process `syz.1.656'. [ 123.480465][ T8306] kvm: kvm [8305]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x4000007b) = 0x3f [ 123.495600][ T8308] 9pnet: Found fid 0 not clunked [ 123.695848][ T42] audit: type=1400 audit(1785552422.442:2249): avc: denied { create } for pid=8319 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.706627][ T8320] syzkaller0: entered promiscuous mode [ 123.710603][ T8320] syzkaller0: entered allmulticast mode [ 123.730333][ T8320] team0: Port device veth0 removed [ 123.734412][ T8320] bridge_slave_1: left promiscuous mode [ 123.736842][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.750519][ T8320] bond0: (slave bond_slave_0): Releasing backup interface [ 123.755618][ T8320] bond0: (slave bond_slave_1): Releasing backup interface [ 123.763532][ T8320] team0: Port device team_slave_0 removed [ 123.769165][ T8320] team0: Port device team_slave_1 removed [ 123.771419][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.773739][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.777126][ T8320] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 123.953775][ T42] audit: type=1400 audit(1785552422.702:2250): avc: denied { write } for pid=8332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.000719][ T42] audit: type=1400 audit(1785552422.752:2251): avc: denied { write } for pid=8339 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.013215][ T8343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.664'. [ 124.016428][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.664'. [ 124.039478][ T8343] syz.1.664 (8343): attempted to duplicate a private mapping with mremap. This is not supported. [ 124.063113][ T42] audit: type=1326 audit(1785552422.812:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8333 comm="syz.4.662" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e74d9e019 code=0x0 [ 124.307053][ T5847] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 124.317150][ T42] audit: type=1400 audit(1785552423.062:2253): avc: denied { write } for pid=8357 comm="syz.0.666" name="/" dev="9p" ino=78395293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.324779][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.667'. [ 124.325819][ T42] audit: type=1400 audit(1785552423.072:2254): avc: denied { remove_name } for pid=8357 comm="syz.0.666" name="file0" dev="9p" ino=78395409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.336617][ T42] audit: type=1400 audit(1785552423.072:2255): avc: denied { unlink } for pid=8357 comm="syz.0.666" name="file0" dev="9p" ino=78395409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.347126][ T42] audit: type=1400 audit(1785552423.082:2256): avc: denied { read } for pid=8359 comm="syz.2.667" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.467114][ T5847] usb 6-1: Using ep0 maxpacket: 16 [ 124.471959][ T5847] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 124.475055][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.477844][ T5847] usb 6-1: Product: syz [ 124.479428][ T5847] usb 6-1: Manufacturer: syz [ 124.480994][ T5847] usb 6-1: SerialNumber: syz [ 124.484764][ T5847] usb 6-1: config 0 descriptor?? [ 124.557201][ T8364] fuse: Bad value for 'fd' [ 124.702801][ T5847] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 124.710032][ T5847] usb 6-1: USB disconnect, device number 8 [ 124.829359][ T8378] netlink: 'syz.1.671': attribute type 29 has an invalid length. [ 124.832960][ T8378] netlink: 'syz.1.671': attribute type 29 has an invalid length. [ 124.842172][ T8378] netlink: 'syz.1.671': attribute type 29 has an invalid length. [ 124.845549][ T8379] netlink: 'syz.1.671': attribute type 29 has an invalid length. [ 125.161007][ T8360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.164207][ T8360] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.172444][ T8360] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.213278][ T8394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.219177][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 125.406127][ T8423] nicvf0: renamed from team0 (while UP) [ 125.414503][ T8423] nicvf0: Cannot enslave team device to itself [ 125.416554][ T8423] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 125.587875][ T8434] random: crng reseeded on system resumption [ 125.947191][ T5831] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.110275][ T5831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.114566][ T5831] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 126.117808][ T5831] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 126.124980][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.145577][ T5831] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 126.150694][ T5831] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 126.309788][ T8454] random: crng reseeded on system resumption [ 126.418488][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.498380][ T8437] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 126.502091][ T8437] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 126.505260][ T8437] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 126.787343][ T8436] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 126.791929][ T5816] usb 5-1: USB disconnect, device number 8 [ 126.801388][ T5816] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 126.805070][ T5816] spcp8x5 5-1:1.0: device disconnected [ 126.871007][ T8477] __nla_validate_parse: 1 callbacks suppressed [ 126.871025][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'. [ 127.347730][ T8485] Cannot find set identified by id 0 to match [ 127.452091][ T8490] random: crng reseeded on system resumption [ 128.008432][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8508 comm=syz.2.710 [ 128.013374][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8508 comm=syz.2.710 [ 128.018685][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8508 comm=syz.2.710 [ 128.024219][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8508 comm=syz.2.710 [ 128.030614][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8508 comm=syz.2.710 [ 128.036167][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8508 comm=syz.2.710 [ 128.041710][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8508 comm=syz.2.710 [ 128.045919][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8508 comm=syz.2.710 [ 128.050291][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8508 comm=syz.2.710 [ 128.054373][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8508 comm=syz.2.710 [ 128.114444][ T8512] netlink: 900 bytes leftover after parsing attributes in process `syz.1.711'. [ 128.172446][ T8513] netlink: 900 bytes leftover after parsing attributes in process `syz.1.711'. [ 128.240179][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 128.240201][ T42] audit: type=1800 audit(1785552426.992:2283): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.711" name="file1" dev="overlay" ino=1144 res=0 errno=0 [ 128.497113][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.956801][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 128.960946][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 128.975459][ T8523] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 128.987808][ T42] audit: type=1400 audit(1785552427.742:2284): avc: denied { listen } for pid=8522 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.093735][ T8533] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 129.180193][ T8543] cgroup2: Unknown parameter 'euid' [ 129.183485][ T8543] cgroup2: Unknown parameter 'euid' [ 129.241058][ T42] audit: type=1400 audit(1785552427.992:2285): avc: denied { append } for pid=8546 comm="syz.4.723" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 129.248661][ T42] audit: type=1400 audit(1785552427.992:2286): avc: denied { create } for pid=8546 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 129.390498][ T42] audit: type=1400 audit(1785552428.142:2287): avc: denied { create } for pid=8554 comm="syz.1.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 129.444221][ T42] audit: type=1400 audit(1785552428.192:2288): avc: denied { listen } for pid=8564 comm="syz.4.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.450490][ T42] audit: type=1400 audit(1785552428.202:2289): avc: denied { accept } for pid=8564 comm="syz.4.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.787019][ T5847] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 129.917017][ T5847] usb 6-1: device descriptor read/64, error -71 [ 130.157036][ T5847] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 130.287025][ T5847] usb 6-1: device descriptor read/64, error -71 [ 130.399087][ T5847] usb usb6-port1: attempt power cycle [ 130.451200][ T42] audit: type=1400 audit(1785552429.202:2290): avc: denied { write } for pid=8593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.496241][ T42] audit: type=1400 audit(1785552429.242:2291): avc: denied { write } for pid=8602 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.511731][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 130.556993][ T42] audit: type=1400 audit(1785552429.302:2292): avc: denied { write } for pid=8608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.587178][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.739993][ T5847] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 130.752511][ T8638] dummy0: entered allmulticast mode [ 130.757904][ T5847] usb 6-1: device descriptor read/8, error -71 [ 130.762808][ T8637] dummy0: left allmulticast mode [ 130.920753][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 130.922381][ T8650] random: crng reseeded on system resumption [ 130.929231][ T8652] blkio.reset_stats is deprecated [ 130.943123][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 130.997203][ T5847] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 131.018010][ T5847] usb 6-1: device descriptor read/8, error -71 [ 131.128318][ T5847] usb usb6-port1: unable to enumerate USB device [ 131.249775][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 131.332998][ T8692] random: crng reseeded on system resumption [ 131.335511][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'. [ 131.373912][ T8690] xt_hashlimit: size too large, truncated to 1048576 [ 131.669049][ T8708] netlink: 'syz.2.770': attribute type 21 has an invalid length. [ 131.671896][ T8708] netlink: 'syz.2.770': attribute type 6 has an invalid length. [ 131.701843][ T8710] veth0: entered promiscuous mode [ 131.715212][ T8714] veth0: left promiscuous mode [ 132.067883][ T8721] __nla_validate_parse: 2 callbacks suppressed [ 132.067897][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 132.072637][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.774'. [ 132.075462][ T8721] netlink: 'syz.4.774': attribute type 19 has an invalid length. [ 132.114028][ T8723] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 132.124374][ T8723] CIFS mount error: No usable UNC path provided in device string! [ 132.124374][ T8723] [ 132.128970][ T8723] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.165574][ T8725] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 132.170204][ T8725] qnx6: wrong signature (magic) in superblock #1. [ 132.173005][ T8725] qnx6: unable to read the first superblock [ 132.229693][ T8728] gfs2: error -5 reading superblock [ 132.234021][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 132.389323][ T8739] netlink: 'syz.4.781': attribute type 10 has an invalid length. [ 132.397913][ T8739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.401818][ T8739] team0: Port device netdevsim1 added [ 132.603151][ T8757] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 132.661473][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.740922][ T8778] netlink: 'syz.2.794': attribute type 1 has an invalid length. [ 132.755592][ T8778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.792741][ T8757] nvme_fabrics: no handler found for transport hoop. [ 132.795932][ T8757] netlink: 96 bytes leftover after parsing attributes in process `syz.1.789'. [ 132.997027][ T5847] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 133.125596][ T8782] netlink: 168 bytes leftover after parsing attributes in process `syz.0.795'. [ 133.141075][ T8782] SELinux: policydb version -305581141 does not match my version range 15-35 [ 133.145689][ T8782] SELinux: failed to load policy [ 133.158600][ T5847] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.162369][ T5847] usb 7-1: config 0 has no interfaces? [ 133.164462][ T5847] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.167429][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.171546][ T5847] usb 7-1: config 0 descriptor?? [ 133.258672][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 133.258687][ T42] audit: type=1400 audit(1785552432.012:2298): avc: denied { write } for pid=8784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.306493][ T42] audit: type=1400 audit(1785552432.052:2299): avc: denied { write } for pid=8789 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.499022][ T5847] usb 7-1: USB disconnect, device number 7 [ 134.106350][ T8794] input: syz1 as /devices/virtual/input/input14 [ 134.116253][ T8794] netlink: 328 bytes leftover after parsing attributes in process `syz.2.797'. [ 134.283369][ T42] audit: type=1400 audit(1785552433.032:2300): avc: denied { setopt } for pid=8810 comm="syz.2.803" lport=61344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.294523][ T42] audit: type=1400 audit(1785552433.042:2301): avc: denied { ioctl } for pid=8810 comm="syz.2.803" path="socket:[27352]" dev="sockfs" ino=27352 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.892822][ T42] audit: type=1400 audit(1785552433.642:2302): avc: denied { listen } for pid=8819 comm="syz.0.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.929990][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'. [ 135.044419][ T42] audit: type=1400 audit(1785552433.792:2303): avc: denied { ioctl } for pid=8823 comm="syz.0.809" path="socket:[29903]" dev="sockfs" ino=29903 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.174190][ T42] audit: type=1400 audit(1785552433.922:2304): avc: denied { name_bind } for pid=8825 comm="syz.0.810" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 135.272441][ T8833] random: crng reseeded on system resumption [ 135.389681][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 135.398314][ T41] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 135.414893][ T8839] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 135.440452][ T8841] fido_id[8841]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 135.476685][ T8846] random: crng reseeded on system resumption [ 135.479588][ T42] audit: type=1400 audit(1785552434.222:2305): avc: denied { append } for pid=8845 comm="syz.0.818" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.523117][ T8852] 9p: Unknown access argument 18446744073709551615: -34 [ 135.528730][ T42] audit: type=1400 audit(1785552434.282:2306): avc: denied { listen } for pid=8853 comm="syz.2.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.535150][ T42] audit: type=1400 audit(1785552434.282:2307): avc: denied { read } for pid=8853 comm="syz.2.821" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 135.629025][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 135.632395][ T8866] random: crng reseeded on system resumption [ 135.827177][ T5831] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 135.978685][ T5831] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.982848][ T5831] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 135.986473][ T5831] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 135.990171][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.998438][ T5831] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 136.002858][ T5831] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 136.170148][ T8891] loop8: detected capacity change from 0 to 4194304 [ 136.326858][ T5831] usb 7-1: USB disconnect, device number 8 [ 136.326998][ T8898] netlink: 72 bytes leftover after parsing attributes in process `syz.1.833'. [ 136.347770][ T5831] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 136.351712][ T5831] spcp8x5 7-1:1.0: device disconnected [ 136.369524][ T8902] syzkaller0: entered promiscuous mode [ 136.371354][ T8902] syzkaller0: entered allmulticast mode [ 136.378144][ T8902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.834'. [ 136.587206][ T8917] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.628700][ T8884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.666884][ T8923] loop3: detected capacity change from 0 to 7 [ 136.671561][ C2] blk_print_req_error: 10 callbacks suppressed [ 136.671574][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.676628][ C2] buffer_io_error: 10 callbacks suppressed [ 136.676636][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 136.681472][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.684521][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 136.687210][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.690248][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 136.692839][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.695854][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 136.698490][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.701569][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 136.704213][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.707262][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 136.710079][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.713142][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 136.715650][ T8923] ldm_validate_partition_table(): Disk read failed. [ 136.719241][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.722385][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 136.727030][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.730200][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 136.733810][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.736903][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 136.741651][ T8923] Dev loop3: unable to read RDB block 0 [ 136.744070][ T8923] loop3: unable to read partition table [ 136.746020][ T8923] loop3: partition table beyond EOD, truncated [ 136.748688][ T8923] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 136.762328][ T8930] syz_tun: entered allmulticast mode [ 136.773772][ T8929] syz_tun: left allmulticast mode [ 137.492123][ T8954] __nla_validate_parse: 3 callbacks suppressed [ 137.492136][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'. [ 137.581878][ T8961] usb3503 pcspkr: unknown mode is requested [ 137.584368][ T8961] usb3503 pcspkr: usb3503_probe: probed in standby mode [ 137.767054][ T5831] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 137.888233][ T5816] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 137.917152][ T5831] usb 7-1: Using ep0 maxpacket: 16 [ 137.920011][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.923174][ T5831] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 137.926201][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.932777][ T5831] usb 7-1: config 0 descriptor?? [ 137.938271][ T5831] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 138.048266][ T5816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 138.051404][ T5816] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 138.054413][ T5816] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 138.057336][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.062848][ T5816] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 138.068191][ T5816] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 138.321914][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.860'. [ 138.458806][ T8990] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 138.507238][ T36] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 138.514403][ T8990] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 138.674432][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 138.674451][ T42] audit: type=1400 audit(1785552437.422:2313): avc: denied { mounton } for pid=8964 comm="syz.0.855" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 138.687364][ T8996] qnx6: unable to set blocksize [ 138.714065][ T42] audit: type=1400 audit(1785552437.462:2314): avc: denied { create } for pid=8998 comm="syz.4.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.721950][ T42] audit: type=1400 audit(1785552437.462:2315): avc: denied { write } for pid=8998 comm="syz.4.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.769907][ T42] audit: type=1400 audit(1785552437.522:2316): avc: denied { map } for pid=9000 comm="syz.4.865" path="socket:[28471]" dev="sockfs" ino=28471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.621975][ T9011] selinux_netlink_send: 8 callbacks suppressed [ 139.621989][ T9011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9011 comm=syz.1.868 [ 139.704585][ T9018] sctp: [Deprecated]: syz.1.870 (pid 9018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.704585][ T9018] Use struct sctp_sack_info instead [ 139.906230][ T9026] FAULT_INJECTION: forcing a failure. [ 139.906230][ T9026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.911703][ T9026] CPU: 3 UID: 0 PID: 9026 Comm: syz.1.873 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.911758][ T9026] Tainted: [L]=SOFTLOCKUP [ 139.911766][ T9026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.911787][ T9026] Call Trace: [ 139.911803][ T9026] [ 139.911812][ T9026] dump_stack_lvl+0x100/0x190 [ 139.911966][ T9026] should_fail_ex.cold+0x5/0xa [ 139.912012][ T9026] _copy_to_user+0x32/0xd0 [ 139.912068][ T9026] simple_read_from_buffer+0xcb/0x170 [ 139.912111][ T9026] proc_fail_nth_read+0x1af/0x230 [ 139.912149][ T9026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.912177][ T9026] ? rw_verify_area+0xce/0x6d0 [ 139.912211][ T9026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.912237][ T9026] vfs_read+0x1e4/0xb40 [ 139.912267][ T9026] ? __pfx_vfs_read+0x10/0x10 [ 139.912293][ T9026] ? __fget_files+0x215/0x3d0 [ 139.912316][ T9026] ? __fget_files+0x21f/0x3d0 [ 139.912339][ T9026] ksys_read+0x12a/0x250 [ 139.912363][ T9026] ? __pfx_ksys_read+0x10/0x10 [ 139.912392][ T9026] do_syscall_64+0x115/0x870 [ 139.912421][ T9026] ? clear_bhb_loop+0x40/0x90 [ 139.912441][ T9026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.912458][ T9026] RIP: 0033:0x7fa55e15e84e [ 139.912473][ T9026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 139.912489][ T9026] RSP: 002b:00007fa55f0fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.912525][ T9026] RAX: ffffffffffffffda RBX: 00007fa55f0fd6c0 RCX: 00007fa55e15e84e [ 139.912536][ T9026] RDX: 000000000000000f RSI: 00007fa55f0fd0a0 RDI: 0000000000000009 [ 139.912545][ T9026] RBP: 00007fa55f0fd090 R08: 0000000000000000 R09: 0000000000000000 [ 139.912554][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.912564][ T9026] R13: 00007fa55e426128 R14: 00007fa55e426090 R15: 00007ffc89d0b278 [ 139.912587][ T9026] [ 140.019855][ T42] audit: type=1400 audit(1785552438.772:2317): avc: denied { connect } for pid=9027 comm="syz.1.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.553166][ T29] usb 7-1: USB disconnect, device number 9 [ 140.661427][ T9037] netlink: 'syz.2.878': attribute type 1 has an invalid length. [ 140.766896][ T42] audit: type=1400 audit(1785552439.512:2318): avc: denied { create } for pid=9043 comm="syz.2.880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=llc_socket permissive=1 [ 140.804975][ T5831] usb 5-1: USB disconnect, device number 9 [ 140.810117][ T5831] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 140.818760][ T5831] spcp8x5 5-1:1.0: device disconnected [ 140.830028][ T42] audit: type=1400 audit(1785552439.582:2319): avc: denied { write } for pid=9047 comm="syz.0.882" name="functions" dev="configfs" ino=18097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.837782][ T42] audit: type=1400 audit(1785552439.592:2320): avc: denied { write } for pid=9047 comm="syz.0.882" name="c.1" dev="configfs" ino=25602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.846145][ T42] audit: type=1400 audit(1785552439.592:2321): avc: denied { create } for pid=9047 comm="syz.0.882" name="rndis.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 140.859007][ T42] audit: type=1400 audit(1785552439.592:2322): avc: denied { write } for pid=9047 comm="syz.0.882" name="c.1" dev="configfs" ino=25602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.865075][ T9048] configfs-gadget.g1 gadget.0: HOST MAC 9e:3a:b5:52:cb:48 [ 140.871416][ T9048] configfs-gadget.g1 gadget.0: MAC fa:3f:9b:14:ee:4e [ 141.126650][ T9067] type: 517172535 invalid [ 141.207857][ T5831] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 141.248037][ T9091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.890'. [ 141.295996][ T9103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.379766][ T5831] usb 5-1: Dual-Role OTG device on HNP port [ 141.381891][ T5831] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 7.02 [ 141.384673][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.431889][ T9110] can0: slcan on ptm0. [ 141.438568][ T5831] rndis_host 5-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 9e:3a:b5:52:cb:48 [ 141.749892][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 141.756397][ T9135] batadv0: entered promiscuous mode [ 141.761658][ T9135] macsec2: entered promiscuous mode [ 141.763442][ T9135] macsec2: entered allmulticast mode [ 141.765178][ T9135] batadv0: entered allmulticast mode [ 141.768789][ T9135] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 141.778889][ T9135] batadv0: left allmulticast mode [ 141.787096][ T9135] batadv0: left promiscuous mode [ 141.935964][ T9109] can0 (unregistered): slcan off ptm0. [ 141.951955][ T9152] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 141.973683][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 141.994667][ T9152] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 142.061232][ T9173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.608730][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 142.613409][ T9187] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 142.700522][ T9195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.909'. [ 142.738896][ T9197] tipc: Failed to obtain node identity [ 142.740678][ T9197] tipc: Enabling of bearer rejected, failed to enable media [ 142.751857][ T5831] IPVS: starting estimator thread 0... [ 142.753779][ T9197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.857188][ T9198] IPVS: using max 31 ests per chain, 74400 per kthread [ 143.407062][ T9230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.920'. [ 143.549763][ T9237] netlink: 'syz.0.921': attribute type 19 has an invalid length. [ 143.620994][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'. [ 143.682528][ T9245] set match dimension is over the limit! [ 143.682662][ T9246] set match dimension is over the limit! [ 143.740792][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 143.740812][ T42] audit: type=1400 audit(1785552442.492:2348): avc: denied { map } for pid=9247 comm="syz.0.925" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 143.769176][ T9251] netlink: 'syz.2.926': attribute type 5 has an invalid length. [ 143.830771][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.833642][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.836701][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.841520][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.844728][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.848522][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.851273][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.854228][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.858113][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.861549][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.864837][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.868418][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.871792][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.875031][ T9256] overlay: filesystem on ./file0 not supported as upperdir [ 143.962364][ T9261] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 143.985702][ T42] audit: type=1400 audit(1785552442.732:2349): avc: denied { lock } for pid=9258 comm="syz.0.928" path="socket:[29498]" dev="sockfs" ino=29498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 143.990670][ T9265] befs: (nullb0): No write support. Marking filesystem read-only [ 143.996597][ T9265] befs: (nullb0): invalid magic header [ 144.039784][ T9269] sch_fq: defrate 0 ignored. [ 144.056715][ T9270] netlink: 59 bytes leftover after parsing attributes in process `syz.0.928'. [ 144.060286][ T9259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.357082][ T41] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 144.362271][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b1d00a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 144.368088][ C0] Call Trace: [ 144.369207][ C0] [ 144.370170][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 144.372285][ C0] ? sched_clock_cpu+0x6c/0x570 [ 144.373850][ C0] ? find_held_lock+0x2b/0x80 [ 144.375341][ C0] ? tick_nohz_irq_exit+0x142/0x240 [ 144.377003][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 144.378672][ C0] mce_cpu_restart+0xd5/0x1f0 [ 144.380215][ C0] __flush_smp_call_function_queue+0x281/0x960 [ 144.382175][ C0] __sysvec_call_function+0x81/0x420 [ 144.383858][ C0] sysvec_call_function+0x9e/0xc0 [ 144.385490][ C0] [ 144.386436][ C0] [ 144.387391][ C0] asm_sysvec_call_function+0x1a/0x20 [ 144.389121][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 144.390879][ C0] Code: 56 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 df 0f 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 144.396844][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000202 [ 144.398790][ C0] RAX: 000000000019196b RBX: ffffffff8e891480 RCX: ffffffff8bbbc2d5 [ 144.401297][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a7a5d RDI: ffffffff8c402680 [ 144.403785][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100d48678d [ 144.406252][ C0] R10: ffff88806a433c6b R11: 0000000000000000 R12: 0000000000000000 [ 144.408722][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 144.411207][ C0] ? ct_kernel_exit+0x125/0x180 [ 144.412764][ C0] default_idle+0x9/0x10 [ 144.414110][ C0] default_idle_call+0x6c/0xb0 [ 144.415624][ C0] do_idle+0x3a7/0x5b0 [ 144.416948][ C0] ? __pfx_do_idle+0x10/0x10 [ 144.418438][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 144.420335][ C0] cpu_startup_entry+0x4f/0x60 [ 144.421864][ C0] rest_init+0x251/0x260 [ 144.423214][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 144.424936][ C0] start_kernel+0x48e/0x490 [ 144.426376][ C0] x86_64_start_reservations+0x24/0x30 [ 144.428083][ C0] x86_64_start_kernel+0x12b/0x130 [ 144.429729][ C0] common_startup_64+0x13e/0x158 [ 144.431327][ C0] [ 144.511014][ T41] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.514624][ T41] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.518004][ T41] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.520951][ T41] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.523998][ T42] audit: type=1400 audit(1785552443.272:2350): avc: denied { execute } for pid=9287 comm="syz.4.938" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 144.530218][ T41] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.534280][ T41] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.536818][ T41] usb 7-1: Product: syz [ 144.538358][ T41] usb 7-1: Manufacturer: syz [ 144.547265][ T41] cdc_wdm 7-1:1.0: skipping garbage [ 144.549064][ T41] cdc_wdm 7-1:1.0: skipping garbage [ 144.553188][ T41] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 144.555126][ T41] cdc_wdm 7-1:1.0: Unknown control protocol [ 144.679214][ T42] audit: type=1400 audit(1785552443.432:2351): avc: denied { bind } for pid=9294 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 144.679683][ T9295] xt_TCPMSS: Only works on TCP SYN packets [ 144.745892][ T41] usb 7-1: USB disconnect, device number 10 [ 144.811419][ T9304] netlink: 'syz.0.943': attribute type 21 has an invalid length. [ 144.813907][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 144.824876][ T9304] netlink: 'syz.0.943': attribute type 21 has an invalid length. [ 144.829141][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 144.860416][ T9306] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 144.897298][ T9311] netlink: 'syz.0.945': attribute type 21 has an invalid length. [ 144.899917][ T9311] netlink: 152 bytes leftover after parsing attributes in process `syz.0.945'. [ 144.989196][ T9316] md: loop0 has zero or unknown size, marking faulty! [ 144.993337][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.947'. [ 144.996891][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.947'. [ 145.151195][ T9334] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 145.207127][ T5831] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 145.368847][ T5831] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.373245][ T5831] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.377667][ T5831] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.381269][ T5831] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.387392][ T5831] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.391051][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.394243][ T5831] usb 7-1: Product: syz [ 145.396035][ T5831] usb 7-1: Manufacturer: syz [ 145.404441][ T5831] cdc_wdm 7-1:1.0: skipping garbage [ 145.407172][ T5831] cdc_wdm 7-1:1.0: skipping garbage [ 145.412486][ T5831] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 145.414908][ T5831] cdc_wdm 7-1:1.0: Unknown control protocol [ 145.818264][ T42] audit: type=1400 audit(1785552444.572:2352): avc: denied { write } for pid=9369 comm="syz.0.952" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 145.826843][ T42] audit: type=1400 audit(1785552444.572:2353): avc: denied { write } for pid=9369 comm="syz.0.952" name="node" dev="configfs" ino=12849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 145.852380][ T9375] vhci_hcd vhci_hcd.0: remove, state 4 [ 145.857989][ T9375] usb usb38: USB disconnect, device number 1 [ 145.902651][ T9377] overlayfs: statfs failed on './file0' [ 145.905958][ T9377] overlayfs: statfs failed on './file0' [ 145.920025][ T13] vhci_hcd vhci_hcd.0: stop threads [ 145.921376][ T9375] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 145.925592][ T13] vhci_hcd vhci_hcd.0: release socket [ 145.932204][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 145.934491][ T13] vhci_hcd vhci_hcd.0: stop threads [ 145.936557][ T13] vhci_hcd vhci_hcd.0: release socket [ 145.939211][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 145.941205][ T13] vhci_hcd vhci_hcd.0: stop threads [ 145.943263][ T13] vhci_hcd vhci_hcd.0: release socket [ 145.945405][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 145.947730][ T13] vhci_hcd vhci_hcd.0: stop threads [ 145.948835][ T9375] vhci_hcd vhci_hcd.0: remove, state 4 [ 145.951780][ T9375] usb usb37: USB disconnect, device number 1 [ 145.951949][ T13] ================================================================== [ 145.956666][ T13] BUG: KASAN: slab-use-after-free in vhci_shutdown_connection.cold+0x2f1/0x37c [ 145.960065][ T13] Read of size 8 at addr ffff88802d614c20 by task kworker/u32:1/13 [ 145.964354][ T13] [ 145.965967][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.965985][ T13] Tainted: [L]=SOFTLOCKUP [ 145.965989][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.965998][ T13] Workqueue: usbip_event event_handler [ 145.966025][ T13] Call Trace: [ 145.966030][ T13] [ 145.966035][ T13] dump_stack_lvl+0x100/0x190 [ 145.966051][ T13] print_report+0x13d/0x4b0 [ 145.966084][ T13] ? __virt_addr_valid+0x239/0x430 [ 145.966109][ T13] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 145.966138][ T13] kasan_report+0xdf/0x1c0 [ 145.966172][ T13] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 145.966196][ T13] vhci_shutdown_connection.cold+0x2f1/0x37c [ 145.966214][ T13] event_handler+0x216/0x570 [ 145.966225][ T13] process_one_work+0xa23/0x1940 [ 145.966246][ T13] ? __pfx_process_one_work+0x10/0x10 [ 145.966260][ T13] ? __pfx_event_handler+0x10/0x10 [ 145.966271][ T13] worker_thread+0x5ef/0xe50 [ 145.966284][ T13] ? kthread+0x13a/0x450 [ 145.966294][ T13] ? __pfx_worker_thread+0x10/0x10 [ 145.966305][ T13] kthread+0x370/0x450 [ 145.966314][ T13] ? __pfx_kthread+0x10/0x10 [ 145.966324][ T13] ret_from_fork+0x72b/0xd50 [ 145.966342][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 145.966357][ T13] ? __switch_to+0x800/0x10f0 [ 145.966368][ T13] ? __pfx_kthread+0x10/0x10 [ 145.966379][ T13] ret_from_fork_asm+0x1a/0x30 [ 145.966398][ T13] [ 145.966401][ T13] [ 145.998025][ T9375] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 145.998187][ T13] Allocated by task 1: [ 146.017718][ T13] kasan_save_stack+0x30/0x50 [ 146.019248][ T13] kasan_save_track+0x14/0x30 [ 146.020857][ T13] __kasan_kmalloc+0xaa/0xb0 [ 146.022387][ T13] __kmalloc_noprof+0x322/0x820 [ 146.024084][ T13] __usb_create_hcd+0x5e/0xac0 [ 146.025740][ T13] vhci_hcd_probe+0x1a5/0x4e0 [ 146.027245][ T13] platform_probe+0x106/0x1d0 [ 146.028757][ T13] really_probe+0x241/0xa60 [ 146.030171][ T13] __driver_probe_device+0x20e/0x450 [ 146.031844][ T13] driver_probe_device+0x4a/0x140 [ 146.033387][ T13] __device_attach_driver+0x1df/0x320 [ 146.035087][ T13] bus_for_each_drv+0x159/0x1e0 [ 146.036616][ T13] __device_attach+0x1e4/0x4d0 [ 146.038083][ T13] device_initial_probe+0xaf/0xd0 [ 146.039604][ T13] bus_probe_device+0x64/0x160 [ 146.041176][ T13] device_add+0x121d/0x1970 [ 146.042647][ T13] platform_device_add+0x35a/0x800 [ 146.044257][ T13] platform_device_register_full+0x5cf/0x830 [ 146.046137][ T13] vhci_hcd_init+0x1a1/0x2f0 [ 146.047615][ T13] do_one_initcall+0x11d/0x700 [ 146.049078][ T13] kernel_init_freeable+0x6ea/0x7b0 [ 146.050646][ T13] kernel_init+0x1f/0x1e0 [ 146.051983][ T13] ret_from_fork+0x72b/0xd50 [ 146.053362][ T13] ret_from_fork_asm+0x1a/0x30 [ 146.054817][ T13] [ 146.055553][ T13] Freed by task 9375: [ 146.056742][ T13] kasan_save_stack+0x30/0x50 [ 146.058129][ T13] kasan_save_track+0x14/0x30 [ 146.059600][ T13] kasan_save_free_info+0x3b/0x70 [ 146.061108][ T13] __kasan_slab_free+0x5f/0x80 [ 146.062518][ T13] kfree+0x22b/0x6c0 [ 146.063712][ T13] usb_put_hcd+0x149/0x1f0 [ 146.065098][ T13] vhci_hcd_remove+0xb5/0x1b0 [ 146.066500][ T13] platform_remove+0x5f/0x80 [ 146.067881][ T13] device_remove+0xcb/0x180 [ 146.069259][ T13] device_release_driver_internal+0x44e/0x620 [ 146.071086][ T13] unbind_store+0xf8/0x110 [ 146.072424][ T13] drv_attr_store+0x74/0xb0 [ 146.073829][ T13] sysfs_kf_write+0xf2/0x150 [ 146.075226][ T13] kernfs_fop_write_iter+0x3e0/0x5f0 [ 146.076880][ T13] vfs_write+0x6ac/0x1050 [ 146.078224][ T13] ksys_write+0x12a/0x250 [ 146.079550][ T13] do_syscall_64+0x115/0x870 [ 146.081012][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.082779][ T13] [ 146.083527][ T13] Last potentially related work creation: [ 146.085295][ T13] kasan_save_stack+0x30/0x50 [ 146.086738][ T13] kasan_record_aux_stack+0xa7/0xc0 [ 146.088314][ T13] insert_work+0x36/0x230 [ 146.089662][ T13] __queue_work+0x9bc/0x12b0 [ 146.091069][ T13] queue_work_on+0x1a9/0x1e0 [ 146.092502][ T13] usb_hcd_giveback_urb+0x330/0x4a0 [ 146.094031][ T13] unlink1+0x418/0x510 [ 146.095286][ T13] usb_hcd_unlink_urb+0x131/0x210 [ 146.096831][ T13] usb_kill_urb+0x121/0x320 [ 146.098224][ T13] hub_quiesce+0x1e9/0x320 [ 146.098381][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.099623][ T13] hub_suspend+0x4ab/0x9e0 [ 146.099640][ T13] usb_suspend_both+0x288/0x950 [ 146.099653][ T13] usb_runtime_suspend+0x49/0x120 [ 146.099667][ T13] __rpm_callback+0xc8/0x620 [ 146.099680][ T13] rpm_callback+0x16a/0x1b0 [ 146.099692][ T13] rpm_suspend+0x2f4/0x11a0 [ 146.099721][ T13] __pm_runtime_suspend+0xba/0x1a0 [ 146.099734][ T13] usb_runtime_idle+0x7e/0x90 [ 146.099748][ T13] rpm_idle+0x322/0x790 [ 146.099759][ T13] pm_runtime_work+0x120/0x150 [ 146.099772][ T13] process_one_work+0xa23/0x1940 [ 146.099783][ T13] worker_thread+0x5ef/0xe50 [ 146.099793][ T13] kthread+0x370/0x450 [ 146.099802][ T13] ret_from_fork+0x72b/0xd50 [ 146.099817][ T13] ret_from_fork_asm+0x1a/0x30 [ 146.099833][ T13] [ 146.099836][ T13] Second to last potentially related work creation: [ 146.099841][ T13] kasan_save_stack+0x30/0x50 [ 146.099853][ T13] kasan_record_aux_stack+0xa7/0xc0 [ 146.099868][ T13] insert_work+0x36/0x230 [ 146.099877][ T13] __queue_work+0x9bc/0x12b0 [ 146.099887][ T13] queue_work_on+0x1a9/0x1e0 [ 146.099897][ T13] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 146.099911][ T13] usb_hcd_submit_urb+0xab7/0x2150 [ 146.099925][ T13] usb_submit_urb+0x827/0x19b0 [ 146.099934][ T13] usb_start_wait_urb+0x10e/0x580 [ 146.099943][ T13] usb_control_msg+0x328/0x4b0 [ 146.099952][ T13] hub_suspend+0x826/0x9e0 [ 146.099962][ T13] usb_suspend_both+0x288/0x950 [ 146.099975][ T13] usb_runtime_suspend+0x49/0x120 [ 146.099988][ T13] __rpm_callback+0xc8/0x620 [ 146.100000][ T13] rpm_callback+0x16a/0x1b0 [ 146.100012][ T13] rpm_suspend+0x2f4/0x11a0 [ 146.100023][ T13] __pm_runtime_suspend+0xba/0x1a0 [ 146.100035][ T13] usb_runtime_idle+0x7e/0x90 [ 146.100050][ T13] rpm_idle+0x322/0x790 [ 146.100061][ T13] pm_runtime_work+0x120/0x150 [ 146.100073][ T13] process_one_work+0xa23/0x1940 [ 146.100083][ T13] worker_thread+0x5ef/0xe50 [ 146.100093][ T13] kthread+0x370/0x450 [ 146.100101][ T13] ret_from_fork+0x72b/0xd50 [ 146.100114][ T13] ret_from_fork_asm+0x1a/0x30 [ 146.100129][ T13] [ 146.100131][ T13] The buggy address belongs to the object at ffff88802d614000 [ 146.100131][ T13] which belongs to the cache kmalloc-8k of size 8192 [ 146.100142][ T13] The buggy address is located 3104 bytes inside of [ 146.100142][ T13] freed 8192-byte region [ffff88802d614000, ffff88802d616000) [ 146.100152][ T13] [ 146.100156][ T13] The buggy address belongs to the physical page: [ 146.100162][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d610 [ 146.100180][ T13] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 146.100191][ T13] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 146.100201][ T13] page_type: f5(slab) [ 146.100211][ T13] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 146.100222][ T13] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 146.100232][ T13] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 146.100241][ T13] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 146.100251][ T13] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 146.100260][ T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 146.100273][ T13] page dumped because: kasan: bad access detected [ 146.100280][ T13] page_owner tracks the page as allocated [ 146.100285][ T13] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10992926855, free_ts 0 [ 146.100304][ T13] post_alloc_hook+0xfd/0x120 [ 146.100323][ T13] get_page_from_freelist+0xf48/0x3530 [ 146.100333][ T13] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 146.100343][ T13] new_slab+0xa2/0x640 [ 146.100352][ T13] refill_objects+0xe3/0x410 [ 146.100361][ T13] __pcs_replace_empty_main+0x376/0x680 [ 146.100377][ T13] __kmalloc_noprof+0x66d/0x820 [ 146.100388][ T13] __usb_create_hcd+0x5e/0xac0 [ 146.100401][ T13] vhci_hcd_probe+0x1a5/0x4e0 [ 146.100413][ T13] platform_probe+0x106/0x1d0 [ 146.100422][ T13] really_probe+0x241/0xa60 [ 146.100434][ T13] __driver_probe_device+0x20e/0x450 [ 146.100446][ T13] driver_probe_device+0x4a/0x140 [ 146.100458][ T13] __device_attach_driver+0x1df/0x320 [ 146.100471][ T13] bus_for_each_drv+0x159/0x1e0 [ 146.100480][ T13] __device_attach+0x1e4/0x4d0 [ 146.100491][ T13] page_owner free stack trace missing [ 146.100496][ T13] [ 146.100498][ T13] Memory state around the buggy address: [ 146.100503][ T13] ffff88802d614b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.100511][ T13] ffff88802d614b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.100518][ T13] >ffff88802d614c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.100523][ T13] ^ [ 146.100529][ T13] ffff88802d614c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.100536][ T13] ffff88802d614d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.100542][ T13] ================================================================== [ 146.115899][ T42] audit: type=1400 audit(1785552444.862:2354): avc: denied { read } for pid=5129 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 146.118842][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.118859][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.118876][ T13] Tainted: [L]=SOFTLOCKUP [ 146.118880][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.118888][ T13] Workqueue: usbip_event event_handler [ 146.118904][ T13] Call Trace: [ 146.118908][ T13] [ 146.118912][ T13] dump_stack_lvl+0x100/0x190 [ 146.118928][ T13] vpanic+0x552/0x970 [ 146.118939][ T13] ? __pfx_vpanic+0x10/0x10 [ 146.118950][ T13] ? mark_held_locks+0x40/0x70 [ 146.118965][ T13] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 146.118984][ T13] panic+0xd1/0xe0 [ 146.118993][ T13] ? __pfx_panic+0x10/0x10 [ 146.119004][ T13] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 146.119021][ T13] ? preempt_schedule_common+0x42/0xc0 [ 146.119034][ T13] ? check_panic_on_warn+0x1f/0x90 [ 146.119047][ T13] check_panic_on_warn.cold+0x19/0x34 [ 146.119058][ T13] end_report.part.0+0x3a/0x90 [ 146.119075][ T13] kasan_report.cold+0xe/0x18 [ 146.119090][ T13] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 146.119109][ T13] vhci_shutdown_connection.cold+0x2f1/0x37c [ 146.119127][ T13] event_handler+0x216/0x570 [ 146.119138][ T13] process_one_work+0xa23/0x1940 [ 146.119152][ T13] ? __pfx_process_one_work+0x10/0x10 [ 146.119166][ T13] ? __pfx_event_handler+0x10/0x10 [ 146.119176][ T13] worker_thread+0x5ef/0xe50 [ 146.119190][ T13] ? kthread+0x13a/0x450 [ 146.119200][ T13] ? __pfx_worker_thread+0x10/0x10 [ 146.119211][ T13] kthread+0x370/0x450 [ 146.119220][ T13] ? __pfx_kthread+0x10/0x10 [ 146.119231][ T13] ret_from_fork+0x72b/0xd50 [ 146.119247][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 146.119262][ T13] ? __switch_to+0x800/0x10f0 [ 146.119274][ T13] ? __pfx_kthread+0x10/0x10 [ 146.119285][ T13] ret_from_fork_asm+0x1a/0x30 [ 146.119304][ T13] [ 146.120645][ T13] Kernel Offset: disabled VM DIAGNOSIS: 02:43:08 Registers: info registers vcpu 0 CPU#0 RAX=ffff88802c1dca80 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81f74adb RDI=fffffbfff36e8229 RBP=ffffffff9b741148 RSP=ffffc90000007688 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000002 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e5f426 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff0ed7e3c80 ffffffff 00c00000 GS =0000 ffff8880d5dda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555dd88a28 CR3=000000002d32e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000002000000 Opmask03=0000000000000000 Opmask04=00000000f7ffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2b3a220b 00007ffc2b3a220b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2b3a2710 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2b3a2710 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636876206463685f 69636876205d3537 333954205b5d3637 333132392e353431 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020726964 3d7373616c637420 745f73666769666e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f633a725f746365 6a626f3a755f6d65 747379733d747865 746e6f637420745f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d64617379733a72 5f6d64617379733a 746f6f723d747865 746e6f6373203934 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3832313d6f6e6920 2273666769666e6f 63223d7665642022 65646f6e223d656d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747865746e6f6373 20393d6f6e692022 7366706d74766564 223d76656420226d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a394b5 RDI=ffffffff9ba09b40 RBP=ffffffff9ba09b00 RSP=ffffc900001075d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b6fc231 R15=ffffffff85a39450 RIP=ffffffff85a394df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=0000000051015000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000400000000 0000000000080016 0010000000140100 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 0020000e00000000 0000000000000000 03ba000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00d400000000052f 83c0000000180000 00200000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff4a000000000300 0000000000050000 000cffffff360000 03e6000000080004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800080000 00140000002c0000 00440000005c0000 0074000000880000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 009c000000b40000 00cc000000e00000 00f4000001140000 012c000001400000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0154000001680000 017c000001900000 01a4000001c40000 0014000000000000 ZMM24=10be2dfb10be2dfb 10be2dfb10be2dfb 10be2dfb10be2dfb 10be2dfb10be2dfb 10be2dfb10be2dfb 10be2dfb10be2dfb 10be2dfb10be2dfb 10be2dfb10be2dfb ZMM25=58e47d5b58e47d5b 58e47d5b58e47d5b 58e47d5b58e47d5b 58e47d5b58e47d5b 58e47d5b58e47d5b 58e47d5b58e47d5b 58e47d5b58e47d5b 58e47d5b58e47d5b ZMM26=7663345576633455 7663345576633455 7663345576633455 7663345576633455 7663345576633455 7663345576633455 7663345576633455 7663345576633455 ZMM27=1f55ec3c1f55ec3c 1f55ec3c1f55ec3c 1f55ec3c1f55ec3c 1f55ec3c1f55ec3c 1f55ec3c1f55ec3c 1f55ec3c1f55ec3c 1f55ec3c1f55ec3c 1f55ec3c1f55ec3c ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e6080000e6080000 e6080000e6080000 e6080000e6080000 e6080000e6080000 e6080000e6080000 e6080000e6080000 e6080000e6080000 e6080000e6080000 info registers vcpu 2 CPU#2 RAX=ffffffff98101a08 RBX=000000000000017f RCX=0000000000000180 RDX=ffffffff966c3c30 RSI=0000000000000180 RDI=ffffffff98071f68 RBP=0000000000000030 RSP=ffffc9000275eb98 R8 =ffffffff966c3c60 R9 =0000000000000002 R10=ffffc9000275ed28 R11=0000000000000000 R12=ffffffff81e57da0 R13=ffffc9000275ec40 R14=ffffffff81e58bb0 R15=ffffffff98071f68 RIP=ffffffff81e59670 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa55f11e6c0 ffffffff 00c00000 GS =0000 ffff8880d5fda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000003d4b1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ff02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc89d0b766 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc89d0b766 00007ffc89d0b76c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa55e2355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa55e23562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa55e235793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa55e235621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fdea06 RDX=ffff88802b098000 RSI=ffffffff81fde9f1 RDI=ffff88802b098000 RBP=ffffc90003b4fbe0 RSP=ffffc90003b4fa60 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=dffffc0000000000 R14=ffff88806a53c540 R15=0000000000000000 RIP=ffffffff81fde9f3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555dd6d500 ffffffff 00c00000 GS =0000 ffff8880d60da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa55f0fcff8 CR3=0000000051015000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=000000000300003f Opmask03=0000000000000000 Opmask04=00000000ffffffbf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558457573910 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feef3bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feef3bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 754f4645425d051a 474f475a05414945 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4648051a041a4f49 4b5a594f474b4405 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38336e6f6d627375 2f6e6f6d6273752f 302e6463685f6963 68762f6d726f6674 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a565c560a000a56 50470a565c560a00 0a484051565c5647 50560a565c560a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c703442d3fc89af 0000000558457575 00000000000000e1 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58455f485449575f 4e57575f44497b76 6e65242d6e77772f 64692d79622f6b73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58455fc4247d158c b2def85f441cfa79 7dbb892d6e77772f 6468cc79622f6b73 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7ffd7f7f7fff fffffe7f755ffe7f 7dffef7f7f77ff7f 7f7fdf7b777f7f7f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696400644e2d4953 2f4554584500484f 49534e4554574544 485449575f242d57 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554500484e2d4945 2f45524144004449 0053242d5457452d 484e2d4953242d54 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000